
What is Cloud Computing? A Quick Analogy
- Imagine you want to start a bakery. You could:
- Buy a building, ovens, and hire staff (on‑premises) – huge upfront cost, you own everything, and you’re responsible for maintenance.
- Rent a fully equipped commercial kitchen by the hour (cloud) – you pay only for the time and space you use, and the owner handles repairs, upgrades, and utilities.
- AWS is like that commercial kitchen, but for computing. Instead of buying physical servers, you rent virtual ones, storage, databases, and more—paying only for what you consume.
The Core AWS Services You Need to Know
We’ll explore the most essential services across compute, storage, databases, networking, security, and monitoring. Each section includes an analogy to make the concept stick.

1. Compute Services
Amazon EC2 – Virtual Servers in the Cloud

- What it does: EC2 provides resizable virtual machines (called instances) where you can run applications, websites, or any software.
- 🔑 Analogy: Think of EC2 as renting a hotel room. You choose the room type (e.g., economy, suite), how long you stay (hourly or monthly), and you get the key instantly. When you leave, you stop paying. Need a bigger room? Upgrade in minutes.
- 📌 Example: You launch an EC2 instance to host a WordPress blog. You install the web server, database, and WordPress, then your readers access it over the internet.
AWS Lambda – Run Code Without Managing Servers

- What it does: Lambda lets you run code in response to events (like an image upload or an API request) without provisioning or managing servers.
- 🔑 Analogy: Imagine ordering food from a delivery app. You don’t own a kitchen; you just provide the recipe (your code). When an order comes in (an event triggers), the app’s kitchen cooks it fresh, delivers it, and you pay per meal, not for kitchen space or idle time.
- 📌 Example: You create a Lambda function that automatically resizes images when they are uploaded to an S3 bucket. You don’t care where the code runs it just works, and you pay only for the milliseconds it executes.
2. Storage Services
Amazon S3 – Simple Storage Service (Object Storage)

- What it does: S3 stores files (objects) like images, videos, backups, and static website content in “buckets” with unlimited scalability.
- 🔑 Analogy: S3 is a massive, secure warehouse with infinite shelves. You put items (files) into boxes (objects) and label them with a unique barcode (key). You can retrieve any box from anywhere in the world, and you pay for the shelf space you actually use.
- 📌 Example: You host the images for your e‑commerce site on S3. Every product photo is an object in a bucket, and the website links directly to them.
- 💡 S3 is often used for: data lakes, static website hosting, backup & restore, and as a trigger for Lambda.
Amazon EBS – Elastic Block Store (Virtual Hard Drives)

- What it does: EBS provides persistent block‑level storage volumes that you attach to EC2 instances.
- 🔑 Analogy: EBS is like a USB drive that you plug into your rented computer (EC2). Even if you shut down the computer, the data on the USB drive remains. You can also detach it and attach it to a different computer.
- 📌 Example: Your EC2 instance runs a database. You attach an EBS volume to store the database files. If the instance crashes, your data is safe on the EBS volume and can be reattached to a new instance.
Amazon EFS – Elastic File System (Shared File Storage)

- What it does: EFS provides a fully managed network file system that can be mounted on multiple EC2 instances simultaneously.
- 🔑 Analogy: EFS is a shared network drive in an office. Many employees (EC2 instances) can read and write files on the same drive at the same time, and everyone sees the latest version.
- 📌 Example: You have a web application running on several EC2 instances behind a load balancer. All instances mount the same EFS volume to share user‑uploaded content, ensuring consistency.
3. Database Services
Amazon RDS – Relational Database Service

- What it does: RDS makes it easy to set up, operate, and scale relational databases (like MySQL, PostgreSQL, Oracle, SQL Server, and MariaDB) in the cloud.
- 🔑 Analogy: Imagine you need to manage hundreds of Excel spreadsheets with complex formulas. Instead of doing everything yourself backups, software patching, scaling you hire a database administrator (RDS). They handle all the boring operational tasks, so you just focus on your data.
- 📌 Example: You launch an RDS instance running MySQL to store user accounts and orders for your online store. RDS automatically performs nightly backups and can fail over to a standby replica if needed.
- 💡 RDS supports Multi‑AZ deployments for high availability; think of it as having a backup generator that kicks in automatically.
Amazon DynamoDB – NoSQL Database

