← All roles
Interview practice

Cloud Engineer (AWS / Azure)

2–5 years · Mid — AWS / Azure · Networking · IAM · Cost · Serverless · Storage

0–2 years 2–5 years 5–8 years 8+ years
technical Cost 1 of 6
You notice a sudden spike in monthly AWS costs. What steps do you take to identify the cause?
What a strong answer covers

Accesses the Cost Explorer to analyse usage patterns; checks for any new services launched recently; reviews CloudTrail logs for unusual activity; evaluates the billing dashboard for specific resource spending.

The follow-up you would get

The analysis shows no new services. What other factors could contribute to cost spikes?

Could you have answered that?
technical Database Access Patterns 2 of 6
An application using DynamoDB is experiencing increased latency. What do you consider to improve performance?
What a strong answer covers

Examines the partition key design for hot partitions; assesses read/write capacity settings and considers on-demand mode; evaluates the use of indexes and query patterns; looks into caching strategies with DAX or external caches.

The follow-up you would get

The partition key design is optimal. What else could cause increased latency?

Could you have answered that?
scenario IAM 3 of 6
A team member reports they cannot deploy a service due to insufficient permissions, but you believe they should have access. What's your immediate course of action?
What a strong answer covers

Confirms the user's IAM role and policies; checks any recent changes made to permissions; looks for service control policies affecting access; audits resource-based policies that might be blocking; uses AWS CLI or Azure CLI to simulate the policy evaluation.

The follow-up you would get

After granting temporary permissions, what measures do you take to ensure least privilege going forward?

Could you have answered that?
ownership A feature you owned end to end 4 of 6
Describe a feature you owned from start to finish, including the challenges you faced.
What a strong answer covers

Identifies the feature and its purpose; explains specific challenges such as scaling, security, or integration; details the decision-making process and trade-offs; describes how the feature was tested and deployed; reflects on the outcomes and user feedback.

The follow-up you would get

What would you change about the approach you took?

Could you have answered that?
technical IAM 5 of 6
A developer reports they cannot access an S3 bucket despite having the correct permissions. How do you troubleshoot this issue?
What a strong answer covers

Verifies the bucket policy to check for explicit denies; checks the IAM policy for correct resource specifications; examines the S3 access logs for denied requests; ensures there are no Service Control Policies affecting access.

The follow-up you would get

The policies seem correct. What else might influence access to the S3 bucket?

Could you have answered that?
technical Serverless 6 of 6
A Lambda function that previously completed in 200ms now takes over 1 second. What do you check first to diagnose the issue?
What a strong answer covers

Inspects the CloudWatch logs for error messages or timeouts; evaluates the function's concurrency limits and throttling behavior; considers cold start times based on the runtime environment; checks any external service dependencies for latency.

The follow-up you would get

There are no errors in the logs. What else could impact the Lambda execution time?

Could you have answered that?
That is this set.

Load six more — you will get questions you have not seen first.

Give me six more →

Say your answer out loud before revealing. Reading the answer first feels like learning and is not.