Complete Roadmap 2025

Become aCloud Engineer

A comprehensive, structured path from zero to production-ready cloud infrastructure. 7 stages. Real-world skills. Industry certifications.

Start learning Track your progress

0Stages

0-12Months

0+Topics

0Certifications

AWSGCPAzure

Learning Path

Stage-by-Stage Roadmap

Click any stage to expand. Follow in order for best results.

Fundamentals

Linux Fundamentals: Filesystem, permissions, processes, systemd, package management
Networking Essentials: OSI model, TCP/IP, DNS, DHCP, HTTP/S, VPN, firewalls, subnets
Bash Scripting: Variables, loops, conditionals, functions, cron jobs, pipelines
Python for Automation: Files, APIs, boto3/SDK basics, error handling
Git & Version Control: Branching, merging, rebasing, pull requests
SSH & Remote Access: Key-based auth, port forwarding, scp/rsync

Practice Task

Spin up a free-tier Ubuntu EC2 instance. SSH in, install Nginx, write a Bash script that auto-renews a Let's Encrypt SSL cert, and push the script to GitHub.

Cloud Services

Compute (EC2, Lambda): Instance types, AMIs, auto-scaling, serverless functions, triggers
IAM (Identity & Access): Users, roles, policies, MFA, least-privilege, cross-account access
VPC (Networking): Subnets, route tables, IGW, NAT, security groups, NACLs, peering
Storage (S3, EBS, EFS): Buckets, lifecycle policies, versioning, storage classes, encryption
Databases (RDS, DynamoDB): Managed SQL/NoSQL, read replicas, backups, Aurora, ElastiCache
Load Balancing & DNS: ALB, NLB, CloudFront CDN, Route53, health checks

Practice Task

Host a static website on S3 with CloudFront, secure it with IAM, set up a Lambda function triggered by an S3 upload, and monitor everything with CloudWatch alarms.

Infrastructure as Code

Terraform Core: HCL syntax, providers, resources, data sources, variables, outputs
Terraform State: Remote state (S3+DynamoDB), state locking, workspaces, import
Modules & Reusability: Writing modules, Terraform Registry, versioning, composition patterns
Multi-Environment Setup: Dev/staging/prod with workspaces or directory structure patterns
Ansible Basics: Playbooks, inventories, roles, handlers for config management
CloudFormation: Templates, stacks, change sets, nested stacks, AWS CDK basics

Practice Task

Use Terraform to provision a complete EKS cluster with its VPC, node groups, and IAM roles. Store state in S3. Destroy and recreate it to verify idempotency.

CI/CD & Automation

GitHub Actions: Workflows, jobs, steps, secrets, environments, matrix builds, reusable workflows
GitOps Principles: Git as source of truth, pull-based deployments, drift detection, ArgoCD/Flux
Jenkins: Pipelines (Declarative & Scripted), agents, shared libraries, plugins
Testing in Pipelines: Unit tests, integration tests, security scans (Trivy, SAST), quality gates
Deployment Strategies: Blue/green, canary, rolling updates, feature flags, rollback mechanisms
Artifact Management: Docker image builds, ECR/GCR/ACR, semantic versioning, immutable tags

Practice Task

Set up a GitHub Actions workflow: run tests, build Docker image, push to ECR, and deploy to ECS Fargate. Add a manual approval gate for prod.

Container Orchestration

Docker Deep Dive: Dockerfiles, multi-stage builds, networking, volumes, compose, image optimization
Kubernetes Core: Pods, Deployments, Services, ConfigMaps, Secrets, Namespaces, RBAC
Workloads & Scheduling: StatefulSets, DaemonSets, Jobs, CronJobs, resource limits, taints/tolerations
K8s Networking: CNI plugins, Ingress controllers, Network Policies, CoreDNS
Helm (Package Manager): Charts, values.yaml, templates, versioned releases, Chart repositories
Scaling & HPA: HorizontalPodAutoscaler, VerticalPodAutoscaler, Cluster Autoscaler, KEDA

Practice Task

Deploy a microservices app to EKS with Helm, auto-scaling, persistent storage, Ingress, NetworkPolicies, and RBAC. Pass the CKA practice exam.

