<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Cloud, One Concept at a Time]]></title><description><![CDATA[Cloud, One Concept at a Time]]></description><link>https://one-concept.hashnode.dev</link><image><url>https://cdn.hashnode.com/uploads/logos/6ac5d51de37c2438443dc0eb/e517db0c-9912-42c3-945d-4e948f142200.png</url><title>Cloud, One Concept at a Time</title><link>https://one-concept.hashnode.dev</link></image><generator>RSS for Node</generator><lastBuildDate>Mon, 19 Oct 2026 07:44:38 GMT</lastBuildDate><atom:link href="https://one-concept.hashnode.dev/rss.xml" rel="self" type="application/rss+xml"/><language><![CDATA[en]]></language><ttl>60</ttl><item><title><![CDATA[How a ₹2,300 AWS Bill Pushed Me Into DevOps (and Two AWS Certifications).]]></title><description><![CDATA[It all started with EVI.

EVI (originally EVI-SCAN) is a digital forensics project, and at some point, I started wondering: How does a complex application actually get distributed to people around the]]></description><link>https://one-concept.hashnode.dev/how-a-2-300-aws-bill-pushed-me-into-devops-and-two-aws-certifications</link><guid isPermaLink="true">https://one-concept.hashnode.dev/how-a-2-300-aws-bill-pushed-me-into-devops-and-two-aws-certifications</guid><category><![CDATA[AWS Certified Solutions Architect Associate]]></category><category><![CDATA[AWS]]></category><category><![CDATA[DevOps Journey]]></category><category><![CDATA[terraform-cloud]]></category><category><![CDATA[containers]]></category><dc:creator><![CDATA[Devesh Sahoo]]></dc:creator><pubDate>Fri, 16 Oct 2026 18:34:13 GMT</pubDate><enclosure url="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/7cb92ac8-09dc-4ed8-9b3d-dbe684c83fd0.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>It all started with EVI.</p>
<p><a href="https://github.com/debu-devesh/EVI-Platform"><img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/e8b1b0af-42bc-4b0c-ba67-47965aae1199.png" alt="" style="display:block;margin:0 auto" /></a></p>
<p>EVI (originally EVI-SCAN) is a digital forensics project, and at some point, I started wondering: <strong>How does a complex application actually get distributed to people around the world? And how would I even go about doing that?</strong></p>
<p>That question introduced me to cloud platforms, and eventually, AWS.</p>
<p>I started exploring services, trying to understand compute, storage, databases, and everything else AWS had to offer. I experimented, broke things, learned a little, and broke a few more things along the way.</p>
<p>I even hosted a static page using Nginx.</p>
<p>Then came my first memorable AWS lesson.</p>
<h2>The ₹2,300 lesson</h2>
<p>I left a NAT Gateway running for days without fully understanding the cost implications.</p>
<p>When the end of the month arrived, I found myself charged approximately ₹2,300.</p>
<p>As a student, I was absolutely shell-shocked.</p>
<p>I was scared of using AWS again.</p>
<p>I started small and became extremely cautious about leaving anything running. In hindsight, I had discovered a particularly bad combination: being clueless about cloud costs and being paranoid about spending money.</p>
<h2>Terraform: My accidental introduction to DevOps</h2>
<p>I decided to start with something manageable. I built a café website called Brew &amp; Bites using Amazon S3 and CloudFront.  </p>
<p><a href="https://github.com/debu-devesh/Brew-Bites-AWS-"><img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/b66c6f9f-09d9-495a-af43-5675507c15b5.png" alt="" style="display:block;margin:0 auto" /></a></p>
<p>Then I came across Infrastructure as Code and Terraform.</p>
<img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/626dd328-c8bb-42c3-bb96-1104bf9ef3c3.png" alt="" style="display:block;margin:0 auto" />

<p>I didn't initially care about reproducibility, version control for infrastructure, or the many other benefits of IaC.</p>
<p>I had one objective: <strong>I wanted to be able to clean up my AWS resources without worrying that I had forgotten something running in the background.</strong></p>
<p>And then I heard two magical words:</p>
<p><code>terraform destroy</code></p>
<p>That was the beginning of my journey into DevOps.</p>
<p>With Terraform, I could provision and tear down infrastructure more deliberately. Once I became more comfortable, I experimented with a three-tier architecture, incorporating EC2, S3, CloudFront, RDS, read replicas, CloudWatch, and a bastion host.</p>
<p>I was trying to explore as much as I could.</p>
<p><a href="https://www.linkedin.com/feed/update/urn:li:activity:7457326671801634817/"><img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/84442973-ed35-4961-895e-5adb0ff5b944.png" alt="" style="display:block;margin:0 auto" /></a></p>
