Hello, young cloud explorer! 👋 Have you ever wondered how websites like Netflix, Instagram, or even your school's online portal work? They don't live on a single computer in someone's basement. They live in the cloud!
But what is the cloud? Is it fluffy and white like the ones in the sky? No! The cloud is a bunch of powerful computers in big buildings called data centers. These computers are connected to the internet. When you use an app or visit a website, you are actually using one of these computers far, far away.
In this module, we will learn about Amazon Web Services (AWS) – one of the biggest and most popular cloud providers in the world. We will discover what the cloud is, why people use it, and what AWS offers. By the end, you will understand the basics of cloud computing and be ready to explore more!
After this module, you will be able to:
Imagine your school has a big library. But one day, the library gets too full. Books are everywhere! The principal says, "We need more space!" But the school cannot build a new room – it's too expensive and takes too long.
Then, a magical bus appears – the Cloud Bus! 🚌 This bus can take all the extra books to a huge, magical warehouse that never gets full. The warehouse is run by friendly robots who organise everything. You can put books in and take them out anytime, from anywhere. And you only pay for the space you use.
That warehouse is like the cloud. The robots are like AWS. They help you store, manage, and use your "books" (which are actually data, apps, and files) without worrying about buying new shelves or buildings.
Now, let's learn about this magic warehouse!
Definition: The cloud is a network of powerful computers (servers) that you can use over the internet. These computers are located in big buildings called data centers.
Why it is important: The cloud lets us store, process, and access data and applications from anywhere in the world, without owning the physical computers.
Simple explanation: Imagine you have a toy box that you can open from anywhere, and it never gets full. That's the cloud – but for computer stuff.
Real-life example: When you upload a photo to Google Photos, it is stored in the cloud. You can see it on your phone, tablet, or computer.
School example: Your school uses Google Classroom – all the assignments and grades are stored in the cloud.
Home example: You watch cartoons on Netflix – the videos are stored in the cloud.
Nigerian example: A bank like GTBank uses the cloud to manage customer accounts and transactions securely.
Illustration (ASCII):
+-------------------+
| THE CLOUD |
| [Server 1] |
| [Server 2] |
| [Server 3] |
| ... thousands |
+-------------------+
🌐 Internet
You can access from anywhere!
Mini summary: The cloud is a bunch of computers you can use over the internet – it's like having a giant computer far away.
Definition: A data center is a physical building that houses many servers, storage devices, and networking equipment. It is the "home" of the cloud.
Why important: Without data centers, there would be no cloud. They are the real-world hardware that powers everything.
Simple explanation: Think of a data center as a huge warehouse filled with computers. These computers are connected to the internet 24/7.
Real-life example: Google has data centers all over the world that store the information for Gmail, YouTube, and Search.
School example: Your school's IT room has a few servers – now imagine that room is 100 times bigger and has thousands of servers.
Home example: Your family has a router that connects your devices to the internet. A data center is like a giant router that connects millions of devices.
Nigerian example: In Lagos, there are data centers that host websites and apps for Nigerian companies.
Illustration (Data Center):
+------------------------------------+ | DATA CENTER | | +------+ +------+ +------+ | | |Server| |Server| |Server| | | | 1 | | 2 | | 3 | ... | | +------+ +------+ +------+ | | [Cooling] [Power] [Backup] | +------------------------------------+
Mini summary: Data centers are the physical buildings where cloud computers live.
Definition: AWS is a cloud platform that offers over 200 services like computing power, storage, and databases – all over the internet.
Why important: AWS makes it easy for anyone to build and run applications without buying physical hardware.
Simple explanation: AWS is like a giant online store where you can rent computers, storage, and other tools, and you pay only for what you use.
Real-life example: Netflix uses AWS to stream videos to millions of people every day.
School example: A school can use AWS to host its website and store student records securely.
Home example: You can use AWS to store your family photos and videos safely.
Nigerian example: Many Nigerian startups use AWS to host their websites and apps because it's reliable and affordable.
Illustration (AWS Logo):
+-------------------------+ | AWS | | (Amazon Web Services) | | [Compute] [Storage] | | [Database] [AI/ML] | | and many more... | +-------------------------+
Mini summary: AWS is Amazon's cloud platform that provides many services you can rent over the internet.
Definition: People use the cloud for flexibility, cost savings, and convenience.
Why important: The cloud helps businesses grow quickly, save money, and be more efficient.
Simple explanation: Instead of buying expensive computers, you rent them from the cloud. It's like renting a car instead of buying one – you only pay when you need it.
Real-life example: A new startup can use the cloud to launch an app without buying expensive servers.
School example: A school can use the cloud to store all its files instead of buying many hard drives.
Home example: You use iCloud to back up your iPhone photos and settings.
Nigerian example: A fintech company in Nigeria uses the cloud to process payments quickly and securely.
Illustration (Reasons to use cloud):
Reasons to use cloud +------------------+ | 1. Cost Savings | | 2. Scalability | | 3. Flexibility | | 4. Reliability | | 5. Security | +------------------+
Mini summary: People use the cloud to save money, be flexible, and grow easily.
Definition: Pay-as-you-go means you pay for cloud services based on how much you use, like a utility bill (electricity or water).
Why important: It saves money because you don't pay for idle resources.
Simple explanation: It's like buying data for your phone – you buy a bundle and use it. When it finishes, you buy more.
Real-life example: Electricity bill – you pay for the units you consume.
School example: The school pays for photocopies per page.
Home example: You pay for water by the litre.
Nigerian example: MTN data bundles – you pay for a certain amount of data.
Illustration (Pay-as-you-go):
Usage → Pay +-------------+ | 1 hour → $0.10 | | 5 hours → $0.50 | | 10 hours→ $1.00 | +-------------+ No fixed cost – only what you use!
Mini summary: Pay-as-you-go means you only pay for the cloud resources you actually use.
Definition: Scalability is the ability to increase or decrease resources based on demand.
Why important: When many people use your app, you need more power. When traffic is low, you can reduce resources to save money.
Simple explanation: It's like having a water tap – you open it more when you need more water, and close it when you're done.
Real-life example: A shopping website gets more visitors during Black Friday – it scales up to handle the traffic.
School example: The school hires more teachers when more students enroll.
Home example: You buy more snacks when your friends come over.
Nigerian example: A payment gateway like Paystack scales up during festive seasons when transactions increase.
Illustration (Scaling):
Low traffic → small server High traffic → big server (scale up) Or: add more servers (scale out)
Mini summary: Scaling lets you adjust your resources to match what you need.
Definition: Reliability means your application keeps running even if something breaks. High availability means it's always accessible.
Why important: Nobody likes a website that crashes! Cloud providers build redundancy so that if one server fails, another takes over.
Simple explanation: It's like having two of the same toy – if one breaks, you still have the other to play with.
Real-life example: Amazon's website almost never goes down because they have backup systems everywhere.
School example: The school has two generators – if one stops working, the other kicks in.
Home example: You have two flashlights – if one dies, you use the other.
Nigerian example: A bank's ATM network has backup servers so that if one fails, transactions still go through.
Illustration (High Availability):
+----------+ +----------+
| Server A | | Server B |
+----------+ +----------+
\ /
\ /
\ /
+-------------+
| You access |
+-------------+
If A fails, B takes over.
Mini summary: Reliability means your app keeps working even if something fails.
Definition: AWS has data centers all over the world in different regions (like US, Europe, Asia). Each region has multiple Availability Zones (separate data centers in that region).
Why important: You can choose a region close to your users for faster speed. Using multiple Availability Zones keeps your app running even if one zone has a problem.
Simple explanation: Regions are like cities where AWS has "cloud warehouses". Availability Zones are different buildings in that city.
Real-life example: If you are in Nigeria, you might use a region in South Africa (Cape Town) for faster access.
School example: Your school has two computer labs – if one has a power cut, the other still works.
Home example: You have two torches – if one runs out of battery, you use the other.
Nigerian example: A Lagos-based company might use the Cape Town region because it's the closest AWS region to Nigeria.
Illustration (Regions):
AWS Regions (some) +---------------------+ | US East (N. Virginia)| | EU West (Ireland) | | Asia Pacific (Tokyo)| | Africa (Cape Town) | +---------------------+
Mini summary: Regions are geographic areas with data centers, and Availability Zones are separate buildings in each region.
Definition: AWS offers many services – here are some of the most popular: EC2 (computers), S3 (storage), RDS (databases), Lambda (code without servers).
Why important: These services are the building blocks for almost any application.
Simple explanation: AWS is like a toolbox – each service is a different tool for a different job.
Real-life example: A developer uses EC2 to host a website, S3 to store images, and RDS to manage user accounts.
School example: A school uses EC2 for its website, S3 for storing student assignments, and RDS for grades.
Home example: You could use AWS to store family photos (S3) and run a game server (EC2).
Nigerian example: A Nigerian e-commerce site uses EC2 for the shop, S3 for product images, and RDS for orders.
Table of common services:
| Service | What it does | Example use |
|---|---|---|
| EC2 | Virtual computers (servers) | Host a website |
| S3 | Store files and data | Store photos, videos |
| RDS | Managed databases | User accounts, orders |
| Lambda | Run code without servers | Automate tasks |
Mini summary: AWS has many services – EC2, S3, RDS, and Lambda are some of the most important.
Definition: Security in the cloud means protecting your data, applications, and infrastructure from unauthorized access.
Why important: You don't want hackers to steal your information or delete your files.
Simple explanation: It's like having locks on your doors and a security camera at your house.
Real-life example: Banks use encryption to protect your money and personal details.
School example: The school uses passwords to protect student records.
Home example: You have a password on your tablet so your little brother cannot delete your games.
Nigerian example: A Nigerian fintech uses AWS security tools to protect customer transactions.
Illustration (Security layers):
+---------------------+ | Security Layers | | 1. IAM (users/pass) | | 2. Encryption | | 3. Firewalls | | 4. Monitoring | +---------------------+
Mini summary: Cloud security uses tools like passwords, encryption, and firewalls to keep your data safe.
Definition: On-premise means you own and manage your own hardware. Cloud means you rent hardware from a provider like AWS.
Why important: Understanding the difference helps you choose the right approach.
Simple explanation: On-premise is like owning a car – you pay for it, maintain it, and park it at home. Cloud is like using a taxi – you pay when you ride, and someone else takes care of maintenance.
Real-life example: A big bank might have its own data center (on-premise). A startup might use the cloud.
School example: The school's own computer lab (on-premise) vs using Google Classroom (cloud).
Home example: Your own DVD collection (on-premise) vs watching movies on Netflix (cloud).
Nigerian example: A Nigerian company might use AWS cloud instead of building its own expensive data center.
Comparison table:
| Feature | On-Premise | Cloud |
|---|---|---|
| Cost | High upfront cost | Pay-as-you-go |
| Maintenance | You do it | Provider does it |
| Scalability | Hard to scale | Easy to scale |
| Access | Limited | From anywhere |
Mini summary: On-premise is owning hardware; cloud is renting it. Cloud is often cheaper and more flexible.
Definition: Companies use AWS to host websites, store data, run applications, and much more.
Why important: AWS powers many of the world's most popular apps and websites.
Simple explanation: AWS is like the engine behind many cars – you don't see it, but it makes them run.
Real-life examples:
School example: A school uses AWS to host its e-learning platform.
Home example: You use Alexa (which runs on AWS) to play music or set alarms.
Nigerian example: Many Nigerian startups like Flutterwave and Paystack use AWS to handle payments.
Illustration (Companies using AWS):
+-------------------+ | Netflix Airbnb | | Spotify Paystack | | ...and many more! | +-------------------+
Mini summary: Many well-known companies use AWS to power their services.
Definition: The AWS Free Tier lets you use some AWS services for free for 12 months (with limits).
Why important: It's a safe way to learn and experiment without spending money.
Simple explanation: It's like a free sample at a store – you can try before you buy.
Real-life example: You can create a free account and launch a small server (EC2 t2.micro) for free for a year.
School example: Your teacher can use the free tier to teach cloud computing without paying.
Home example: You can practice building websites with AWS without any cost.
Nigerian example: A Nigerian student can learn AWS skills using the free tier, then get a job in cloud computing.
Illustration (Free Tier):
AWS Free Tier includes: - 750 hours of EC2 per month (t2.micro) - 5 GB of S3 storage - 20 GB of RDS storage ... and more!
Mini summary: The AWS Free Tier lets you try AWS services for free for 12 months.
Definition: Learning AWS gives you skills to build, manage, and secure cloud applications.
Why important: Cloud skills are in high demand and can lead to exciting careers.
Simple explanation: It's like learning to build with Lego – but instead of toys, you build real-world apps!
Real-life example: Cloud engineers earn good salaries and work on cool projects.
School example: Learning AWS can help you in IT class and prepare you for university.
Home example: You can build your own website or game server with AWS.
Nigerian example: Many Nigerian companies are moving to the cloud – they need AWS experts!
Illustration (AWS skills):
AWS Skills → Jobs → Build cool stuff! +-----------------------------------+ | Cloud Architect | Developer | | DevOps Engineer | Data Scientist | +-----------------------------------+
Mini summary: Learning AWS opens up many opportunities for exciting jobs and projects.
Definition: Recap of the main ideas: cloud, data centers, AWS, pay-as-you-go, scalability, reliability, regions.
Why important: These concepts are the foundation for everything else you will learn.
Simple explanation: You've learned the alphabet of cloud computing – now you can start reading and writing cloud stories!
Real-life example: Understanding these concepts helps you decide which AWS services to use for a project.
School example: You can explain the cloud to your classmates!
Home example: You can tell your family how their apps work.
Nigerian example: You can explain to a small business how moving to the cloud can help them.
Illustration (Concept map):
Cloud Concepts +-----------------------+ | Cloud → Internet | | Data Centers → Buildings | | AWS → Amazon's cloud | | Pay-as-you-go → only use pay | | Scalability → grow/shrink | | Reliability → always on | +-----------------------+
Mini summary: You now know the basic cloud concepts – you're ready for more!
This module is the foundation. Use plenty of analogies – the "magic warehouse" story works well. Encourage students to create AWS accounts (with parent/teacher help) and explore the console. Emphasize that the cloud is just computers – not magic.
Help your child understand the cloud by relating it to things they know – like iCloud or Google Drive. Show them how apps like Netflix rely on the cloud. If your child is interested, help them set up an AWS account (under supervision) to explore.
Congratulations! You have completed Module One. You now understand the basics of cloud computing and AWS. You learned that:
This knowledge is the foundation for everything else in this course. In the next module, we will dive into the three core AWS services: EC2, S3, and RDS. You will learn how to launch virtual servers, store files, and manage databases. You're on your way to becoming an AWS expert!
Answers: 1-computers, 2-Amazon, 3-use, 4-region, 5-Reliability
Match the term to its description.
| Term | Description |
|---|---|
| 1. Cloud | A. Building with servers |
| 2. Data Center | B. Pay for what you use |
| 3. AWS | C. Network of computers |
| 4. Pay-as-you-go | D. Amazon's cloud platform |
| 5. Region | E. Geographic area |
Answers: 1-C, 2-A, 3-D, 4-B, 5-E
Scenario 1: A new school wants to store student records and host a website. Should they buy their own servers or use the cloud? Why?
Scenario 2: A startup expects their app to grow quickly. Which cloud feature would help them handle more users? Explain.
Scenario 3: A bank needs high reliability. Why would they choose AWS over on-premise?
Divide into groups of 3-4. Each group must list 5 everyday apps or services that use the cloud. Present to the class and explain how they think each one uses the cloud.
Write a short paragraph explaining cloud computing to someone who has never heard of it. Use simple words and an analogy.
Title: Design a Cloud Solution for a Small Business
A small bakery in Lagos wants to start selling cakes online. They need a website, a place to store pictures of cakes, and a way to track orders. Design a simple cloud solution using AWS services. Explain which services you would use and why.
Create an AWS account (with parent/teacher help). Log in to the AWS Console. Explore the dashboard and click on EC2, S3, and RDS. Write down what you see and how you think each service might be used.
Research one AWS service not mentioned in this module (like AWS Lambda or Amazon Polly). Write a one-paragraph explanation of what it does and give an example of how you could use it.
Fill-in-the-Blank: 1-computers, 2-Amazon, 3-use, 4-region, 5-Reliability
True/False: T, F, F, T, T
Matching: 1-C, 2-A, 3-D, 4-B, 5-E
In Module Two, we will dive deeper into the core AWS services: EC2 (virtual servers), S3 (storage), and RDS (databases). We will learn how to launch a server, upload files, and set up a database. You will get hands-on with the AWS Console and start building your cloud skills.
