Free roadmap for becoming a cloud architect in 2026 (Chatgpt & Claude Powered)
incomplete
So, I was working on my portfolio site and for embedding some badges I earned from coursera with my university mail. I went to credly and there, an interesting graph caught my attention.
It was a graph of no. of jobs posted where “X” was mentioned. Here “X” is a sub-division in the IT industry (like- Web development, security, AI, ML etc.). The graph of web developer jobs was on a decline and that’s when I thought I need to prepare for the future. So, I did some research and tried to anticipate briefly about my future whereabouts and came to the decision of slow-maxxing a skill under the hood and may be one day switch my field.
I chose to learn the cloud and immediately went to chatgpt and later claude (both free) for a solid plan. So, with some minor changes that are suited to me I am going to document the whole plan here, so not only I can use this as a todo but also someone else might be looking for something like this.
My personal constraints: The initial learning and implementation phase should be free of cost and once the foundation is strong enough I might go after a paid certification as well.
0. Three adjustments that make this roadmap a “2026” one, not some obsolete ai crap.
1. The AWS Free Tier isn’t what it used to be. Since mid-2025, new AWS accounts get $100–200 in credits that expire after 6 months (or when spent) — not the old “12 months of free EC2/RDS.” This changes your practice strategy: you can’t leave things running for a year. You need billing alarms from day one, and you need to build the habit of tearing infrastructure down after every practice session (this is itself a skill real cloud engineers need — cost discipline).
2. “Learn Terraform” is now a fork in the road. HashiCorp was acquired by IBM, Terraform’s license changed (it’s no longer fully open-source), and HCP Terraform dropped its free tier in early 2026. The community fork, OpenTofu, stayed fully open-source (Linux Foundation governed), is now genuinely production-grade, and is syntactically identical — the same HCL, the same workflow, the same skills. For a free, no-strings learning path, learn OpenTofu (tofu CLI). Your resume still says “Infrastructure as Code / Terraform-compatible” because the skill transfers 1:1.
3. Store your state locally, not in a paid remote backend. Since HCP Terraform’s free tier is gone, use local state files (or a free S3 bucket + DynamoDB lock table you own) while practicing. This is actually closer to what you’d wire up yourself in a real job anyway.
Nothing else below assumes a paid tool.
1. The methodology — this is the part that actually matters
Most people who fail at self-teaching infrastructure don’t fail because they picked the wrong topics. They fail because they read and watch instead of build and break, so nothing survives contact with a real interview or a real production incident. Here is the operating system for your practice.
Principle 1 — Build first, read to unblock, not to prepare
Don’t read a whole networking course before touching a VPC. Read just enough to attempt the build, hit a wall, then read exactly the thing that unblocks you. This inverts the ChatGPT plan’s implicit order (learn everything about networking → then build). Reading-first feels productive but doesn’t create memory. Struggling-then-resolving does.
Principle 2 — The Build → Break → Fix → Document → Explain loop (BBFDE)
This is your unit of practice, every time, no exceptions:
- Build something small and specific (e.g., “two EC2 instances behind a load balancer”).
- Break it on purpose (kill an instance, revoke a security group rule, fill the disk, delete a route). This is the step almost everyone skips, and it’s the single highest-value step. Real architects are valuable because they’ve seen things fail, not because they can click through a console.
- Fix it, timing yourself. Notice what you had to look up — that’s a gap.
- Document it as if you’re writing an internal wiki page: what you built, what broke, why, how you fixed it. Five sentences is enough.
- Explain it out loud, in one paragraph, without your notes — to a rubber duck, a friend, or a voice memo. If you can’t explain it without your notes, you don’t know it yet, you’ve just done it once.
Every phase below should be practiced through this loop, not just read about.
Principle 3 — Keep a “Why” log, not just a build log
For every architectural decision, write one sentence: what you chose, what you rejected, and why. “Chose RDS Multi-AZ over a single instance + manual snapshots, because the practice scenario required <5 min recovery — cost was 2x but that was the stated priority.” After 12 months you’ll have 100+ of these. That log — not your certificates — is what you can actually talk through in an interview, and it’s what separates someone who operated a system from someone who watched a tutorial build one.
Principle 4 — Escalate difficulty deliberately, don’t wait for it to happen to you
Don’t just build the happy path and move to the next topic. Once something works, deliberately attack it:
- Take away a permission and see what breaks.
- Simulate an AZ failure by stopping every instance in one subnet.
- Double the traffic (or fake it) and watch what falls over first.
