Cloud Infrastructure Management Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Cloud Infrastructure Engineer, Systems Administrator and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 9 Nov 2026 Course code SD-CC-027

Before you join: Participants should understand basic IP networking, including subnets, routing, DNS and firewalls, and should have experience supporting Windows or Linux servers, applications, databases or virtual infrastructure.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Cloud infrastructure managers must keep services available, secure, recoverable and cost-controlled while application demand changes. In AWS environments, this means making sound decisions about account structure, identity permissions, network boundaries, compute capacity, data storage, monitoring and recovery objectives. Poorly governed cloud estates can create excessive spend, inconsistent controls, weak audit evidence and avoidable service interruptions.

This course develops the practical management skills required to design, operate and improve AWS infrastructure. Participants work through Amazon Web Services account governance, IAM, VPC design, EC2 operations, containers, storage, databases, load balancing, autoscaling, observability, security controls, backup, disaster recovery, cost management and infrastructure as code. The course also addresses operational handover, incident response, change control and service reporting.

Instruction combines short technical briefings with guided case work, configuration reviews, group exercises and operational simulations. Participants apply AWS methods to a realistic multi-account service scenario from the first week, then improve its security, resilience, cost position and operational controls during the second week. They leave with a completed cloud infrastructure management pack containing an architecture design, operational runbooks, monitoring plan, security control matrix, recovery plan and cost optimisation actions.

The course suits IT professionals who already support servers, networks, applications, databases or cloud services and now need to manage AWS infrastructure with greater confidence and consistency. It is particularly relevant to teams moving workloads from data centres, standardising an existing AWS estate or preparing services for formal operational governance.

What you will be able to do

  • Design AWS multi-account structures using AWS Organizations, SCPs and delegated administration
  • Configure IAM identities, roles, permission boundaries and least-privilege access policies
  • Build VPC connectivity designs using subnets, route tables, security groups and endpoints
  • Select and manage AWS compute, storage and database services against workload requirements
  • Implement monitoring, logging and alerting using Amazon CloudWatch, CloudTrail and AWS Config
  • Create backup and disaster recovery plans using RTO, RPO and AWS recovery patterns
  • Apply AWS cost allocation, budgeting and rightsizing methods to infrastructure spend
  • Produce an operational cloud management pack for a governed AWS workload

Benefits of attending

For you

  • Produce defensible AWS designs for availability, security and operational support
  • Diagnose cloud service issues using logs, metrics, alarms and audit trails
  • Lead structured reviews of AWS cost, resilience and security controls
  • Build reusable infrastructure management documents for operational handover
  • Prepare for cloud infrastructure engineering and operations management responsibilities

For your organisation

  • Establish more consistent AWS account, identity and network control patterns
  • Reduce preventable cloud incidents through defined monitoring and response procedures
  • Improve audit evidence through centralised logging, configuration tracking and access reviews
  • Control infrastructure spend using tagging, budgets and rightsizing recommendations
  • Improve recovery readiness through documented backup and disaster recovery procedures

Course modules

20 modules over 10 days

Participants can define operating responsibilities and governance boundaries for an AWS service.

  • AWS shared responsibility model mapped to infrastructure management accountabilities
  • Cloud operating model roles using RACI for service ownership
  • Service catalogues defining supported AWS platforms and operational boundaries
  • ITIL incident, change and problem management adapted for cloud services
  • Operational level agreements between platform teams and application owners
  • Configuration item relationships documented within a cloud service model

Participants can design a governed multi-account AWS structure.

  • AWS Organizations structure for production, nonproduction, security and shared services
  • Organizational units aligned with risk, billing and administrative boundaries
  • Service control policies restricting prohibited actions across member accounts
  • Delegated administrator accounts for security, billing and central operations
  • AWS Control Tower guardrails compared with custom Organizations controls
  • Account vending criteria covering ownership, tags, logging and access

Participants can implement least-privilege identity controls for AWS administration and workloads.

  • IAM policy evaluation logic including explicit deny and permission boundaries
  • Federated access using IAM Identity Center and external identity providers
  • Role-based access patterns for administrators, developers, auditors and workloads
  • Least-privilege policies built from access requirements and CloudTrail evidence
  • Multi-factor authentication requirements for privileged AWS administrative access
  • Access Analyzer findings used to identify unintended external permissions

Participants can create a secure VPC design for multi-tier workloads.

  • VPC CIDR planning using non-overlapping address ranges and growth assumptions
  • Public, private and isolated subnets assigned by workload exposure
  • Route tables controlling north-south and east-west traffic flows
  • Security groups and network ACLs applied using layered controls
  • VPC endpoints providing private access to AWS service APIs
  • Transit Gateway patterns for multi-VPC and hybrid connectivity

Participants can manage traffic entry, DNS routing and edge delivery for AWS applications.

