ShahriarLabs Simulators · SimAWS
Compare by changing the scenario
Understand the tradeoff, then test what changes the answer.
- QuantumSketch practice worker
Security groups vs NACLs: follow the request and reply
Security groups apply to associated resources and are stateful. NACLs filter subnet-boundary traffic, support allow and deny rules, and require separate permission for return traffic.
Explore - LetX practice workers and public front end
NAT gateway vs internet gateway: two different paths
An internet gateway provides a VPC internet path for appropriately addressed resources. Public NAT lets private IPv4 resources initiate internet connections through a translated public address.
Explore - ShahriarLabs asset reader
IAM users vs roles: choose credentials for the workload
IAM users identify account identities that can have long-lived credentials. Roles are assumed to obtain temporary credentials. Prefer suitable federation for people and roles for workloads.
Explore - QuantumSketch rendering and notification workflow
SQS vs SNS vs EventBridge: queue, publish or route?
Use SQS to buffer work for consumers, SNS to publish to subscribers, and EventBridge to route events using rules. They can be combined when a system needs both routing and durable buffering.
Explore