Great job completing Module One! See you in Module Two! 👋
End of Module One – Introduction to AWS and the Cloud
Welcome back, cloud explorer! In Module One, we learned what the cloud is and why AWS is like a giant magic computer that lives on the internet. Now, it is time to meet the three main heroes of AWS: Compute (the brain), Storage (the memory), and Databases (the organised filing cabinet).
Think of a video game. You need a console (compute) to run the game, a memory card (storage) to save your progress, and a list of high scores (database) to remember the best players. In this module, we will explore each of these heroes, see how they work, and learn to use them in AWS. By the end, you will know how to launch a virtual server, store files, and set up a database – all in the cloud!
After this module, you will be able to:
Once upon a time, in a land called Cloud City, there were three best friends: Compute (a strong robot), Storage (a giant treasure chest), and Database (a clever librarian).
Compute was the brawn – he could lift heavy loads and run fast calculations. Storage was the memory – she could hold all the family photos, videos, and school projects safely. Database was the organiser – he could quickly find any information, like “show me all the art projects from last year”.
One day, the mayor of Cloud City asked them to build a new school. Compute designed the classrooms (he ran the software), Storage kept all the textbooks and supplies, and Database made a list of all students and their grades. They worked together perfectly! Without Compute, nothing would run. Without Storage, everything would be lost. Without Database, we wouldn’t find anything.
In AWS, these three friends are services like EC2 (Compute), S3 (Storage), and RDS (Database). Let's meet them!
Definition: Compute is the power to run applications and process data – it's the brain of the cloud.
Why important: Without compute, nothing can run. No websites, no games, no apps.
Simple explanation: Compute is like a very powerful computer that lives in the cloud. You can use it to do calculations, run programs, or host a website.
Real-life example: When you play a game on your tablet, the tablet's processor is doing compute work.
School example: The school computer lab has many computers – each one is a compute resource.
Home example: Your family laptop runs games and homework – that’s compute.
Nigerian example: A bank like First Bank uses compute to process millions of transactions every day.
Illustration (ASCII):
+-------------------+
| COMPUTE BRAIN |
| EC2 (servers) |
| Lambda (code) |
+-------------------+
⚙️ Runs everything
Mini summary: Compute is the engine that makes everything work – it's the brain of AWS.
Definition: Storage is where you keep your files, photos, videos, and any data that needs to be saved.
Why important: Without storage, you would lose everything every time you turn off your device.
Simple explanation: Storage is like a big, safe box in the cloud where you put your things.
Real-life example: Google Drive or Dropbox – you upload files and they stay there.
School example: The school library stores many books – that’s storage.
Home example: A cupboard where you keep your toys.
Nigerian example: A company like Jumia stores all product images in the cloud.
Illustration (ASCII):
+-------------------+
| STORAGE BOX |
| S3 (buckets) |
| EBS (volumes) |
+-------------------+
📁 Keeps files safe
Mini summary: Storage saves your data so you can retrieve it later – like a digital cupboard.
Definition: A database is an organised collection of data that can be easily accessed, managed, and updated.
Why important: You need to find data quickly – a database makes that possible.
Simple explanation: A database is like a super-smart librarian who knows exactly where every book is.
Real-life example: Your school's student records – they are stored in a database.
School example: The school library’s catalogue – it tells you where each book is.
Home example: A recipe box with cards organised by type (desserts, main dishes).
Nigerian example: A telecom company like MTN uses a database to keep track of all customers and their call records.
Illustration (ASCII):
+-------------------+
| DATABASE |
| RDS (SQL) |
| DynamoDB (NoSQL)|
+-------------------+
📊 Organises data
Mini summary: A database helps you find and organise your data quickly and easily.
Definition: Amazon EC2 (Elastic Compute Cloud) gives you a virtual computer in the cloud that you can use to run any software.
Why important: You don't need to buy a physical computer; you can rent one from AWS and use it over the internet.
Simple explanation: EC2 is like a powerful computer that you can borrow any time. It's called an “instance”.
Real-life example: Netflix uses EC2 to stream movies to millions of people.
School example: Your teacher can create a virtual lab for students using EC2.
Home example: You could run a game server for your friends using EC2.
Nigerian example: A Nigerian startup can host their website on EC2 without buying a server.
Illustration (EC2 instance):
+-------------------------+
| EC2 Instance (virtual) |
| OS: Linux/Windows |
| CPU: 2 cores |
| Memory: 4 GB |
| Storage: 30 GB |
+-------------------------+
🖥️ Runs your apps
Mini summary: EC2 is a virtual computer you can rent to run your applications.
Definition: Amazon S3 (Simple Storage Service) is a place to store and retrieve any amount of data, like files, photos, and videos.
Why important: It's extremely durable – your data is safe even if something breaks.
Simple explanation: S3 is like a giant online bucket where you can put anything – and it never runs out of space.
Real-life example: Dropbox uses S3 to store user files.
School example: Your school can store all student assignments in S3.
Home example: You can back up all your family photos in S3.
Nigerian example: A music streaming service like Boomplay stores audio files in S3.
Illustration (S3 Bucket):
+-----------------------+
| S3 Bucket "my-data" |
| file1.jpg |
| file2.pdf |
| video.mp4 |
| ... millions more |
+-----------------------+
🪣 Store anything
Mini summary: S3 is a giant bucket for storing any type of file, and it never gets full.
Definition: Amazon RDS (Relational Database Service) is a managed service that sets up, operates, and scales a database in the cloud.
Why important: You don't have to worry about backups, software updates, or failures – AWS takes care of it.
Simple explanation: RDS is like a database that comes with a personal assistant who does all the boring maintenance work.
Real-life example: Many e-commerce websites use RDS to store product information.
School example: A school can use RDS to store student records and grades.
Home example: A family budget app might use RDS to track expenses.
Nigerian example: A Nigerian hospital can use RDS to keep patient records safe and organised.
Illustration (RDS):
+--------------------------+
| RDS Database |
| Table: Students |
| | ID | Name | Grade | |
| | 1 | Ada | A | |
| | 2 | Bola | B | |
+--------------------------+
🗄️ Managed by AWS
Mini summary: RDS is a ready-to-use database that AWS manages for you.
Definition: They are three different services: EC2 for compute (brain), S3 for storage (memory), RDS for databases (organiser).
Why important: You need to choose the right tool for the right job – you wouldn't use a spoon to eat soup, right?
Simple explanation: EC2 runs programs, S3 stores files, RDS stores organised data.
Comparison table:
| Feature | EC2 | S3 | RDS |
|---|---|---|---|
| Purpose | Compute (run apps) | Store files | Store organised data |
| Type | Virtual server | Object storage | Managed database |
| Use case | Host a website | Save images, backups | Customer records, inventory |
Mini summary: EC2 runs things, S3 stores things, RDS organises things. Each has a unique job.
Definition: EBS is like a hard drive that you can attach to your EC2 instance to store data permanently.
Why important: EC2 instances are temporary, but EBS volumes keep your data even when you stop the instance.
Simple explanation: EBS is like an external hard drive for your virtual computer – plug it in and save your files.
Real-life example: You have a USB drive that you plug into your laptop – EBS is like that but in the cloud.
School example: A teacher saves lesson plans on a flash drive – that's like EBS.
Home example: An external hard disk for your PlayStation to save more games.
Nigerian example: A company uses EBS to store application data that needs high performance.
Illustration (EC2 + EBS):
+------------------+ | EC2 Instance | | +-------------+ | | | EBS | | ← attached storage | | (hard disk)| | | +-------------+ | +------------------+
Mini summary: EBS is a persistent hard drive for your EC2 virtual computer.
Definition: Regions are geographic locations (like Lagos, London, New York) where AWS has data centers. Each region has multiple Availability Zones (AZs) – separate buildings with power and networks.
Why important: If one AZ goes down, another keeps your services running. This makes AWS reliable.
Simple explanation: Regions are like cities where AWS has “cloud warehouses”. AZs are different buildings in that city.
Real-life example: If a fire happens in one building, another building in the same city still works.
School example: Your school has two computer labs – if one has a power cut, the other still works.
Home example: You have two torches – if one runs out of battery, you use the other.
Nigerian example: AWS has a region in South Africa (Cape Town) – close to Nigeria for faster speeds.
Illustration (Regions & AZs):
Region: "Africa (Cape Town)"
├── Availability Zone 1 (building A)
├── Availability Zone 2 (building B)
└── Availability Zone 3 (building C)
Mini summary: Regions are AWS's locations; AZs are separate buildings inside each region to keep things safe.
Definition: Launching means creating a new virtual computer (EC2) from scratch.
Why important: This is how you get your own cloud computer.
Simple steps (conceptual):
Illustration (Launch flow):
Start → Choose AMI → Choose type → Configure → Add Storage → Add Tags → Security → Review → Launch 🚀
Mini summary: Launching EC2 is like ordering a pizza – you choose the size, toppings (OS), and it arrives ready to use.
Definition: You can upload any file to an S3 bucket using the AWS Console, CLI, or SDK.
Why important: This is how you store files in the cloud – simple and quick.
Simple explanation: You create a bucket (like a folder) and then drag-and-drop files into it.
Real-life example: Uploading a video to YouTube – YouTube uses cloud storage.
School example: The IT teacher uploads class notes to a shared S3 bucket.
Home example: You upload holiday photos to a cloud album.
Nigerian example: A photographer uploads client pictures to S3 for delivery.
Illustration (S3 Upload):
My Computer → 📤 Upload → S3 Bucket [file.jpg] [file.jpg]
Mini summary: Uploading to S3 is like putting a file into a cloud folder – easy and fast.
Definition: Querying means asking the database a question – like “Show me all students with grade A”.
Why important: You need to find and filter data to get useful information.
Simple explanation: You use a language called SQL to talk to the database. It's like asking a librarian, “Do you have any books about dinosaurs?”
Real-life example: When you search for a product on an online store, a database query is run.
School example: The school secretary searches for a student's record using the database.
Home example: You look for a recipe in your recipe box – you "query" by category.
Nigerian example: A bank checks your account balance – that’s a database query.
Illustration (SQL query):
SELECT * FROM Students WHERE Grade = 'A'; Result: | Name | Grade | | Ada | A | | Bola | A |
Mini summary: Querying is asking the database for specific information.
Definition: Scaling means increasing or decreasing your resources based on demand.
Why important: When many people use your app, you need more power. When traffic is low, you save money by scaling down.
Simple explanation: Scaling is like having a water tap – you open it more when you need more water, and close it when you don't.
Real-life example: A shopping website scales up during Black Friday sales.
School example: The school hires more teachers when more students enroll.
Home example: You buy more snacks when your friends come over.
Nigerian example: A payment gateway like Paystack scales up during festive seasons when transactions increase.
Illustration (Scaling):
Low traffic → small instance High traffic → large instance (scale up) Or: add more instances (scale out)
Mini summary: Scaling lets you adjust your resources to match what you need.
Definition: You only pay for what you use – like paying for electricity.
Why important: You don't waste money on things you don't use.
Simple explanation: It's like a prepaid card – you load money and spend as you go.
Real-life example: Your mobile phone data plan – you pay for the data you use.
School example: The school pays for photocopying per page.
Home example: Your water bill – you pay for the litres you use.
Nigerian example: MTN data bundles – you buy a bundle and use it.
Illustration (Pricing):
Service | Price per hour EC2 small | $0.01 S3 storage| $0.023 per GB RDS | $0.10 per hour
Mini summary: You pay only for the resources you actually consume.
Definition: A web app uses all three services: EC2 (hosts the app), S3 (stores images/files), and RDS (stores user data).
Why important: This shows how services work together to create a complete application.
Simple explanation: Imagine a recipe app. EC2 runs the app, S3 stores the recipe pictures, and RDS stores the recipe names and ingredients.
Real-life example: Instagram uses EC2, S3, and databases.
School example: A school website uses EC2 for the site, S3 for photos, and RDS for student login info.
Home example: A family blog – EC2 for the blog engine, S3 for pictures, RDS for comments.
Nigerian example: A Nigerian e-commerce site – EC2 for the shop, S3 for product images, RDS for orders.
Illustration (Architecture):
User Request
|
V
+------------------+
| EC2 (Web Server) | ← handles request
+------------------+
| |
V V
+------+ +------+
| S3 | | RDS | ← storage & data
+------+ +------+
Mini summary: EC2, S3, and RDS work together like a team to build powerful applications.
ssh -i key.pem ec2-user@public-ip.Use plenty of hands-on demos. If possible, show the AWS Console (read-only or with free tier). Emphasise the difference between services with analogies. Encourage students to draw their own architecture diagrams.
Help your child relate cloud services to things they know – like a library (S3), a librarian (RDS), and a computer lab (EC2). Discuss how apps they use (like TikTok) rely on cloud services.
In this module, we met the three pillars of AWS: Compute (EC2), Storage (S3), and Databases (RDS). We learned that EC2 provides virtual servers to run applications, S3 stores files and data, and RDS offers managed databases. We also explored EBS for persistent storage, regions and AZs for reliability, and the pay-as-you-go pricing model. These services are the building blocks of almost every cloud application. We now know how to choose the right service for a job and how they work together.
Answers: 1-Elastic, 2-Simple, 3-Relational, 4-region, 5-EBS
Match the AWS service to its description.
| Service | Description |
|---|---|
| 1. EC2 | A. Object storage for files |
| 2. S3 | B. Managed relational database |
| 3. RDS | C. Virtual servers in the cloud |
| 4. EBS | D. Storage volume for EC2 |
Answers: 1-C, 2-A, 3-B, 4-D
Scenario 1: A school wants to create an online portal where students can see their grades and teachers can upload assignments. Which AWS services would you use and why?
Scenario 2: A Nigerian startup wants to store user-uploaded videos and also run a recommendation engine. What services would you suggest?
In groups of 3, design a small cloud application. Decide which part uses EC2, S3, and RDS. Draw the architecture on paper and present it to the class.
Write a one-page summary on how you would use AWS to host a blog. Include EC2, S3 (for images), and RDS (for comments).
Title: Build a Simple Cloud Architecture
Design an architecture for a photo-sharing app. Draw a diagram showing:
Write a short description of how they interact.
If you have access to AWS Free Tier, create an S3 bucket and upload a file. Then, create an EC2 instance (t2.micro) and connect to it (if possible with guidance). Write down the steps you took.
Imagine you are building a food delivery app. Explain which AWS services you would use for:
Fill-in-the-Blank: 1-Elastic, 2-Simple, 3-Relational, 4-region, 5-EBS
True/False: F, T, T, F, F
Matching: 1-C, 2-A, 3-B, 4-D
In Module Three, we will dive deeper into Networking on AWS – we'll learn about VPCs, subnets, and how computers talk to each other in the cloud. We'll see how to create secure networks and connect our EC2, S3, and RDS services together. Get ready to become a cloud network architect!
Great job, cloud builder! See you in Module 3! 👋
End of Module Two – AWS Core Services
Welcome back, cloud adventurer! In Module Two, we met the three heroes: EC2 (compute), S3 (storage), and RDS (database). But how do they talk to each other and to the internet? They need a network – like a set of roads and bridges that connect everything together.
In this module, we will learn about Amazon VPC (Virtual Private Cloud) – your own private section of the AWS cloud. We'll see how to create subnets (like neighbourhoods), set up security groups (like bouncers), and connect to the internet. By the end, you'll know how to build a safe and organised cloud network.
After this module, you will be able to:
Imagine you live in a big, gated community called CloudVille. This community is your VPC. Inside CloudVille, there are different neighbourhoods: some are open to visitors (like a shopping area) – these are public subnets. Others are private, like residential areas – these are private subnets.
At the entrance of CloudVille, there is a guard house called an Internet Gateway – it allows people from outside to come in (and go out) if they have permission. Each house (EC2 instance) has its own security guard – a security group – that decides who can knock on the door and who can't.
There are also street signs (route tables) that tell cars (data) which way to go. And there are extra checkpoints (Network ACLs) at the neighbourhood borders for extra safety.
Today, you will learn to build your own CloudVille!
Definition: A VPC (Virtual Private Cloud) is a virtual network that you create in AWS. It is your own private section of the cloud.
Why important: It gives you control over your network – like IP addresses, subnets, and security.
Simple explanation: A VPC is like a gated community where all your AWS resources live. Only you (and those you allow) can enter.
Real-life example: A company has its own office building – only employees can enter.
School example: Your school has a fence around it – only students and staff are allowed inside.
Home example: Your house has a front door – only family and invited guests come in.
Nigerian example: A bank has a secure compound – only customers and staff can enter.
