Lộ Trình 10 Tuần Thực Chiến
Week 1: Build Your First Production-Ready VPC on AWS
Foundation 3 Projects"Tạm biệt Datacenter! Chào mừng đến với Cloud."
📚 3 Sessions | 🎯 3 Mini Projects
- CuliShop Introduction: Clone project, run local với Docker Compose, hiểu architecture.
- AWS Global Infrastructure: Regions, Availability Zones, Edge Locations - chọn đúng region.
- VPC 3-Tier Architecture: Public, Private App, Private Data subnets chuẩn Production.
- NAT Gateway & Elastic IP: Cost trap awareness! Tối ưu chi phí từ ngày đầu.
- IAM Security: Users, Roles, MFA, Billing Alerts - bảo mật tài khoản.
🔧 Hands-on Labs: Setup AWS Account + MFA, Build VPC 3-tier with Terraform, Configure NAT Gateway & Route Tables, Test connectivity
VPC
IAM
Terraform
Week 2: Containers + Complete Storage Coverage
Core 4 Projects"Từ Server vật lý đến Container - và làm chủ Storage trên AWS!"
📚 4 Sessions | 🎯 4 Mini Projects
- EC2 Fundamentals: Instance types, pricing (On-Demand vs Reserved vs Spot), SSH access.
- EBS Storage (Block): Volume types, snapshots, expand root volume without downtime (CRITICAL).
- Docker Optimization: Multi-stage builds, giảm image từ 800MB → <100MB.< /li>
- AWS ECR: Private registry, image scanning for vulnerabilities, fix CVEs.
- ECS Fargate: Serverless containers, Task Definitions, Service Discovery cho microservices.
- S3 Object Storage: Buckets, permissions, versioning, lifecycle policies, static hosting, storage classes (Standard, IA, Glacier).
- EFS File Storage: NFS shared storage for containers, mount targets, multi-AZ, encryption, performance modes.
- Storage Comparison: EBS vs S3 vs EFS - when to use which, cost comparison, performance trade-offs.
🔧 Hands-on Labs: Launch EC2 with EBS volumes, Optimize CuliShop Dockerfile (CRITICAL), Push to ECR & scan vulnerabilities, Deploy on ECS Fargate with Service Discovery, Create S3 bucket for static assets with versioning & lifecycle, Mount EFS to multiple ECS tasks for shared uploads
EC2
EBS
ECS
ECR
S3
EFS
Docker
Week 3: Auto-Scale to Handle 10,000 Concurrent Users
Data 3 Projects"10,000 đơn hàng cùng lúc? Database sập? Không hề."
📚 3 Sessions | 🎯 3 Mini Projects
- Application Load Balancer: ALB vs NLB, Health Checks, Sticky Sessions, SSL/TLS với ACM.
- RDS PostgreSQL: Multi-AZ for HA, Read Replicas for scaling, backup strategies.
- ElastiCache Redis: Caching layers, cluster modes, giảm load cho database 80%.
- SQS & SNS: Async processing với queues, pub/sub notifications, decouple services.
- Auto Scaling: ECS Service Auto Scaling, target tracking policies.
🔧 Hands-on Labs: Deploy ALB for CuliShop + HTTPS, Create RDS PostgreSQL with Multi-AZ, Implement Redis caching, Build SQS queue for orders + SNS notifications
ALB
Aurora MySQL
ElastiCache
Week 4: Manage Infrastructure with Terraform - No More Console Clicks
Automation 3 Projects"Click chuột tạo Resource? Nghiệp dư. Chúng ta dùng Code."
📚 3 Sessions | 🎯 3 Mini Projects
- Terraform Basics: IaC benefits, workflow (init/plan/apply/destroy), declarative vs imperative.
- State Management: Remote state với S3 + DynamoDB locking, team collaboration.
- Terraform Modules: Reusable components (VPC, ECS, RDS), module versioning, DRY principle.
- Multi-Environment: Workspaces vs separate states, environment-specific variables (dev/staging/prod).
- Convert to IaC: Chuyển toàn bộ CuliShop infrastructure thành Terraform code.
🔧 Hands-on Labs: Convert manual VPC to Terraform, Setup remote state in S3, Create reusable modules (VPC + ECS), Deploy 3 environments (dev/staging/prod)
SQS
SNS
Terraform
Week 5: Master CI/CD - Deploy Code 10x Faster
DevOps 3 Projects"Deploy lúc 2 giờ sáng? Never again."
📚 3 Sessions | 🎯 3 Mini Projects
- CI/CD Fundamentals: Continuous Integration vs Delivery vs Deployment principles.
- GitHub Actions: Workflows, jobs, steps, actions marketplace, OIDC authentication (no access keys!).
- Blue/Green Deployment: Zero-downtime deploys với ECS, instant rollback strategies.
- Canary Deployments: Progressive rollouts, test với 10% traffic trước khi full deploy.
- Production Pipeline: Dev → Staging → Prod với approval gates, secrets management.
🔧 Hands-on Labs: Build CI pipeline with GitHub Actions, Implement Blue/Green deployment for CuliShop, Create multi-environment pipeline (dev → staging → prod with approvals)
GitHub Actions
CodeBuild
Terraform
Week 6: Zero-Downtime Deployments & 24/7 Monitoring
Ops 3 Projects"Khách hàng báo lỗi trước team DevOps? Thất bại."
