AWS Quick Revision Guide for Java Developers
1. VPC (Virtual Private Cloud)
Private network in AWS. CIDR = Classless Inter-Domain Routing (e.g. [Link]/16). Subnets can be
Public or Private. Route Tables control traffic. Internet Gateway provides internet access. NAT
Gateway allows outbound internet from private subnets. Security Groups are stateful. NACLs are
stateless.
2. Security Groups
Virtual firewall attached to resources. Stateful. Only Allow rules. Inbound and Outbound traffic
control. Common ports: 80 HTTP, 443 HTTPS, 22 SSH.
3. Target Groups
Used by Load Balancers. Routes requests to EC2, ECS tasks, IPs or Lambda. Performs health
checks and sends traffic only to healthy targets.
4. ALB Routing (Application Load Balancer)
Layer 7 load balancer. Supports path-based routing (/api/*), host-based routing, SSL termination
and target groups.
5. S3 & CDN
S3 = Simple Storage Service. Stores static files, backups and logs. CloudFront is AWS CDN
(Content Delivery Network) that caches content globally for low latency.
6. RDS & Secrets Manager
RDS = Managed relational database service. Supports MySQL, PostgreSQL etc. Secrets Manager
securely stores DB credentials and rotates passwords.
7. ECR
Elastic Container Registry. Stores Docker images. ECS/Fargate pulls images from ECR during
deployments.
8. Task Definition
Blueprint for ECS tasks. Defines container image, CPU, memory, ports, environment variables and
IAM roles.
9. Fargate Cluster
Serverless container runtime. No EC2 management required. AWS provisions infrastructure
automatically.
10. Creating Services
ECS Service maintains desired task count. Supports auto healing, scaling and ALB integration.
11. Deploying Services
Typical flow: Code -> Docker Image -> ECR -> Task Definition Revision -> ECS Service
Deployment. Supports rolling deployments and zero/minimal downtime.
AWS Interview Essentials
IAM = Identity and Access Management. CloudWatch = Monitoring and Logs. Auto Scaling =
Dynamic capacity adjustment. Route53 = DNS service. ECS = Container orchestration service.
Availability Zone = Isolated datacenter. Region = Geographic AWS location.
Java + AWS Architecture Flow
React UI -> ALB -> ECS/Fargate -> Spring Boot Microservices -> RDS. Images stored in ECR.
Logs in CloudWatch. Static content via S3 + CloudFront. Secrets in Secrets Manager.