Illustration (ASCII):
+---------------------------------+ | VPC (CloudVille) | | +---------+ +------------+ | | | Subnet | | Subnet | | | | (public)| | (private) | | | | EC2 | | RDS | | | +---------+ +------------+ | +---------------------------------+
Mini summary: A VPC is your own private network inside AWS.
Definition: A subnet is a smaller part of your VPC – like a neighbourhood. Each subnet lives in one Availability Zone.
Why important: Subnets help you organise your resources and improve security.
Simple explanation: Think of your VPC as a big city. Subnets are different districts – like residential, business, and industrial.
Real-life example: A university campus has different zones: classrooms, libraries, and sports fields.
School example: Your school has different blocks: the science block, the arts block, and the admin block.
Home example: Your home has different rooms: kitchen, living room, bedroom.
Nigerian example: Lagos has different areas: Ikeja (business), Surulere (residential), and Victoria Island (commercial).
Illustration (Subnets):
VPC: 10.0.0.0/16
├── Subnet A (public) : 10.0.1.0/24 (AZ-1)
├── Subnet B (private) : 10.0.2.0/24 (AZ-2)
└── Subnet C (private) : 10.0.3.0/24 (AZ-1)
Mini summary: Subnets are smaller divisions of your VPC, each in a specific Availability Zone.
Definition: An Internet Gateway (IGW) is a component that allows your VPC to connect to the internet.
Why important: Without it, your resources cannot communicate with the outside world.
Simple explanation: It's like the main gate of your gated community – it lets people (and data) enter and leave.
Real-life example: Your home Wi-Fi router connects your devices to the internet.
School example: The school's internet connection allows students to access online resources.
Home example: The front door of your house – you open it to go out.
Nigerian example: A café in Lagos has a router that gives customers internet access.
Illustration (IGW):
Internet 🌍
|
V
[Internet Gateway]
|
V
VPC (CloudVille)
Mini summary: An Internet Gateway connects your VPC to the internet.
Definition: A route table has rules (routes) that tell network traffic where to go.
Why important: They direct data packets to the right destination.
Simple explanation: It's like a GPS or street signs that tell cars which way to go.
Real-life example: A city map shows you how to get from your house to the mall.
School example: The hallway signs that tell you where the library or canteen is.
Home example: A shopping list that tells you where to go in the supermarket.
Nigerian example: Road signs on the Lagos-Ibadan expressway show you the way.
Illustration (Route Table):
Route Table for Public Subnet: Destination Target 0.0.0.0/0 igw-xxxxx (internet) 10.0.0.0/16 local (within VPC)
Mini summary: Route tables direct traffic – like a map for your network.
Definition: A security group acts as a virtual firewall for your instances. It controls inbound and outbound traffic.
Why important: It keeps bad traffic out and allows good traffic in.
Simple explanation: It's like a bouncer at a club – they check IDs (rules) and decide who can enter.
Real-life example: An office has a receptionist – only approved visitors get in.
School example: The school gate – only students with uniforms enter.
Home example: You have a doorbell camera – you see who is at the door before opening.
Nigerian example: A bank has security guards – they check who enters the building.
Illustration (Security Group):
Security Group Rules:
Inbound:
- Allow HTTP (port 80) from anywhere
- Allow SSH (port 22) from your office IP
Outbound:
- Allow all traffic
Mini summary: Security groups are the bouncers that allow or deny traffic to your instances.
Definition: A Network ACL (Access Control List) is an additional layer of security at the subnet level. It's stateless – it checks each packet separately.
Why important: They provide an extra layer of defence (defence in depth).
Simple explanation: If security groups are bouncers at the door, NACLs are checkpoints at the entrance to the neighbourhood.
Real-life example: At a stadium, there is security at the main gate (NACL) and at each section (security group).
School example: The school gate (NACL) and the classroom door (security group).
Home example: The main gate to your estate (NACL) and your front door (security group).
Nigerian example: A university has a main gate (NACL) and department doors (security groups).
Comparison table:
| Feature | Security Group | Network ACL |
|---|---|---|
| Level | Instance level | Subnet level |
| State | Stateful (remembers connections) | Stateless (checks each packet) |
| Rules | Allow only | Allow & Deny |
| Order | All rules are evaluated | Rules evaluated in order (lowest number first) |
Mini summary: NACLs are extra security at the subnet level – they are like a second fence.
Definition: A public subnet has a route to the Internet Gateway – it can talk to the internet. A private subnet does not have a direct route to the internet – it is protected.
Why important: You put public-facing resources (like web servers) in public subnets, and private resources (like databases) in private subnets for safety.
Simple explanation: Public subnet = shop front that customers can see. Private subnet = warehouse where you keep the goods.
Real-life example: A shop has a showroom (public) and a stockroom (private).
School example: The school library (public) and the staff room (private).
Home example: The living room (public) and the parents' bedroom (private).
Nigerian example: A market has stalls (public) and a storage warehouse (private).
Illustration (Public vs Private):
Internet 🌍
|
V
Internet Gateway
|
V
+------------------+ +-------------------+
| Public Subnet | | Private Subnet |
| (Web Server) | | (Database) |
| has IGW route | | no IGW route |
+------------------+ +-------------------+
Mini summary: Public subnets connect to the internet; private subnets are hidden for security.
Definition: A NAT Gateway (Network Address Translation) allows instances in private subnets to access the internet (e.g., to download updates) but prevents the internet from connecting to them.
Why important: Private instances sometimes need to reach the internet, but we don't want them exposed.
Simple explanation: It's like a messenger: you send a letter (request) out, but the messenger doesn't let anyone come back to you.
Real-life example: You can order food delivery (you initiate contact), but the delivery person cannot enter your house.
School example: Students can submit assignments online (outbound), but outsiders cannot see their files.
Home example: You can make a phone call, but the person cannot see you.
Nigerian example: A company uses a NAT gateway for employees to browse the internet securely.
Illustration (NAT):
Private EC2 → NAT Gateway → Internet 🌍 (can reach out, but internet cannot reach in)
Mini summary: NAT Gateway allows private subnets to go out to the internet, but stops internet from coming in.
Definition: CIDR (Classless Inter-Domain Routing) is a way to define a range of IP addresses. For example, 10.0.0.0/16 means all IPs from 10.0.0.0 to 10.0.255.255.
Why important: It tells AWS how many IP addresses your VPC and subnets will have.
Simple explanation: It's like saying "all houses on this street have numbers from 1 to 100".
Real-life example: A postcode that covers a whole neighbourhood.
School example: A range of student ID numbers for a class.
Home example: Your house number is part of a street range.
Nigerian example: A postal code for a local government area.
Illustration (CIDR):
VPC CIDR: 10.0.0.0/16 (65,536 IPs) Subnet A: 10.0.1.0/24 (256 IPs) Subnet B: 10.0.2.0/24 (256 IPs)
Mini summary: CIDR is a range of IP addresses for your VPC and subnets.
Definition: AWS gives you a default VPC in each region – it's ready to use. A custom VPC is one you build yourself with your own settings.
Why important: Default VPC is easy to start with. Custom VPC gives you full control.
Simple explanation: Default VPC is like a starter home; custom VPC is like building your own house from scratch.
Real-life example: Renting a furnished apartment (default) vs buying land and building (custom).
School example: Using a ready-made project (default) vs creating your own (custom).
Home example: A pre-built toy house vs making one with Lego.
Nigerian example: Buying a pre-built house vs constructing your own.
Comparison table:
| Feature | Default VPC | Custom VPC |
|---|---|---|
| Internet Gateway | Yes (pre-attached) | You attach it |
| Subnets | One per AZ | You define them |
| Route Tables | Default | You create them |
| Security | Basic | Full control |
Mini summary: Default VPC is quick and easy; custom VPC is more flexible.
Definition: VPC Peering allows two VPCs to connect to each other as if they were in the same network.
Why important: You might have different VPCs for different departments and they need to share data.
Simple explanation: It's like building a bridge between two gated communities.
Real-life example: Two office buildings connected by a skybridge.
School example: Two school campuses connected by a bus service.
Home example: Two friends' houses connected by a walkway.
Nigerian example: A company's head office in Lagos connects to its factory in Ogun via a private link.
Illustration (Peering):
VPC A <--- Peering ---> VPC B (10.0.0.0/16) (10.1.0.0/16)
Mini summary: VPC Peering connects two VPCs, making them act like one network.
Definition: Best practices are smart ways to design your VPC for security and performance.
Why important: A well-designed VPC is easier to manage and more secure.
Simple explanation: It's like planning your city before building – it prevents problems later.
List of best practices:
Mini summary: Follow best practices to keep your VPC safe and organised.
Definition: VPC Flow Logs capture information about IP traffic going to and from network interfaces in your VPC.
Why important: They help you monitor and troubleshoot connectivity issues.
Simple explanation: It's like a dashcam that records all the cars (data packets) entering and leaving your VPC.
Real-life example: A security camera at a building entrance.
School example: The school's visitor logbook.
Home example: A doorbell camera that records everyone who comes to your door.
Nigerian example: A security checkpoint at a company that records all visitors.
Illustration (Flow Logs):
VPC Flow Logs → CloudWatch Logs (records: source IP, destination, port, action)
Mini summary: VPC Flow Logs record all traffic in your VPC – like a surveillance camera.
Definition: A VPC Endpoint allows you to connect to AWS services (like S3) privately, without using the internet.
Why important: It keeps traffic within AWS, which is more secure and often faster.
Simple explanation: It's like a private tunnel from your house directly to the supermarket, so you don't have to go outside.
Real-life example: A direct pipeline from a factory to a warehouse.
School example: A dedicated corridor between the computer lab and the library.
Home example: A private passage between your bedroom and the kitchen.
Nigerian example: A private network link between a bank's head office and its disaster recovery site.
Illustration (VPC Endpoint):
VPC (private subnet) → VPC Endpoint → S3 (private access) (no internet needed)
Mini summary: VPC Endpoints connect you privately to AWS services.
Definition: A three-tier architecture has three layers: web (public), application (private), and database (private).
Why important: It separates concerns for security, scalability, and maintenance.
Simple explanation: It's like a restaurant: dining area (public), kitchen (application), and storage (database).
Real-life example: An online store: website (public), order processing (app), and product database (private).
School example: Reception (public), admin office (app), and student records (private).
Home example: Living room (public), kitchen (app), and pantry (private).
Nigerian example: A bank branch: customer area (public), teller area (app), and vault (private).
Illustration (Three-Tier):
Internet 🌍
|
V
+------------------+ (Public Subnet)
| Web Tier (EC2) |
+------------------+
|
V
+------------------+ (Private Subnet)
| App Tier (EC2) |
+------------------+
|
V
+------------------+ (Private Subnet)
| DB Tier (RDS) |
+------------------+
Mini summary: A three-tier architecture separates web, application, and database for better organisation and security.
Use the gated community analogy throughout. Emphasise that VPC is free (you pay for resources inside). Show the AWS VPC console if possible. Use diagrams to illustrate public vs private subnets.
Discuss how home Wi-Fi networks are like a mini VPC – the router is the IGW, devices are EC2 instances, and the password is like a security group rule.
In this module, we explored the world of AWS networking. We learned that a VPC is your own private network in the cloud. We divided it into subnets – some public (connected to the internet) and some private (hidden for security). We connected our VPC to the internet using an Internet Gateway, and directed traffic with route tables. We also used security groups (instance-level) and NACLs (subnet-level) to control traffic. We saw how NAT Gateways allow private subnets to access the internet, and how VPC Peering connects multiple VPCs. Finally, we learned about VPC Flow Logs and VPC Endpoints.
Networking is the foundation that lets all your AWS resources talk to each other and the world. With these skills, you can design secure and organised cloud architectures.
Answers: 1-Virtual, 2-subnet, 3-Internet, 4-route, 5-Security
Match the term to its description.
| Term | Description |
|---|---|
| 1. VPC | A. Connects VPC to internet |
| 2. Subnet | B. Directs traffic |
| 3. IGW | C. Virtual network |
| 4. Route Table | D. Part of VPC in one AZ |
| 5. Security Group | E. Instance-level firewall |
Answers: 1-C, 2-D, 3-A, 4-B, 5-E
Scenario 1: A company wants to host a website. They need a web server that is accessible to the public and a database that should not be public. Design a VPC with subnets and describe the routing.
Scenario 2: A developer needs to download software updates on a private EC2 instance. How can they achieve this without making the instance public?
In groups, design a VPC for a school. Decide on the CIDR, number of subnets, which are public/private, and where you would place the web server, application server, and database. Draw the architecture.
Write down a step-by-step plan to create a VPC with one public subnet and one private subnet. Include IGW, route tables, and security groups.
Title: Design a Secure VPC
Design a VPC for a three-tier web application. Include:
Draw the architecture and explain your choices.
If you have access to AWS Free Tier, create a VPC using the "VPC and more" wizard. Create a public subnet and a private subnet. Launch an EC2 instance in the public subnet and test connectivity. Document your steps.
You have two VPCs in different regions. You need them to communicate. How would you achieve this? (Hint: look up VPC Peering cross-region or Transit Gateway.) Explain the steps.
Fill-in-the-Blank: 1-Virtual, 2-subnet, 3-Internet, 4-route, 5-Security
True/False: F, F, T, F, F
Matching: 1-C, 2-D, 3-A, 4-B, 5-E
In Module Four, we will explore AWS Storage Services in more detail – we'll learn about S3 storage classes, EBS snapshots, and Amazon Glacier for archiving. We'll see how to choose the right storage for different types of data. Bring your VPC knowledge – we will place our storage inside our VPC for security!
Well done, network architect! See you in Module 4! 👋
End of Module Three – AWS Networking
Hello, young explorer! Have you ever wondered where your favourite games, videos, and school work live when you are not using them? They live in a special place called the cloud. No, not the fluffy white clouds in the sky – but a giant, magical computer room that you can visit from anywhere!
In this module, we are going to learn about Amazon Web Services, or AWS for short. AWS is like a huge toy box full of tools that help people build websites, store photos, and even make robots talk! And the best part? You do not need to be a grown‑up to understand it. We will use simple words, fun stories, and lots of examples from home, school, and even Nigeria!
By the end of this module, you will know what the cloud is, why AWS is so popular, and how you can use it to do amazing things. Let’s jump in!
After reading this module, you will be able to:
Once upon a time in Lagos, there was a young baker named Tunde. Tunde made the most delicious chin chin and puff‑puff in his neighbourhood. Every day, people lined up to buy his snacks. But Tunde had a problem – he could only bake a small number at a time because his oven was tiny.
One day, Tunde’s friend, Ada, said, “Tunde, why don’t you use a cloud bakery?” Tunde was confused. “A cloud bakery? But clouds are in the sky!” Ada laughed and explained: “A cloud bakery is a huge kitchen that you can rent whenever you need it. You only pay for the time you use. And you can make as many snacks as you want!”
Tunde rented space in the cloud bakery. Now he could bake thousands of chin chin at once. He even shared his recipes with other bakers in Abuja and Kano. His business grew, and he became famous all over Nigeria!
Guess what? AWS is exactly like Tunde’s cloud bakery. It is a giant computer kitchen that anyone can rent. You can store files, run games, or even make your own website – all without buying expensive machines.
And that is the magic of AWS! 🌟
Definition: The cloud is a network of powerful computers that are connected through the internet. They store and process information for us.
Why it is important: Without the cloud, we would need to carry big, heavy hard drives everywhere. The cloud lets us access our files from any device – phone, tablet, or laptop.
Simple explanation: Imagine your school bag. If you put all your books in it, it becomes heavy. The cloud is like a magic bag that holds all your books, but you don’t have to carry it – it stays in a safe place, and you can take out any book whenever you need it.
Real‑life example: When you watch a video on YouTube, the video is stored in the cloud. You do not download it; you just watch it online.
School example: Your teacher saves your homework on Google Drive – that is also a cloud.
Home example: Your family photos stored on iCloud or Amazon Photos.
Nigerian example: Many Nigerian banks use the cloud to keep your account information safe and fast.
Illustration (ASCII):
+-----------------+
| YOUR DEVICE |
| (phone, tablet) |
+--------+--------+
|
| internet
|
+--------v--------+
| THE CLOUD |
| (giant computer |
| room far away) |
+-----------------+
Mini summary: The cloud is a big group of computers that store and share information over the internet.
Definition: Amazon started as an online bookstore. Today, it is one of the biggest companies in the world, selling everything from books to toys.
Why it is important: Amazon also built AWS, which is now the world’s largest cloud provider. Many websites and apps run on AWS.