- What it does: DynamoDB is a fast, fully managed NoSQL database that delivers single‑digit millisecond performance at any scale.
- 🔑 Analogy: DynamoDB is like a super‑fast library index card system. You don’t need a fixed schema; each card can have different fields. You can look up a card by its unique ID almost instantly, even if there are billions of cards.
- 📌 Example: You build a mobile game that stores player profiles and session data. DynamoDB handles millions of concurrent read/write requests without you worrying about servers.
4. Networking & Content Delivery
Amazon VPC – Virtual Private Cloud

- What it does: VPC lets you create a logically isolated section of the AWS cloud where you can launch resources in a virtual network you define.
- 🔑 Analogy: Think of VPC as your own private, fenced‑off area inside a huge shared data center. You decide the layout (subnets), who can enter (security groups, network ACLs), and how traffic flows (route tables). It’s your own slice of the cloud with controlled access.
- 📌 Example: You create a VPC with public and private subnets. Web servers go in the public subnet (accessible from the internet), and database servers go in the private subnet (only reachable from the web servers).
Amazon Route 53 – Domain Name System (DNS)

- What it does: Route 53 translates human‑friendly domain names (like example.com) into IP addresses that computers use to connect.
- 🔑 Analogy: Route 53 is the phonebook of the internet. When you type a website name, Route 53 looks up the corresponding phone number (IP address) and connects you.
- 📌 Example: You register the domain myawesomeapp.com and use Route 53 to route traffic to an EC2 instance or a load balancer.
Amazon CloudFront – Content Delivery Network (CDN)

- What it does: CloudFront speeds up delivery of your static and dynamic web content by caching copies at edge locations around the world.
- 🔑 Analogy: Imagine you run an online store that ships products from a single warehouse. Customers far away would wait a long time. CloudFront is like opening small local warehouses (edge locations) near your customers, stocking popular items there, so delivery is super fast.
- 📌 Example: You serve your website’s images, CSS, and JavaScript through CloudFront. Users in Tokyo get the files from a Tokyo edge location, not from your origin server in Virginia.
5. Security & Identity
AWS IAM – Identity and Access Management

- What it does: IAM lets you manage users, groups, and permissions to control who can access your AWS resources.
- 🔑 Analogy: IAM is like a corporate security badge system. Each employee (user) gets a badge with specific access rights; some can enter the server room, others only the cafeteria. You can revoke badges instantly, and every entry is logged.
- 📌 Example: You create an IAM user for a developer and attach a policy that allows them to manage EC2 instances but not delete S3 buckets. You also create an IAM role for an EC2 instance to access a specific S3 bucket securely.
- ⚠️ Best practice: Never use your root account for daily tasks. Create IAM users with least privilege.
6. Monitoring & Management
Amazon CloudWatch – Monitoring and Observability

