

David Okafor
Cloud engineer teaching AWS foundations and IAM with a security first, hands on approach
- Students
- 6,130
- Courses
- 2
- Instructor rating
- 4.4
- Reviews
- 15
About David
I design and run AWS accounts for small and mid sized engineering teams. Much of that work is unglamorous: tidy IAM policies, sensible networking, budgets and alarms that warn people before the bill does.
My teaching style is to build each concept in the console once so you can see it, then repeat it with the AWS CLI so you understand what the console did for you. I explain the why behind defaults, because most cloud incidents I have seen started with a default nobody questioned.
My courses stay inside the AWS Free Tier where possible and always end with a cleanup lesson, so you never get a surprise charge from practice resources.
Courses by David


What students say
KMS key policies demystified
The lesson on key policies explained why our admin role could not decrypt objects. Very clear.
Cleanup lessons are a great idea
I have been burned by a forgotten NAT gateway before. The cleanup habit at the end of every section is excellent.
Exactly the right starting point
The account security lesson alone was worth it. I set up MFA, a budget and Identity Center before touching anything else.
The evaluation model lesson is superb
I finally understand why adding permissions did not fix our AccessDenied errors. It was an SCP all along.
OIDC lesson removed our CI keys
We replaced long term keys in GitHub Actions with OIDC the same week. The warning about loose subject conditions was important.
Got me through my first week at work
I joined a team using AWS with no cloud background. This course gave me the vocabulary and confidence I needed.
Console then CLI works well
Seeing each step in the console and then repeating it with the CLI helped me understand what the console actually does.
PassRole explained clearly
I had seen iam:PassRole in policies for years without understanding the risk. Now I review it carefully.