Simple explanation: Think of Amazon as a huge supermarket. But instead of just selling things, it also rents out its computer space to other people.
Real‑life example: When you order a toy from Amazon, it uses AWS to keep track of your order.
School example: Some schools use Amazon’s cloud to store student records.
Home example: If your family uses an Amazon Echo smart speaker, it uses AWS to understand your questions.
Nigerian example: Many Nigerian startups use AWS to host their websites because it is reliable.
Illustration:
AMAZON.COM ---> AWS (cloud services) (store) (computers for rent)
Mini summary: Amazon is a big company that also offers cloud services through AWS.
Definition: AWS stands for Amazon Web Services. It is a collection of cloud tools that let you build and run applications.
Why it is important: AWS is like a giant toolbox. You can pick the tool you need – storage, database, or even artificial intelligence.
Simple explanation: Imagine you have a box of Lego. AWS is like having thousands of Lego pieces, plus instructions to build anything you dream of.
Real‑life example: Netflix uses AWS to stream movies to your TV.
School example: A school could use AWS to create a student portal.
Home example: You can use AWS to back up your family’s photos automatically.
Nigerian example: A Nigerian fintech company uses AWS to process payments quickly.
Illustration:
AWS TOOLBOX +---------------------------+ | 1. Storage (S3) | | 2. Database (DynamoDB) | | 3. Compute (EC2) | | 4. AI (Amazon Rekognition)| +---------------------------+
Mini summary: AWS is a set of cloud services offered by Amazon.
Definition: Your own computer is great, but it has limits – small storage, slow speed, and it can break. AWS computers are huge, fast, and always available.
Why it is important: With AWS, you do not need to buy expensive servers. You can rent exactly what you need and pay only for what you use.
Simple explanation: It is like renting a car instead of buying one. When you need a car, you rent it. When you are done, you return it. You save money and don’t worry about repairs.
Real‑life example: A small business can use AWS to run its website without buying a physical server.
School example: A school can use AWS to host its online classes without buying extra computers.
Home example: You can use AWS to store your video game saves.
Nigerian example: A Nigerian farmer can use AWS to track weather data without owning a supercomputer.
Illustration:
OWN COMPUTER vs AWS +--------+ +-----------+ | small | | huge | | slow | | fast | | breaks | | always on | | costly | | pay as you| | | | go | +--------+ +-----------+
Mini summary: AWS is cheaper, faster, and more reliable than using your own computer for big tasks.
Definition: S3 is like a giant digital warehouse where you can store any file – pictures, videos, documents.
Why it is important: You can store as much as you want and access it from anywhere.
Simple explanation: Think of S3 as a huge locker room. Each locker has a number (called a bucket). You put your stuff in a bucket, and you can open it from any computer.
Real‑life example: When you upload a photo to Instagram, it is stored in S3.
School example: A teacher can save all lesson notes in an S3 bucket.
Home example: You can store your family videos in S3 so everyone can watch them.
Nigerian example: A Nigerian online store stores product images in S3.
Illustration:
+---------+
| BUCKET | (like a folder)
+----+----+
|
+----v----+
| FILE 1 | (photo)
| FILE 2 | (video)
| FILE 3 | (document)
+---------+
Mini summary: S3 is a storage service in AWS for any type of file.
Definition: EC2 is a service that lets you rent virtual computers (called instances) to run your software.
Why it is important: You can choose the size of the computer – small for a blog, large for a game server.
Simple explanation: It is like renting a gaming console. You can rent a small one for a simple game, or a super‑powerful one for a big game.
Real‑life example: A company runs its website on EC2.
School example: A school can run a coding platform on EC2 for students.
Home example: You could run a Minecraft server on EC2.
Nigerian example: A Nigerian music streaming service uses EC2 to play songs.
Illustration:
EC2 instance = virtual computer +------------+ | CPU, RAM | | Hard disk | | Operating | | system | +------------+
Mini summary: EC2 gives you virtual computers in the cloud.
Definition: RDS is a service that manages databases for you. A database is like a digital filing cabinet.
Why it is important: It keeps your data organised and makes it easy to find information.
Simple explanation: Think of RDS as a librarian who organises all your books (data) and helps you find the one you need quickly.
Real‑life example: An online store uses RDS to keep track of products and prices.
School example: A school uses RDS to store student grades.
Home example: You could use RDS to keep a list of your toy collection.
Nigerian example: A Nigerian hospital uses RDS to keep patient records.
Illustration:
DATABASE TABLE +------+--------+-------+ | Name | Age | City | +------+--------+-------+ | Ada | 12 | Lagos | | Tunde| 10 | Abuja | +------+--------+-------+
Mini summary: RDS helps you store and find data easily.
Definition: Lambda lets you run code without having to manage a server. You just upload your code, and AWS runs it when needed.
Why it is important: You do not need to worry about the computer behind it – you only pay for the time your code is running.
Simple explanation: It is like a magic wand. You say the spell (code), and the wand does the work, then disappears. You don’t need to keep the wand in your pocket.
Real‑life example: When you upload a photo to an app, Lambda can automatically resize it.
School example: A teacher can use Lambda to automatically grade quizzes.
Home example: You can use Lambda to send an email reminder to your parents about your school event.
Nigerian example: A Nigerian delivery app uses Lambda to update order status in real time.
Illustration:
User action --> Lambda function --> result (click) (code runs) (done)
Mini summary: Lambda runs your code only when needed, without managing servers.
Definition: IAM is like a security guard that controls who can access your AWS resources.
Why it is important: It keeps your data safe from people who should not see it.
Simple explanation: Imagine your house. IAM gives keys (permissions) only to people you trust – your family, not strangers.
Real‑life example: A company uses IAM to give employees only the access they need for their jobs.
School example: A school uses IAM to let teachers see grades but students cannot change them.
Home example: You can use IAM to let your sibling view photos but not delete them.
Nigerian example: A Nigerian bank uses IAM to ensure only cashiers can process withdrawals.
Illustration:
IAM SECURITY +---------+ +----------+ | USER | -------> | PERMISSIONS| | (person)| | (read, | | | | write, | | | | delete) | +---------+ +----------+
Mini summary: IAM is the security system that controls access to AWS.
Definition: CloudFront is a service that delivers your content (like videos and images) quickly to users all over the world.
Why it is important: It makes your website load faster for people in different countries.
Simple explanation: Think of CloudFront as a network of ice‑cream trucks. No matter where you are, an ice‑cream truck is nearby, so you get your ice‑cream fast!
Real‑life example: When you watch a movie on Amazon Prime, CloudFront makes sure it loads smoothly.
School example: A school website uses CloudFront so students in different states can access it quickly.
Home example: Your family’s photo album loads faster with CloudFront.
Nigerian example: A Nigerian news website uses CloudFront to serve articles to readers in Lagos, Kano, and Port Harcourt quickly.
Illustration:
CloudFront edge locations
(ice‑cream trucks)
/ | \
/ | \
Lagos Abuja Kano
\ | /
\ | /
Your origin server
Mini summary: CloudFront speeds up content delivery around the world.
Definition: AWS has many built‑in security features to protect your data.
Why it is important: It keeps your files, passwords, and private information safe from hackers.
Simple explanation: It is like having a lock on your diary, plus a guard dog, and a security camera.
Real‑life example: Banks use AWS security to protect your money.
School example: Schools use AWS security to keep student records private.
Home example: Your family’s photos are encrypted so only you can see them.
Nigerian example: Nigerian e‑commerce sites use AWS security to protect credit card numbers.
Illustration:
SECURITY LAYERS +------------------+ | 1. Encryption | (scramble data) | 2. Firewall | (gatekeeper) | 3. IAM | (access control) | 4. Monitoring | (watch for bad guys) +------------------+
Mini summary: AWS provides many layers of security to protect your data.
Definition: AWS charges you based on what you use. The Free Tier lets you try many services for free for a year.
Why it is important: You can learn and experiment without spending money.
Simple explanation: It is like a sample plate at a restaurant – you can taste many dishes for free before ordering a full meal.
Real‑life example: A student can use the Free Tier to build a personal website.
School example: A school can test AWS services for free before deciding to pay.
Home example: You can store up to 5 GB of files for free with S3.
Nigerian example: A Nigerian entrepreneur can start a business on AWS for free.
Illustration:
+-----------------------+ | AWS FREE TIER | | - 750 hours EC2/month | | - 5 GB S3 storage | | - 1 million Lambda | | requests | +-----------------------+
Mini summary: AWS has a Free Tier to let you try services without cost.
Definition: Many Nigerian companies use AWS to run their businesses.
Why it is important: AWS helps Nigerian startups grow and serve customers better.
Simple explanation: It is like using a big, powerful engine to power your boat – you can go farther and faster.
Examples: Flutterwave (payment), Paystack (payment), and many agriculture apps.
Illustration:
Nigerian startups using AWS +------------------+ | Flutterwave | | Paystack | | FarmCrowdy | | Kuda Bank | +------------------+
Mini summary: AWS helps Nigerian businesses succeed.
Definition: You can use AWS to host online games, store player scores, and even add AI opponents.
Simple explanation: It is like having a giant playground where your game lives.
Real‑life example: Many mobile games use AWS for multiplayer.
School example: A coding club can build a quiz game on AWS.
Home example: You and your sibling can build a game together using AWS.
Nigerian example: A Nigerian game developer uses AWS to host their game.
Illustration:
Game flow: Player -> AWS -> update scores -> all players see
Mini summary: AWS is powerful enough to run games.
Definition: The cloud is growing every day. More and more things will be connected to the cloud – from cars to refrigerators.
Why it is important: Learning about AWS now prepares you for future jobs.
Simple explanation: It is like learning to read – it opens up a whole world of possibilities.
Real‑life example: Smart cities use the cloud to manage traffic.
School example: Schools will use the cloud for virtual reality lessons.
Home example: Your smart fridge might order groceries using AWS.
Nigerian example: Nigerian farmers will use cloud sensors to monitor crops.
Illustration:
Future cloud devices
+-----+ +-----+ +-----+
| Car | |Fridge| |Watch|
+-----+ +-----+ +-----+
\ | /
\ | /
+-----+-----+
| CLOUD |
+-----------+
Mini summary: The cloud will become even more important in the future.
+------------------+
| YOUR DEVICE |
| (phone, laptop) |
+--------+---------+
|
| internet
|
+--------v---------+
| AWS CLOUD |
| +----------+ |
| | S3 | |
| | EC2 | |
| | Lambda | |
| +----------+ |
+------------------+
+---------+ +---------+ +---------+ | User | ---> | Lambda | ---> | Result | | (click) | | function| | (done) | +---------+ +---------+ +---------+
+------------------+ | BUCKET | | (folder) | | +------+ | | | file1 | | | | file2 | | | | file3 | | | +------+ | +------------------+
| Feature | On‑Premises | AWS |
|---|---|---|
| Cost | High (buy hardware) | Pay as you go |
| Scalability | Hard to grow | Easy to grow |
| Maintenance | You do it | AWS does it |
| Global reach | Limited | Worldwide |
| Service | What it does | Use case |
|---|---|---|
| S3 | Store files | Photos, videos |
| EC2 | Virtual computers | Run websites |
| Lambda | Run code without servers | Automate tasks |
| RDS | Managed database | Store customer data |
Congratulations! You have learned a lot about AWS. Let’s review:
Now you are ready to explore the cloud on your own!
Match the service with its function:
| Service | Function |
|---|---|
| S3 | a) Virtual computer |
| EC2 | b) File storage |
| Lambda | c) Run code without servers |
| RDS | d) Managed database |
| CloudFront | e) Content delivery |
Answers: S3‑b, EC2‑a, Lambda‑c, RDS‑d, CloudFront‑e
Divide into groups of 4. Each group chooses a scenario (e.g., running a school website, a photo‑sharing app). Identify which AWS services you would use and present your plan to the class.
Write a one‑page report on how a Nigerian business could benefit from using AWS. Include at least three services and explain why they are useful.
Build a simple photo album using AWS:
Task: Set up an EC2 instance and install a simple web server. Use the Free Tier. Write a step‑by‑step report of what you did.
Create a Lambda function that adds two numbers and returns the result. Test it with a few inputs. Write the code (Python) and show the output.
(Answers to the multiple choice, fill‑in, true/false, matching)
In the next module, we will dive deeper into building your own website on AWS. We will learn about domain names, hosting, and how to make your site live for everyone to see. You will also learn about databases and how to store user information. Get ready to become a cloud architect!
Before that, make sure you have an AWS account (with Free Tier) and have tried at least one service. Practice makes perfect!
End of Module Four – Keep exploring and remember: the cloud is your playground!
Hello, young cloud explorer! 👋 In our last modules, we learned how to build and run things on AWS – like virtual servers, storage, and databases. But wait… if we put our important things on the cloud, how do we keep them safe from bad people? How do we make sure only the right people can see or change our stuff?
This module is all about security – the shield that protects our cloud castles. We will learn about IAM (Identity and Access Management), which is like a security guard that checks who is coming in and what they are allowed to do. We will also discover other safety tools like passwords, encryption, and firewalls. By the end, you will be a cloud security hero! 🦸♂️🦸♀️
After this module, you will be able to:
Imagine a beautiful castle floating in the sky – that is the Cloudland Castle. Inside, there are treasure rooms (databases), kitchens (servers), and libraries (storage). The king and queen have many workers: cooks, knights, and scribes.
One day, a tricky goblin named Grumble tried to sneak in and steal the royal recipes! 😱 But the castle had a wise old wizard named IAM – the Identity and Access Manager. IAM gave every worker a special badge. The badge showed their name and what they could do. Cooks could only go to the kitchen. Knights could guard the gates. Scribes could only read books, not change them.
When Grumble the goblin arrived, he had no badge. IAM said, “Stop! Who are you?” Grumble tried to pretend he was a cook, but IAM asked for a secret password and even a magic code from a special ring (that’s like MFA!). Grumble failed, and IAM sent him away. The castle was safe! 🏰
In this module, you will learn how to be like IAM – the security wizard of AWS!
Definition: Cloud security is a set of rules and tools that protect your data, apps, and services on the cloud from bad people (hackers) and accidents.
Why it is important: If we don't have security, anyone could steal or delete our information. Imagine someone deleting all your school projects! 😱 Cloud security keeps our digital life safe.
Simple explanation: It's like having locks on your doors, a fence around your house, and a security camera – but for your computer things in the cloud.
Real-life example: Banks use cloud security to keep your money safe online.
School example: Your school keeps your grades in a computer. Security makes sure only teachers can change them.
Home example: You have a password on your tablet so your little brother cannot delete your games.
Nigerian example: Banks like GTBank or Access Bank use cloud security to protect your account when you use mobile banking.
Illustration (ASCII):
Cloud Security Shield
+-------------------+
| 🛡️ PROTECT |
| Data | Apps |
| Users | Access |
+-------------------+
🔒 LOCKED
Mini summary: Cloud security is like a shield that protects everything we put on the cloud.
Definition: IAM is a service in AWS that helps you manage who can access your AWS resources and what they can do with them.
Why it is important: IAM is the boss of security. It makes sure only the right people have the right keys.
Simple explanation: IAM is like a school security guard who checks ID cards before letting anyone into the building. And it decides which rooms each person can enter.
Real-life example: At a company, employees have badges. The badge opens only the doors they need (e.g., HR cannot enter the server room).
School example: The principal can go anywhere, but a student can only go to classrooms and the playground.
Home example: Your parents have keys to all rooms, but you only have a key to your bedroom.
Nigerian example: In a Nigerian bank, the branch manager can access all vaults, but a cashier can only access the teller drawer.
Illustration (IAM flow):
User 👤 → IAM checks ID → Allowed? → YES → Access
↓
NO → DENIED 🚫
Mini summary: IAM is the gatekeeper of AWS – it checks who you are and what you can do.
Definition: An IAM User is a person or application that interacts with AWS. A Group is a collection of users with the same permissions.
Why important: Instead of giving permissions to each person one by one, we put them in a group and give permissions to the group. It saves time!
Simple explanation: Imagine you have a soccer team. Instead of giving each player a uniform separately, you give a box of uniforms to the whole team.
Real-life example: At a school, all teachers are in a “Teachers” group and all students in a “Students” group.
School example: All grade 5 students have the same library rules.
Home example: All children in a family have the same TV time rules.
Nigerian example: In a company like MTN, all engineers belong to an “Engineering” group, and all HR staff belong to an “HR” group.
Illustration (table of users & groups):
| Group | Users in group | Permissions |
|---|---|---|
| Admins | Chidi, Amina | Full access (can do everything) |
| Developers | Tunde, Kemi | Can create and manage apps |
| Viewers | Ada, Musa | Can only view data, not change |
Mini summary: Users are people, groups are like teams. Give permissions to groups, not individuals.
