Cloud platform reference: compute, storage, networking, and managed services for developers.
Core AWS services every developer should know: EC2, S3, Lambda, RDS, and IAM fundamentals.
Production Lambda patterns: event sources, layers, Step Functions orchestration, and cold-start mitigation.
Compare managed Postgres (RDS, Cloud SQL, Aurora, Neon, Supabase) and serverless DBs (D1, PlanetScale) for 2026.
Cut cloud bills 30-60% with rightsizing, reserved capacity, spot instances, and storage tiering.
Provision resizable compute instances with full OS control, networking, and storage options.
Scalable object storage with 99.999999999% durability, lifecycle tiering, and event notifications.
Managed Postgres/MySQL/SQL Server with automated backups, patching, read replicas, and failover.
Single-digit ms latency key-value/Document DB at any scale, with on-demand pricing and global tables.
Global CDN with 450+ edge locations, Lambda@Edge, and origin failover for low-latency content delivery.
Highly available DNS with health checks, routing policies (geo, latency, weighted), and DNSSEC.
Isolated cloud network with subnets, route tables, NAT, VPC peering, and Transit Gateway.
Least-privilege policies, roles, permission boundaries, and IAM Access Analyzer for security.
Run Docker containers serverless with Fargate — no EC2 management, pay per container second.
Managed Kubernetes control plane with Fargate or EC2 nodes, IRSA auth, and add-ons.
Managed API gateway with REST/HTTP/WebSocket APIs, auth, throttling, and Lambda/HTTP integrations.
SQS queues for decoupling and SNS pub/sub for fan-out — at-least-once delivery, scales to infinite.
Metrics, logs, traces, and alarms — unified observability for all AWS services and custom apps.
Define infrastructure as code — CloudFormation YAML/JSON or CDK TypeScript, deploy reproducibly.
Managed user directory with signup, MFA, social login, JWT issuance, and hosted UI.
Scalable transactional email — 62k free emails/mo (EC2), DKIM/SPF setup, and Lambda triggers.
Full-stack framework for React/Next.js with managed backend — auth, data, storage, hosting.
Run Docker containers on managed EC2 clusters or Fargate serverless compute.
Managed Kubernetes control plane with worker nodes, IRSA, and add-ons for the K8s ecosystem.
Run containers without managing servers — pay per vCPU/GB-second, scales to zero.
Managed API gateway with REST/HTTP/WebSocket APIs, throttling, auth, and Lambda/HTTP integration.
Decouple producers/consumers with managed queues — at-least-once delivery, FIFO ordering, dead-letter queues.
Publish/subscribe fan-out to SQS, Lambda, HTTP, email, and mobile push endpoints.
Scalable transactional email with high deliverability, IP pools, and configuration sets for analytics.
Metrics, logs, traces, and alarms — unified observability for all AWS services and custom apps.
Native infrastructure-as-code with JSON/YAML templates, stacks, drift detection, and nested stacks.
Define AWS infrastructure in TypeScript/Python/Java, compiled to CloudFormation with constructs.
Full-stack framework for React/Next/Vue with auth, data, storage, hosting — CLI + libraries.
Managed GraphQL API with real-time subscriptions, multiple data sources, and fine-grained auth.
Managed auth — sign-up/sign-in, social login, MFA, JWT tokens, and hosted UI.
Managed in-memory caching — Redis (cluster mode, HA, TLS) or Memcached, for sub-ms reads.
Petabyte-scale columnar warehouse with SQL, Redshift Spectrum (query S3), and ML integration.
Real-time streaming — Data Streams (Shards), Firehose (S3 delivery), Analytics (SQL on stream).
Managed Docker registry with IAM auth, image scanning, lifecycle policies, and cross-region replication.
Build serverless functions at the edge with sub-50ms cold starts, KV storage, and D1 SQLite databases.
Deploy full-stack apps on Cloudflare Pages with R2 (S3-compatible, zero egress fees) and D1 edge SQLite.
Deploy static sites and full-stack apps to Cloudflare Pages with git integration, preview deployments, and Pages Functions.
S3-compatible object storage with zero egress fees, ideal for media, backups, and large datasets.
Edge SQLite database with read replicas worldwide, query from Workers with sub-10ms latency.
Globally distributed key-value store with eventual consistency, 25MB values, and edge reads in <10ms.