- What it does: CloudWatch collects and tracks metrics, monitors log files, sets alarms, and automatically reacts to changes in your AWS resources.
- 🔑 Analogy: CloudWatch is the dashboard in your car. It shows speed, fuel level, engine temperature, and warning lights. If the engine overheats, a light comes on (alarm), and you can pull over (automated action).
- 📌 Example: You set a CloudWatch alarm to trigger when the CPU utilization of your EC2 instance exceeds 80% for 5 minutes. When that happens, you receive an email notification and can even configure auto‑scaling to add more instances.
Putting It All Together: A Simple Architecture Example
Imagine you’re building a photo‑sharing web app. Here’s how you’d use these AWS services together:
- S3 – Store user‑uploaded photos.
- Lambda – Automatically create thumbnails when a photo is uploaded.
- DynamoDB – Store photo metadata (user, tags, timestamps).
- EC2 – Host the web application server.
- RDS – Store user accounts and relationships (if using a relational database).
- VPC – Keep everything in a secure, private network.
- Route 53 – Route traffic to your domain.
- CloudFront – Serve images and static assets quickly worldwide.
- IAM – Control who can upload, view, or manage resources.
- CloudWatch – Monitor performance and set alarms.
This is the beauty of AWS: each service does one thing well, and you combine them like building blocks.
Quick Cheat Sheet
Service | What it does | Analogy |
|---|---|---|
EC2 | Virtual servers | Renting a hotel room |
Lambda | Serverless compute | Food delivery service |
S3 | Object storage | Infinite warehouse with boxes |
EBS | Block storage for EC2 | USB drive for your computer |
EFS | Shared file storage | Office network drive |
RDS | Managed relational database | Hired database administrator |
DynamoDB | NoSQL database | Library index card system |
VPC | Private network in the cloud | Fenced‑off area in a data center |
Route 53 | DNS service | Phonebook of the internet |
CloudFront | Content delivery network | Local warehouses for fast shipping |
IAM | Identity & access management | Security badge system |
CloudWatch | Monitoring & alarms | Car dashboard |
Test Your Knowledge
Question 1
You need to launch a virtual server in the cloud where you can install a custom operating system, configure the software, and have full administrative control. Which AWS service should you use?
A. AWS Lambda
B. Amazon EC2
C. Amazon S3
D. Amazon RDS
Correct Answer: B – Amazon EC2
Explanation:
Amazon EC2 provides resizable virtual machines (instances) where you have full control over the operating system, software, and configuration. It’s the classic “rent a computer in the cloud” service.
- Lambda is serverless and runs code without managing servers, not for full OS control.
- S3 is object storage for files, not compute.
- RDS is a managed database service, not a general‑purpose virtual server.
Question 2
Your company wants to host a static website (HTML, CSS, JavaScript) with fast global delivery and minimal management overhead. Which combination of services is most appropriate?
A. EC2 + Elastic Load Balancer
B. S3 + CloudFront
C. Lambda + API Gateway
D. EBS + Route 53
Correct Answer: B – S3 + CloudFront
Explanation:
Amazon S3 can host static websites (by enabling static website hosting on a bucket), and CloudFront (a CDN) caches the content at edge locations worldwide for low latency. This setup is serverless and cost‑effective.
- EC2 + ELB would work but requires managing servers and is overkill for static files.
- Lambda + API Gateway is for dynamic, serverless APIs, not static site hosting.
- EBS is block storage attached to EC2; it cannot serve a website by itself.
Question 3
You are building a mobile game that needs to store player profiles, session data, and game state with extremely low latency at any scale. The data model is flexible and does not require complex joins. Which database service is the best fit?
A. Amazon RDS (MySQL)
B. Amazon Redshift
C. Amazon DynamoDB
D. Amazon EFS
Correct Answer: C – Amazon DynamoDB
Explanation:
DynamoDB is a fully managed NoSQL database that delivers single‑digit millisecond performance and scales automatically. It’s ideal for high‑traffic, flexible‑schema use cases like gaming.
- RDS is relational and better for structured data with joins; scaling for millions of requests is harder.
- Redshift is a data warehouse for analytics, not real‑time transactional workloads.
- EFS is a file system, not a database.
Question 4
You want to automatically resize images every time a user uploads a photo to your application. You don’t want to provision or manage any servers. Which AWS service should you use to run the resizing code?
A. Amazon EC2
B. Amazon ECS
C. AWS Lambda
D. Amazon S3
Correct Answer: C – AWS Lambda
Explanation:
Lambda is a serverless compute service that runs code in response to events (like an S3 upload) without managing servers. You pay only for the compute time used.