Definition: A policy is a document (in JSON format) that lists what actions are allowed or denied on which resources.
Why important: Policies are the actual rules that IAM uses to say yes or no.
Simple explanation: It's like a rulebook for a game – it says, “You can run, but you cannot use your hands.”
Real-life example: Library rules: “You can borrow books, but you cannot eat inside.”
School example: “Students can use the playground during recess, but not during class.”
Home example: “You can watch TV after homework, but not before.”
Nigerian example: In a market, the policy might say, “You can sell fruits, but you cannot sell medicines without a license.”
Illustration (policy format):
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::my-bucket/*"
}
This policy says: Allow the user to GET (read) objects from my-bucket.
Mini summary: Policies are the rulebooks that tell AWS what each user or group is allowed to do.
Definition: Authentication is proving who you are (e.g., username + password). Authorization is what you are allowed to do after you are authenticated.
Why important: You need both. First prove you are you, then we decide what you can do.
Simple explanation: Authentication = showing your ID card. Authorization = the security guard says, “You may enter the kitchen, but not the vault.”
Real-life example: At the airport, you show your passport (authentication). Then they check if you have a boarding pass for first class (authorization).
School example: You show your school ID (authentication). Then the teacher says, “You can go to the library, but not the staff room.”
Home example: You enter your phone passcode (authentication). Then you can only use games, not make purchases (authorization).
Nigerian example: Using your ATM card and PIN (authentication). The ATM then allows you to withdraw only up to your daily limit (authorization).
Illustration:
Step 1: Authentication (Who are you?) → OK, you are Chidi Step 2: Authorization (What can you do?) → You can view reports, but not delete them
Mini summary: Authentication = identity check. Authorization = permission check.
Definition: MFA means you need more than one thing to prove who you are – usually something you know (password) and something you have (like a phone or a hardware token).
Why important: If someone steals your password, they still cannot get in without the second factor.
Simple explanation: It's like having two locks on your door – a key and a secret code.
Real-life example: When you log into your bank, they send a code to your phone. You enter the code after your password.
School example: To enter the science lab, you need a key (first factor) and the teacher’s code (second factor).
Home example: Your dad’s phone has a PIN (password) and also uses his fingerprint.
Nigerian example: Many Nigerian banks use MFA: you enter your password, then get an OTP (One-Time Password) via SMS.
Illustration:
Login attempt
|
V
Enter password ← Factor 1 (something you know)
|
V
Enter OTP from phone ← Factor 2 (something you have)
|
V
Access GRANTED ✅
Mini summary: MFA adds a second lock to keep your account extra safe.
Definition: An IAM role is like a “persona” that you can assume temporarily to get certain permissions. It is not a user; it’s a set of permissions you can take on for a short time.
Why important: Sometimes you don't want permanent permissions. You just need them for a task, then you give them back.
Simple explanation: Imagine you are a superhero – you put on a magic ring (role) to fly, but when you take it off, you are back to normal.
Real-life example: A substitute teacher gets a temporary badge that works only for one day.
School example: A student is chosen to be the class prefect for a week – they get extra permissions (like taking attendance) but only for that week.
Home example: Your cousin visits and you give them a guest Wi-Fi password that expires after 24 hours.
Nigerian example: A contractor working in a Nigerian office gets a temporary ID card that only works during their contract period.
Illustration:
User (no permissions) → Assume Role (e.g., “Editor”) → Gets edit permissions
↓
After task, role is released → back to normal
Mini summary: Roles give temporary permissions – put them on and take them off.
Definition: Encryption is the process of turning readable data (plaintext) into a scrambled, unreadable format (ciphertext). Only someone with a special key can unscramble it.
Why important: Even if a hacker steals the data, they cannot read it without the key.
Simple explanation: It's like writing a note in a secret code that only your best friend knows how to read.
Real-life example: WhatsApp messages are encrypted so only you and the person you chat with can read them.
School example: You and your friend have a secret alphabet – you write messages using it, and no one else understands.
Home example: You have a diary with a lock and key – only you have the key.
Nigerian example: Banks encrypt your card details when you pay online so that no one can steal your card number.
Illustration:
Original text: "HELLO"
↓ Encrypt (scramble)
Ciphertext: "2a$fG#9" (looks like garbage)
↓ Decrypt (with key)
Original: "HELLO"
Mini summary: Encryption scrambles data so only people with the key can read it.
Definition: A security group is a virtual firewall that controls inbound (incoming) and outbound (outgoing) traffic to your EC2 instances.
Why important: It blocks unwanted traffic – like a bouncer at a club only letting in people on the guest list.
Simple explanation: It’s like a fence around your server with a gate. You decide who can come in and who can leave.
Real-life example: An office building has a guard at the entrance – only employees and visitors on the list can enter.
School example: The school gate is open for students and teachers, but strangers need permission.
Home example: Your parents decide which friends can come over and which cannot.
Nigerian example: A gated community in Lagos has security at the gate – they only allow residents and their guests.
Illustration (Security Group rules):
Inbound rules (who can ENTER):
- Allow SSH (port 22) from IP 192.168.1.1 (only that computer)
- Allow HTTP (port 80) from anywhere (so website is public)
Outbound rules (who can LEAVE):
- Allow all traffic to anywhere
Mini summary: Security groups are like bouncers that control traffic in and out of your servers.
Definition: NACLs are another layer of security for your VPC (Virtual Private Cloud). They are stateless – rules are checked for every packet of data.
Why important: They provide an extra security barrier between your network and the outside world.
Simple explanation: If security groups are bouncers at the door, NACLs are like security checkpoints at the entrance to the whole neighborhood.
Real-life example: At a stadium, there is security at the main gate (NACL) and then at each section (security group).
School example: The main school gate checks everyone (NACL), then the classroom door checks again (security group).
Home example: The main gate to your housing estate (NACL) and then the door to your house (security group).
Nigerian example: In a Nigerian university, there’s a main gate (NACL) and then individual department doors (security groups).
Comparison table:
| Feature | Security Group | NACL |
|---|---|---|
| State | Stateful (remembers connections) | Stateless (checks each packet) |
| Rules | Only allow rules | Allow and deny rules |
| Applies to | Instance level | Subnet level |
Mini summary: NACLs are like an outer security fence, while security groups are like inner door locks.
Definition: Best practices are the smartest ways to use IAM to stay safe.
Why important: Following best practices makes it much harder for hackers to break in.
Simple explanation: It’s like always looking both ways before crossing the street – a good habit that keeps you safe.
List of best practices:
Real-life example: A hospital gives nurses access to patient records, but only doctors can change treatment plans.
School example: Teachers can grade assignments, but students can only view their own grades.
Home example: You can watch Netflix, but you cannot change the Wi-Fi password.
Nigerian example: In a bank, the teller can process deposits but cannot approve loans – that’s least privilege.
Illustration (Least privilege):
User: Tunde (Developer)
Permissions:
- Can create S3 buckets
- Can start/stop EC2 instances
- CANNOT delete RDS databases (only admins can)
Mini summary: Best practices are smart habits – like using MFA and giving only necessary permissions.
Definition: The shared responsibility model means AWS is responsible for security of the cloud (the hardware, network, etc.), and YOU are responsible for security in the cloud (your data, IAM, passwords, etc.).
Why important: It clarifies who does what – so you don't expect AWS to do your job.
Simple explanation: Think of a school. The school provides the building (AWS), but you are responsible for locking your locker (your data).
Real-life example: A hotel provides the room and building security, but you are responsible for locking your suitcase.
School example: The school provides the classroom, but you must keep your books safe.
Home example: Your parents pay for the house (AWS), but you are responsible for your own room.
Nigerian example: In a Nigerian office, the company provides the building (AWS) but each employee is responsible for their computer password.
Illustration (diagram):
+---------------------------------------+ | AWS Responsibility (security OF cloud) | | - Physical servers | | - Network infrastructure | | - Hypervisor | +---------------------------------------+ | YOUR Responsibility (security IN cloud)| | - IAM users and policies | | - Data encryption | | - Your application security | +---------------------------------------+
Mini summary: AWS secures the cloud itself, but you must secure what you put in it.
Definition: CloudTrail is a service that records all API calls made in your AWS account – it's like a security camera that records every action.
Why important: If something goes wrong, you can look at the logs to see who did what and when.
Simple explanation: It's like a CCTV camera that watches everything that happens in your AWS account.
Real-life example: A bank has cameras watching every transaction – they can review footage if there is a problem.
School example: The school has a sign-in sheet for visitors – they can check who came in.
Home example: A doorbell camera records who rings the bell.
Nigerian example: A company like Dangote uses monitoring logs to track who accesses sensitive files.
Illustration:
User Action → CloudTrail records → Stored in S3 bucket
(like "Delete file") (log entry: user, time, action)
Mini summary: CloudTrail records every action in your AWS account – like a security camera.
Definition: Access keys are like a username and password for programs (not people) to interact with AWS programmatically.
Why important: Programs need to talk to AWS without a human typing a password.
Simple explanation: It's like a robot that has a special passcode to enter a building.
Real-life example: An ATM machine uses an API key to talk to the bank’s central system.
School example: A school printer has a code to connect to the school’s network.
Home example: Your smart speaker has a key to connect to your music service.
Nigerian example: A payment gateway like Paystack uses access keys to talk to banks.
Important: Never share your secret key! Keep it like a secret password.
Illustration:
Application (code) → Access Key + Secret Key → AWS API
(like a robot with a badge)
Mini summary: Access keys are for programs to access AWS – keep them secret!
Definition: A secure architecture is the overall design that uses all the tools (IAM, security groups, encryption, etc.) together to protect your cloud.
Why important: You need all the pieces working together – like a puzzle.
Simple explanation: It’s like building a castle with walls (security groups), guards (IAM), and secret codes (encryption).
Real-life example: A bank building has guards, cameras, vaults, and alarms – all working together.
School example: School security includes the gate guard, CCTV, and a sign-in system.
Home example: Your home has locks, an alarm system, and a peephole – all for safety.
Nigerian example: A Nigerian data center uses IAM, firewalls, and encryption to protect customer data.
Illustration (Secure architecture flowchart):
User request
|
V
IAM (Authentication + Authorization) → DENIED or ALLOWED
|
V (if allowed)
Security Group (check traffic rules)
|
V
Encryption (data is scrambled)
|
V
CloudTrail (all actions recorded)
|
V
Secure access to resource ✅
Mini summary: All security tools work together like a team to protect your cloud.
This module is foundational. Encourage students to try the AWS Free Tier to create a test IAM user (with no billing permissions). Use analogies extensively – kids love the castle and wizard story. Emphasize that security is everyone’s job. Use group discussions about why they think MFA is important.
Help your child set up MFA on their own accounts (like email or games) to show how it works. Talk about why we don’t share passwords. You can also relate it to home security – locks, alarms, and passwords are all ways to protect what’s important.
We have learned that cloud security is like a fortress protecting our digital belongings. IAM is the master gatekeeper that checks who you are (authentication) and what you can do (authorization). We saw how users, groups, and policies work together, and how MFA adds an extra layer of safety. Encryption scrambles our data, and security groups & NACLs act as firewalls. We also discovered that CloudTrail records everything like a CCTV camera. Finally, the shared responsibility model reminds us that AWS secures the cloud, but we must secure what we put in it.
By following best practices like least privilege and regular monitoring, you can keep your AWS environment safe and sound. You are now a cloud security junior expert! 🎉
Match the term on the left with the correct description on the right.
| Term | Description |
|---|---|
| 1. IAM | A. Scrambles data |
| 2. MFA | B. Records all actions |
| 3. Encryption | C. Manages access |
| 4. CloudTrail | D. Two-factor authentication |
| 5. Security Group | E. Virtual firewall |
Answers: 1-C, 2-D, 3-A, 4-B, 5-E
Scenario 1: A company has 50 employees. They want all developers to be able to create S3 buckets, but only senior developers can delete buckets. How would you set this up using IAM?
Scenario 2: You are the cloud admin. You notice that a user has more permissions than needed. What would you do?
Scenario 3: A new intern joins the team. They need to access a specific S3 bucket to read reports, but they should not be able to edit or delete. How would you give them access?
Divide the class into groups of 3-4. Each group must design a “security plan” for a fictional company called “CloudKids Ltd”. They must list:
Write down 5 things you would do to secure your AWS account if you were the cloud administrator. Include why each step is important.
Title: Build a Secure IAM Structure for a School
Design an IAM structure for a school with 3 groups: Admin, Teachers, Students. Define:
If you have access to AWS Free Tier, create a test IAM user (do not give any real permissions) and practice attaching a policy. Enable MFA on your root account (with parent/teacher supervision). Write a short report on what you did.
Imagine a scenario where a user needs temporary access to an EC2 instance for 2 hours. How would you achieve this using IAM? (Hint: think about roles.) Write down the steps.
Fill-in-the-Blank answers:
True/False answers: F, T, F, T, F
Matching answers: 1-C, 2-D, 3-A, 4-B, 5-E
In Module Six, we will dive into AWS Compute Services – we'll learn about EC2 (virtual servers), Lambda (serverless computing), and Elastic Beanstalk. We'll see how to launch servers in the cloud and run applications. Bring your security knowledge along – we will need it to keep those servers safe!
Great work, cloud security champion! See you in Module 6! 👋
End of Module Five – AWS Security & IAM
Hello, future cloud expert! Have you ever thought about how your favourite websites, games, and apps appear on your screen so fast? It is like magic, but it is really networking – the way computers talk to each other.
In this module, we will learn about AWS networking. Networking is like a postal system for computers. It makes sure that when you send a message or request a website, it gets to the right place quickly and safely.
We will explore Virtual Private Clouds (VPCs), subnets, routers, and even how to connect your own computer to the cloud. Don't worry – we will use simple words, fun stories, and lots of examples from home, school, and Nigeria!
By the end of this module, you will understand how data travels across the internet and how AWS makes it all work. Let's begin!
After reading this module, you will be able to:
In a busy city in Nigeria, there was a young boy named Chidi. Chidi's mother made the best puff-puff in the neighbourhood. But people lived far away and could not come to her shop every day.
Chidi had an idea! He set up a delivery network. He hired bicycle riders to take puff-puff to different parts of the city. He gave each rider a map, a list of addresses, and a special bag to keep the puff-puff warm. The riders knew exactly which routes to take and which roads were fastest.
Soon, everyone in the city could enjoy Chidi's mother's puff-puff. Chidi's delivery network was a huge success!
Guess what? AWS networking works just like Chidi's delivery network. The cloud has many computers (like the riders) that need to send data (like puff-puff) to different places. The network makes sure data goes to the right address, takes the fastest route, and arrives safely.
That is exactly what we are going to learn! 🚲
Definition: A network is a group of computers and devices that are connected together so they can share information.
Why it is important: Without networks, computers would be alone – they could not talk to each other, and we could not use the internet.
Simple explanation: Think of a network like a telephone system. When you call your friend, your voices travel through wires and towers to reach them. A computer network does the same thing – it sends messages (data) from one computer to another.
Real‑life example: Your school has a network that connects all the computers in the computer lab.
School example: When you print a document, it goes from your computer to the printer through the school network.
Home example: Your home Wi‑Fi is a small network that connects your phone, tablet, and laptop.
Nigerian example: A bank in Lagos uses a network to connect all its branches so they can share customer information.
Illustration (ASCII):
+--------+ +--------+
| COMPUTER|-----| COMPUTER|
| A | | B |
+--------+ +--------+
| |
| |
+------+-------+
|
+------v-------+
| NETWORK |
| (the cloud) |
+--------------+
Mini summary: A network connects computers so they can share data.
Definition: AWS networking is a set of services that let you connect your cloud resources (like EC2 and S3) to each other and to the internet.
Why it is important: It lets you build applications that can talk to the outside world and to other parts of AWS.
Simple explanation: Imagine you have a big box of Lego pieces. AWS networking is like the instructions that tell you how to connect the pieces to build a castle. It makes sure everything fits together and works.
Real‑life example: A company uses AWS networking to connect its website to a database so users can log in.
School example: A school uses AWS networking to allow students to access online lessons from home.
Home example: Your smart TV uses AWS networking to stream movies.
Nigerian example: A Nigerian fintech company uses AWS networking to process payments securely.
Illustration:
+-------------------+ | AWS NETWORKING | | +-------+ +-----+ | | | EC2 | | S3 | | | +-------+ +-----+ | | | | | +---v---+ | | |INTERNET| | | +-------+ | +-------------------+
Mini summary: AWS networking connects cloud services and the internet.