Durable message queues for Workers with batching, retries, and dead-letter queues for async processing.
Single-instance stateful objects with strong consistency, ideal for realtime rooms, counters, and coordination.
Programmatically handle incoming email at the edge — parse, filter, forward, and trigger actions.
Scheduled Workers via cron expressions — run cleanup, sync, and periodic jobs at the edge.
Bidirectional WebSocket connections from Workers with Hibernatable Sockets for cheap persistent connections.
Programmatic edge caching with the Cache API — finer control than Cache-Control headers, free reads.
Protect apps from SQLi, XSS, RCE, and OWASP Top 10 with managed rulesets and custom rules at the edge.
Edge rate limiting by IP, path, header, or ASN with sliding window and custom actions.
Expose local/private services to the internet without opening ports — secure outbound-only tunnel.
Replace VPN with identity-based access to internal apps — SSO, device posture, and per-app policies.
Run LLMs and image models at the edge with Workers AI — Llama, Mistral, Stable Diffusion, no GPU management.
Edge vector database for semantic search and RAG — query millions of vectors with metadata filtering.
Connection pooling and query caching for Postgres/MySQL from Workers — reuse connections across isolates.
Add API routes to Pages sites via functions/ directory — file-based routing with edge bindings.
Write analytics events from Workers and query with SQL — time-series storage without managing infrastructure.
Stream Cloudflare logs (HTTP requests, Workers, Firewall) to R2/S3/BigQuery for long-term analysis.
Attach custom domains to Workers/Pages with automatic SSL, no cert management or renewal.
Deploy containerized apps to Google Cloud Run with auto-scaling to zero and pay-per-use pricing.
Firebase Auth, Firestore, Hosting, and Cloud Functions for full-stack apps without managing servers.
Scalable VMs with custom machine types, live migration, and per-second billing.
Fully managed PaaS — deploy code, Google handles scaling, load balancing, and TLS.
Event-driven serverless functions — HTTP, Cloud Storage, Pub/Sub, Firestore triggers.
Unified object storage with classes (Standard, Nearline, Coldline, Archive) and lifecycle rules.
Serverless data warehouse — SQL on petabytes, columnar storage, ML, and real-time analytics.
Serverless document DB — strong consistency, real-time listeners, offline sync for mobile.
Managed Postgres/MySQL/SQL Server with HA, read replicas, automated backups, and Auth Proxy.
Global CDN with 200+ POPs, cache keys, signed URLs, and Cloud Armor integration.
Global HTTP(S) LB with anycast IP, Cloud CDN, and backend services across regions.
Identity and access management with roles, service accounts, Workload Identity, and IAM Conditions.
Global VPC with subnets per region, firewall rules, Cloud NAT, and VPC Service Controls.
Global messaging — at-least-once delivery, ordering, schema registry, and push/pull subscriptions.
Managed CI/CD — Docker builds, multi-step pipelines, triggers on Git push, and artifact publishing.
Managed registry for Docker, npm, Maven, Python — IAM auth, vulnerability scanning, regional repos.
Build event-driven serverless on Azure with Functions v4, Cosmos DB bindings, and SignalR for realtime.
Managed web hosting for .NET/Node/Python/Java/PHP — auto-scale, custom domains, TLS, deployment slots.
Event-driven serverless — HTTP, timers, Cosmos DB, Service Bus, Event Grid triggers. Premium plan for VNet.
Blob, Table, Queue, File storage with hot/cool/archive tiers and lifecycle management.
Globally distributed multi-model DB — SQL, Mongo, Cassandra, Gremlin, Table APIs. Single-digit ms.
Managed SQL Server with Hyperscale, serverless, elastic pools, and AI tuning recommendations.
Global CDN with Verizon/Akamai/Microsoft backends, dynamic site acceleration, and WAF.
Scalable VMs with availability sets, VMSS, Spot, and Azure Linux (optimized kernels).
Managed Kubernetes with Azure AD auth, integrated monitoring, and virtual nodes (ACI).
Run a container without orchestration — per-second billing, no cluster, fast startup.
Full-featured API gateway — publish, transform, secure, analyze APIs with policies and dev portal.
Centralized secrets, keys, certificates — HSM-backed, RBAC, auto-rotation, and Managed Identity access.
Full APM — request tracing, dependency tracking, metrics, logs, and live metrics stream.
