AWS Cheatsheet

Services Overview

Use this AWS reference while you build software engineering projects, review code for technical interview prep, or polish examples for a software engineer resume.

AWS Cheatsheet for Developers

Use this AWS cheatsheet as a developer reference for choosing core services, reading CLI examples, and connecting cloud concepts to software engineering projects. Start with the service map below, then jump to S3, EC2, Lambda, IAM, RDS, CloudWatch, ECS, and cost controls when you need syntax or a decision checklist.

Core Service Categories

CategoryKey ServicesCommon Use
ComputeEC2, Lambda, ECS, FargateRun code, virtual machines, containers
StorageS3, EBS, EFS, GlacierObject, block, file, archive storage
DatabaseRDS, DynamoDB, ElastiCache, AuroraSQL, NoSQL, caching
NetworkingVPC, Route 53, CloudFront, ALBIsolation, DNS, CDN, load balancing
IdentityIAM, Cognito, STSAccess control, auth, temp credentials
MonitoringCloudWatch, X-Ray, CloudTrailLogs, metrics, traces, audit
MessagingSQS, SNS, EventBridgeQueues, pub/sub, event routing
DevOpsCodePipeline, CodeBuild, CodeDeployCI/CD pipelines
MLSageMaker, Bedrock, RekognitionTraining, inference, vision
SecurityKMS, Secrets Manager, WAF, ShieldEncryption, secrets, DDoS

Global Infrastructure

ConceptDescription
RegionGeographic area (e.g. us-east-1). Services and data stay within region unless you choose otherwise.
Availability Zone (AZ)Isolated data center(s) within a region (e.g. us-east-1a). Deploy across AZs for HA.
Edge LocationCloudFront/Route 53 PoP. 400+ globally for low-latency delivery.
Local ZoneAWS infrastructure placed closer to specific cities (latency < 10ms).
OutpostAWS rack in your own on-prem data center.

Key Regions

Region IDLocation
us-east-1N. Virginia (default, most services launch here first)
us-west-2Oregon
eu-west-1Ireland
ap-southeast-1Singapore
ap-northeast-1Tokyo

Account Fundamentals

  • Root account — created at signup. Use only to set up billing/MFA. Never use daily.
  • IAM Users / Roles — how humans and services authenticate.
  • Organizations — group multiple accounts; apply SCPs (Service Control Policies).
  • AWS Control Tower — opinionated multi-account landing zone setup.

Pricing Model

DimensionNotes
Pay-as-you-goNo upfront. Stop using = stop paying.
Reserved Instances1 or 3-yr commit for EC2/RDS. Up to 72% off on-demand.
Savings PlansFlexible RI alternative. Applies across instance families.
Spot InstancesSpare EC2 capacity. Up to 90% off; can be reclaimed 2-min notice.
Data transfer inFree. Egress to internet charged per GB. Cross-AZ within region charged.

Quick Reference: Free Tier Highlights

Full list at aws.amazon.com/free

OfferDetails
New accounts (on/after Jul 15, 2025)Credit-based Free Plan: $100 credits at sign-up + up to $100 more for onboarding activities; lasts 6 months or until credits run out
Lambda1M requests + 400k GB-sec/mo (always free)
DynamoDB25 GB storage + 25 WCU + 25 RCU (always free)
CloudFront1 TB egress + 10M requests/mo (always free)
CloudWatch10 metrics, 5 GB logs ingestion, 3 dashboards (always free)
Legacy accounts (pre-Jul 15, 2025)12-month offers: 750 hrs/mo EC2 t2/t3.micro, 5 GB S3, 750 hrs/mo RDS db.t3/t4g.micro

Shared Responsibility Model

AWS Responsible ForCustomer Responsible For
Physical hardware, data centersOS patching on EC2
Hypervisor, managed service infraIAM policies and permissions
Network backboneData encryption at rest/in transit
RDS engine patches (managed)Security group and NACLs configuration

Essential Docs & Tools