- Delete something without telling yourself in advance what depends on it. This is a compressed version of what a chaos engineer or an on-call architect does for real, and it’s the fastest way to develop judgment about failure modes — which is most of what “architecture” actually is.
Principle 5 — Split your studying into two different modes
Not everything should be learned the same way:
- Facts and syntax (CIDR math, port numbers, CLI flags, service limits) — use spaced repetition (a free tool like Anki). Ten minutes a day. Don’t “deep practice” trivia; just drill it.
- Judgment and trade-offs (when to choose SQS vs SNS, when Kubernetes is overkill, how to size a cache) — this can only be learned through the BBFDE loop and the Why log above. No amount of flashcards builds judgment.
Principle 6 — The explain-it-to-a-junior test
At the end of each phase, imagine explaining what you built to a junior developer (this is easy for you — you already are one, professionally, just not yet in infra). If you catch yourself saying “it just works because AWS handles it,” stop — that’s the exact spot you don’t understand yet, and it’s usually where interview questions live.
2. The weekly ritual
Same structure every week removes decision fatigue, which is the actual reason people quit self-study — not lack of time.
| When | Duration | What you actually do |
|---|---|---|
| Mon–Thu | 60–90 min/day | Read just enough to unblock the current build. No open-ended video-watching. |
| Sat | 3–4 hrs | The BBFDE loop, hands-on, in your AWS/local environment. This is the core session — protect it. |
| Sun | 2–3 hrs | Write it up: update your Why log, write the doc for what you built, record yourself explaining it, tear down billable resources. |
That’s 10–12 hours/week, ~500+ hours/year — matching the original estimate, but now every hour has a defined output (a build, a doc, or a spoken explanation) instead of “watched a course.”
Monthly: pick your worst-explained topic from the month and redo the BBFDE loop on it, harder. Quarterly: do a full teardown-and-rebuild of your biggest project from memory, no notes, timed. This is the real test of whether you know it or just did it once.
3. Phase-by-phase, with actual practice tasks (not just topics)
Each phase below assumes you already know what to study from the ChatGPT list — the addition here is the specific thing to build and break, and the free resource to unblock with.
| Phase | Topic | What to actually build & break | Free resource to unblock with |
|---|---|---|---|
| 0 | Account setup | Set a $5 AWS Budget alert before creating anything else. Practice deleting every resource you make, same day. | AWS Billing console docs |
| 1 (M1) | Networking | Draw your home network, then a VPC, from memory; then build a VPC with public+private subnets and trace a packet’s path out loud | freeCodeCamp networking course, Professor Messer Network+ videos (free) |
| 2 (M1–2) | Linux | Stand up a free-tier EC2 box, break sshd config, lock yourself out, fix it via the console; fill the disk on purpose and diagnose it | Linux Journey (linuxjourney.com), OverTheWire Bandit wargame |
| 3 (M2) | Git/Bash/CI basics | Write a bash script with a broken exit-code check that silently fails a deploy, then fix your own bug | Git branching sandbox (learngitbranching.js.org), GitHub Actions docs |
| 4 (M2–3) | Docker | Containerize one of your real apps; break it by hardcoding a secret in the image, then fix it with build args/secrets | Docker’s own “Get Started” docs, play-with-docker.com (free sandbox, no install) |
| 5 (M3–5) | AWS fundamentals | Rebuild your containerized app behind an ALB across 2 AZs; kill one AZ’s instance and watch failover live | AWS Skill Builder (500+ free courses), AWS Well-Architected Labs (free, hands-on) |
| 6 (M5–6) | IaC — OpenTofu, not paid Terraform Cloud | Write the VPC + EC2 + ALB from Phase 5 as code; delete a resource out-of-band in the console and reconcile with tofu plan | OpenTofu docs (opentofu.org), local/S3 state — no paid backend |
| 7 (M6) | CI/CD | Pipeline that runs tests → builds → deploys; break the pipeline by pushing a failing test and confirm it actually blocks deploy | GitHub Actions free tier (2,000 min/month on public repos) |
| 8 (M7–8) | Kubernetes | Run a local cluster (no cloud cost), deploy your app, kill a pod and watch it self-heal, then intentionally misconfigure a liveness probe | kind or minikube (free, local), Kubernetes.io docs, KillerCoda free scenarios |
| 9 (M8–10) | Architecture thinking | Write a one-page Architecture Decision Record for every major choice in Project 1 (below) | AWS Well-Architected Framework whitepapers (free PDFs) |
| 10 (M9–12) | System design | Design (on paper/whiteboard, no code) a URL shortener, then critique your own design for the single point of failure | ByteByteGo free newsletter, “System Design Primer” (free GitHub repo) |
4. The 4 portfolio projects — with the practice discipline added
Keep ChatGPT’s four projects (production web app, HA system, event-driven system, Kubernetes platform) — they’re the right shape. Add these three requirements to every one of them, because these are what interviewers actually probe for:
- A written Why log for the project (Principle 3) — 10–15 entries minimum.