📚 3 Sessions | 🎯 3 Mini Projects
- CloudWatch Metrics: Custom metrics, dimensions, alarms cho CPU, memory, latency.
- Container Insights: Monitor ECS tasks performance, troubleshoot container issues.
- Log Insights Advanced: Query logs với custom queries, pattern detection, troubleshoot production errors.
- CloudWatch Dashboards: Real-time monitoring dashboards, widgets, anomaly detection.
- Auto-Healing: Lambda functions tự động restart failed services, scale resources.
- Alerting: SNS notifications to Slack/email, on-call runbooks.
🔧 Hands-on Labs: Create CloudWatch dashboards for CuliShop, Write Log Insights queries, Build auto-healing Lambda, Setup Slack alerting, Create incident response runbook
CloudWatch
Lambda
SNS
Grafana
Week 7: Security Hardening & Cost Optimization Basics
Advanced 3 Projects"Hacker tấn công? Bill AWS tăng vọt? Not on my watch."
📚 3 Sessions | 🎯 3 Mini Projects
- AWS WAF: Rules & rule groups chặn SQL Injection, XSS, DDoS attacks.
- Network Security: Security Groups best practices, VPN setup, Bastion vs SSM Session Manager.
- Access Control: IAM policies with least privilege, MFA enforcement, assume roles.
- Cost Fundamentals: AWS Cost Explorer, budgets, alerts tránh surprise bills.
- Right-sizing: Identify over-provisioned resources, downsize EC2/RDS.
🔧 Hands-on Labs: Configure WAF rules for CuliShop, Setup SSM Session Manager (no Bastion needed!), Review CloudTrail audit logs, Create cost budget & alerts
WAF
Secrets Manager
ACM
CloudTrail
EventBridge
SSM
Week 8: Enterprise-Grade Security & Access Control
Advanced 4 Projects"Bảo mật & Compliance - Như một DevOps Enterprise thực thụ."
📚 4 Sessions | 🎯 4 Mini Projects
- AWS WAF & Shield: Chặn DDoS, SQL Injection, XSS attacks cho CuliShop.
- Secrets Manager: Rotate credentials tự động, không hard-code passwords.
- GuardDuty & CloudTrail: Phát hiện threats, audit mọi hành động.
- SSM Session Manager + Run Command: Truy cập an toàn (Session Manager) và tự động hóa (Run Command) cho EC2 instances.
- VPN/Bastion: Secure connectivity options (comparison với SSM).
- AWS Config: Compliance checks, policy enforcement tự động.
🔧 Hands-on Labs: Configure WAF rules, Setup SSM Session Manager + Run Command for automated patching, Schedule Run Command with EventBridge, Enable GuardDuty, Create Config compliance rules
SSM
GuardDuty
pritunl VPN
Week 9: Cut AWS Costs by 30% While Scaling
Advanced 2 Projects"Bill AWS tháng này: $5,000! Sếp gọi... Giảm xuống $3,500 thôi!"
📚 2 Sessions | 🎯 2 Mini Projects
- Cost Explorer & Budgets: Phân tích chi tiết, set alerts tránh vượt budget.
- Reserved Instances & Savings Plans: Tiết kiệm 30-70% cho workload ổn định.
- Spot Instances: Giảm 90% chi phí cho batch jobs, workers.
- Right-sizing: Compute Optimizer phát hiện EC2/RDS over-provisioned.
- S3 Lifecycle & Storage Classes: Automate archiving, reduce storage costs 90% (Standard → IA → Glacier).
- Multi-AZ & Multi-Region: HA/DR với Route 53 failover, RTO/RPO planning.
🔧 Hands-on Labs: Cost audit for CuliShop, Implement Spot instances for workers, Setup S3 lifecycle policies, Configure Route 53 failover for HA
Cost Explorer
VPC Endpoints
Route 53
FIS
Week 10: Performance Tune for Black Friday Traffic
Final Week Capstone"Black Friday sắp đến - CuliShop sẵn sàng chịu 10x traffic!"
📚 1 Session + Final Project | 🎯 Capstone Exam
- CloudFront CDN: Tăng tốc static assets, giảm latency toàn cầu.
- Load Testing: k6/Locust test 10,000+ concurrent users.
- Performance Tuning: Database indexing, caching strategies, query optimization.
- Capacity Planning: Auto-scaling policies cho traffic spikes.
- Final Project: Deploy toàn bộ CuliShop production-ready infrastructure.
- Portfolio Review: GitHub repo + Architecture diagram + Documentation.
🎯 Final Deliverables: Complete CuliShop infrastructure (VPC → CDN), Load test report (10x traffic), Portfolio presentation
CloudFront
S3
k6
Kết Quả Khoá 1
Tỷ lệ hoàn thành khoá học
Học viên hoàn thành dự án
Năm kinh nghiệm giảng viên
Sẵn sàng cho Production
"Sau 2 buổi học thì em thấy các slide bài giảng và lab bám rất sát với nhu cầu thực tế, có ích khi học xong và apply vào công ty của mình. Giảng viên luôn vui vẻ tạo không khí thoải mái cho học viên dễ tiếp thu."
"Khóa học có lộ trình rõ ràng, chi tiết, có labs thực hành. Toàn kiến thức thực tế vận dụng trực tiếp được nên em thấy rất OK!"