Definition: A VPC (Virtual Private Cloud) is like your own private section of the AWS cloud. It is a virtual network that is isolated from other users.
Why it is important: It gives you control over your network – you can decide who can access it and how.
Simple explanation: Think of a VPC as your own house in a big city. Your house has doors and windows (like firewalls) that you can lock. You decide who comes in and who stays out. No one else can enter your house without your permission.
Real‑life example: A bank uses a VPC to keep its financial data separate from other companies.
School example: A school has its own VPC for student records.
Home example: Your family's photos are stored in a VPC so only your family can see them.
Nigerian example: A hospital in Abuja uses a VPC to store patient health records.
Illustration:
+--------------------------+ | AWS CLOUD | | +------------------+ | | | YOUR VPC | | | | (your own space)| | | | +-----------+ | | | | | EC2 | | | | | +-----------+ | | | | +-----------+ | | | | | S3 | | | | | +-----------+ | | | +------------------+ | | Other users' VPCs | +--------------------------+
Mini summary: A VPC is your own private network inside AWS.
Definition: A subnet is a smaller part of a VPC. It helps you organise your resources.
Why it is important: Subnets let you group similar resources together and control traffic between them.
Simple explanation: Imagine your house has different rooms – a living room, a kitchen, and a bedroom. Each room has its own purpose. Subnets are like rooms in your VPC.
Real‑life example: A company might put its web servers in one subnet and its database servers in another.
School example: A school puts teachers' computers in one subnet and students' computers in another.
Home example: You could put your gaming console in one subnet and your family's work computers in another.
Nigerian example: A Nigerian e‑commerce site puts product images in one subnet and customer data in another.
Illustration:
+-----------------------+ | YOUR VPC | | +---------+ +-------+ | | | SUBNET A| |SUBNET B| | | | (web) | |(database| | | +---------+ +-------+ | +-----------------------+
Mini summary: Subnets are smaller networks inside your VPC.
Definition: An Internet Gateway (IGW) is a component that connects your VPC to the internet.
Why it is important: Without an IGW, your VPC would be isolated – nothing from the outside could get in, and nothing from inside could get out.
Simple explanation: Think of an IGW as your front door. If you want to go outside to play, you use the door. If you want to receive a package, the delivery person uses the door. The IGW is the door to the internet.
Real‑life example: Your home Wi‑Fi router is like an Internet Gateway – it connects your home network to the internet.
School example: A school's internet connection is provided by a gateway.
Home example: Your modem is a gateway that connects your home to the internet.
Nigerian example: A Nigerian startup uses an IGW to let customers access their website.
Illustration:
+---------+ +---------+ +---------+ | YOUR VPC|---->|INTERNET |---->| THE | | | |GATEWAY | |INTERNET | +---------+ +---------+ +---------+
Mini summary: An Internet Gateway connects your VPC to the internet.
Definition: A route table is like a map that tells network traffic where to go.
Why it is important: Route tables make sure data packets find their way to the correct destination.
Simple explanation: Imagine you are in a new city and you need to get to a museum. You would look at a map or follow road signs. A route table does the same for network traffic – it shows the way.
Real‑life example: GPS navigation uses route tables to guide your car.
School example: The school network uses route tables to send printing jobs to the right printer.
Home example: Your home router has a route table to decide which device gets data.
Nigerian example: A Nigerian telecom company uses route tables to route phone calls.
Illustration:
+-----------------------+ | ROUTE TABLE | | Destination | Gateway | | 10.0.0.0/16 | local | | 0.0.0.0/0 | igw | +-----------------------+
Mini summary: Route tables are maps that direct network traffic.
Definition: A security group is a virtual firewall that controls inbound and outbound traffic to your AWS resources.
Why it is important: It protects your resources from unauthorised access.
Simple explanation: Think of a security group as a bouncer at a club. The bouncer checks your ID and only lets you in if you are on the guest list. Security groups do the same – they only allow certain traffic.
Real‑life example: A company uses security groups to allow only employees to access internal systems.
School example: A school allows only teachers to access grade reports.
Home example: You use a password to protect your tablet – that is like a security group.
Nigerian example: A Nigerian bank uses security groups to protect customer accounts.
Illustration:
+------------------+ | SECURITY GROUP | | Rules: | | - Allow HTTP | | - Allow SSH | | - Deny everything| | else | +------------------+
Mini summary: Security groups control who can access your resources.
Definition: A NACL is another type of firewall that works at the subnet level. It has rules that allow or deny traffic.
Why it is important: NACLs add an extra layer of security to your VPC.
Simple explanation: If security groups are bouncers at the door, NACLs are like security guards at the gate of a building. They check everyone before they even get to the door.
Real‑life example: An airport has security checks at the entrance and then more checks at the boarding gate.
School example: A school has a security guard at the gate and a receptionist at the office.
Home example: Your house has a gate (NACL) and a locked door (security group).
Nigerian example: A government building in Abuja has security checks at the entrance and inside.
Illustration:
+------------------+ | NACL | | Rules (numbered):| | 100 Allow HTTP | | 200 Allow SSH | | 300 Deny all | +------------------+
Mini summary: NACLs are subnet‑level firewalls that add extra security.
Definition: VPC peering lets you connect two VPCs so they can talk to each other as if they were on the same network.
Why it is important: It lets you share resources between different VPCs without going through the internet.
Simple explanation: Imagine two houses that are side‑by‑side. They build a bridge between them so they can visit each other easily. VPC peering is that bridge.
Real‑life example: A company has one VPC for development and another for production – they peer them to share data.
School example: A school has a VPC for students and another for teachers – they are peered.
Home example: Your tablet and your phone are connected via Bluetooth – that is like peering.
Nigerian example: A Nigerian company has a VPC in Lagos and another in Abuja – they peer them for faster data exchange.
Illustration:
+---------+ +---------+ | VPC A |-----| VPC B | | (Lagos) | | (Abuja) | +---------+ +---------+
Mini summary: VPC peering connects two VPCs securely.
Definition: A VPN is a secure connection over the internet that connects your on‑premises network to your VPC.
Why it is important: It lets you securely access your AWS resources from your own office or home.
Simple explanation: Think of a VPN as a secret tunnel under a busy road. Only you can use the tunnel, and it keeps you safe from the traffic above.
Real‑life example: A remote worker uses a VPN to connect to the company's network.
School example: A teacher at home uses a VPN to access school files.
Home example: You use a VPN to watch shows that are not available in your country.
Nigerian example: A Nigerian bank uses a VPN to connect its branch offices securely.
Illustration:
+----------+ +---------+ +---------+ | YOUR | | VPN | | AWS VPC | | COMPUTER |----| TUNNEL |----| | +----------+ +---------+ +---------+
Mini summary: A VPN creates a secure tunnel to your VPC.
Definition: Direct Connect is a private, dedicated connection between your data centre and AWS.
Why it is important: It is faster and more reliable than the internet because it does not go through public networks.
Simple explanation: If the internet is a public road with traffic jams, Direct Connect is a private highway that only you can use. It is fast and smooth.
Real‑life example: Large companies use Direct Connect for big data transfers.
School example: A university uses Direct Connect to transfer research data.
Home example: This is like having a dedicated fibre‑optic cable to your home.
Nigerian example: A Nigerian telecom company uses Direct Connect to handle high‑volume traffic.
Illustration:
+----------+ +----------+ +----------+ | YOUR | | DIRECT | | AWS | | DATACENTRE|----| CONNECT |----| CLOUD | +----------+ +----------+ +----------+
Mini summary: Direct Connect is a private, fast connection to AWS.
Definition: An Elastic IP is a static public IP address that you can assign to your AWS resources.
Why it is important: It gives your resource a fixed address on the internet, so it can always be found.
Simple explanation: Think of an Elastic IP as your home address. Even if you redecorate your house (change servers), your address stays the same so people can always find you.
Real‑life example: A company uses an Elastic IP for its website so users always know the address.
School example: A school uses a fixed IP for its website.
Home example: Your home has a fixed street address.
Nigerian example: A Nigerian news website uses an Elastic IP for reliability.
Illustration:
+------------------+ | ELASTIC IP | | Address: 54.2.1.1| | Assigned to: EC2 | +------------------+
Mini summary: An Elastic IP gives your resource a fixed internet address.
Definition: A load balancer distributes incoming traffic across multiple resources (like EC2 instances) to prevent any one from being overwhelmed.
Why it is important: It makes your application more reliable and faster.
Simple explanation: Imagine a school with many teachers. A load balancer is like the principal who assigns each new student to a teacher, so no teacher gets too many students.
Real‑life example: Large websites use load balancers to handle millions of visitors.
School example: A school uses a load balancer to distribute online class registrations.
Home example: When your family shares Wi‑Fi, the router balances the data.
Nigerian example: A Nigerian e‑commerce site uses a load balancer during sales.
Illustration:
+-------------+ +-------------+ | USERS |---->| LOAD |----> EC2-1 | (many) | | BALANCER |----> EC2-2 +-------------+ +-------------+----> EC2-3
Mini summary: A load balancer spreads traffic evenly.
Definition: CloudFront is a content delivery network (CDN) that delivers your content to users worldwide with low latency.
Why it is important: It makes your website or app fast, no matter where the user is.
Simple explanation: CloudFront is like having many ice‑cream trucks in different neighbourhoods. Wherever you are, an ice‑cream truck is nearby, so you get your ice‑cream (data) quickly.
Real‑life example: Netflix uses CloudFront to stream movies.
School example: A school uses CloudFront to host educational videos.
Home example: Your family's photo album loads faster with CloudFront.
Nigerian example: A Nigerian news website uses CloudFront to deliver articles to Lagos, Kano, and Port Harcourt.
Illustration:
CLOUDFRONT EDGE LOCATIONS
/ | \
Lagos Abuja Kano
\ | /
YOUR ORIGIN
Mini summary: CloudFront makes your content fast everywhere.
Definition: Security best practices are the rules you should follow to keep your network safe.
Why it is important: They protect your data from hackers and mistakes.
Simple explanation: It is like locking your doors, not sharing your passwords, and looking both ways before crossing the street.
Real‑life example: Companies use multi‑factor authentication (MFA) for security.
School example: Schools use strong passwords for student accounts.
Home example: You change your Wi‑Fi password regularly.
Nigerian example: Nigerian banks use security best practices to protect customer money.
Illustration:
BEST PRACTICES +------------------+ | 1. Use IAM | | 2. Use Security | | Groups | | 3. Enable MFA | | 4. Monitor logs | | 5. Update | +------------------+
Mini summary: Follow best practices to stay safe.
+-----------------------------------+ | VPC (10.0.0.0/16) | | +-------------+ +-------------+ | | | SUBNET A | | SUBNET B | | | | 10.0.1.0/24 | | 10.0.2.0/24 | | | +------+------+ +------+------+ | | | | | | +--------+--------+ | | | | | +-----v-----+ | | | INTERNET | | | | GATEWAY | | | +-----------+ | +-----------------------------------+
+-----------------------+ | ROUTE TABLE | | Destination | Target | | 10.0.0.0/16 | local | | 0.0.0.0/0 | igw-xxxx| +-----------------------+
+----------+ +-------------+ +--------+
| USERS |---->| LOAD |---->| EC2-1 |
| (internet)| | BALANCER |---->| EC2-2 |
+----------+ +-------------+ | EC2-3 |
+--------+
| Feature | Security Group | NACL |
|---|---|---|
| Scope | Instance level | Subnet level |
| Rules | Allow only | Allow and Deny |
| Stateful | Yes | No |
| Order | All rules applied | Rules evaluated in order |
| Feature | Internet Gateway | VPN |
|---|---|---|
| Connection | Public internet | Private tunnel |
| Security | Depends on configuration | Encrypted |
| Use case | Public access | Private access |
Well done! You have completed Module Six on AWS Networking. Let's review the key points:
You are now ready to understand how the cloud talks to the world. Keep up the great work!
Match the AWS networking component with its function:
| Component | Function |
|---|---|
| VPC | a) Your own private network |
| Subnet | b) Divides the VPC |
| Internet Gateway | c) Connects to internet |
| Route Table | d) Directs traffic |
| Security Group | e) Instance‑level firewall |
Answers: VPC‑a, Subnet‑b, Internet Gateway‑c, Route Table‑d, Security Group‑e
Divide into groups of 4. Design a VPC for a school. Include subnets, an Internet Gateway, route tables, and security groups. Draw your design on paper and present it to the class.
Write a short essay (300 words) on how networking helps Nigerian businesses. Include examples of AWS services that can be used.
Build a simple VPC:
Task: Using the AWS Free Tier, create a VPC with a public and private subnet. Launch an EC2 instance in the public subnet and connect to it via SSH. Document each step with screenshots.
Create a VPC with three subnets: public, private, and database. Set up route tables so that the public subnet can access the internet, and the private subnet can only be accessed from the public subnet. Explain your design.
In the next module, we will learn about AWS Storage. We will dive deeper into S3, EBS (Elastic Block Store), and other storage services. You will learn how to choose the right storage for different needs – just like choosing a shelf for your books, a cupboard for your clothes, or a safe for your valuables. Get ready to become a storage expert!
Before Module Seven, try to create a bucket in S3 and upload a file. Practice makes perfect!
End of Module Six – You are doing amazing! Keep learning and exploring the cloud!
Hello, young cloud explorer! Have you ever thought about where all your photos, videos, games, and schoolwork live when you are not using them? They live in storage – a place to keep your digital things safe, just like a cupboard keeps your toys.
In this module, we will learn about AWS Storage. Amazon Web Services has many storage options to hold different kinds of data. Some storage is for files, some is for databases, and some is for moving data between places. We will explore S3, EBS, EFS, Glacier, and many more.
We will use simple words, fun stories, and lots of examples from home, school, and Nigeria. By the end of this module, you will know how to choose the right storage for your needs – just like picking the right box for your toys!
Let's dive in and discover the amazing world of cloud storage! 🌟
After reading this module, you will be able to:
In a bustling town in Nigeria, there lived a clever girl named Amina. Amina had a huge collection of toys – dolls, cars, puzzles, and even a robot! But her room was always messy because she had no good way to store her toys.
One day, her mother said, "Amina, you need a storage system. You need different places for different toys. Your everyday toys should be easy to reach, your special toys should be kept safe, and your old toys can be put away for a while."
Amina thought hard. She got a big shelf for her everyday toys, a lockable box for her special toys, and a big trunk in the attic for toys she did not play with often.
Now her room was clean and organized. She could always find what she needed quickly.
Guess what? AWS Storage works just like Amina's storage system! There are different storage options for different needs. Some storage is fast and for everyday use, some is for important data, and some is for long‑term archiving. Let's learn how AWS does this!
And that is the magic of AWS Storage! 📦
Definition: Cloud storage is a service that lets you save and access your data (files, photos, videos) over the internet.
Why it is important: You do not need to carry hard drives or USB sticks. Your data is available from any device, anywhere.
Simple explanation: Think of cloud storage as a giant digital cupboard. You put your files in it, and you can open the cupboard from any computer or phone.
Real‑life example: Google Drive and Dropbox are cloud storage services.
School example: Your teacher saves your homework on the school cloud.
Home example: Your family stores photos on iCloud.
Nigerian example: Nigerian schools use cloud storage to share lesson notes.
Illustration (ASCII):
+------------------+
| CLOUD STORAGE |
| (giant cupboard)|
| +------+ +-----+ |
| |Photo | |Video| |
| +------+ +-----+ |
| +------+ +-----+ |
| |Doc | |Game | |
| +------+ +-----+ |
+------------------+
|
INTERNET
|
+-------+-------+
|YOUR DEVICE |
|(phone/tablet)|
+---------------+
Mini summary: Cloud storage saves your files on the internet so you can access them anywhere.
Definition: AWS Storage is a collection of services that let you store and manage data in the cloud.
Why it is important: AWS offers many storage types – for files, for databases, for backups, and more.
Simple explanation: It is like a huge storage warehouse with different sections for different items. Some sections are for everyday use, some are for special items, and some are for long‑term keeping.
Real‑life example: Netflix uses AWS Storage to keep all its movies.
School example: A school uses AWS to store student records.
Home example: Your family uses AWS to back up photos.
Nigerian example: Nigerian banks use AWS storage for customer data.
Illustration:
AWS STORAGE WAREHOUSE +---------------------------+ | S3 | EBS | EFS | | (files)| (disks)| (shared)| | Glacier | Backup| etc. | +---------------------------+
Mini summary: AWS Storage is a set of services for all your data needs.
Definition: S3 is a service that stores files (objects) in the cloud. You can store any type of file – photos, videos, documents.