<p>I had already worked with Flask and Gunicorn in Brew &amp; Bites . Running the application on EC2 meant connecting through SSH, installing dependencies, configuring the environment, and dealing with package and version mismatches.</p>
<p>If I wanted to save money, I could destroy the infrastructure with Terraform. But every time I recreated it, I had to go through much of that setup again.</p>
<p>It was frustrating.</p>
<p>I didn't know it at the time, but I was beginning to encounter the problems that make automation and containerization so useful.</p>
<h2>My first AWS certification</h2>
<p><a href="https://www.credly.com/badges/10800072-6f8c-4a47-a47f-3c09177d5c91/linked_in"><img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/3d85547d-7f31-4658-a7c7-8c4e3aa46452.png" alt="" style="display:block;margin:0 auto" /></a></p>
<p>Around this time, one of my professors told me about AWS certifications.</p>
<p>My first reaction was essentially: Are they free?</p>
<p>When I learned that the Solutions Architect exam cost $150 and that even Cloud Practitioner cost $100, I had to reconsider. That was a significant amount of money for me as a student.</p>
<p>So I started with AWS Certified Cloud Practitioner.</p>
<p>I picked up practice questions by <strong>Stephane Maarek</strong> on Udemy, opened them, and got absolutely demolished.</p>
<p>Why were there so many AWS services? Who was supposed to remember all of this?</p>
<p>I did what anyone struggling to understand something in the age of AI might do: I turned to ChatGPT, asked questions, cursed at confusing explanations, and kept learning.</p>
<p>Along the way, I encountered serverless computing and containers for the first time. I had heard of Docker, but the AWS container ecosystem was still unfamiliar territory.</p>
<p>I crammed as much as I could and eventually booked the exam.</p>
<p>During the exam, I kept second-guessing myself. I started panicking, then forced myself to calm down and give the questions a fair attempt. Having time to review my answers helped, too.</p>
<p>And then I passed.</p>
<p>I was so relieved. I hadn't wasted that money after all.</p>
<p>I passed AWS Certified Cloud Practitioner on 29 June 2026</p>
<p>It was my first certification, but more importantly, it gave me the confidence to keep going.</p>
<h2>Discovering containers and Amazon ECS</h2>
<p>After Cloud Practitioner, I started exploring serverless services, containers, and AWS managed services in greater depth.</p>
<p>That's when I came across Amazon ECS.</p>
<p>Remember my frustration with repeatedly connecting to EC2, installing packages, and dealing with version mismatches?</p>
<p>Containers offered a better way to package the application and its dependencies, while ECS gave me a way to manage running containers without having to manage every aspect of the underlying infrastructure myself.</p>
<p>I reworked Brew &amp; Bites to use containers.  </p>
<p><a href="https://www.linkedin.com/feed/update/urn:li:activity:7482002521994231808/"><img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/c2eed5c7-00b2-416f-b780-7e4c2dec1270.png" alt="" style="display:block;margin:0 auto" /></a></p>
<p>For me, this was an important moment because I wasn't learning a service simply because it appeared in an exam question. I was exploring it because I had a problem, and the service offered a way to address it.</p>
<p>The project was becoming a place to experiment, make mistakes, and understand why particular architectural choices mattered.</p>
<h2>The Solutions Architect journey</h2>
<p>Eventually, I heard about the Solutions Architect role itself.</p>
<p>And I became excited about the possibility of learning something new.</p>
<p>Cloud Practitioner had familiarized me with AWS, but I wanted to develop my ability to reason about infrastructure and solve architectural problems.</p>
<p>My next step was AWS Certified Solutions Architect – Associate.</p>
<p>I discovered Tutorials Dojo's practice tests and approached preparation much as I had before: explore, get frustrated, rage a little, calm down, and learn.</p>
<p>Then I attempted a timed practice test.</p>
<p>I managed around 35 questions out of 65 before the entire two hours had disappeared.</p>
<p>I remember thinking: What on earth is this?</p>
<p>The sheer size and complexity of the questions humbled me. I stopped preparing for about a month, focused on other things, and continued working on Brew &amp; Bites.</p>
<p>Eventually, I returned to my preparation and set myself a deadline.</p>
<p>I worked through practice sets one after another, asked questions about the concepts I didn't understand, and gradually expanded my knowledge. I started recognizing patterns in the questions and becoming more comfortable with scenarios that had initially felt completely unfamiliar.</p>
<p>There was still plenty of self-doubt.</p>
