Hands-on, exam-aligned projects for AWS Solutions Architect Associate (SAA-C03) and Terraform Associate (003).
Each folder contains Terraform code, documentation, and examples that replicate real exam scenarios and AWS best practices.
This repository is designed to be pushed straight into your GitHub portfolio.
- Create an IAM user and group
- Attach managed policies
- Configure MFA and least privilege
- Terraform: IAM user + policy attachment
📂 day1-iam/
- Create S3 bucket for static website hosting
- Configure bucket policy for public access
- Upload
index.html - Terraform: S3 + bucket policy
📂 day2-s3-static-website/
- Enable static website hosting with custom error page
- Configure versioning and logging
- Apply lifecycle rules for cost optimization
- Terraform: website hosting with
index.html+error.html
📂 day3-s3-website/
- Launch EC2 (t2.micro Free Tier)
- Configure Security Group (22, 80)
- Install Apache HTTPD and test website
- Terraform: EC2 + SG provisioning
📂 day4-ec2-apache/
These will expand into more AWS services aligned with the SAA-C03 domains:contentReference[oaicite:1]{index=1}:
- Day 5: VPC with public/private subnets + NAT Gateway
- Day 6: RDS with Multi-AZ deployment
- Day 7: Load Balancer + Auto Scaling Group
- Day 8: CloudFront + Route 53 for global distribution
- Day 9: IAM Roles + SSM Parameter Store + Secrets Manager
- Day 10: Monitoring & Logging (CloudWatch, CloudTrail, SNS alerts)
- AWS account with CLI profile configured locally (
~/.aws/credentials) - Terraform v1.5+
- AWS CLI v2
aws --version
terraform -versioncd <project-folder>
terraform init
terraform plan -var='aws_profile=default' -var='aws_region=us-east-1'
terraform apply -auto-approve -var='aws_profile=default' -var='aws_region=us-east-1'Replace
defaultandus-east-1as needed. You can also set these interraform.tfvars.
Destroy resources to avoid charges:
terraform destroy -auto-approve -var='aws_profile=default' -var='aws_region=us-east-1'- Security: This repo does not commit any credentials. Never commit secrets, state files, or
.tfvarswith sensitive data. - Free Tier: Use free-tier-friendly regions and instance sizes. S3 website hosting is largely free at low traffic.
- Exam Alignment: IAM principles (least privilege, users vs roles, managed policies) and S3 fundamentals (versioning, encryption, lifecycle, website hosting) are commonly tested.
Created by Luiz Assef | Cloud Engineer & DevOps Enthusiast