CI/CD with Repos, Pipelines, Boards, Artifacts, and Test Plans — free for 5 users.
Cloud identity and access — users, groups, apps, SSO, MFA, Conditional Access, B2B/B2C.
Fully managed PaaS for hosting web applications and REST APIs with autoscaling, deployment slots, and built-in CI/CD.
Durable, massively scalable object and structured storage with four services: Blob (objects), Queue (messaging), Table (NoSQL key-value), and File (SMB shares).
Globally distributed, multi-model NoSQL database with single-digit-millisecond latency at the 99th percentile and five well-defined consistency levels.
Fully managed relational database engine compatible with SQL Server, with built-in high availability, automated backups, intelligent tuning, and Hyperscale storage.
Global content delivery network with POPs in 118+ cities, supporting Microsoft, Verizon, and Akamai backends, with dynamic site acceleration and WAF integration.
IaaS compute offering Linux and Windows VMs with hundreds of sizes, ephemeral OS disks, spot pricing, and proximity placement groups for low-latency clusters.
Managed Kubernetes where Azure handles the control plane for free, with integrated networking, ACR, monitoring, and Azure AD RBAC.
Serverless container execution: run a container without provisioning VMs or clusters, billed per second, ideal for burst, CI, and scheduled jobs.
Enterprise API gateway with versioning, rate limiting, quotas, JWT validation, response caching, and a developer portal for discovery and subscription.
Centralized secret, key, and certificate store with HSM-backed keys, soft delete, access policies or RBAC, and integration with App Service, Functions, and Logic Apps.
Application Performance Monitoring (APM) for live apps: request tracing, dependency maps, exception capture, live metrics, and log analytics via KQL.
Microsoft's ALM platform: Git Repos, CI/CD Pipelines, Boards (work tracking), Test Plans, and Artifacts (package feeds), free for up to 5 users.
Microsoft's cloud identity provider: SSO, OAuth2/OIDC, B2B/B2C, Conditional Access, PIM just-in-time roles, and app registration for RBAC.
Visual workflow orchestration: trigger on events (HTTP, schedule, SaaS connectors) and chain actions (transform, branch, call APIs) without writing code.
Private Docker registry with geo-replication, content trust (signed images), vulnerability scanning (via Defender), and webhook-triggered tasks.
Developer-friendly VPS with predictable pricing ($4/mo for 512MB), one-click app images, and managed Kubernetes/Postgres add-ons.
European VPS with exceptional price/performance (€4/mo for 2GB RAM, 20TB transfer), dedicated ARM and x86 servers, and a cloud API.
VPS with flat pricing, 11 global regions, and managed NodeBalancers; now part of Akamai's compute portfolio.
VPS with 32+ global locations, hourly billing, bare metal options, and a simple API; competitive with DigitalOcean on price.
AWS's simplified VPS offering with bundled pricing (compute+transfer+static IP) starting at $3.50/mo, with one-click WordPress/LAMP/Node blueprints.
Best practices for ~/.ssh/config: host aliases, identity selection, jump hosts (ProxyJump), keepalive, and connection multiplexing.
Use nginx as a reverse proxy in front of Node/Python/Go apps: TLS termination, virtual hosts, WebSocket proxying, and rate limiting.
Modern web server with automatic HTTPS via Let's Encrypt, a simple Caddyfile config, and HTTP/3 support out of the box.
WireGuard-based mesh VPN that connects your devices and servers into a private network with zero config, SSO auth, and ACLs.
Modern, fast, minimal-codebase VPN protocol using ChaCha20+Poly1305; site-to-site or road-warrior with a single config file per peer.
Run multiple self-hosted services (Postgres, Redis, Nextcloud, Plausible) on one VPS with docker-compose.yml, networks, and volumes.
Web UI for managing Docker hosts, stacks, containers, images, and volumes — useful for teams not fully on CLI.
Open-source self-hostable PaaS (Heroku alternative) that deploys apps from Git, manages databases, and provisions TLS automatically.
Open-source self-hostable PaaS with Docker + Traefik, supporting Nixpacks/Dockerfile builds, Postgres/Redis/Mongo add-ons, and multi-server.
Open-source PaaS on Docker Swarm with a CLI, one-click apps marketplace, Netlify-like deploys, and managed databases.