<p>When I finally scheduled the exam, I was nervous. The stakes felt even higher because the exam cost $150.</p>
<p>I wouldn't say I felt completely prepared. Instead, I trusted myself to work through the situations presented to me.</p>
<p>I passed AWS Certified Solutions Architect – Associate on 8 September 2026,  </p>
<img src="https://cdn.hashnode.com/uploads/covers/6ac5d51de37c2438443dc0eb/fc3eb60f-46e7-4453-86d2-b2e8468b4d2b.png" alt="" style="display:block;margin:0 auto" />

<p>Unlike my first certification, I had to wait for the result. Seeing that congratulations message and the blue certification badge was an incredible feeling.</p>
<p>It was a big moment for my confidence, and, of course, my wallet.</p>
<p>Passing Cloud Practitioner had also earned me a 50% discount voucher for the next exam, so my SAA exam cost $75 rather than the full $150.</p>
<p>That discount was a welcome bonus.</p>
<h2>Returning to the project that started everything</h2>
<p>So, what happened to EVI?</p>
<p>The very project that introduced me to cloud computing was still there, and I was beginning to look at it differently.</p>
<p>Because EVI is a digital forensics application, security matters enormously. I started thinking more deliberately about security, availability, and the consequences of architectural decisions.</p>
<p>The AWS Well-Architected Framework and AWS documentation helped me understand these considerations more systematically.</p>
<p>I was beginning to think about trade-offs.</p>
<p>There isn't always one universally correct architectural choice. Decisions depend on the application's purpose, its users, its security requirements, its operational constraints, and its budget.</p>
<p>And EVI gave me a reason to consider those questions beyond an exam scenario.</p>
<h2>Local-first or web-based?</h2>
<p>My initial idea was to distribute EVI as a desktop application that people could run on their own computers.</p>
<p>Since the application uses a local LLM, this approach made sense: the processing could happen on the user's machine, and their data would not need to leave their computer for that local workflow.</p>
<p>However, I discovered a practical limitation. I couldn't simply package LM Studio itself into my application and expect everything to work out of the box. Users would need to install and configure the required local inference software themselves, or I would need to explore another supported way of distributing the model runtime.</p>
<p>The local-first approach remained a sensible option, but it raised questions about installation, compatibility, hardware requirements, and the overall user experience.</p>
<p>Then I started thinking about a web version.</p>
<p>What would its architecture look like? How would authentication and access control work? What would need to be protected? How would I approach availability? What should run locally, and what could reasonably be handled by cloud infrastructure?</p>
<p>I started designing an architecture with those questions in mind, and I later deployed a containerized version on AWS, which I describe below. The security design is still evolving, and I'm not presenting it as a finished production system.</p>
<p>The original question was about getting an application to users around the world.</p>
<p>Now I'm also asking what it takes to design that application responsibly for the people who will use it.</p>
<h2>Where EVI is now</h2>
<p>The project that started all this is now containerized and deployed on AWS. Terraform provisions the VPC, ALB, ECS Fargate, EFS and Secrets Manager, and a GitHub Actions pipeline scans images with Trivy and deploys through OIDC, with no long-lived keys.</p>
<p>Along the way I debugged ALB health checks failing on a 302 redirect and secrets access failing on the wrong IAM role.</p>
<p>The code is open source: <a href="https://github.com/debu-devesh/EVI-Platform">EVI-Platform on GitHub</a>.</p>
<h2>What I learned</h2>
<ul>
<li><p>Set a billing alert before you build anything. A forgotten NAT Gateway is an expensive way to learn.</p>
</li>
<li><p>Terraform started as a cleanup tool for me, and that was reason enough to learn it.</p>
</li>
<li><p>Learn a service when you have a problem it solves. It sticks far better than learning it for an exam.</p>
</li>
<li><p>Passing two certifications is a foundation, not the finish line. Operating real systems teaches different things.</p>
</li>
</ul>
<h2>What's next</h2>
<p>I'm learning Kubernetes next, then adding monitoring with Prometheus and Grafana. I'm also looking for a DevOps/cloud internship, and I'd like to apply to the AWS Community Builders program. If you work in this space, I'd love to hear what you'd learn next.</p>
<p>Thanks for reading.</p>
]]></content:encoded></item></channel></rss>