A Flashcards
AAD
See additional authenticated data.
access control list (ACL)
A document that defines who can access a particular bucket or object. Each bucket and object in Amazon S3 has an ACL. The document defines what each type of user can do, such as write and read permissions.
access identifiers
See credentials.
access key
The combination of an access key ID (like AKIAIOSFODNN7EXAMPLE) and a secret access key (like wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY). You use access keys to sign API requests that you make to AWS.
access key ID
A unique identifier that’s associated with a secret access key; the access key ID and secret access key are used together to sign programmatic AWS requests cryptographically.
access key rotation
A method to increase security by changing the AWS access key ID. This method enables you to retire an old key at your discretion.
access policy language
A language for writing documents (that is, policies) that specify who can access a particular AWS resource and under what conditions.
account
A formal relationship with AWS that is associated with (1) the owner email address and password, (2) the control of resources created under its umbrella, and (3) payment for the AWS activity related to those resources. The AWS account has permission to do anything and everything with all the AWS account resources. This is in contrast to a user, which is an entity contained within the account.
account activity
A web page showing your month-to-date AWS usage and costs. The account activity page is located at https://aws.amazon.com/account-activity/.
ACL
See access control list (ACL).
ACM
See AWS Certificate Manager (ACM).
action
An API function. Also called operation or call. The activity the principal has permission to perform. The action is B in the statement “A has permission to do B to C where D applies.” For example, Jane sends a request to Amazon SQS with Action=ReceiveMessage.
Amazon CloudWatch: The response initiated by the change in an alarm’s state: for example, from OK to ALARM. The state change may be triggered by a metric reaching the alarm threshold, or by a SetAlarmState request. Each alarm can have one or more actions assigned to each state. Actions are performed once each time the alarm changes to a state that has an action assigned, such as an Amazon Simple Notification Service notification, an Auto Scaling policy execution or an Amazon EC2 instance stop/terminate action.
active trusted signers
A list showing each of the trusted signers you’ve specified and the IDs of the corresponding active key pairs that Amazon CloudFront is aware of. To be able to create working signed URLs, a trusted signer must appear in this list with at least one key pair ID.
additional authenticated data
Information that is checked for integrity but not encrypted, such as headers or other contextual metadata.
administrative suspension
Auto Scaling might suspend processes for Auto Scaling group that repeatedly fail to launch instances. Auto Scaling groups that most commonly experience administrative suspension have zero running instances, have been trying to launch instances for more than 24 hours, and have not succeeded in that time.
alarm
An item that watches a single metric over a specified time period, and triggers an Amazon SNS topic or an Auto Scaling policy if the value of the metric crosses a threshold value over a predetermined number of time periods.
allow
One of two possible outcomes (the other is deny) when an IAM access policy is evaluated. When a user makes a request to AWS, AWS evaluates the request based on all permissions that apply to the user and then returns either allow or deny.
Amazon API Gateway
A fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale.
See Also https://aws.amazon.com/api-gateway.
Amazon AppStream
A web service for streaming existing Windows applications from the cloud to any device.
See Also https://aws.amazon.com/appstream/.
Amazon Aurora
A fully managed MySQL-compatible relational database engine that combines the speed and availability of commercial databases with the simplicity and cost-effectiveness of open source databases.
See Also https://aws.amazon.com/rds/aurora/.
Amazon CloudFront
(CloudFront)
An AWS content delivery service that helps you improve the performance, reliability, and availability of your websites and applications.
See Also https://aws.amazon.com/cloudfront.
Amazon CloudSearch
A fully managed service in the AWS cloud that makes it easy to set up, manage, and scale a search solution for your website or application.
Amazon CloudWatch
A web service that enables you to monitor and manage various metrics, and configure alarm actions based on data from those metrics.
See Also https://aws.amazon.com/cloudwatch.
Amazon CloudWatch Events
A web service that enables you to deliver a timely stream of system events that describe changes in AWS resources to AWS Lambda functions, streams in Amazon Kinesis Data Streams, Amazon Simple Notification Service topics, or built-in targets.
See Also https://aws.amazon.com/cloudwatch.