Learn AWS by following one request.

Todo.io is a pretend todo app. Each level traces real requests through AWS, step by step, and adds only the layers you're ready for.

Start Level 0 →First request · nothing to install, no AWS account needed
  1. 0
    First requestTotal newbie

    Set up an AWS account and organization the safe way, then follow a login, read, create, update and delete all the way through Todo.io.

  2. 1
    FoundationsBeginner
    Coming
  3. 2
    Scale and surviveStudying SAA-C03
    Coming
  4. 3
    Connect and recoverStudying SAA-C03
    Coming
  5. 4
    Choose wellReady to sit SAA-C03
    Coming
  6. 5
    ProfessionalWorking architect
    After the exam
  7. 6
    ExpertHyperscale
    After the exam

The 16 AWS services you'll meet first, by the job they do for Todo.io.

Run the company on AWS

  • Organizations

    Groups many AWS accounts under one management account, with one bill and shared guardrails.

  • Control Tower

    Sets up and governs a multi-account AWS environment (a landing zone) for you.

  • IAM Identity Center

    One place for people to sign in and get access to many AWS accounts.

  • IAM

    Decides who can do what to which AWS resource.

Private network

  • VPC

    Your own private network inside an AWS Region.

Front door

  • API Gateway

    A managed HTTPS front door that passes requests to your code.

Run the code

  • EC2

    Rent a virtual server by the second.

  • ECS + Fargate

    Run containers on AWS. With Fargate, AWS also runs the servers underneath.

  • Lambda

    Upload a function; AWS runs it only when something calls it.

Keep the data

  • RDS

    A managed SQL database, like MySQL or PostgreSQL, that AWS runs for you.

  • DynamoDB

    A fully managed NoSQL database you use through AWS API calls.

  • S3

    Unlimited storage for files ("objects") in containers called buckets.

Pass work along

  • SQS

    A managed queue. One part of your system drops messages in, another takes them out later.

Watch and record

  • CloudTrail

    A record of every AWS API call. Who did what, when, from where.

  • CloudWatch Logs

    Where applications and AWS services send their log lines.

  • Config

    Records how your resources are configured over time and checks them against rules.