Cloud platforms look vast, but most work combines three ideas: computing, storage, and permissions. On AWS these are EC2, S3, and IAM. EC2 provides virtual servers that run your code. S3 stores files as objects, accessible from anywhere. IAM controls who can do what, to which resources. Seeing how the three fit together makes the rest of the platform far less intimidating.
The three blocks in plain terms
- EC2 is a rented computer. You choose its size and operating system, and you pay while it runs.
- S3 is a warehouse for files. Each file gets a name, and access rules decide who can read or write it.
- IAM is the lock system. Users and roles get only the permissions their work requires, nothing more.
When learning a new cloud service, ask which of these three it resembles. Most services are variations on computing, storage, or permissions.