Happy New Year!
Hi everyone,
Happy New Year! It’s been a while since my last newsletter, but as I mentioned in my first post, I’m not here to bombard you with messages—just to share insights that matter.
The start of a new year often brings a surge of people wanting to learn new skills, and cloud computing is always a top choice. In this newsletter, I want to highlight two concepts I recommend to anyone starting their cloud journey today: cloud security 🔐 and Infrastructure as Code (IaC) 🏗️.
Traditionally, learning cloud computing has started with a deep dive into networking and servers. You’d begin by understanding how to set up virtual networks, configure firewalls, and manage virtual machines. This approach mirrored the on-premises world, where knowing how servers communicated and were configured was essential.
While this foundation is useful, the cloud landscape has evolved far beyond basic networking and servers. Today, most modern cloud services abstract away networking details, allowing developers to focus on building applications rather than managing infrastructure. Additionally, security threats have grown more complex, and managing cloud infrastructure manually has become inefficient and error-prone.
This shift calls for a rethinking of the traditional approach. Instead of starting with networking basics, it's more impactful to focus on mastering cloud security and Infrastructure as Code (IaC). These areas not only equip you to build secure and scalable applications but also align with the way modern cloud environments operate.
1️⃣ Security First 🔐
Cloud security is critical—it protects your data, ensures compliance, and reduces vulnerabilities. Learning security early allows you to adopt a "security by design" approach, building secure environments from day one.
2️⃣ Infrastructure as Code (IaC) 🏗️
IaC enables you to manage cloud resources with code, bringing consistency, scalability, and automation to your workflows. It’s the backbone of modern cloud development, reducing manual effort and minimizing human error.
These two concepts are a perfect match:
Secure IaC Scripts: Integrate security best practices, like encryption and access controls, directly into your IaC definitions.
Automate Security: Use IaC to deploy security updates and enforce compliance automatically.
Continuous Monitoring: Add monitoring and alerting mechanisms to your IaC for real-time threat detection and response.
DevSecOps Practices: Treat security as code, collaborating across teams to ensure security from the start.
For IaC, explore tools like AWS CDK, AWS SAM, Serverless Framework, or Terraform.
For cloud security, start with the AWS Security documentation or online courses. You can also check the Well Architected Framework Security Pillar.
I’d love to hear your perspective on this! Have you noticed this shift in how cloud computing is taught or experienced it yourself? Do you think starting with cloud security and Infrastructure as Code makes more sense in today’s cloud landscape, or do you feel the traditional approach still holds value?
📚 Learning AWS Lambda (LinkedIn Learning)
A beginner-friendly introduction to serverless computing. Secure your account, create IAM users, and start building Lambda functions.
🤖 Building Serverless Apps with AI on AWS (LinkedIn Learning)
Learn how to integrate AWS AI services like Amazon Bedrock with tools like Step Functions and EventBridge.
📊 AWS for Developers: Data-Driven Serverless Applications with Kinesis (LinkedIn Learning)
Master event-driven architectures with AWS Lambda, Kinesis, and EventBridge.
🎉 Curso en Español: Serverless en Español con Serverless Framework (Udemy)
Aprende cómo desarrollar aplicaciones sin servidor en la nube.
(Solo para los primeros en usar el enlace)
Thanks for reading! I’m working on exciting new content for 2025 and hope to return to YouTube soon. My maternity leave keeps me busy with baby-related priorities, so I’m focusing on what matters most.
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.