Cloud Computing
Renting compute, storage and networking on demand.
Backend Engineer
Junior
Write correct code, ship small changes safely, ask good questions.
- Compute Instance (EC2)A virtual server in the cloud.
- Load BalancerDistributing traffic across servers.
- Managed DatabaseA database the cloud provider runs for you.
- Platforms (Vercel, Netlify, Render, Fly)Hosts that deploy straight from Git with little setup.
- S3 / Blob StorageCheap, durable object storage.
- ServerA machine, or a program on one, that provides a service to clients.
- Cloud ComputingRenting computing resources on demand.
- AWS, GCP and AzureThe three biggest cloud providers.
- IaaS, PaaS, SaaSHow much of the stack the provider manages for you.
Mid-level
Own a feature end to end without hand-holding.
Core: start here
- IAMIdentity and access management for cloud resources.
- Secrets ManagementKeeping API keys and passwords in a vault, not in code.
10 more mid-level concepts
- ClusterA group of machines working together as one system.
- IAM PolicyA document granting permissions on resources.
- Service AccountAn identity for software rather than a person.
- Functions as a Service (Lambda)Running code in response to events without servers.
- Managed Queues (SQS, Pub/Sub)Message queues run by the cloud provider.
- Regions and Availability ZonesGeographic locations, and isolated data centers within them.
- VPCA private network in the cloud.
- Public vs Private SubnetSubnets reachable from the internet vs only from inside.
- Security GroupA virtual firewall around cloud resources.
- Serverless FunctionsRunning code per request without managing servers.
Senior
Own a system, its failure modes, and its trade-offs.
- Managed vs Self-HostedPaying for convenience vs running it yourself.
- Edge ComputingRunning code near users at CDN locations.
- External Secrets in KubernetesSyncing secrets from a vault into the cluster safely.
- Shared Responsibility ModelWhich security duties belong to the provider and which are yours.
- Vendor Lock-InDepending on one provider's proprietary services.
- Cloud Cost Management (FinOps)Understanding and controlling cloud spending.
- Storage Lifecycle PoliciesAutomatically moving or deleting old objects.
- Egress CostsPaying for data leaving the cloud.
Staff
Shape how many teams build, across systems.
- Multi-CloudUsing several cloud providers, and whether it's worth it.
Data Engineer
Junior
Build and fix pipelines from clear specs; write correct SQL.
- Compute Instance (EC2)A virtual server in the cloud.
- Managed DatabaseA database the cloud provider runs for you.
- Platforms (Vercel, Netlify, Render, Fly)Hosts that deploy straight from Git with little setup.
- S3 / Blob StorageCheap, durable object storage.
- ServerA machine, or a program on one, that provides a service to clients.
- Cloud ComputingRenting computing resources on demand.
- AWS, GCP and AzureThe three biggest cloud providers.
- IaaS, PaaS, SaaSHow much of the stack the provider manages for you.
Mid-level
Own pipelines and models end to end, including their quality.
- IAMIdentity and access management for cloud resources.
- Secrets ManagementKeeping API keys and passwords in a vault, not in code.
- ClusterA group of machines working together as one system.
- IAM PolicyA document granting permissions on resources.
- Service AccountAn identity for software rather than a person.
- Functions as a Service (Lambda)Running code in response to events without servers.
- Managed Queues (SQS, Pub/Sub)Message queues run by the cloud provider.
- Regions and Availability ZonesGeographic locations, and isolated data centers within them.
- VPCA private network in the cloud.
- Public vs Private SubnetSubnets reachable from the internet vs only from inside.
- Security GroupA virtual firewall around cloud resources.
- Serverless FunctionsRunning code per request without managing servers.
Senior
Design the platform's storage, processing and modeling choices.
- Managed vs Self-HostedPaying for convenience vs running it yourself.
- Edge ComputingRunning code near users at CDN locations.
- External Secrets in KubernetesSyncing secrets from a vault into the cluster safely.
- Shared Responsibility ModelWhich security duties belong to the provider and which are yours.
- Vendor Lock-InDepending on one provider's proprietary services.
- Cloud Cost Management (FinOps)Understanding and controlling cloud spending.
- Storage Lifecycle PoliciesAutomatically moving or deleting old objects.
- Egress CostsPaying for data leaving the cloud.
Staff
Shape how the whole organization produces and uses data.
- Multi-CloudUsing several cloud providers, and whether it's worth it.
Frontend Engineer
Junior
Build UI that works, ship small changes safely, ask good questions.
Core: start here
- Platforms (Vercel, Netlify, Render, Fly)Hosts that deploy straight from Git with little setup.
6 more junior concepts
- Load BalancerDistributing traffic across servers.
- S3 / Blob StorageCheap, durable object storage.
- ServerA machine, or a program on one, that provides a service to clients.
- Cloud ComputingRenting computing resources on demand.
- AWS, GCP and AzureThe three biggest cloud providers.
- IaaS, PaaS, SaaSHow much of the stack the provider manages for you.
Mid-level
Own a feature end to end without hand-holding.
- IAMIdentity and access management for cloud resources.
- Secrets ManagementKeeping API keys and passwords in a vault, not in code.
- Functions as a Service (Lambda)Running code in response to events without servers.
- Regions and Availability ZonesGeographic locations, and isolated data centers within them.
- Serverless FunctionsRunning code per request without managing servers.
Senior
Own an app's architecture, performance, and failure modes.
- Managed vs Self-HostedPaying for convenience vs running it yourself.
- Edge ComputingRunning code near users at CDN locations.
- Vendor Lock-InDepending on one provider's proprietary services.
- Cloud Cost Management (FinOps)Understanding and controlling cloud spending.
Tech Entrepreneur
Idea
Find a problem worth solving and prove people have it. Where every first-time founder starts.
- IaaS, PaaS, SaaSHow much of the stack the provider manages for you.
MVP
Ship the smallest thing someone will use or pay for, and set up the company properly.
- Managed vs Self-HostedPaying for convenience vs running it yourself.
Growth
Make acquisition and revenue repeatable; hire, raise and build a board.
- Cloud Cost Management (FinOps)Understanding and controlling cloud spending.
- Egress CostsPaying for data leaving the cloud.