Why it is important: It is simple, scalable, and you can access your files from anywhere.
Simple explanation: S3 is like a giant locker room. Each locker (called a bucket) holds your files. You can put any file in the bucket and get it out whenever you want.
Real‑life example: Instagram uses S3 to store user photos.
School example: A school stores all lesson plans in S3.
Home example: You can store your family videos in S3.
Nigerian example: A Nigerian online store stores product images in S3.
Illustration:
+------------------+ | S3 BUCKET | | (your locker) | | +------+ +-----+ | | |Photo | |Video| | | |1.jpg | |2.mp4| | | +------+ +-----+ | | +------+ | | |Doc | | | |3.pdf | | | +------+ | +------------------+
Mini summary: S3 stores files in buckets and is easy to use.
Definition: S3 has different storage classes for different needs. Some are for frequent access, some for infrequent access, and some for archiving.
Why it is important: You can save money by choosing the right class. You do not need to pay for fast storage if you rarely access the data.
Simple explanation: Think of storage classes like different shelves. The top shelf is easy to reach (frequent access). The bottom shelf is harder to reach (infrequent access). The attic is very hard to reach (archiving).
Real‑life example: A company uses Standard storage for active files and Glacier for old records.
School example: A school uses Standard for current lessons and Glacier for old exam papers.
Home example: You use Standard for everyday photos and Glacier for old family videos.
Nigerian example: A Nigerian hospital uses Standard for patient files and Glacier for old records.
Illustration:
S3 STORAGE CLASSES +------------------+ | STANDARD | <-- everyday use (fast) | (frequent access)| +------------------+ | STANDARD-IA | <-- not used often (cheaper) | (infrequent) | +------------------+ | GLACIER | <-- long-term archive (cheapest) | (archive) | +------------------+
Mini summary: S3 storage classes help you save money by matching access needs.
Definition: EBS is a storage service that provides block‑level storage for EC2 instances. It is like a virtual hard drive for your cloud computer.
Why it is important: It gives your virtual computer a place to store its operating system, applications, and data.
Simple explanation: Imagine your computer has a hard drive. EBS is exactly that, but for your EC2 virtual computer. You can attach it, use it, and even take it off and move it to another computer.
Real‑life example: A company uses EBS to run their website's database.
School example: A school uses EBS to store student data on EC2.
Home example: You can use EBS to run a game server.
Nigerian example: A Nigerian fintech uses EBS for transaction processing.
Illustration:
+------------------+ | EC2 INSTANCE | | (virtual comp) | | +----------+ | | | EBS DISK | | | | (storage)| | | +----------+ | +------------------+
Mini summary: EBS is a virtual hard drive for EC2.
Definition: EFS is a file storage service that can be shared across multiple EC2 instances.
Why it is important: It lets many virtual computers access the same files at the same time.
Simple explanation: Think of EFS as a shared folder on a school network. All teachers can access the same lesson plans. EFS does the same for your cloud computers.
Real‑life example: A company uses EFS to share files among employees.
School example: A school uses EFS so all teachers can share teaching materials.
Home example: Your family uses a shared drive to store recipes.
Nigerian example: A Nigerian company uses EFS to share project files among teams.
Illustration:
+----------+ +----------+
| EC2-1 | | EC2-2 |
| (teacher)| | (teacher)|
+----+-----+ +----+-----+
| |
+-------+--------+
|
+------v-------+
| EFS (shared |
| folder) |
+--------------+
Mini summary: EFS is a shared file system for EC2 instances.
Definition: Glacier is a very low‑cost storage service for archiving data that you do not need to access often.
Why it is important: It is perfect for backups and old records that you need to keep but rarely use.
Simple explanation: Glacier is like the attic in your house. You put things there that you might need someday, but you do not want them taking up space in your room.
Real‑life example: A bank uses Glacier to store old transaction records.
School example: A school uses Glacier to store student records from 10 years ago.
Home example: You can use Glacier to store old family videos.
Nigerian example: A Nigerian insurance company uses Glacier for policy archives.
Illustration:
+------------------+ | GLACIER ARCHIVE | | (attic) | | +------+ +-----+ | | |Old | |Old | | | |files | |data | | | +------+ +-----+ | +------------------+
Mini summary: Glacier is cheap storage for data you rarely use.
Definition: Storage Gateway is a service that connects your on‑premises storage to AWS cloud storage.
Why it is important: It lets you use AWS storage as an extension of your own data centre.
Simple explanation: It is like building a bridge from your house to the cloud warehouse. You can move data back and forth easily.
Real‑life example: A company uses Storage Gateway to back up their servers to S3.
School example: A school uses it to back up their computer lab to the cloud.
Home example: You could use it to back up your home computer to AWS.
Nigerian example: A Nigerian bank uses Storage Gateway for data backup.
Illustration:
+----------+ +----------+ | YOUR | | AWS | | DATA |-----| STORAGE | | CENTRE | | (S3/Glacier)| +----------+ +----------+
Mini summary: Storage Gateway connects your local storage to AWS.
Definition: AWS Backup is a service that lets you centralise and automate backups for your AWS services.
Why it is important: It ensures your data is safe and can be restored if something goes wrong.
Simple explanation: Backups are like spare copies of your homework. If you lose the original, you still have the copy. AWS Backup makes sure you always have copies.
Real‑life example: A company uses AWS Backup to protect their databases.
School example: A school backs up student grades.
Home example: You back up your photos to the cloud.
Nigerian example: A Nigerian hospital backs up patient records.
Illustration:
+------------------+ | AWS BACKUP | | +------+ +-----+ | | | DB | |EC2 | | | |backup| |backup| | | +------+ +-----+ | +------------------+
Mini summary: AWS Backup protects your data with automated copies.
Definition: Snowball is a physical device that you can use to transfer large amounts of data to AWS.
Why it is important: It is faster than sending data over the internet when you have terabytes or petabytes of data.
Simple explanation: Imagine you have a truck full of books. It is faster to drive the truck to the library than to send each book individually. Snowball is that truck for your data.
Real‑life example: A research institute uses Snowball to transfer satellite data.
School example: A university uses Snowball to send research data.
Home example: Not common at home, but you can imagine moving your entire movie collection to the cloud.
Nigerian example: A Nigerian media company uses Snowball to transfer video archives.
Illustration:
+----------+ +----------+ | YOUR | | AWS | | DATA |-----| SNOWBALL | | CENTRE | | (truck) | +----------+ +----------+
Mini summary: Snowball is a physical device for large data transfers.
Definition: Lifecycle policies automatically move data between different storage classes based on age or usage.
Why it is important: They save you money by moving old data to cheaper storage without you having to do it manually.
Simple explanation: It is like having a helper who puts your toys away. Toys you play with daily stay on the shelf. Toys you rarely play with are moved to the box. Lifecycle policies do this automatically for your data.
Real‑life example: A company automatically moves logs older than 30 days to Glacier.
School example: A school moves old exam papers to Glacier after one year.
Home example: You could automatically archive photos older than a year.
Nigerian example: A Nigerian company moves old financial records to Glacier.
Illustration:
LIFECYCLE POLICY +----------+ +----------+ +----------+ | STANDARD |---->| STANDARD-|---->| GLACIER | | (now) | | IA | | (archive)| +----------+ +----------+ +----------+
Mini summary: Lifecycle policies automate data movement to save costs.
Definition: Versioning lets you keep multiple versions of a file in S3. If you overwrite a file, the old version is not lost.
Why it is important: It protects you from accidental deletion or overwriting.
Simple explanation: Imagine you are drawing a picture. Every time you make a change, you save a new version. If you do not like the new version, you can go back to the old one. Versioning does this for your files.
Real‑life example: A company uses versioning to keep all versions of a document.
School example: A school keeps all versions of lesson plans.
Home example: You keep different versions of your school project.
Nigerian example: A Nigerian bank uses versioning for transaction logs.
Illustration:
FILE VERSIONS +----------+ | file v1 | | file v2 | | file v3 | | ... | +----------+
Mini summary: Versioning keeps old copies of files.
Definition: Encryption scrambles your data so that only authorised people can read it.
Why it is important: It protects your data from hackers and unauthorised access.
Simple explanation: It is like writing a secret code. Only people with the key can understand the message. AWS encrypts your data so it is safe.
Real‑life example: Banks use encryption to protect your money.
School example: Schools encrypt student records.
Home example: You use a password to protect your tablet.
Nigerian example: Nigerian companies encrypt customer data.
Illustration:
ENCRYPTION +----------+ +----------+ | "hello" |---->| "h3ll0" | | (plain) | | (scrambled)| +----------+ +----------+
Mini summary: Encryption keeps your data secure.
Definition: AWS offers many storage options. You need to choose the right one for your needs.
Why it is important: Choosing the right storage saves money and improves performance.
Simple explanation: It is like choosing a box for your toys. Small toys go in a small box, large toys in a large box. You pick what fits best.
Real‑life example: A company uses S3 for images, EBS for databases, and Glacier for archives.
School example: A school uses S3 for videos, EBS for student records, and Glacier for old files.
Home example: You use S3 for photos, EBS for game saves, and Glacier for old videos.
Nigerian example: A Nigerian business uses S3 for product images, EBS for customer data, and Glacier for logs.
Illustration:
CHOOSING STORAGE +--------+ +--------+ +--------+ | S3 | | EBS | | GLACIER| | files | | disks | | archive| +--------+ +--------+ +--------+
Mini summary: Pick the right AWS storage for your specific needs.
Definition: Best practices are the rules you should follow to use storage effectively and safely.
Why it is important: They help you save money, protect your data, and avoid mistakes.
Simple explanation: It is like brushing your teeth every day – it keeps you healthy. Storage best practices keep your data healthy.
Real‑life example: A company uses lifecycle policies and versioning.
School example: A school backs up data regularly.
Home example: You keep multiple copies of important files.
Nigerian example: A Nigerian business uses encryption and backups.
Illustration:
BEST PRACTICES +------------------+ | 1. Use encryption| | 2. Enable backups| | 3. Use lifecycle | | policies | | 4. Enable | | versioning | | 5. Monitor usage | +------------------+
Mini summary: Best practices keep your storage secure and cost‑effective.
+------------------+ | BUCKET | | +------+ +-----+ | | |v1.jpg| |v2.jpg| | | +------+ +-----+ | | +------+ | | |v3.jpg| | | +------+ | +------------------+
+----------+ +----------+ +----------+ | STANDARD |---->| STANDARD-|---->| GLACIER | | (0-30d) | | IA(30-90d)| | (90d+) | +----------+ +----------+ +----------+
+----------+ +----------+ | EC2 | | EBS DISK | | (virtual |-----| (storage)| | computer)| | | +----------+ +----------+
| Feature | S3 | EBS | EFS |
|---|---|---|---|
| Type | Object storage | Block storage | File storage |
| Shared | Yes | No (single EC2) | Yes (multiple) |
| Use case | Files, websites | Databases, OS | Shared files |
| Performance | Good | Very fast | Fast |
| Class | Access | Cost | Use Case |
|---|---|---|---|
| Standard | Frequent | Higher | Active data |
| Standard-IA | Infrequent | Lower | Backups |
| Glacier | Very rare | Lowest | Archives |
Congratulations! You have completed Module Seven on AWS Storage. Let's review what we learned:
You now know how to choose the right storage for any need. Well done!
Match the AWS storage service with its use:
| Service | Use |
|---|---|
| S3 | a) Virtual hard drive |
| EBS | b) File storage |
| EFS | c) Shared file system |
| Glacier | d) Archiving |
Answers: S3‑b, EBS‑a, EFS‑c, Glacier‑d
Divide into groups of 4. Each group designs a storage plan for a Nigerian school. Include S3 for videos, EBS for student records, and Glacier for old files. Present your plan to the class.
Write a short essay (300 words) on how AWS storage can help Nigerian businesses. Include examples of S3, EBS, and Glacier.
Build a photo album using S3:
Task: Using the AWS Free Tier, create an S3 bucket. Enable versioning and encryption. Upload a file and then overwrite it. Check the versions. Document your steps.
Create a storage solution for a Nigerian online store. Use S3 for product images, EBS for the database, and Glacier for old orders. Explain why you chose each service.
In the next module, we will learn about AWS Databases. We will explore different database services like RDS, DynamoDB, and Aurora. You will learn how to store and query data like a pro. Think of databases as digital filing cabinets – they keep information organised and easy to find. Get ready to become a database expert!
Before Module Eight, try to create a simple database using the AWS Free Tier. Practice makes perfect!
End of Module Seven – You are amazing! Keep learning and storing your data in the cloud!
Hello future cloud expert! In this module, we will learn how Amazon Web Services (AWS) keeps our files, photos, and apps safe. Just like a treasure chest with a lock, AWS has many tools to protect your information from bad guys. We'll learn about security, passwords, backups, and how to make sure only the right people can see your stuff. Ready? Let's go!
Once upon a time, in a land called Cloudia, there was a magical castle that stored everyone’s favourite toys, drawings, and secret messages. The king, King Amazon, wanted to keep everything safe. He built three great walls:
🔐 First wall: a huge gate with a guard (username & password) 🛡️ Second wall: a secret handshake (MFA) 🗝️ Third wall: a magic spell that scrambles everything (encryption)
One day, a tricky dragon tried to steal the treasures. But because of the walls, the dragon couldn’t even get near the castle! King Amazon smiled and said, “Security is the shield of the cloud.” And that’s exactly what AWS does – it builds strong shields around your data.
Definition: Cloud security is a set of rules and tools that protect your data in the cloud.
Why important? Without security, anyone could see your private messages or delete your files.
Simple explanation: It’s like having a lock on your diary. Only you and people you trust can open it.
Real-life example: Banks use cloud security to keep your money safe.
School example: Your school’s grade system needs security so only teachers can change grades.
Home example: You have a password on your tablet – that’s security.
Nigerian example: Many Nigerian banks use AWS security to protect customer accounts.
Security = Locks + Keys + Guards
|
V
Safe Data ✅
✅ Summary: Cloud security protects your files from strangers.
Definition: IAM (Identity and Access Management) is a tool in AWS that decides who can access your cloud resources.
Why important? You don’t want everyone to have the same power. Only admins should delete things.
Simple explanation: In a game, some players are “viewers” and some are “editors”. IAM sets those roles.
Real-life: In a company, the manager can approve holidays, but workers can only request.
School: The principal can open all doors, but a student can only open their locker.
Home: Parents can change the Wi‑Fi password, kids can only use it.
Nigerian: A bank in Lagos uses IAM so only cashiers can handle money, not cleaners.
IAM roles: ┌─────────────┐ │ Admin │ → can do everything │ Editor │ → can change files │ Viewer │ → can only look └─────────────┘
✅ Summary: IAM gives different permissions to different people.
Definition: Encryption is a way to scramble data so that only people with a key can read it.
Why important? Even if a thief steals your data, they can’t understand it.
Simple: It’s like writing a letter in a secret language that only your friend knows.
Real-life: When you buy something online, your credit card info is encrypted.
School: You and your best friend have a secret code for notes.
Home: A password manager encrypts all your passwords.
Nigerian: Nigerian fintech apps encrypt user data before sending it to the cloud.
“HELLO” → [Encryption] → “#&*F@3” → [Decryption] → “HELLO”
✅ Summary: Encryption turns your data into a secret code.
Definition: MFA (Multi-Factor Authentication) means you need two or more proofs to log in.
Why important? If someone guesses your password, they still can’t get in without the second factor.
Simple: Like a treasure that needs two keys to open.
Real-life: Your bank sends a code to your phone after you type your password.
School: Enter your school ID and then scan your fingerprint.
Home: Unlock your phone with face AND a PIN.
Nigerian: Many Nigerian email services use MFA with SMS codes.
Step 1: Password → Step 2: Code from phone → Access granted ✅
✅ Summary: MFA adds an extra lock to your account.
Definition: A backup is a copy of your data stored somewhere safe.
Why important? If your original data gets lost or broken, you can use the backup.
Simple: Like keeping an extra copy of your homework in your bag.
Real-life: People back up photos to the cloud so they don’t lose them.
School: Save your essay on a USB stick and also on the school cloud.
Home: Your parents back up family videos to an external drive.
Nigerian: A Nigerian startup backs up customer orders every hour.
Original file → Copy stored in another place → Safe!
✅ Summary: Backups protect you from losing data.
Definition: Security groups are like virtual firewalls that control traffic to your cloud resources.
Why important? They block unwanted visitors from reaching your servers.
Simple: Think of a fence around your house – only people you invite can enter.
Real-life: A school gate with a guard checks who enters.
