A Flashcards
AAD
See additional authenticated data.
access control list (ACL)
A document that defines who can access a particular bucket or object. Each bucket and object in Amazon S3 has an ACL. The document defines what each type of user can do, such as write and read permissions.
access identifiers
See credentials.
access key
The combination of an access key ID (like AKIAIOSFODNN7EXAMPLE) and a secret access key (like wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY). You use access keys to sign API requests that you make to AWS.
access key ID
A unique identifier that’s associated with a secret access key; the access key ID and secret access key are used together to sign programmatic AWS requests cryptographically.
access key rotation
A method to increase security by changing the AWS access key ID. This method enables you to retire an old key at your discretion.
access policy language
A language for writing documents (that is, policies) that specify who can access a particular AWS resource and under what conditions.
account
A formal relationship with AWS that is associated with (1) the owner email address and password, (2) the control of resources created under its umbrella, and (3) payment for the AWS activity related to those resources. The AWS account has permission to do anything and everything with all the AWS account resources. This is in contrast to a user, which is an entity contained within the account.
account activity
A web page showing your month-to-date AWS usage and costs. The account activity page is located at https://aws.amazon.com/account-activity/.
ACL
See access control list (ACL).
ACM
See AWS Certificate Manager (ACM).
action
An API function. Also called operation or call. The activity the principal has permission to perform. The action is B in the statement “A has permission to do B to C where D applies.” For example, Jane sends a request to Amazon SQS with Action=ReceiveMessage.
Amazon CloudWatch: The response initiated by the change in an alarm’s state: for example, from OK to ALARM. The state change may be triggered by a metric reaching the alarm threshold, or by a SetAlarmState request. Each alarm can have one or more actions assigned to each state. Actions are performed once each time the alarm changes to a state that has an action assigned, such as an Amazon Simple Notification Service notification, an Auto Scaling policy execution or an Amazon EC2 instance stop/terminate action.
active trusted signers
A list showing each of the trusted signers you’ve specified and the IDs of the corresponding active key pairs that Amazon CloudFront is aware of. To be able to create working signed URLs, a trusted signer must appear in this list with at least one key pair ID.
additional authenticated data
Information that is checked for integrity but not encrypted, such as headers or other contextual metadata.
administrative suspension
Auto Scaling might suspend processes for Auto Scaling group that repeatedly fail to launch instances. Auto Scaling groups that most commonly experience administrative suspension have zero running instances, have been trying to launch instances for more than 24 hours, and have not succeeded in that time.
alarm
An item that watches a single metric over a specified time period, and triggers an Amazon SNS topic or an Auto Scaling policy if the value of the metric crosses a threshold value over a predetermined number of time periods.
allow
One of two possible outcomes (the other is deny) when an IAM access policy is evaluated. When a user makes a request to AWS, AWS evaluates the request based on all permissions that apply to the user and then returns either allow or deny.
Amazon API Gateway
A fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale.
See Also https://aws.amazon.com/api-gateway.
Amazon AppStream
A web service for streaming existing Windows applications from the cloud to any device.
See Also https://aws.amazon.com/appstream/.
Amazon Aurora
A fully managed MySQL-compatible relational database engine that combines the speed and availability of commercial databases with the simplicity and cost-effectiveness of open source databases.
See Also https://aws.amazon.com/rds/aurora/.
Amazon CloudFront
(CloudFront)
An AWS content delivery service that helps you improve the performance, reliability, and availability of your websites and applications.
See Also https://aws.amazon.com/cloudfront.
Amazon CloudSearch
A fully managed service in the AWS cloud that makes it easy to set up, manage, and scale a search solution for your website or application.
Amazon CloudWatch
A web service that enables you to monitor and manage various metrics, and configure alarm actions based on data from those metrics.
See Also https://aws.amazon.com/cloudwatch.
Amazon CloudWatch Events
A web service that enables you to deliver a timely stream of system events that describe changes in AWS resources to AWS Lambda functions, streams in Amazon Kinesis Data Streams, Amazon Simple Notification Service topics, or built-in targets.
See Also https://aws.amazon.com/cloudwatch.