- EC2 and ECS require you to manage servers or containers.
- S3 is storage; it cannot execute code.
Question 5
You need to create a logically isolated network in AWS where you can launch resources with full control over IP addresses, subnets, and routing. Which service provides this?
A. Amazon Route 53
B. AWS Direct Connect
C. Amazon VPC
D. AWS IAM
Correct Answer: C – Amazon VPC
Explanation:
Amazon Virtual Private Cloud (VPC) lets you define a virtual network in the AWS cloud, including subnets, route tables, and gateways. It’s your private, isolated section of AWS.
- Route 53 is a DNS service.
- Direct Connect is a dedicated physical connection to AWS, not a virtual network.
- IAM manages access and permissions, not networking.
Question 6
You want to give a developer permission to manage EC2 instances but prevent them from deleting S3 buckets. Which AWS service allows you to define such granular permissions?
A. AWS CloudTrail
B. AWS IAM
C. Amazon CloudWatch
D. AWS Config
Correct Answer: B – AWS IAM
Explanation:
AWS Identity and Access Management (IAM) enables you to create users, groups, and roles with fine‑grained permissions (policies) to control access to AWS resources.
- CloudTrail records API activity for auditing, not permissions.
- CloudWatch is for monitoring metrics and logs.
- Config evaluates resource configurations, not access control.
Question 7
Your application requires a relational database with support for SQL, automatic backups, and high availability with a standby replica in another Availability Zone. Which service should you use?
A. Amazon DynamoDB
B. Amazon RDS
C. Amazon S3
D. Amazon ElastiCache
Correct Answer: B – Amazon RDS
Explanation:
Amazon RDS is a managed relational database service that supports MySQL, PostgreSQL, Oracle, SQL Server, and MariaDB. It automates backups, patching, and can be configured for Multi‑AZ deployments for high availability.
- DynamoDB is NoSQL, not relational.
- S3 is object storage, not a database.
- ElastiCache is an in‑memory cache, not a primary relational store.
Question 8
You need to monitor the CPU utilization of your EC2 instances and receive an alert if it exceeds 80% for 5 consecutive minutes. Which AWS service can do this?
A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Trusted Advisor
D. Amazon Inspector
Correct Answer: B – Amazon CloudWatch
Explanation:
CloudWatch collects metrics (like CPU utilization), allows you to create alarms based on thresholds, and can send notifications or trigger automated actions.
- CloudTrail records API calls, not performance metrics.
- Trusted Advisor gives best‑practice recommendations, not real‑time alerts.
- Inspector is a security assessment service.
Question 9
You registered a domain name and want to route internet traffic to an Application Load Balancer that fronts your web servers. Which AWS service should you use for DNS management?
A. Amazon CloudFront
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon VPC
Correct Answer: B – Amazon Route 53
Explanation:
Route 53 is a scalable DNS web service. It translates domain names (like example.com) into IP addresses and supports routing policies to direct traffic to AWS resources like load balancers.
- CloudFront is a CDN, not a DNS service (though it can use Route 53).
- Direct Connect is a physical network connection.
- VPC is a virtual network, not DNS.
Question 10
You have an EC2 instance running a database, and you need a persistent block storage volume that remains intact even if the instance is stopped or terminated. Which service should you use?
A. Amazon S3
B. Amazon EFS
C. Amazon EBS
D. Instance store (ephemeral storage)
Correct Answer: C – Amazon EBS
Explanation:
Amazon Elastic Block Store (EBS) provides durable, block‑level storage volumes that can be attached to EC2 instances. Data persists independently of the instance lifecycle, so you can detach and reattach volumes.
- S3 is object storage, not block storage.
- EFS is a shared file system, but it’s not block storage and is network‑attached.
- Instance store is temporary and data is lost when the instance is stopped or terminated.
Final Thoughts
AWS can feel overwhelming at first, but connecting each service to something familiar makes the concepts much easier to grasp. Start small:
- Experiment with the Free Tier
- Build a simple static website on S3
- Launch your first EC2 instance
The best way to learn is by doing; AWS gives you the tools to explore safely and cost‑effectively.
Was this helpful? Give it a like and leave a comment with your thoughts.
And if you want a full AWS certification roadmap for various roles, check it out here: The Ultimate AWS Certification Roadmap for Future Engineers
Enjoyed reading this content? Let the author know!
Your likes, comments, shares, and saves help creators reach more builders.
Loading recommendations
Loading article