Home: Your Wi‑Fi password only lets family connect.
Nigerian: A hospital in Abuja uses security groups to protect patient records.
Internet → [Security Group] → Allowed traffic passes
|
V
Blocked traffic 🛑
✅ Summary: Security groups act as a fence for your cloud.
Definition: AWS is responsible for security of the cloud, and you are responsible for security in the cloud.
Why important? Both AWS and you must work together to stay safe.
Simple: Your school provides a safe building, but you lock your own locker.
Real-life: The post office delivers your package safely, but you must keep it safe at home.
School: The school maintains the building; you keep your books safe.
Home: Your parents buy a safe box; you choose the code.
Nigerian: A Lagos company uses AWS infrastructure but must set their own passwords.
AWS secures: hardware, network, buildings You secure: passwords, access, encryption
✅ Summary: AWS and you share the security job.
Definition: SSL/TLS creates a secure, encrypted connection between your browser and the website.
Why important? It stops eavesdroppers from reading your data while it travels.
Simple: Like a secret tunnel between you and the website.
Real-life: When you see 🔒 in the address bar, SSL is working.
School: Sending a private message through the school’s secure portal.
Home: Your family uses a VPN for extra privacy.
Nigerian: Nigerian e‑commerce sites use SSL to protect your payment info.
Your browser ↔ 🔒 SSL tunnel ↔ Website
✅ Summary: SSL keeps your data private while travelling.
Definition: Monitoring is watching your cloud activity, and alerts tell you if something strange happens.
Why important? So you can catch problems early.
Simple: Like a smoke alarm – it beeps if there’s a fire.
Real-life: Security cameras in a mall.
School: A fire drill alarm.
Home: Your parents get a notification if someone tries to open the front door.
Nigerian: A Nigerian bank uses AWS CloudWatch to watch for unusual activity.
CloudWatch → sees spike in traffic → sends alert to admin
✅ Summary: Monitoring helps you spot problems quickly.
Definition: Compliance means following laws and rules about data protection.
Why important? So you don’t get in trouble and people trust you.
Simple: Like following traffic rules to stay safe.
Real-life: Hospitals must keep patient data private.
School: The school follows rules about student privacy.
Home: Your family has rules about sharing photos online.
Nigerian: NDPR (Nigeria Data Protection Regulation) requires companies to protect data.
Rules → Follow them → Trustworthy cloud
✅ Summary: Compliance means obeying security laws.
Definition: AWS Shield protects against DDoS attacks – when bad guys flood your site with traffic to break it.
Why important? Keeps your website available even during an attack.
Simple: Like a shield in a video game that blocks arrows.
Real-life: A store that has extra doors to handle a crowd.
School: The school has extra teachers during a big event.
Home: You have a big umbrella to block rain.
Nigerian: Nigerian news websites use AWS Shield to stay online during big events.
Attackers → AWS Shield → Website stays up!
✅ Summary: AWS Shield defends against traffic floods.
Definition: Best practices are the smartest ways to keep your cloud safe.
Why important? Following best practices reduces the chance of a security breach.
Simple: Like brushing your teeth twice a day to keep them healthy.
Nigerian: A fintech startup in Lagos follows these practices to earn customer trust.
Strong password + MFA + Encryption = Super safe!
✅ Summary: Best practices are habits that keep your cloud secure.
| Word | Simple Definition |
|---|---|
| Encryption | Scrambling data so only key holders can read it. |
| IAM | Tool to give different permissions to users. |
| MFA | Using two or more ways to prove who you are. |
| Backup | A copy of your data stored elsewhere. |
| Security Group | A virtual fence that controls traffic. |
| SSL/TLS | Secure connection between browser and website. |
| DDoS | An attack that floods a site with traffic. |
| Compliance | Following data protection rules. |
Did you know that AWS has a service called “AWS Key Management Service” (KMS) that helps you create and manage encryption keys – like a master key for all your secrets!
[Internet] → [Firewall] → [Security Group] → [Encryption] → [Data]
| | | |
V V V V
Blocked Allowed Only HTTPS Scrambled
User → Enter username & password → Request code from app → Enter code → Access ✅
Primary Data → [Automatic Backup] → Secondary location
|
V
If primary lost → restore from backup
| Service | What it does | Example |
|---|---|---|
| IAM | Manages permissions | Who can delete a file |
| KMS | Manages encryption keys | Scrambling data |
| Security Groups | Virtual firewall | Blocking unwanted traffic |
| AWS Shield | DDoS protection | Stops traffic floods |
In this module, we explored the world of AWS security. We learned about IAM, encryption, MFA, backups, security groups, and many tools that keep data safe. Remember: AWS and you share responsibility for security. Always use strong passwords, turn on MFA, encrypt data, and back up regularly. Security is like a shield – it protects everything you build in the cloud.
| Term | Definition |
|---|---|
| IAM | Manages permissions |
| Encryption | Scrambles data |
| MFA | Two-factor authentication |
| Backup | Copy of data |
| Security Group | Virtual firewall |
In groups of 3, design a “security plan” for a school’s cloud storage. Include IAM roles, MFA, backups, and encryption. Present your plan to the class.
Write a one‑page essay on “Why security is like wearing a helmet” – describe how AWS tools are like protective gear.
Create a simple “security checklist” for your AWS account. Include IAM, MFA, encryption, backups, and monitoring. Share with a partner.
Log in to AWS Free Tier. Enable MFA for your root user. Create an IAM user with “view only” permissions. Write a report of your steps.
Research and write a one‑page summary about a recent data breach. Explain what security tool could have prevented it.
Answers to multiple choice and fill‑in‑the‑blank are already provided above.
In the next module, we will explore AWS Database Services – like DynamoDB and RDS. We’ll learn how to store and find data quickly. Get ready to become a database master!
🎉 Congratulations! You completed Module 8: AWS Security. Keep your cloud safe and shine bright! 🎉
Hello data explorer! In this module, we will learn about databases – special places where computers store information. Think of a database like a giant digital filing cabinet. Amazon Web Services (AWS) has many database tools to store everything from your game scores to millions of customer orders. We'll learn how to organise data so we can find it quickly. Let's dive in!
In the magical land of Cloudia, there was a huge library with millions of books. The librarian, Madam Dynamo, had a system: some books were arranged on shelves by category (like relational), and others were tossed into big baskets labelled with tags (like NoSQL).
📚 Shelf database (relational) – books neatly in rows, each with a number. 🧺 Basket database (NoSQL) – books grouped by tags: “adventure”, “science”, etc.
When a villager wanted a book, they could either look up the shelf number or search the basket by tag. Both worked perfectly! AWS gives us both kinds of databases, so we can choose the best one for our job.
Definition: A database is an organised collection of data. It stores information so you can find, add, or change it easily.
Why important? Without databases, we’d have to dig through piles of paper to find anything.
Simple explanation: Like a phonebook that stores names and numbers.
Real-life: Your school’s student records are in a database.
School: The library catalogue is a database of books.
Home: Your mum’s recipe notebook is a simple database.
Nigerian: JAMB uses a database to store all exam results.
Database = organised data [ID | Name | Age | Class] [01 | Amina | 10 | 5A ] [02 | Chidi | 11 | 5B ]
✅ Summary: A database is a neat way to store and find information.
Definition: A relational database stores data in tables with rows and columns. Each row is a record, and each column is a field.
Why important? It’s easy to connect data from different tables using common keys.
Simple: Like a class register with names, scores, and attendance.
Real-life: Bank accounts – one table for customers, one for transactions.
School: A grade book with student names and marks.
Home: A list of family members with birthdays.
Nigerian: A hospital stores patient records in relational tables.
Table: Students +-------+--------+-------+ | ID | Name | Grade | +-------+--------+-------+ | 1 | Ada | A | | 2 | Bola | B | +-------+--------+-------+
✅ Summary: Relational databases use tables, like a spreadsheet.
Definition: NoSQL databases don’t use tables. They store data as key-value pairs, documents, or graphs.
Why important? They are super fast and flexible for large amounts of varied data.
Simple: Like a bag of toys – each toy has a label (key) and the toy itself (value).
Real-life: Social media posts – each post has a user ID and content.
School: A homework submission box – each student’s work is stored with their name.
Home: A box of cables – each cable has a tag saying what it’s for.
Nigerian: A ride‑hailing app stores driver locations in a NoSQL database.
Key-Value:
"user_123" → {name: "Kemi", location: "Lagos"}
"user_456" → {name: "Tunde", location: "Abuja"}
✅ Summary: NoSQL databases are flexible and fast.
Definition: RDS is a managed service that sets up relational databases (like MySQL, PostgreSQL) for you.
Why important? You don’t have to install or maintain the database – AWS does it.
Simple: Like a robot that organises your bookshelf for you.
Real-life: An online store uses RDS to manage product inventory.
School: The school uses RDS to store exam results.
Home: A family budget app uses RDS to track expenses.
Nigerian: A Lagos e‑commerce site uses RDS for customer orders.
You: create database → AWS: manages backups, updates, scaling
✅ Summary: RDS makes it easy to use relational databases in the cloud.
Definition: DynamoDB is a fully managed NoSQL database that delivers super‑fast performance.
Why important? It can handle millions of requests per second with almost no delay.
Simple: Like a vending machine that gives you a snack instantly.
Real-life: Gaming leaderboards update players’ scores in real time.
School: A cafeteria queue system that tracks who is in line.
Home: A smart fridge that tracks what’s inside.
Nigerian: A Nigerian fintech app uses DynamoDB to process payments quickly.
DynamoDB table:
"Player_001" → {score: 1500, level: 5}
"Player_002" → {score: 2200, level: 7}
✅ Summary: DynamoDB is a fast, flexible NoSQL database.
Definition: A primary key is a special value that uniquely identifies each record in a database.
Why important? It ensures you can find a specific row without confusion.
Simple: Like your student ID number – no two students have the same one.
Real-life: Your passport number is a primary key.
School: Each student has a unique admission number.
Home: Each family member has a unique phone number.
Nigerian: NIN (National Identification Number) is a primary key for citizens.
Table: Students Primary Key: Student_ID +------------+--------+ | Student_ID | Name | +------------+--------+ | 101 | Zainab | | 102 | Emeka | +------------+--------+
✅ Summary: A primary key uniquely identifies each record.
Definition: An index is like the index at the back of a book – it helps you find data quickly without reading everything.
Why important? Speeds up search queries.
Simple: Like a map that shows you where to find treasure.
Real-life: A library catalogue helps you find a book.
School: An alphabetical list of students.
Home: A sticky note on a box of photos saying “2023 birthday”.
Nigerian: An online store uses indexes to find products by name fast.
Without index: search every row → slow With index: jump straight to the data → fast!
✅ Summary: Indexes make database searches super fast.
Definition: A backup is a copy of your database stored somewhere safe, in case the original gets lost.
Why important? If something bad happens, you can restore your data.
Simple: Like taking a photo of your homework in case you lose the paper.
Real-life: Banks back up transaction records daily.
School: The school backs up student records every week.
Home: You save your game progress to the cloud.
Nigerian: A Nigerian insurance company backs up customer policies nightly.
Database → Backup → stored in S3 (another location) If disaster → restore from backup
✅ Summary: Backups keep your database safe from disasters.
Definition: Scaling means making your database bigger (or smaller) to handle more (or fewer) users.
Why important? So your app works well whether 10 or 10,000 people use it.
Simple: Like adding more chairs to a classroom when new students arrive.
Real-life: An online store scales up during Black Friday.
School: The school hires more teachers when enrolment grows.
Home: You buy a bigger shelf when you get more books.
Nigerian: A Nigerian streaming service scales up during football matches.
Scale up (vertical) → bigger, more powerful server Scale out (horizontal) → add more servers
✅ Summary: Scaling helps your database handle more users.
Definition: Migration means moving your database from one place to another (e.g., from your own server to AWS).
Why important? You might want to move to the cloud for better performance.
Simple: Like moving your toys from a small box to a big toy chest.
Real-life: A company moves its old database to AWS to save money.
School: The school moves paper records to a digital system.
Home: You move photos from your phone to a computer.
Nigerian: A Nigerian bank migrates its customer data to AWS for better security.
On‑premise database → AWS DMS → AWS database
✅ Summary: Migration moves your database to the cloud.
Definition: Multi‑AZ means your database is replicated in two different locations (Availability Zones) so if one fails, the other takes over.
Why important? It keeps your data available even during disasters.
Simple: Like having a spare key hidden at a neighbour’s house.
Real-life: Airlines keep backup flight schedules in another city.
School: The school stores report cards both in the office and online.
Home: You keep a copy of your favourite toy at your grandma’s house.
Nigerian: A Nigerian telecom uses Multi‑AZ to keep services running.
AZ1 (Lagos) ↔ AZ2 (Abuja) → always synchronised
✅ Summary: Multi‑AZ keeps your database safe from single failures.
Definition: Choosing the right database means picking the best one for your needs – relational or NoSQL.
Why important? The wrong choice can make your app slow or expensive.
Simple: Like choosing a backpack – small for short trips, large for camping.
Real-life: A bank uses relational; a social media app uses NoSQL.
School: The library uses a relational database for books.
Home: You use a notebook for chores (relational) and a jar for loose coins (NoSQL).
Nigerian: A Nigerian logistics company uses a relational database for deliveries and a NoSQL database for tracking devices.
Relational = structured, strict schema NoSQL = flexible, schema‑less
✅ Summary: Choose a database based on your data and needs.
Definition: Database security means protecting data from unauthorised access using encryption, access controls, and backups.
Why important? So only the right people can see or change the data.
Simple: Like putting a lock on your diary.
Real-life: Hospitals restrict who can see patient records.
School: Teachers can view grades, but students can’t.
Home: You have a password on your tablet.
Nigerian: Nigerian banks use encryption to protect customer data in their databases.
Database → Encryption + IAM + Security Groups
✅ Summary: Security keeps your database safe from intruders.
| Word | Simple Definition |
|---|---|
| Database | An organised collection of data. |
| Relational database | Data stored in tables with rows and columns. |
| NoSQL database | Flexible database that stores data as key‑value or documents. |
| Primary Key | Unique identifier for each record. |
| Index | Speeds up data searching. |
| Backup | A copy of data for recovery. |
| Scaling | Making the database bigger or smaller. |
| Multi‑AZ | Database in two different locations for reliability. |
Did you know that Amazon uses DynamoDB to power its own shopping cart? Every time you add an item to your cart, DynamoDB stores it instantly!
Relational (table):
+------+---------+-------+
| ID | Name | Score |
+------+---------+-------+
| 1 | Chioma | 95 |
| 2 | Olu | 88 |
+------+---------+-------+
NoSQL (key‑value):
"Chioma" → {score: 95, class: "5A"}
"Olu" → {score: 88, class: "5B"}
Primary DB → Snapshot → S3 bucket
|
V
Restore from snapshot if needed
Users increase → more servers (shards) added → handle more load
| Feature | Amazon RDS | Amazon DynamoDB |
|---|---|---|
| Type | Relational (SQL) | NoSQL |
| Schema | Fixed (predefined) | Flexible |
| Scaling | Vertical (manual) | Automatic (horizontal) |
| Best for | Transactions, complex queries | High‑traffic, simple lookups |
| Backup | Automated | Point‑in‑time recovery |
In this module, we learned that databases are organised collections of data. We explored relational databases (like tables in a spreadsheet) and NoSQL databases (like a bag of items). We met Amazon RDS for relational data and DynamoDB for fast, flexible data. We covered primary keys, indexes, backups, scaling, and security. Remember: choosing the right database is key to building a great app!
| Term | Definition |
|---|---|
| RDS | Managed relational database |
| DynamoDB | Managed NoSQL database |
| Primary Key | Unique identifier |
| Index | Speeds up searching |
| Multi‑AZ | Two‑location redundancy |
In groups, design a database schema for a school library. Include tables for books, students, and loans. Identify primary keys and relationships.
Write a step‑by‑step guide on how to create a DynamoDB table.
Design a simple database for a pet adoption centre. Include tables for animals, adopters, and staff. Draw a diagram showing how they connect.
Log in to AWS Free Tier. Create a DynamoDB table called "Books" with primary key "BookID". Add a few sample items. Take a screenshot.
Research and compare Amazon RDS and Amazon Aurora. Write a one‑page summary of their differences.
All answers are provided in the Multiple Choice section above.
In the next module, we will learn about AWS Compute Services – like EC2 (virtual computers) and Lambda (running code without servers). Get ready to launch your own apps in the cloud!
🎉 Well done! You completed Module 9: AWS Databases. Keep organising your data like a pro! 🎉