AWS Certified Cloud Practitioner Flashcards
AWS CloudTrail
- log, monitor and retain account activity related to actions across your AWS infrastructure.
-provides an event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.
AWS Config
-assess, audit, and evaluate the configurations of your AWS resources.
-continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.
AWS Cloudwatch
- monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), and IT managers.
-provides data and actionable insights to monitor applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. This is an excellent service for building Resilient systems.
AWS Trusted Advisor
online tool that provides you real-time guidance to help you provision your resources following AWS best practices on cost optimization, security, fault tolerance, service limits and performance improvement.
CloudWatch vs CloudTrail vs Config.
Think resource performance monitoring, events, and alerts; think CloudWatch.
Think account-specific activity and audit; think CloudTrail.
Think resource-specific change history, audit, and compliance; think Config.
AWS Quick Starts references
-help you deploy popular technologies on AWS, based on AWS best practices for security and high availability.
-These accelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.
-includes AWS CloudFormation templates that automate the deployment and a guide that discusses the architecture and provides step-by-step deployment instructions.
AWS Forms
an AWS community platform where people can help each other. It is not used to deploy technologies on AWS.
AWS CodeDeploy
a service that automates code deployments to any instance, including EC2 instances and instances running on-premises.
AWS Whitepapers
-technical content authored by AWS and the AWS community to expand your knowledge of the cloud.
-They include technical whitepapers, technical guides, reference material, and reference architectures diagrams.
AWS OpsWorks
-configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.
-lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments.
AWS CloudFormation
gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion.
AWS Batch
enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS
AWS Systems Manager Session Manager
-fully-managed service that provides you with an interactive browser-based shell and CLI experience.
- It helps provide secure and auditable instance management without the need to open inbound ports, maintain bastion hosts, and manage SSH keys.
- helps to enable compliance with corporate policies that require controlled access to instances, increase security and auditability of access to the instances while providing simplicity and cross-platform instance access to end-users.
Amazon EC2 Instance Connect
-provides a simple and secure way to connect to your Linux instances using Secure Shell (SSH).
-, you use AWS Identity and Access Management (IAM) policies and principals to control SSH access to your instances, removing the need to share and manage SSH keys.
Amazon Inspector
- automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
-automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.
-After performing an assessment, produces a detailed list of security findings prioritized by level of severity.
Amazon Route 53
- highly available and scalable cloud Domain Name System (DNS) web service. It
- It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other
Reliability pillar of the AWS Well-Architected Framework.
AWS states that before architecting any system, foundational requirements that influence reliability should be in place. The services that are part of foundations are: Amazon VPC, AWS Trusted Advisor, AWS Service Quotas (formerly called AWS Service Limits).
AWS Service Quotas
-view and manage your quotas for AWS services from a central location
-Quotas, also referred to as limits in AWS, are the maximum values for the resources, actions, and items in your AWS account. Each AWS service defines its quotas and establishes default values for those quotas.
AWS Single Sign-On (SSO)
-enables you to makes it easy to centrally manage access to multiple AWS accounts and business applications and provide users with single sign-on access to all their assigned accounts and applications from one place.
AWS Cognito
- lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily
-, you also have the option to authenticate users through social identity providers such as Facebook, Twitter, or Amazon, with SAML identity solutions, or by using your own identity system. It is an identity management solution for customers/developers building B2C or B2B apps for their customers.
AWS Identity and Access Management (IAM)
-enables you to securely control access to AWS services and resources for your users.
- you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
AWS Directory Service
- enables your directory-aware workloads and AWS resources to use managed Active Directory in the AWS Cloud.
Amazon LightSail
Lightsail is an easy-to-use cloud platform that offers you everything needed to build an application or website, plus a cost-effective, monthly plan. Lightsail offers several preconfigured, one-click-to-launch operating systems, development stacks, and web applications, including Linux, Windows OS,
Amazon DynamoDB with global tables
-a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale.
- built-in security, continuous backups, automated multi-region replication, in-memory caching, and data export tools.
- global tables replicate data automatically across your choice of AWS Regions and automatically scale capacity to accommodate your workloads.
-With global tables, your globally distributed applications can access data locally in the selected regions to get single-digit millisecond read and write performance.
Amazon DynamoDB with DynamoDB Accelerator
- in-memory cache that delivers fast read performance for your tables at scale by enabling you to use a fully managed in-memory cache.
-Using DAX, you can improve the read performance of your DynamoDB tables by up to 10 times—taking the time required for reads from milliseconds to microseconds, even at millions of requests per second. DAX does not offer active-active cross-Region configuration.
Amazon Aurora with multi-master cluster
-managed relational database engine that’s compatible with MySQL and PostgreSQL.