Open-source self-hostable uptime monitor (UptimeRobot alternative) with HTTP/TCP/ping/DNS checks, status pages, and notifications.
Host, version, and distribute Docker images on Docker Hub with public repos, private repos, and automated builds.
Host container images alongside your code on GitHub with free unlimited private repos tied to repo permissions.
Store and deploy Docker images on AWS ECR with IAM auth, lifecycle policies, and cross-region replication.
Store Docker, npm, Maven, and Python packages in one GCP registry with IAM and regional repos.
Store Docker images on Azure with geo-replication, content trust, and ACR Tasks for build-on-push.
Run a private, on-prem container registry with Trivy scanning, replication, and OIDC auth.
Build and push a single multi-arch manifest that pulls the right image (amd64/arm64) on any host.
Order Dockerfile layers for maximum cache reuse and use BuildKit cache mounts for package managers.
Run a multi-container app in production with Compose, including restart policies, healthchecks, and resource limits.
Inspect and shrink Docker images from 1GB to 50MB using dive for layer analysis and docker-slim for auto-slimming.
Harden SSH on a Linux server: disable password login, restrict ciphers, limit users, and use Ed25519 keys.
Configure Uncomplicated Firewall for default-deny inbound, allow only SSH and app ports, with rate limiting.
Install Fail2ban to watch logs and ban IPs that fail auth repeatedly, with custom jails for SSH, Nginx, and your app.
Write iptables/nftables rules for default-drop, port forwarding, and rate limiting when UFW is too limited.
Issue and auto-renew free TLS certificates from Let's Encrypt using Certbot for Nginx, Apache, or standalone.
Configure auditd to log syscalls, file access, and user actions for SOC2/PCI forensics and intrusion detection.
Configure automatic installation of security-only package updates with email notification and reboot handling.
Install ClamAV and run scheduled scans on uploads, mail attachments, and the filesystem with freshclam signature updates.
Run Lynis for a 5-minute security audit that scores the server and lists specific hardening suggestions.
Install CrowdSec to detect and block attacks locally, then share decisions with the global community for collective defense.
Comparison of the three major public clouds across compute, storage, database, ML, pricing, and ecosystem to guide provider selection.
Comparison of the three leading frontend deployment platforms for Jamstack/SSR apps: build, edge functions, pricing, and framework support.
Comparison of two popular backend-as-a-service platforms: Supabase (open-source Postgres) vs Firebase (Google's proprietary NoSQL + auth).
Comparison of three serverless Postgres/SQLite platforms: PlanetScale (MySQL Vitess), Neon (Postgres with branching), Turso (libSQL/SQLite at the edge).
Comparison of two S3-compatible object stores: R2 (zero egress fees) vs S3 (deepest ecosystem, most regions).
Comparison of three FaaS platforms: Workers (V8 isolates, global edge), Lambda (Node/Python containers, regional), Cloud Functions (GCP, regional).
Comparison of GCP Cloud Run (container, request-based scaling, concurrency) vs AWS Lambda (function, event-driven, no concurrency).
Focused comparison of Vercel and Cloudflare Pages for Next.js/SSR apps: runtime, cold start, pricing at scale, and feature parity.
When to run code at the edge (Cloudflare Workers, Vercel Edge, Fastly Compute@Edge) vs at a regional origin (Lambda, App Service, VPS).
Comparison of two NoSQL databases with different models: DynamoDB (AWS, key-value, single-region by default) vs FaunaDB (distributed, relational+document, FQL/GraphQL).
Decision framework for choosing between the three hyperscalers based on workload, team skills, and cost.
Compare the three leading static/edge hosts for Next.js apps on price, features, and DX.
Compare the two leading Backend-as-a-Service platforms on database, auth, realtime, and exit strategy.
Compare the three serverless database platforms on engine, branching, pricing, and edge read latency.
Compare R2 and S3 on egress pricing, consistency, API compatibility, and when each wins.
Compare the three serverless compute platforms on cold start, runtime, limits, and edge placement.
Compare the two container-native serverless platforms on cold start, concurrency, and pricing model.
Compare AWS DynamoDB and Fauna on consistency, query expressiveness, pricing, and multi-region.
Head-to-head on App Router support, Edge runtime, ISR, and bandwidth pricing for Next.js 14+.
Decision framework for splitting traffic between edge (CDN/Workers) and origin (VPS/Lambda) based on content type and latency budget.