Lesson 3 of 7 · Tools, Multi-Cloud & Certifications
SRE Skills to Know & Practical Training Path
You do NOT need to memorize 100 tools. Master one core tool in each of the 6 categories below, understand how
services map across AWS, Microsoft Azure, and Google Cloud, and practice the essential
commands.
THUMB RULE FOR LEARNERS: Pick one major cloud provider (AWS, Microsoft Azure, or
Google Cloud) and one core tool in each row below. The core SRE concepts (VMs, Private Networks,
Load Balancers, IAM, and Kubernetes) work the same way across all three clouds.
| Skill Category |
What It Does in Plain Words |
Core Tools to Learn |
Enterprise & Cloud Ecosystem |
| 1. Operating System & Scripting |
Runs the servers and automates repetitive manual tasks. |
Linux (Ubuntu/RHEL) + Python + Bash |
PowerShell (Azure/Windows), Go (Golang) |
| 2. Cloud Platforms (Equal Demand) |
Rents virtual servers, databases, and load balancers over the internet. |
AWS · Microsoft Azure · Google Cloud (GCP) |
Learn any ONE deeply first; concepts map 1:1 across all three |
| 3. Infrastructure as Code (IaC) |
Creates cloud servers using code files instead of clicking buttons by hand. |
Terraform / OpenTofu + Ansible |
AWS CloudFormation, Azure Bicep/ARM, Google Deployment Manager, Pulumi |
| 4. Containers & Orchestration |
Packages apps so they run anywhere and restarts them automatically if they crash. |
Docker + Kubernetes (K8s) |
Amazon EKS, Azure Kubernetes Service (AKS), Google Kubernetes Engine (GKE), OpenShift |
| 5. Monitoring & Observability |
Collects metrics, logs, and traces so you can see errors before users complain. |
Prometheus + Grafana + OpenTelemetry |
Datadog, Dynatrace, New Relic, Azure Monitor, AWS CloudWatch, Google Cloud Ops |
| 6. CI/CD & Incident Paging |
Tests and deploys code automatically; wakes up the on-call SRE if an outage happens. |
GitHub Actions / GitLab CI + PagerDuty |
Azure DevOps, Google Cloud Build, Jenkins, ArgoCD, Opsgenie, Rootly |
Whether a company runs on AWS, Microsoft Azure, or Google
Cloud, the underlying SRE building blocks are identical—only the service names change:
| SRE Building Block |
Amazon Web Services (AWS) |
Microsoft Azure |
Google Cloud (GCP) |
| Virtual Servers (VMs) |
Amazon EC2 |
Azure Virtual Machines |
Google Compute Engine (GCE) |
| Managed Kubernetes |
Amazon EKS |
Azure Kubernetes Service (AKS) |
Google Kubernetes Engine (GKE) |
| Serverless Containers |
AWS Fargate / App Runner |
Azure Container Apps (ACA) |
Google Cloud Run |
| Object Storage |
Amazon S3 |
Azure Blob Storage |
Google Cloud Storage (GCS) |
| Private Networking |
Amazon VPC |
Azure Virtual Network (VNet) |
Google Cloud VPC |
| Identity & Permissions |
AWS IAM |
Microsoft Entra ID (Azure AD) & RBAC |
Google Cloud IAM |
| Native Monitoring & Logs |
AWS CloudWatch & X-Ray |
Azure Monitor & Application Insights |
Google Cloud Operations (Cloud Logging/Monitoring) |
| CI/CD & DevOps Suite |
AWS CodePipeline |
Azure DevOps Pipelines |
Google Cloud Build & Deploy |
In interviews, you will almost always be asked: "A Kubernetes Pod is not starting. Which commands do you
run?" Memorize this exact sequence:
# Step 1: List all pods and check their STATUS (Running, Pending, CrashLoopBackOff, OOMKilled)
kubectl get pods -A
# Step 2: Inspect detailed events (shows why a pod failed to schedule, mount a secret, or pull an image)
kubectl describe pod <pod-name>
# Step 3: Read the application logs inside the container
kubectl logs <pod-name>
# Step 4: If the container just crashed and restarted, check the PREVIOUS crash logs!
kubectl logs <pod-name> --previous
# Step 5: Check how much CPU and Memory each pod is currently using
kubectl top pods --sort-by=memory
# Step 6: Undo a bad deployment immediately (Rollback to previous working version)
kubectl rollout undo deployment/<deployment-name>
| Certification Track |
Exam Format |
Why Hiring Managers Respect It |
ROI Priority |
| CKA (Certified Kubernetes Administrator) |
2-Hour Live Terminal Exam |
100% hands-on troubleshooting broken clusters, RBAC, etcd backup/restore, and networking across
EKS/AKS/GKE. |
#1 HANDS-ON EXAM |
Cloud Architect / DevOps SRE • AWS: Solutions Architect
/ DevOps Pro • Azure: AZ-104 / AZ-400 DevOps •
GCP: Associate Cloud / Pro Cloud DevOps SRE |
Scenario Architecture Exam |
Proves multi-zone high availability, IAM security, load balancing, and cloud automation skills on
your target cloud. |
CORE CLOUD CREDENTIAL |
| HashiCorp Terraform Associate |
Multiple Choice + CLI Labs |
Validates Infrastructure as Code state locking, reusable modules, and drift prevention across AWS,
Azure, and GCP. |
FAST WIN |
| Prometheus Certified Associate (PCA) |
CNCF Technical Assessment |
Proves PromQL querying, SLI/SLO instrumentation, recording rules, and Alertmanager routing mastery.
|
OBSERVABILITY SPEC |
Weekend Resume Project That Beats 90% of Theory-Only Resumes
Provision a free-tier VM or Kubernetes cluster on AWS, Microsoft Azure, or Google Cloud
using Terraform, deploy a containerized Python/Go web service, wire up Prometheus +
Grafana with a 99.9% SLO burn-rate alert, inject a simulated failure, and publish your
Blameless Postmortem on GitHub.