Amazon CloudWatch Logs
A web service for monitoring and troubleshooting your systems and applications from your existing system, application, and custom log files. You can send your existing log files to CloudWatch Logs and monitor these logs in near real-time.
See Also https://aws.amazon.com/cloudwatch.
Amazon Cognito
A web service that makes it easy to save mobile user data, such as app preferences or game state, in the AWS cloud without writing any back-end code or managing any infrastructure. Amazon Cognito offers mobile identity management and data synchronization across devices.
See Also https://aws.amazon.com/cognito/.
Amazon DynamoDB
A fully managed NoSQL database service that provides fast and predictable performance with seamless scalability.
See Also https://aws.amazon.com/dynamodb/.
Amazon DynamoDB Storage Backend for Titan
A storage backend for the Titan graph database implemented on top of Amazon DynamoDB. Titan is a scalable graph database optimized for storing and querying graphs.
See Also https://aws.amazon.com/dynamodb/.
Amazon DynamoDB Streams
An AWS service that captures a time-ordered sequence of item-level modifications in any Amazon DynamoDB table, and stores this information in a log for up to 24 hours. Applications can access this log and view the data items as they appeared before and after they were modified, in near real time.
See Also https://aws.amazon.com/dynamodb/.
Amazon Elastic Block Store (Amazon EBS)
A service that provides block level storage volumes for use with EC2 instances.
See Also https://aws.amazon.com/ebs.
Amazon EBS-backed AMI
A type of Amazon Machine Image (AMI) whose instances use an Amazon EBS volume as their root device. Compare this with instances launched from instance store-backed AMIs, which use the instance store as the root device.
Amazon Elastic Container Registry (Amazon ECR)
A fully managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images. Amazon ECR is integrated with Amazon Elastic Container Service (Amazon ECS) and AWS Identity and Access Management (IAM).
See Also https://aws.amazon.com/ecr.
Amazon Elastic Container Service (Amazon ECS)
A highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster of EC2 instances.
See Also https://aws.amazon.com/ecs.
Amazon ECS service
A service for running and maintaining a specified number of tasks (instantiations of a task definition) simultaneously.
Amazon EC2 VM Import Connector
See https://aws.amazon.com/ec2/vm-import.
Amazon Elastic Compute Cloud (Amazon EC2)
A web service that enables you to launch and manage Linux/UNIX and Windows server instances in Amazon’s data centers.
See Also https://aws.amazon.com/ec2.
Amazon Elastic File System (Amazon EFS)
A file storage service for EC2 instances. Amazon EFS is easy to use and provides a simple interface with which you can create and configure file systems. Amazon EFS storage capacity grows and shrinks automatically as you add and remove files.
See Also https://aws.amazon.com/efs/.
Amazon EMR (Amazon EMR)
A web service that makes it easy to process large amounts of data efficiently. Amazon EMR uses Hadoop processing combined with several AWS products to do such tasks as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehousing.
See Also https://aws.amazon.com/elasticmapreduce.
Amazon Elastic Transcoder
A cloud-based media transcoding service. Elastic Transcoder is a highly scalable tool for converting (or transcoding) media files from their source format into versions that will play on devices like smartphones, tablets, and PCs.
See Also https://aws.amazon.com/elastictranscoder/.
Amazon ElastiCache
A web service that simplifies deploying, operating, and scaling an in-memory cache in the cloud. The service improves the performance of web applications by providing information retrieval from fast, managed, in-memory caches, instead of relying entirely on slower disk-based databases.
See Also https://aws.amazon.com/elasticache/.
Amazon Elasticsearch Service (Amazon ES)
An AWS managed service for deploying, operating, and scaling Elasticsearch, an open-source search and analytics engine, in the AWS Cloud. Amazon Elasticsearch Service (Amazon ES) also offers security options, high availability, data durability, and direct access to the Elasticsearch APIs.
See Also https://aws.amazon.com/elasticsearch-service.
Amazon GameLift
A managed service for deploying, operating, and scaling session-based multiplayer games.
See Also https://aws.amazon.com/gamelift/.
