Integrate AWS services into a private order API, a recoverable queue consumer and an order-report workflow. Each project asks you to connect previously taught capabilities and verify concrete business results.
The course contains three independent challenges with complete explanatory solutions. Application code, interfaces, synthetic data and unrelated fixtures are supplied so you can focus on service connections, permissions, failure handling and cleanup.
What You Will Learn
- Launch a signed-in order API backed by Lambda, DynamoDB and scoped configuration
- Keep public health available while rejecting anonymous and invalid-token requests
- Recover poison messages only after their corrected business result exists
- Protect stored orders when new duplicate messages are processed
- Build a store/report workflow from S3 input and managed configuration
- Handle temporary, permanent and unauthorized failures with observable outcomes
- Verify downloadable report bytes and remove owned state and private files
Who This Course Is For
This course is for learners who have completed the relevant AWS service labs and want independent integration practice.
Prerequisites: Choose the matching branch; the projects are independent. PS01: JWT-protected API (A05), managed credentials (SEC03) and application parameters (SEC04), with their guided prerequisites. PS02: bounded queue failures (Q03) and duplicate protection (Q05), with their prerequisites; SNS is not required. PS03: guarded workflow retries (EV05), S3 object processing (FN05), SEC03 and SEC04, with their prerequisites; EventBridge and the API project are not required.
Learning environment: All activities run in a provided browser-based LabEx Linux environment. Use Terminal for AWS CLI commands and AWS View, next to Terminal, to inspect the same resource and application state. Tools and the connection are prepared; you do not need a personal AWS account or access keys. Each lab starts independently in a fresh VM. AWS View correlates API decisions, safe logs, configuration, queue processing, workflow history and table data. No screenshots or report submission are required.
Frequently Asked Questions
Do I need to complete the three challenges in one VM?
No. Each starts independently. Reuse knowledge, not resources, credentials or tokens. The recommended stages follow the API, messaging and workflow service courses.
What does the private API challenge verify?
Signed-in requests create and retrieve computed orders, and configuration changes affect later pricing. Anonymous or invalid-token requests stop before Lambda; invalid input or denied configuration creates no order. JWT route access does not establish per-user ownership. Keep synthetic passwords, tokens and partner credentials private.
When can I acknowledge a failed message?
After the corrected job produces its real business result. Then remove the original failed delivery and test new duplicates. Conditional writes protect one business effect without promising an atomic queue/database transaction or exactly-once delivery.
How is the report workflow assessed?
Execution history, stored orders and downloaded report bytes demonstrate completion under temporary failure and repeated execution. Permanent or unauthorized failures must remain clear. Complete functional checks, remove only owned state and credential-bearing configuration, and preserve unrelated resources.