  • Amazon Route 53 hosted zones, records and health checks
  • Routing policies using weighted, latency, failover and geolocation methods
  • Application Load Balancer listener rules for HTTP application routing
  • Network Load Balancer selection for TCP, UDP and static addresses
  • AWS WAF web ACLs protecting public application endpoints
  • Amazon CloudFront distributions configured with origins, caching and HTTPS

Participants can select, configure and operate EC2-based compute services.

  • EC2 instance family selection from CPU, memory and network requirements
  • Amazon Machine Images controlled through versioning, patching and ownership
  • Instance metadata service version two configured for credential protection
  • Systems Manager Session Manager replacing inbound administrative SSH access
  • Patch Manager baselines scheduling operating system security updates
  • EC2 placement groups selected for availability, performance or partitioning

Participants can design scalable compute capacity using AWS elasticity services.

  • Auto Scaling groups configured with launch templates and health checks
  • Target tracking policies based on utilisation and application demand
  • Step scaling policies responding to defined CloudWatch alarm thresholds
  • Capacity planning using baseline demand, peak demand and headroom
  • Elastic Load Balancing distribution tested against failure scenarios
  • Mixed instances policies balancing availability, capacity and cost objectives

Participants can manage operational controls for container and serverless workloads.

  • Amazon ECS service definitions covering tasks, capacity and deployment settings
  • Amazon EKS operational responsibilities for clusters, nodes and workloads
  • AWS Lambda concurrency controls managing execution capacity and throttling
  • Container image governance using Amazon ECR scanning and lifecycle policies
  • Blue-green deployments compared with rolling and canary deployment methods
  • Runtime configuration managed through Parameter Store and Secrets Manager

Participants can manage AWS storage services against performance, retention and protection requirements.

  • Amazon S3 storage classes selected by access frequency and retention
  • S3 bucket policies, access points and Block Public Access
  • Lifecycle rules moving objects through archival and expiry stages
  • Amazon EBS volume types matched to throughput and latency requirements
  • EBS snapshots managed through retention, encryption and cross-region copying
  • Amazon EFS access points controlling shared filesystem application access

Participants can manage availability, backup and performance controls for AWS databases.

  • Amazon RDS deployment options selected for availability and administration
  • Multi-AZ failover behaviour compared with read replica scaling
  • Database parameter groups controlled through testing and change approval
  • Amazon Aurora replicas used for read scaling and regional recovery
  • AWS Backup policies covering database retention and vault protection
  • Performance Insights used to investigate database load and wait events

Participants can control AWS infrastructure changes using infrastructure as code practices.

  • AWS CloudFormation templates structured with parameters, resources and outputs
  • Change sets reviewed before stack updates affect production infrastructure
  • Stack policies protecting critical resources during automated updates
  • Nested stacks separating reusable components from workload-specific resources
  • Drift detection identifying changes outside approved CloudFormation templates
  • Version control workflows applying peer review to infrastructure changes

Participants can build monitoring coverage for AWS infrastructure and service health.

  • Amazon CloudWatch metrics selected from service objectives and failure modes
  • CloudWatch alarms configured with thresholds, evaluation periods and actions
  • CloudWatch Logs retention set against investigation and compliance needs
  • Centralised logging architecture using subscription filters and archive accounts
  • Synthetic monitoring with CloudWatch Synthetics for customer transaction checks
  • Service dashboards combining availability, latency, errors and capacity indicators

Participants can collect AWS audit evidence and identify configuration deviations.

  • AWS CloudTrail trails recording management events and data events
  • Organisation-wide CloudTrail logging delivered to protected central storage
  • AWS Config rules detecting required configuration and policy deviations
  • Conformance packs grouping Config rules for common control objectives
  • AWS Security Hub findings prioritised by severity, resource and exposure
  • Evidence registers linking technical controls to audit requirements

Participants can manage preventive, detective and responsive AWS security controls.

  • AWS KMS key policies controlling encryption key administration and use
  • Secrets Manager rotation policies protecting database and application credentials
  • Amazon GuardDuty findings triaged through severity, context and response playbooks
  • Amazon Inspector results used for vulnerability remediation prioritisation
  • Security incident runbooks defining containment, evidence and recovery actions
  • Privilege access reviews validating role assignments and dormant credentials

Participants can select and document recovery approaches for AWS workloads.

  • Recovery time objective and recovery point objective requirements quantified
  • Backup, pilot light, warm standby and active-active recovery patterns
  • AWS Backup plans defining schedules, retention, vaults and copy actions
  • Cross-region replication assessed for data consistency and recovery needs
  • Recovery runbooks sequencing failover, validation, communication and restoration
  • Disaster recovery tests recording results, defects and corrective actions

Participants can analyse AWS costs and implement practical cost controls.

