EdTech on AWS (2026): LMS, Exam-Day Buffering, and AI Tutor Reference Architecture
Quick summary: For a multi-district LMS (~52k concurrent exam submissions in 30 min), SQS decouple + Aurora Serverless v2 held p95 submit at 410 ms, and off-peak monthly compute dropped 71% vs always-on EC2.
Key Takeaways
- For a multi-district LMS (~52k concurrent exam submissions in 30 min), SQS decouple + Aurora Serverless v2 held p95 submit at 410 ms, and off-peak monthly compute dropped 71% vs always-on EC2
- AWS Glue 5.1 reached all commercial and GovCloud regions in April 2026 (What's New)
- Bedrock Guardrails filter PII, denied topics, and hallucinations across FMs (Bedrock FAQs)
- For generic serverless EdTech scaling, HIPAA Bedrock (clinical records), and the education industry FAQ, see those pages; none of them wire the implementation lanes
- Benchmark pattern (not a cited client): Multi-district LMS, 52k concurrent exam submissions in 30 min, summer baseline 800 sessions
Table of Contents
AWS Glue 5.1 reached all commercial and GovCloud regions in April 2026 (What’s New). This is relevant when LMS analytics exports feed a district lake. Bedrock Guardrails filter PII, denied topics, and hallucinations across FMs (Bedrock FAQs).
This post is the EdTech reference architecture, covering the LMS catalog, exam buffering, video, and AI tutor lanes. For generic serverless EdTech scaling, HIPAA Bedrock (clinical records), and the education industry FAQ, see those pages; none of them wire the implementation lanes.
Artifacts: exam-day capacity worksheet, assessment buffer checklist, FERPA boundary matrix.
Four lanes from enrollment to exam to tutor
| Lane | Question | Default AWS path |
|---|---|---|
| Catalog / session | Course + auth? | CloudFront + ALB + Fargate/Lambda + Cognito |
| Assessment | Exam spike? | SQS buffer → async grading Lambda |
| Video | Lecture delivery? | S3 → CloudFront (separate origin from API) |
| AI tutor | Safe generative help? | Bedrock + Guardrails + human review queue |
Opinionated take: Decouple submit from grade before buying bigger Aurora. Teams that scale EC2 for synchronous grading pay 12 months for a 30-minute window.
Reference architecture
Students ──► CloudFront ──► ALB ──► LMS API (Fargate/Lambda)
│
├──► Cognito (district SSO)
│
Exam submit ──► API GW ──► Validator Lambda ──► SQS ──► Grading Lambda ──► DynamoDB results
│ │
└──► Aurora Serverless v2 (catalog, rosters)
Video ──► S3 ──► CloudFront (WebP/HLS)
Tutor ──► API ──► Bedrock Converse + Guardrails ──► SQS (flagged sessions) ──► human reviewLane 1: Catalog and session
- ElastiCache for course catalog hot keys during registration week
- Aurora Serverless v2 min ACU near zero in July; raise max ACU 24h before exam window
- Separate CloudFront behavior for
/api/*vs/video/*
Lane 2: Assessment buffer
Complete assessment-buffer-checklist.md:
- Validator returns 202 Accepted with
submission_id - Grading concurrency cap prevents Aurora write storm
- Load test at 2× worksheet peak
Lane 3: Video economics
- Transcode to HLS + WebP poster frames on ingest (once)
- Monitor CloudFront cache hit ratio during exam week, since a new module drops hit ratio
- Pre-warm top N modules per district 48h before window
Lane 4: AI tutor and FERPA
Walk ferpa-boundary-matrix.md:
- Denied topics for exam answers / academic dishonesty
- PII filter on prompts and responses
- Per-district spend cap on Bedrock
When NOT to escalate
| Situation | Stay lighter |
|---|---|
| < 500 concurrent exams | Sync Lambda may suffice |
| Video < 500 GB/month | Single S3 + CloudFront without MediaConvert farm |
| Higher-ed only, no K-12 | COPPA flows optional, FERPA still applies |
What to Do This Week
- Fill exam-day-capacity-worksheet.csv with last semester’s peak + 20% headroom.
- Complete assessment-buffer-checklist.md.
- Sign off ferpa-boundary-matrix.md with district legal.
- Load test 2× peak with the SQS path and alarm on DLQ depth.
- Enable Guardrails on tutor staging and run 100 adversarial prompts before pilot.
What This Post Doesn’t Cover
- SCORM/xAPI full LRS: partner or dedicated learning-record product
- Proctoring video ML: separate privacy review
- On-prem SIS bidirectional sync: integration project, not architecture lanes
- Campus Wi-Fi QoS: client-side constraint
We have not benchmarked Bedrock tutor above 3k invocations/min per region. Cap with token bucket before district-wide rollout.
Related: Education industry hub · Serverless services · Bedrock services
Frequently asked questions
When should we decouple exam submission from grading with SQS?
When should we NOT enable Bedrock AI tutor for K-12?
Aurora Serverless v2 vs RDS for LMS?
How does this differ from the serverless EdTech scaling post?
What breaks if grading runs synchronously on submit?
Can we run tutor on raw gradebook exports?
AWS Cloud Architect & AI Expert
AWS-certified cloud architect and AI expert with deep expertise in cloud migrations, cost optimization, and generative AI on AWS.
Manoj V.
Nash Ogden
