How to Get Into Cloud Computing: Roadmap for Beginners
Your complete beginner's roadmap to AWS, Azure, and cloud certifications
Cloud computing is the backbone of modern IT infrastructure, and demand for cloud-skilled professionals continues to surge. Whether you're a network engineer, sysadmin, or help desk technician, transitioning to cloud roles can accelerate your career. This guide provides a practical roadmap for beginners, covering foundational concepts, hands-on CLI exercises with AWS and Azure, and certification strategies. You'll learn how to set up a free tier account, deploy your first virtual machine, configure storage, and understand IAM basics. Each step includes real commands and outputs to build muscle memory. By the end, you'll have a clear path to earning your first cloud certification.
Create Your AWS Free Tier Account
Start by signing up for an AWS Free Tier account at aws.amazon.com/free. This gives you 12 months of free access to core services like EC2, S3, and RDS. Use a valid email and credit card for verification (you won't be charged unless you exceed limits). After signing in, navigate to the AWS Management Console and enable Multi-Factor Authentication (MFA) on your root account for security.
aws configure
AWS Access Key ID [None]: AKIAIOSFODNN7EXAMPLE
AWS Secret Access Key [None]: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
Default region name [None]: us-east-1
Default output format [None]: jsonAlways create an IAM user with admin permissions and use those credentials instead of the root account for daily tasks.
Never share your AWS secret access key. Store it in a secure location like AWS Secrets Manager.
Launch Your First EC2 Instance
EC2 (Elastic Compute Cloud) provides virtual servers in the cloud. From the AWS Console, go to EC2 > Launch Instance. Choose Amazon Linux 2 AMI, t2.micro (free tier eligible), and create a new key pair. Configure security group rules to allow SSH (port 22) from your IP only. Once launched, connect via SSH using the private key file.
chmod 400 my-key-pair.pem
ssh -i my-key-pair.pem ec2-user@54.123.45.67
The authenticity of host '54.123.45.67 (54.123.45.67)' can't be established.
ECDSA key fingerprint is SHA256:xxxxxxxxxxxxxxxxx.
Are you sure you want to continue connecting (yes/no)? yes
[ec2-user@ip-10-0-0-1 ~]$Use the 't2.micro' or 't3.micro' instance type to stay within the free tier. Monitor your usage in the Billing Dashboard.
Deploy a Virtual Machine in Azure
Azure offers a similar free tier with $200 credit for the first month. Sign up at azure.microsoft.com/free. Use the Azure CLI to create a resource group and deploy a Linux VM. This demonstrates Infrastructure as Code (IaC) principles and prepares you for AZ-900 and AZ-104 exams.
az login
az group create --name MyResourceGroup --location eastus
az vm create \
--resource-group MyResourceGroup \
--name MyLinuxVM \
--image UbuntuLTS \
--admin-username azureuser \
--generate-ssh-keys
{
"fqdns": "",
"id": "/subscriptions/.../virtualMachines/MyLinuxVM",
"location": "eastus",
"name": "MyLinuxVM",
"powerState": "VM running",
"publicIpAddress": "52.168.1.100"
}Use 'az vm list' to see all your VMs and 'az vm stop' to avoid unnecessary charges when not in use.
Understand IAM and Role-Based Access Control
Identity and Access Management (IAM) is critical for cloud security. In AWS, create an IAM user with programmatic access and attach the 'AmazonS3ReadOnlyAccess' policy. Test the permissions using the AWS CLI. In Azure, this is done via Azure RBAC roles. Understanding these concepts is essential for the AWS Cloud Practitioner and Azure Fundamentals exams.
aws iam create-user --user-name s3-reader
aws iam attach-user-policy \
--user-name s3-reader \
--policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess
aws iam create-access-key --user-name s3-reader
{
"AccessKey": {
"UserName": "s3-reader",
"AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
"Status": "Active",
"SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
}
}Always follow the principle of least privilege. Never attach full admin policies to users unless absolutely necessary.
Store and Retrieve Data with S3 and Azure Blob Storage
Object storage is a core cloud service. In AWS, create an S3 bucket, upload a file, and set public read permissions (for learning only). In Azure, use Blob Storage with a container. Practice CLI commands to list, upload, and download objects. This maps to AWS Cloud Practitioner domain 'Cloud Technology and Services' and Azure Fundamentals domain 'Azure Storage Services'.
# AWS S3
aws s3 mb s3://my-bucket-12345 --region us-east-1
echo "Hello Cloud" > test.txt
aws s3 cp test.txt s3://my-bucket-12345/
aws s3 ls s3://my-bucket-12345/
# Azure Blob Storage
az storage container create --name mycontainer --account-name mystorageaccount
echo "Hello Azure" > test.txt
az storage blob upload --container-name mycontainer --file test.txt --name test.txt
az storage blob list --container-name mycontainer --output tableUse 'aws s3 presign' to generate time-limited URLs for secure file sharing without making buckets public.