  • AWS cost allocation tags designed for owner, service and environment
  • AWS Cost Explorer analysis identifying spend trends and cost drivers
  • AWS Budgets alerts configured for forecast, actual and usage thresholds
  • Savings Plans and Reserved Instances compared against workload stability
  • Compute rightsizing recommendations validated against utilisation and performance data
  • FinOps allocation reports assigning shared platform costs to consumers

Participants can manage capacity and availability risks using measurable service objectives.

  • Service level indicators defined for availability, latency, errors and saturation
  • Service level objectives translated into monitoring thresholds and escalation rules
  • Error budgets used to balance reliability work and feature changes
  • Capacity forecasts built from utilisation trends, growth rates and seasonality
  • Single points of failure identified through dependency mapping
  • Fault isolation boundaries designed across accounts, zones and regions

Participants can run controlled responses to AWS incidents and infrastructure changes.

  • Incident severity model based on impact, urgency and affected services
  • Cloud incident triage using alarms, logs, traces and recent changes
  • Major incident communications structured for technical teams and business stakeholders
  • Standard changes pre-authorised through documented risk and rollback criteria
  • Emergency change records capturing approvals, actions and retrospective review
  • Post-incident reviews using blameless analysis and corrective action tracking

Participants can prepare AWS workloads for controlled migration and operational handover.

  • AWS migration strategies assessed using the seven Rs framework
  • Application dependency mapping used to plan migration waves and sequencing
  • Landing zone readiness checked before workload migration approval
  • Operational acceptance criteria covering monitoring, backup, access and support
  • Cutover plans defining timing, validation, rollback and stakeholder communication
  • Service transition packs documenting ownership, runbooks and support arrangements

Participants can build, review and present a complete AWS cloud infrastructure management pack for a multi-account workload.

  • Multi-account AWS architecture designed against stated service and risk requirements
  • IAM, VPC and encryption controls documented within a security matrix
  • Compute, storage and database choices justified against workload demand
  • Monitoring, logging and incident runbooks assembled for operational readiness
  • Recovery, cost and capacity plans reviewed against service objectives
  • Peer architecture review recorded with findings, decisions and actions

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. AWS multi-account governance blueprint
  2. Cloud infrastructure architecture diagram
  3. IAM access control matrix
  4. Cloud monitoring and incident runbook set
  5. Backup and disaster recovery plan
  6. AWS cost optimisation action register

Who should attend

  • Cloud Infrastructure Engineer — needs repeatable methods for operating AWS services
  • Systems Administrator — is moving from server administration into AWS operations
  • Cloud Operations Manager — requires service controls, reporting and incident procedures
  • Network Engineer — needs to design and support AWS VPC connectivity
  • DevOps Engineer — needs governed infrastructure deployment and operational visibility
  • IT Service Manager — needs to manage cloud risks, service levels and costs

Skills and tools covered

AWS account governanceCloud network designInfrastructure operationsCloud security controlsDisaster recovery planningCloud cost management

Tools and standards

AWS Well-Architected Framework, AWS CloudFormation, Amazon CloudWatch, AWS Organizations

How the course runs

Training methodology

The course uses short instructor briefings followed by case work based on a multi-account AWS service. Participants review architecture choices, interpret monitoring data, assess IAM policies, plan recovery responses and prepare operational documentation. Group exercises examine incidents, cost anomalies, security findings and change requests. Simulations use realistic service-management decisions involving availability, access, capacity and recovery priorities. Each participant develops a cloud management pack through staged application planning, peer review and instructor feedback.

Requirements and prerequisites

Participants should understand basic IP networking, including subnets, routing, DNS and firewalls, and should have experience supporting Windows or Linux servers, applications, databases or virtual infrastructure. Familiarity with the AWS Management Console and common AWS services such as EC2 and S3 is helpful. Participants should be able to read basic technical diagrams and interpret operational incidents. Prior AWS certification, software development experience, Terraform expertise and advanced Linux administration are not required. The course explains AWS-specific services before applying them to management decisions.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand basic networking and have experience supporting IT systems. Familiarity with EC2, S3 or the AWS Management Console is helpful, but AWS certification is not required.

Bring a laptop suitable for web-based AWS activities and access to a current browser. Course materials are provided, and the instructor will explain any required lab access arrangements.

It is designed for infrastructure, cloud operations, systems, network, DevOps and IT service management professionals. It is most useful for people responsible for operating or governing AWS services rather than writing application code.

Architecture courses focus mainly on designing technical solutions, while developer courses focus on building applications. This course concentrates on operating, governing, securing, monitoring, recovering and controlling the cost of AWS infrastructure.

Participants create materials that can be adapted to an existing AWS account structure or a planned cloud service. These include access control matrices, monitoring plans, recovery procedures, cost actions and operational acceptance criteria.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes core AWS infrastructure and governance methods; the second week focuses on operations, security, recovery, cost control and the final management pack.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.

Ask on WhatsApp info@skillsetdevelopment.com