-some workloads, Aurora can deliver up to five times the throughput of MySQL and up to three times the throughput of PostgreSQL without requiring changes to most of your existing applications.
-multi-master cluster, all DB instances have read/write capability. Currently, all DB instances in a multi-master cluster must be in the same AWS Region
Amazon Relational Database Service (Amazon RDS) for MYSQL
makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need. RDS does not support active-active configuration with cross-region support.
Use S3 One-Zone Infrequent Access (One-Zone IA)
-data that is accessed less frequently but requires rapid access when needed.
-stores data in a single AZ and costs 20% less than S3 Standard-IA. S3 One Zone-IA offers the same high durability, high throughput, and low latency of S3 Standard, with a low per GB storage price and per GB retrieval fee.
Use S3 Standard Infrequent Access (Standard-IA)
data that is accessed less frequently but requires rapid access when needed. S3 Standard-IA matches the high durability, high throughput, and low latency of S3 Standard, with a low per GB storage price and per GB retrieval fee.
S3 Standard
- offers high durability, availability, and performance object storage for frequently accessed data.
S3 Glacier
a secure, durable, and low-cost storage class for data archiving. however the retrieval time ranges from a minute to hours, so this option is also ruled out for the given use-case.
High Availability
-A system that is available is capable of delivering the designed functionality at a given point in time.
-Highly available systems are those that can withstand some measure of degradation while still remaining available. On AWS Cloud, you can run instances for an application across multi AZ to achieve High Availability.
Horizontal Scaling
system is one that can increase capacity by adding more computers to the system.
- Horizontally scalable systems are oftentimes able to outperform vertically scalable systems by enabling parallel execution of workloads and distributing those across many different computers. Auto Scaling Group is an example of Horizontal Scaling on AWS.
Vertical Scaling
- Vertical Scaling is adding more resources (like CPU, RAM) to a single node or machine. Example- Resizing an instance of EC2.
Performance Efficiency
Is the ability to use computing resources efficiently to meet system requirements and to maintain that efficiency as demand changes and technologies evolve.
AWS Lambda
Lambda lets you run code without provisioning or managing servers. You pay only for the compute time you consume.
Systems Manager
-AWS Systems Manager gives you visibility and control of your infrastructure on AWS.
-view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources.
Systems Manager, you can group resources, like Amazon EC2 instances, Amazon S3 buckets, or Amazon RDS instances, by application, view operational data for monitoring and troubleshooting, and take action on your groups of resources.
EC2 Instance
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud with support for per-second billing. It is the easiest way to provision servers on AWS Cloud and access the underlying OS.
Step Function
AWS Step Function lets you coordinate multiple AWS services into serverless workflows. You can design and run workflows that stitch together services such as AWS Lambda, AWS Glue and Amazon SageMaker.
AWS Auto Scaling
-AWS Auto ScalingAWS Auto Scaling monitors your applications and automatically adjusts the capacity to maintain steady, predictable performance at the lowest possible cost.
-Using AWS Auto Scaling, it’s easy to setup application scaling for multiple resources across multiple services in minutes. AWS Auto Scaling is available at no additional charge.
Simple Storage Service (Amazon S3)
Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance. S3 service is not free and you pay to depend on the storage class you choose for your data.
DynamoDB
key-value and document database that delivers single-digit millisecond performance at any scale. It’s a fully managed, multi-Region, multi-master, durable database with built-in security, backup and restore, and in-memory caching for internet-scale applications.
AWS Organizations
centrally govern your environment as you grow and scale your workloads on AWS. Whether you are a growing startup or a large enterprise, Organizations helps you to centrally manage billing; control access, compliance, and security; and share resources across your AWS accounts.
- you can automate account creation, create groups of accounts to reflect your business needs, and apply policies for these groups for governance. You can also simplify billing by setting up a single payment method for all of your AWS accounts. Through integrations with other AWS services, you can use Organizations to define central configurations and resource sharing across accounts in your organization. AWS Organizations is available to all AWS customers at no additional charge.
AWS Local Zones
-allow you to use select AWS services, like compute and storage services, closer to more end-users, providing them very low latency access to the applications running locally
- connected to the parent region via Amazon’s redundant and very high bandwidth private network, giving applications running in AWS Local Zones fast, secure, and seamless access to the rest of AWS services.
-AWS Local Zones also provide a high-bandwidth, secure connection to the AWS Region, allowing you to seamlessly connect to the full range of services in the AWS Region through the same APIs and toolsets.
AWS Edge Locations
An AWS Edge location is a site that CloudFront uses to cache copies of the content for faster delivery to users at any location.