Security & Compliance

IAM Mastery: Attribute-based access, permission boundaries, Service Control Policies, cross-account
Secrets Management: AWS Secrets Manager, HashiCorp Vault, Kubernetes Secrets, sealed-secrets
Network Security: WAF, AWS Shield, Security Groups, NACLs, VPC endpoints, PrivateLink
Threat Detection: AWS GuardDuty, Security Hub, CloudTrail, Config Rules, Inspector
Compliance & Governance: CIS benchmarks, SOC2, PCI-DSS, HIPAA controls, AWS Well-Architected
Encryption: KMS, CMKs, envelope encryption, TLS everywhere, encryption at rest/transit

Practice Task

Audit an AWS environment using Prowler/ScoutSuite, fix all critical findings, implement GuardDuty, enable CloudTrail, and rotate all secrets to Vault.

Observability & SRE

Prometheus + Grafana: Metrics collection, PromQL, dashboards, alerting rules, recording rules
Centralized Logging: ELK Stack, Loki, Fluentd/Bit, log aggregation, retention, querying
SLOs, SLAs & Error Budgets: Defining SLIs, setting SLOs, error budget policies, toil reduction
Distributed Tracing: OpenTelemetry, Jaeger/Tempo, trace propagation, span correlation
FinOps & Cost Optimisation: Reserved instances, Spot, right-sizing, cost allocation tags, budgets
Multi-Cloud & Hybrid: Anthos, Azure Arc, cross-cloud networking, data sovereignty patterns

Practice Task

Set up full observability stack for a K8s app: Prometheus metrics, Grafana dashboards, Loki logs, Tempo traces, alert rules for SLO breaches.

Learning Materials

Curated Resources

Real, specific resources - not generic suggestions.

AWS SAA-C03 — Stephane Maarek

Best-selling, deep coverage of all AWS services. Updated for latest exam.

Video Course

Terraform for Beginners to Expert

Zeal Vora — comprehensive IaC course with real-world projects.

Video Course

Kubernetes & Docker Complete Guide

Mumshad Mannambeth (KodeKloud) — best K8s course for CKA prep.

Video Course

TechWorld with Nana

Exceptional free content on Docker, K8s, Terraform, DevOps pipelines.

YouTube Channel

KodeKloud

Best interactive labs for K8s, Terraform, Linux, CKA practice.

Platform

The Phoenix Project

Gene Kim — essential DevOps fiction that shapes how you think about cloud operations.

Book

Site Reliability Engineering (Google)

Foundational text on production reliability, SLOs, and incident management.

Book

Terraform: Up & Running

Yevgeniy Brikman — the definitive guide to Terraform patterns and modules.

Book

Avoid These

Common Mistakes and How to Avoid Them

These are the real mistakes that slow cloud learners down. Knowing them before you start saves you months.

Tutorial hell — watching without building

Watching 10 courses without deploying a single real project teaches you nothing you'll remember. Build something after every stage. Struggle through real errors.

Skipping Linux & networking fundamentals

Jumping straight to Kubernetes without understanding Linux processes or TCP/IP makes debugging impossible. Spend proper time on Stage 0.

Learning multiple clouds simultaneously

AWS + GCP + Azure at once leads to surface-level knowledge of all three and depth in none. Master AWS first. The mental model transfers.

Ignoring security until "later"

Running EC2s with open Security Groups or hardcoded keys is a bad habit that scales badly. Apply IAM least privilege and no hardcoded secrets from day one.

Not tracking cloud costs during learning

Many beginners accidentally spend $100s by leaving EC2/NAT Gateways running. Set AWS Billing Alerts immediately. Destroy infrastructure after each lab.

Track Progress

Stage Completion Checklist

Check off each stage as you complete it. Your progress is saved locally.

Completion Progress

0%(0 of 7 completed)

Capstone

Final Project

Build a fully production-ready, observable, secure, and auto-scaling microservices platform on AWS — applying every skill from this roadmap.

cloud

Capstone Project

CloudNative Microservices Platform

Build a fully production-ready, observable, secure, and auto-scaling microservices platform on AWS — applying every skill from this roadmap.

Full IaC with Terraform

Kubernetes Microservices

Full CI/CD Pipeline

Security Hardened

Full Observability

Cost Optimized

Skills integratedAll 7 Stages

Estimated time3-4 weeks

DeliverableGitHub portfolio piece, Interview-ready

Complete Roadmap 2025

Become aCloud Engineer

A comprehensive, structured path from zero to production-ready cloud infrastructure. 7 stages. Real-world skills. Industry certifications.

