AWS Account Setup

Before You Start: What Are You Deploying?

This track teaches AWS deployment mechanics. Before diving in, consider what you're deploying:

Deploying a frontend/static site? You might not need AWS at all—platforms like Vercel handle this with zero configuration.

Deploying a complete SaaS product? You'll also need:

• User authentication and sessions
• Subscription billing (Stripe integration)
• Transactional email and notifications
• Multi-tenant data architecture

Your options for the backend:

1. Build it yourself — this track + our SaaS Starter template
2. Use a backend platform — services like StackForDevs provide auth, billing, and notifications as APIs, so you only deploy your frontend

This track focuses on deployment infrastructure. Make sure you know what you're deploying before proceeding.

---

Why AWS?

Amazon Web Services is the most widely-used cloud platform, powering everything from startups to Netflix. While it has a steeper learning curve than platforms like Vercel, it offers:

• Complete control over your infrastructure
• Enterprise-grade reliability (99.99% uptime SLAs)
• Compliance certifications (HIPAA, SOC2, PCI-DSS)
• Massive ecosystem of 200+ services
• Free tier that's generous enough for learning and small projects

Step 1: Create Your AWS Account

1.1 Go to AWS Signup

Open your browser and navigate to:

https://portal.aws.amazon.com/billing/signup

1.2 Enter Your Email and Account Name

• Email address: Use an email you check regularly - AWS sends important security and billing notifications here
• Account name: Choose something descriptive like "MyCompany Production" or "Personal Projects"

1.3 Verify Your Email

AWS will send a verification code to your email. Enter it to continue.

1.4 Create Root Password

Create a strong, unique password. This is your "root" account - the most powerful credential in your AWS account.

Password requirements:

• Minimum 8 characters
• Include uppercase, lowercase, numbers, and symbols
• Don't reuse passwords from other sites

1.5 Enter Contact Information

Select Personal or Business account type, then fill in:

• Full name
• Phone number
• Country
• Address

1.6 Add Payment Method

AWS requires a valid credit or debit card even for the free tier. You'll see a temporary $1 authorization (refunded within 3-5 days).

1.7 Verify Your Identity

AWS will call or text you with a verification code. Enter it to prove you're human.

1.8 Select Support Plan

Choose Basic Support (Free) unless you need paid technical support. You can upgrade later.

1.9 Complete Signup

Click Complete sign up. Your account will be ready in a few minutes (sometimes up to 24 hours for full activation).

Step 2: Set Up Billing Alerts (Critical!)

Before doing anything else, set up billing alerts so you never get surprised by charges.

2.1 Access Billing Dashboard

1. Sign in to the AWS Console at https://console.aws.amazon.com
2. Click your account name in the top-right corner
3. Select Billing and Cost Management

2.2 Enable Billing Alerts

1. In the left sidebar, click Billing preferences
2. Under Alert preferences, click Edit
3. Enable:
   • Receive AWS Free Tier alerts - warns you before exceeding free limits
   • Receive CloudWatch billing alerts - enables custom budget alerts
4. Enter your email address
5. Click Update

2.3 Create a Budget

1. In the left sidebar, click Budgets
2. Click Create budget
3. Select Use a template (simplified)
4. Choose Zero spend budget (alerts if ANY charges occur)
5. Enter your email for notifications
6. Click Create budget

2.4 Create a Monthly Budget (Optional)

For ongoing projects, also create a monthly cost budget:

1. Click Create budget again
2. Select Use a template (simplified)
3. Choose Monthly cost budget
4. Set your threshold (e.g., $10)
5. Enter your email
6. Click Create budget

Step 3: Secure Your Root Account with MFA

Your root account is like the master key to your entire AWS infrastructure. Secure it with Multi-Factor Authentication (MFA).

3.1 Access Security Credentials

1. Click your account name in the top-right corner
2. Select Security credentials
3. You may see a warning about using root credentials - that's fine for now

3.2 Set Up MFA

1. Scroll to Multi-factor authentication (MFA)
2. Click Assign MFA device
3. Enter a device name (e.g., "MyPhone")
4. Select Authenticator app
5. Click Next

3.3 Configure Your Authenticator

1. Install an authenticator app if you don't have one:

   • Google Authenticator (iOS/Android)
   • Authy (iOS/Android/Desktop)
   • 1Password (if you use it for passwords)

2. In the app, add a new account by scanning the QR code shown by AWS

3. Enter two consecutive MFA codes from the app (wait for the code to refresh between entries)

4. Click Add MFA

Step 4: Create an IAM User (Don't Use Root!)

The root account should only be used for billing and account management. For daily work, create an IAM (Identity and Access Management) user.

4.1 Access IAM

1. In the AWS Console search bar, type "IAM"
2. Click IAM to open the Identity and Access Management dashboard

4.2 Create a New User

1. In the left sidebar, click Users
2. Click Create user
3. Enter a username (e.g., "admin" or your name)
4. Check Provide user access to the AWS Management Console
5. Select I want to create an IAM user
6. Choose Custom password and enter a strong password
7. Uncheck Users must create a new password at next sign-in (unless others will use this)
8. Click Next

4.3 Set Permissions

1. Select Attach policies directly
2. Search for and check AdministratorAccess
3. Click Next

4.4 Review and Create

1. Review your settings
2. Click Create user
3. Important: Save the sign-in URL shown (it looks like https://123456789012.signin.aws.amazon.com/console)

4.5 Set Up MFA for IAM User

1. Click on your newly created user
2. Select the Security credentials tab
3. Under Multi-factor authentication (MFA), click Assign MFA device
4. Follow the same MFA setup process as before

4.6 Create Access Keys (for CLI)

1. Still in the Security credentials tab
2. Scroll to Access keys
3. Click Create access key
4. Select Command Line Interface (CLI)
5. Check the confirmation checkbox
6. Click Next
7. Add a description (e.g., "My laptop CLI")
8. Click Create access key
9. Critical: Download the CSV file or copy both keys NOW - you cannot view the secret key again!

Step 5: Sign Out of Root, Sign In as IAM User

1. Click your account name in the top-right corner
2. Click Sign out
3. Go to your IAM sign-in URL (saved in step 4.4)
4. Enter your IAM username and password
5. Enter your MFA code

Quick Reference: Your AWS Credentials

You now have several credentials. Here's what each is for:

What's Next?

Your AWS account is now secure and ready to use. In the next lesson, we'll install and configure the AWS CLI so you can control AWS from your terminal.