Understand infrastructure as code, declarative provisioning, repeatability, idempotency, and the desired-state model.

Learn CloudFormation templates, stacks, resources, parameters, outputs, and the CloudFormation lifecycle.

Use Parameters, Mappings, Conditions, Outputs, intrinsic functions, and resource attributes to create reusable templates.

Make templates configurable and expose useful deployment values safely.

Understand implicit and explicit dependencies, ordering, references, and DependsOn.

Preview infrastructure changes before executing stack updates.

Manage stack updates, failure behavior, rollback, and recovery.

Detect differences between CloudFormation's expected configuration and the actual resource state.

Protect critical stack resources from unintended updates.

Build modular infrastructure using nested stacks and shared templates.

Deploy CloudFormation stacks across multiple accounts and Regions from a centralized model.

Share infrastructure values between stacks and import existing supported resources into CloudFormation management.

Understand template preprocessing, AWS transforms, and when macros are appropriate.

Use CloudFormation registry resource types and understand third-party extensions.

Learn the AWS Cloud Development Kit, constructs, stacks, apps, synthesis, and infrastructure expressed in programming languages.

Create reusable constructs and organize infrastructure code for teams and environments.

Deploy CDK applications consistently across AWS accounts and Regions using environment configuration and context.

Package Lambda code, containers, and other application assets as part of CDK deployments.

Automate AWS operations safely using CLI profiles, environment variables, query filters, and scripts.

Automate operational procedures using Systems Manager Automation documents and controlled parameters.

Trigger automation from AWS events and schedules using EventBridge rules and targets.

Validate templates and inspect their structure before deployment.

Use local linting and policy analysis to catch infrastructure problems before deployment.

Embed encryption, least privilege, network controls, logging, and secure defaults directly into IaC.

Standardize tags and governance metadata across infrastructure deployments.

Control resource deletion behavior using DeletionPolicy and UpdateReplacePolicy.

Understand custom resources and Lambda-backed provisioning for cases not directly supported by CloudFormation.

Use CloudFormation hooks and policy controls to prevent noncompliant infrastructure from being deployed.

Package approved infrastructure patterns as reusable products for controlled self-service deployment.

Organize applications and associate infrastructure resources for operational visibility and governance.

Use Organizations, OUs, StackSets, and governance controls to standardize infrastructure across accounts.

Integrate infrastructure validation, review, change previews, and deployment into CI/CD pipelines.

Test infrastructure definitions using validation, assertions, integration checks, and post-deployment verification.

Manage stack creation, update, termination protection, and controlled cleanup in development environments.

Use IaC and automation to make cost controls repeatable and visible.

Keep credentials and secrets out of infrastructure source code using managed AWS secret mechanisms.

Apply controlled change management using version control, reviews, change sets, approvals, and rollback plans.

Combine CloudFormation, validation, security, change management, monitoring, and automation into a production-style workflow.