Start learning Track your progress

0Stages

0-12Months

0+Topics

0Certifications

AWSGCPAzure

Learning Path

Stage-by-Stage Roadmap

Click any stage to expand. Follow in order for best results.

Fundamentals

Linux Fundamentals: Filesystem, permissions, processes, systemd, package management
Networking Essentials: OSI model, TCP/IP, DNS, DHCP, HTTP/S, VPN, firewalls, subnets
Bash Scripting: Variables, loops, conditionals, functions, cron jobs, pipelines
Python for Automation: Files, APIs, boto3/SDK basics, error handling
Git & Version Control: Branching, merging, rebasing, pull requests
SSH & Remote Access: Key-based auth, port forwarding, scp/rsync

Practice Task

Spin up a free-tier Ubuntu EC2 instance. SSH in, install Nginx, write a Bash script that auto-renews a Let's Encrypt SSL cert, and push the script to GitHub.

Cloud Services

Compute (EC2, Lambda): Instance types, AMIs, auto-scaling, serverless functions, triggers
IAM (Identity & Access): Users, roles, policies, MFA, least-privilege, cross-account access
VPC (Networking): Subnets, route tables, IGW, NAT, security groups, NACLs, peering
Storage (S3, EBS, EFS): Buckets, lifecycle policies, versioning, storage classes, encryption
Databases (RDS, DynamoDB): Managed SQL/NoSQL, read replicas, backups, Aurora, ElastiCache
Load Balancing & DNS: ALB, NLB, CloudFront CDN, Route53, health checks

Practice Task

Host a static website on S3 with CloudFront, secure it with IAM, set up a Lambda function triggered by an S3 upload, and monitor everything with CloudWatch alarms.

Infrastructure as Code

Terraform Core: HCL syntax, providers, resources, data sources, variables, outputs
Terraform State: Remote state (S3+DynamoDB), state locking, workspaces, import
Modules & Reusability: Writing modules, Terraform Registry, versioning, composition patterns
Multi-Environment Setup: Dev/staging/prod with workspaces or directory structure patterns
Ansible Basics: Playbooks, inventories, roles, handlers for config management
CloudFormation: Templates, stacks, change sets, nested stacks, AWS CDK basics

Practice Task

Use Terraform to provision a complete EKS cluster with its VPC, node groups, and IAM roles. Store state in S3. Destroy and recreate it to verify idempotency.

CI/CD & Automation

GitHub Actions: Workflows, jobs, steps, secrets, environments, matrix builds, reusable workflows
GitOps Principles: Git as source of truth, pull-based deployments, drift detection, ArgoCD/Flux
Jenkins: Pipelines (Declarative & Scripted), agents, shared libraries, plugins
Testing in Pipelines: Unit tests, integration tests, security scans (Trivy, SAST), quality gates
Deployment Strategies: Blue/green, canary, rolling updates, feature flags, rollback mechanisms
Artifact Management: Docker image builds, ECR/GCR/ACR, semantic versioning, immutable tags

Practice Task

Set up a GitHub Actions workflow: run tests, build Docker image, push to ECR, and deploy to ECS Fargate. Add a manual approval gate for prod.

Container Orchestration

Docker Deep Dive: Dockerfiles, multi-stage builds, networking, volumes, compose, image optimization
Kubernetes Core: Pods, Deployments, Services, ConfigMaps, Secrets, Namespaces, RBAC
Workloads & Scheduling: StatefulSets, DaemonSets, Jobs, CronJobs, resource limits, taints/tolerations
K8s Networking: CNI plugins, Ingress controllers, Network Policies, CoreDNS
Helm (Package Manager): Charts, values.yaml, templates, versioned releases, Chart repositories
Scaling & HPA: HorizontalPodAutoscaler, VerticalPodAutoscaler, Cluster Autoscaler, KEDA

Practice Task

Deploy a microservices app to EKS with Helm, auto-scaling, persistent storage, Ingress, NetworkPolicies, and RBAC. Pass the CKA practice exam.