Learn Basic Networking: VPC and Virtual Networks
Cloud networking is essential for connecting resources securely. In AWS, create a VPC with a public subnet and an internet gateway. Launch an EC2 instance in that subnet. In Azure, create a virtual network (VNet) with a subnet and a network security group (NSG). Test connectivity by pinging the instance's public IP. This foundational knowledge appears in both AWS Cloud Practitioner and Azure Fundamentals exams.
# AWS VPC creation
aws ec2 create-vpc --cidr-block 10.0.0.0/16 --query Vpc.VpcId --output text
aws ec2 create-subnet --vpc-id vpc-12345 --cidr-block 10.0.1.0/24
aws ec2 create-internet-gateway --query InternetGateway.InternetGatewayId --output text
aws ec2 attach-internet-gateway --vpc-id vpc-12345 --internet-gateway-id igw-12345
# Azure VNet creation
az network vnet create \
--name MyVNet \
--resource-group MyResourceGroup \
--address-prefix 10.0.0.0/16 \
--subnet-name MySubnet \
--subnet-prefix 10.0.1.0/24Use the '10.0.0.0/16' CIDR range for your VPC to allow plenty of room for subnets. Avoid overlapping IP ranges if you plan to connect to on-premises networks.
Prepare for Your First Cloud Certification
Start with AWS Cloud Practitioner (CLF-C02) or Azure Fundamentals (AZ-900). Both exams cover cloud concepts, core services, pricing, and security. Study the official exam guides, take practice tests, and use free resources like AWS Skill Builder or Microsoft Learn. Schedule your exam online or at a testing center. The AWS Cloud Practitioner exam has 65 questions, 90 minutes, and a passing score of 700/1000. AZ-900 has 40-60 questions, 85 minutes, and a passing score of 700/1000.
# AWS Cloud Practitioner exam domains:
# Domain 1: Cloud Concepts (26%)
# Domain 2: Security and Compliance (25%)
# Domain 3: Cloud Technology and Services (33%)
# Domain 4: Billing, Pricing, and Support (16%)
# Azure Fundamentals exam domains:
# Domain 1: Describe cloud concepts (25-30%)
# Domain 2: Describe Azure architecture and services (35-40%)
# Domain 3: Describe Azure management and governance (30-35%)Focus on Domain 3 for AWS Cloud Practitioner (Cloud Technology and Services) as it carries the highest weight. For AZ-900, Domain 2 (Azure architecture and services) is the largest section.
Key tips
Always use the AWS Free Tier or Azure free account for hands-on practice. Set budget alerts to avoid surprise charges.
Learn one cloud provider deeply first (AWS or Azure), then the other. Concepts like IAM, VPC, and object storage transfer directly.
Join cloud-focused communities like r/aws, r/Azure, or the Cloud Resume Challenge to network and get feedback.
Build a small portfolio project: deploy a static website on S3 with CloudFront, or host a simple app on Azure App Service.
Use the AWS Well-Architected Framework and Azure Well-Architected Framework principles to design cost-effective, secure solutions.
Schedule your certification exam 4-6 weeks out and create a study plan. Use official practice exams to identify weak areas.
Frequently asked questions
Do I need programming experience to start cloud computing?
No, programming is not required for entry-level cloud roles or certifications like AWS Cloud Practitioner or Azure Fundamentals. However, learning basic scripting (Bash, Python) will help you automate tasks and pass associate-level exams like AWS Solutions Architect or AZ-104.
Which cloud certification should I get first: AWS or Azure?
Both are excellent. AWS Cloud Practitioner (CLF-C02) is slightly more popular and has more learning resources. Azure Fundamentals (AZ-900) is ideal if your organization uses Microsoft products. Choose based on your current environment or job market in your area.
How much does it cost to take the AWS Cloud Practitioner exam?
The AWS Cloud Practitioner exam costs $100 USD. You can often get a 50% discount voucher by completing the free AWS Skill Builder exam prep course. The Azure Fundamentals exam costs $99 USD, with occasional free vouchers during Microsoft events.
Can I get a cloud job with just a foundational certification?
Yes, but it's easier if you combine the certification with hands-on projects. Many cloud support roles, junior cloud engineers, and cloud operations positions accept foundational certs plus practical experience. Build a portfolio and highlight your CLI and console skills.
What is the difference between AWS and Azure for beginners?
AWS has a larger market share and more services, but Azure integrates seamlessly with Microsoft tools like Active Directory and Office 365. Both offer free tiers and similar core services (compute, storage, networking). The learning curve is comparable; choose based on your career goals.
Related glossary terms
Browse full glossary →Practice with real exam questions
Apply what you just learned with exam-style practice questions.