- A documented failure you caused on purpose and how you detected + fixed it (Principle 2), with a screenshot of the monitoring alert if you set one up.
- A real teardown cost estimate: “this cost $X to run for a week, here’s what I’d change to run it for $X/3 in production.” This single habit is what separates junior “it works” thinking from architect-level thinking.
5. Self-assessment checkpoints (do these quarterly, out loud, no notes)
You’re not ready to move to the next quarter until you can answer these without looking anything up:
- Q3 checkpoint: Trace a request from a browser to your database and back, naming every hop, including DNS and TLS handshake.
- Q6 checkpoint: Given a system you built, name the single point of failure and what it would cost (time and money) to remove it.
- Q9 checkpoint: Explain why you’d choose ECS vs. EKS vs. Lambda for three different scenarios someone gives you on the spot.
- Q12 checkpoint: Given a budget constraint and an availability constraint that conflict, explain how you’d resolve the trade-off and what you’d tell a stakeholder who’s unhappy either way.
- Q15 checkpoint: Whiteboard a system design (e.g., a chat app) cold, in 20 minutes, then find its weakest point yourself before someone else does.
- Q18 checkpoint: Defend your SAA exam-level knowledge by teaching one Well-Architected pillar to someone else in 10 minutes.
If any checkpoint fails, that’s your next month’s focus — not the next phase.
6. Free resource master list (verified current)
| Area | Resource | Why |
|---|---|---|
| Networking | freeCodeCamp, Professor Messer | Free, thorough, video + text |
| Linux | Linux Journey, OverTheWire Bandit | Free, gamified, builds real muscle memory |
| Git | learngitbranching.js.org | Interactive, free, visual |
| Docker | Official Docker docs, play-with-docker.com | Free in-browser sandbox, no local install needed |
| AWS (general) | AWS Skill Builder free tier — 500+ courses across 30+ services | Official, kept current by AWS |
| AWS architecture | AWS Well-Architected Framework whitepapers + free Well-Architected Labs | Hands-on labs with teardown scripts included |
| Azure (later) | Microsoft Learn | Fully free, structured learning paths including the Solutions Architect path |
| IaC | OpenTofu docs (opentofu.org) | Fully open-source, no paid backend needed to learn |
| Kubernetes | kind/minikube (local, free), Kubernetes.io docs, KillerCoda | No cloud spend required to learn K8s fundamentals |
| CI/CD | GitHub Actions (2,000 free minutes/month on public repos) | Already where your code lives |
| System design | “System Design Primer” (GitHub, free), ByteByteGo newsletter | Widely used, free, current |
7. Certification — same order as ChatGPT suggested, one caveat
AWS Solutions Architect Associate (SAA-C03) first, only after you’ve actually built the four projects — not after finishing a course. Exam pricing and format can shift, so check the official AWS certification page a few weeks before you book, rather than trusting older guides (including this one).
8. The 18-month shape
| Months | Focus | Output you should have by the end |
|---|---|---|
| 1–2 | Networking + Linux | A Linux box you built and broke on purpose, documented |
| 2–4 | Docker + Git/CI + AWS fundamentals | One containerized app running on AWS behind a load balancer |
| 5–6 | OpenTofu + CI/CD | Project 1 fully as code, redeployable from scratch in one command |
| 7–8 | Kubernetes | Local cluster running your app with self-healing demonstrated |
| 9–10 | Architecture thinking + Well-Architected | ADR log with 15+ entries across your projects |
| 11–12 | System design + Project 2 & 3 | HA and event-driven systems built, broken, documented |
| 13–15 | Project 4 (Kubernetes platform) + SAA prep | Full portfolio of 4 projects, each with a Why log and a cost teardown |
| 16–18 | Certification + applications | AWS SAA passed, portfolio + Why logs used directly in interview answers |
The certificate is the least important artifact you’ll produce in 18 months. The Why logs and the things you broke on purpose are what will actually get you hired.