Security & Compliance

IAM Mastery: Attribute-based access, permission boundaries, Service Control Policies, cross-account
Secrets Management: AWS Secrets Manager, HashiCorp Vault, Kubernetes Secrets, sealed-secrets
Network Security: WAF, AWS Shield, Security Groups, NACLs, VPC endpoints, PrivateLink
Threat Detection: AWS GuardDuty, Security Hub, CloudTrail, Config Rules, Inspector
Compliance & Governance: CIS benchmarks, SOC2, PCI-DSS, HIPAA controls, AWS Well-Architected
Encryption: KMS, CMKs, envelope encryption, TLS everywhere, encryption at rest/transit

Practice Task

Audit an AWS environment using Prowler/ScoutSuite, fix all critical findings, implement GuardDuty, enable CloudTrail, and rotate all secrets to Vault.

Observability & SRE

Prometheus + Grafana: Metrics collection, PromQL, dashboards, alerting rules, recording rules
Centralized Logging: ELK Stack, Loki, Fluentd/Bit, log aggregation, retention, querying
SLOs, SLAs & Error Budgets: Defining SLIs, setting SLOs, error budget policies, toil reduction
Distributed Tracing: OpenTelemetry, Jaeger/Tempo, trace propagation, span correlation
FinOps & Cost Optimisation: Reserved instances, Spot, right-sizing, cost allocation tags, budgets
Multi-Cloud & Hybrid: Anthos, Azure Arc, cross-cloud networking, data sovereignty patterns

Practice Task

Set up full observability stack for a K8s app: Prometheus metrics, Grafana dashboards, Loki logs, Tempo traces, alert rules for SLO breaches.

Learning Materials

Curated Resources

Real, specific resources - not generic suggestions.

AWS SAA-C03 — Stephane Maarek

Best-selling, deep coverage of all AWS services. Updated for latest exam.

Video Course

Terraform for Beginners to Expert

Zeal Vora — comprehensive IaC course with real-world projects.

Video Course

Kubernetes & Docker Complete Guide

Mumshad Mannambeth (KodeKloud) — best K8s course for CKA prep.

Video Course

TechWorld with Nana

Exceptional free content on Docker, K8s, Terraform, DevOps pipelines.

YouTube Channel

KodeKloud

Best interactive labs for K8s, Terraform, Linux, CKA practice.

Platform

The Phoenix Project

Gene Kim — essential DevOps fiction that shapes how you think about cloud operations.

Book

Site Reliability Engineering (Google)

Foundational text on production reliability, SLOs, and incident management.

Book

Terraform: Up & Running

Yevgeniy Brikman — the definitive guide to Terraform patterns and modules.

Book

Avoid These

Common Mistakes and How to Avoid Them

These are the real mistakes that slow cloud learners down. Knowing them before you start saves you months.

Tutorial hell — watching without building

Watching 10 courses without deploying a single real project teaches you nothing you'll remember. Build something after every stage. Struggle through real errors.

Skipping Linux & networking fundamentals

Jumping straight to Kubernetes without understanding Linux processes or TCP/IP makes debugging impossible. Spend proper time on Stage 0.

Learning multiple clouds simultaneously

AWS + GCP + Azure at once leads to surface-level knowledge of all three and depth in none. Master AWS first. The mental model transfers.

Ignoring security until "later"

Running EC2s with open Security Groups or hardcoded keys is a bad habit that scales badly. Apply IAM least privilege and no hardcoded secrets from day one.

Not tracking cloud costs during learning

Many beginners accidentally spend $100s by leaving EC2/NAT Gateways running. Set AWS Billing Alerts immediately. Destroy infrastructure after each lab.

Track Progress

Stage Completion Checklist

Check off each stage as you complete it. Your progress is saved locally.

Completion Progress

0%(0 of 7 completed)

Capstone

Final Project

Build a fully production-ready, observable, secure, and auto-scaling microservices platform on AWS — applying every skill from this roadmap.

cloud

Capstone Project

CloudNative Microservices Platform

Build a fully production-ready, observable, secure, and auto-scaling microservices platform on AWS — applying every skill from this roadmap.

Full IaC with Terraform

Kubernetes Microservices

Full CI/CD Pipeline

Security Hardened

Full Observability

Cost Optimized

Skills integratedAll 7 Stages

Estimated time3-4 weeks

DeliverableGitHub portfolio piece, Interview-ready