Amazon Glacier
A secure, durable, and low-cost storage service for data archiving and long-term backup. You can reliably store large or small amounts of data for significantly less than on-premises solutions. Amazon Glacier is optimized for infrequently accessed data, where a retrieval time of several hours is suitable.
See Also https://aws.amazon.com/glacier/.
Amazon GuardDuty
A continuous security monitoring service. Amazon GuardDuty can help to identify unexpected and potentially unauthorized or malicious activity in your AWS environment.
See Also https://aws.amazon.com/guardduty/.
Amazon Inspector
An automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for vulnerabilities or deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed report with prioritized steps for remediation.
See Also https://aws.amazon.com/inspector.
Amazon Kinesis
A platform for streaming data on AWS. Kinesis offers services that simplify the loading and analysis of streaming data.
See Also https://aws.amazon.com/kinesis/.
Amazon Kinesis Data Firehose
A fully managed service for loading streaming data into AWS. Kinesis Data Firehose can capture and automatically load streaming data into Amazon S3 and Amazon Redshift , enabling near real-time analytics with existing business intelligence tools and dashboards. Kinesis Data Firehose automatically scales to match the throughput of your data and requires no ongoing administration. It can also batch, compress, and encrypt the data before loading it.
See Also https://aws.amazon.com/kinesis/firehose/.
Amazon Kinesis Data Streams
A web service for building custom applications that process or analyze streaming data for specialized needs. Amazon Kinesis Data Streams can continuously capture and store terabytes of data per hour from hundreds of thousands of sources.
See Also https://aws.amazon.com/kinesis/streams/.
Amazon Lightsail
Lightsail is designed to be the easiest way to launch and manage a virtual private server with AWS. Lightsail offers bundled plans that include everything you need to deploy a virtual private server, for a low monthly rate.
See Also https://aws.amazon.com/lightsail/.
Amazon Lumberyard
A cross-platform, 3D game engine for creating high-quality games. You can connect games to the compute and storage of the AWS cloud and engage fans on Twitch.
See Also https://aws.amazon.com/lumberyard/.
Amazon Machine Image (AMI)
An encrypted machine image stored in Amazon Elastic Block Store (Amazon EBS) or Amazon Simple Storage Service. AMIs are like a template of a computer’s root drive. They contain the operating system and can also include software and layers of your application, such as database servers, middleware, web servers, and so on.
Amazon Machine Learning
A cloud-based service that creates machine learning (ML) models by finding patterns in your data, and uses these models to process new data and generate predictions.
See Also http://aws.amazon.com/machine-learning/.
Amazon Macie
A security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS.
See Also http://aws.amazon.com/macie/.
Amazon ML
See Amazon Machine Learning.
Amazon Mobile Analytics
(Mobile Analytics)
A service for collecting, visualizing, understanding, and extracting mobile app usage data at scale.
See Also https://aws.amazon.com/mobileanalytics.
Amazon MQ
A managed message broker service for Apache ActiveMQ that makes it easy to set up and operate message brokers in the cloud.
See Also https://aws.amazon.com/amazon-mq/.
Amazon Redshift
A fully managed, petabyte-scale data warehouse service in the cloud. With Amazon Redshift you can analyze your data using your existing business intelligence tools.
See Also https://aws.amazon.com/redshift/.
Amazon Relational Database Service (Amazon RDS)
A web service that makes it easier to set up, operate, and scale a relational database in the cloud. It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks.
See Also https://aws.amazon.com/rds.
Amazon Resource Name (ARN)
A standardized way to refer to an AWS resource. For example: arn:aws:iam::123456789012:user/division_abc/subdivision_xyz/Bob.
Amazon Route 53
(Route 53)
A web service you can use to create a new DNS service or to migrate your existing DNS service to the cloud.
See Also https://aws.amazon.com/route53.
Amazon S3
See Amazon Simple Storage Service (Amazon S3).
Amazon S3-Backed AMI
See instance store-backed AMI.
Amazon Silk
A next-generation web browser available only on Fire OS tablets and phones. Built on a split architecture that divides processing between the client and the AWS cloud, Amazon Silk is designed to create a faster, more responsive mobile browsing experience.