Cloud Providers

module "vpc" {
  source  = "terraform-aws-modules/vpc/aws"
  version = "5.0.0"

  name = "prod-vpc"
  cidr = "10.0.0.0/16"

  azs             = ["us-east-1a", "us-east-1b", "us-east-1c"]
  private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
  public_subnets  = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]

  enable_nat_gateway = true
  single_nat_gateway = false

  tags = { Environment = "production" }
}

module "eks" {
  source  = "terraform-aws-modules/eks/aws"
  version = "20.0.0"

  cluster_name    = "prod-cluster"
  cluster_version = "1.29"

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  eks_managed_node_groups = {
    general = {
      min_size     = 3
      max_size     = 10
      desired_size = 3
      instance_types = ["m6i.large"]
    }
  }
}

# List running EC2 instances
aws ec2 describe-instances \
  --filters "Name=instance-state-name,Values=running" \
  --query 'Reservations[].Instances[].{ID:InstanceId,Name:Tags[?Key==`Name`].Value|[0],Type:InstanceType}' \
  --output table

# S3 sync with encryption
aws s3 sync ./backups s3://my-bucket/backups/ \
  --sse AES256 \
  --storage-class STANDARD_IA

# CloudWatch alarm for high CPU
aws cloudwatch put-metric-alarm \
  --alarm-name high-cpu-prod-web \
  --metric-name CPUUtilization \
  --namespace AWS/EC2 \
  --statistic Average \
  --period 300 \
  --threshold 80 \
  --comparison-operator GreaterThanThreshold \
  --evaluation-periods 2 \
  --alarm-actions arn:aws:sns:us-east-1:123456789:alerts

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "appName": { "type": "string", "defaultValue": "messaging-api" },
    "location": { "type": "string", "defaultValue": "eastus" }
  },
  "resources": [
    {
      "type": "Microsoft.Web/serverfarms",
      "apiVersion": "2022-03-01",
      "name": "[concat(parameters('appName'), '-plan')]",
      "location": "[parameters('location')]",
      "sku": { "name": "P1v3", "tier": "PremiumV3" }
    },
    {
      "type": "Microsoft.Web/sites",
      "apiVersion": "2022-03-01",
      "name": "[parameters('appName')]",
      "location": "[parameters('location')]",
      "properties": {
        "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', concat(parameters('appName'), '-plan'))]",
        "siteConfig": {
          "linuxFxVersion": "NODE|20-lts",
          "alwaysOn": true,
          "healthCheckPath": "/health"
        }
      }
    }
  ]
}

## Service Mapping

| Capability | AWS | Azure | GCP |
|------------|-----|-------|-----|
| Compute | EC2, Lambda | VMs, Functions | Compute Engine, Cloud Run |
| Containers | EKS, ECS | AKS | GKE |
| Object Storage | S3 | Blob Storage | Cloud Storage |
| Monitoring | CloudWatch | Monitor | Cloud Monitoring |
| Log Analytics | CloudWatch Logs | Log Analytics | Cloud Logging |
| AI/ML | SageMaker, Bedrock | Azure AI | Vertex AI |
| Messaging | SQS, SNS | Service Bus | Pub/Sub |

## Certification Path (Abdullah)

- ✅ AWS Cloud Practitioner (CLF-C02)
- 🔄 AWS AI Practitioner (AIF-C01) — In Progress
- Consider: AWS Solutions Architect Associate next

## Multi-Cloud Tips

- Use Terraform for provider-agnostic IaC
- Standardize on Kubernetes for portability
- Centralize observability with Prometheus + Grafana
- Implement consistent IAM patterns across clouds