Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Aws cloud practitioner > AWS Services > Flashcards

AWS Services Flashcards

1
Q

IAM Credential reports

A

list all account users and their credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Aws SDK

A

can be used in your code to call aws API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Cloud Shell

A

a CLI in the browser with a complete permanentn filesystem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

IAM access advisor

A

Shows service permissions given to a user and last access for each service (useful for “least privilege”)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EC2 (Elastic Cloud Computing)

A

service to rent VMs, store data on virtual drives (EBS) distribute load on machine (ELB), auto scaling the service (ASG)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Security Groups

A

set of rules tha can be attached to EC2 instance. It specify which range of IP i allowe through each port and can reference other security group (even itself) to allow traffic from other EC2 instances of that group)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

port 22

A

ssh (secure shell for accessing the terminal of EC2 linux instances) or secure file transfer protocol (SFTP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

port 21

A

file transfer portocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

port 80

A

http

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

port 443

A

https

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

port 3389

A

RDP (remote desktop protocol) used to log in EC2 windows instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AMI (Amazon Machine Image)

A

Bootable image that is used to start an EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EC2 user data

A

script that you can provide during Ec2 config that is run ONCE at boot up time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 Image Builder

A

Automate creation of AMI (it create an EC2 with desire characteristics and user data, creates Amitfrom it, then runs test on the AMI, then it can distribute the AMI across regions. It can be run again to get updated packages. You only pay what you use, not the service itself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EC2 instance store

A

EC2 instance with storage physically attached to the server. But the storage is lost if instance is terminated: good foe cache/temporary content. High performance storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

EFS (Elastic File System)

A

File system that can be attached to 100s of EC2 in the same region to have a synced shared file system. Pay per use. You can also have the infrequent access part where file less sued are moved to save some money.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon FSx

A

Service for handling for handling 3rd party file systems
For windows: can be accessed via windows EC2 or on premises;
For Lustre (linux+cluster): can be accessed by aws services or on premises. High performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Application Load Balancer (ALB)

A

for http/gRPC protocols(layer 7), static DNS, can be deployed on 1 or more AZ. It has a security group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

networl load balancer (NLB)

A

tcp/udp protocol (level 4) high performance, static IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

gateway load balancer (GWLB)

A

geneve protocol on ip packets (level3), sends traffic through security servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

scaling strategies for LB

A

Manual (set min max e desired number of instances)
dynamic (trigger: ec <70% per 5 min;
scheduled: at specific time create 5 instance
target: keep usage at 50%)
predictive: use ML to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

s3 standard storage class

A

99.99 availability, cost gb/month, for frequent accessed data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

s3 infrequent access (IA)

A

instant retrieval but, cheaper but with retrieval fee, used for backup that you need instantly. One-zone IA or multi-zone (standard) IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

s3 glacier instant retrieval

A

retrieval cost, min 90 giorni

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

s3 glacier flex retrieval/deep archive

A

1 min to 12 h retrieval, min 90gg/ 12-48h retrieval min 180 gg

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

s3 intelligent tiering

A

auto sihft object between frequent acces, infrequent access (>30gg last access), archive istant access (90gg), archive, deep archive (180-700gg)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

s3 encryption

A

server side, on by default. Client side = encrypt file before uploading

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

s3 IAM access analyzer

A

analyze policies, “object access control lists (ACL)” and tells you the s3 bucket that have been shared or are acessible publicly so you can review your s3 situation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

snow cone

A

small 10 TB 4gb ram

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

snow ball

A

big, 100TB, 100 gb ram, you pay per usage and for data moved OUT of aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

AWS storage gateway

A

for hibrid cloud, use to access s3 proprietary tech by on premise infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

RDS (Relational DB Service)

A

managed service for relational DB. multi AZ setup, backed by EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Aurora

A

relational DB, proprietary, cloud optimized, higher performance and cost. Aceept mySQL and POstrgres
Serverless aurora (good for infrequent, unpredictable workloads, no management)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

rds deploy options: read replicas, multi az replicas, multi region read replica

A

read replicas: up to 15, no write operations
multi AZ: for high availability, no read/write, just backup
multi region read replica: high avail, better local performance, no write op on replica

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

ElastiCache

A

To manage IN MEMORY DB. It’s like ana extension that can be used together with managed db to keep most used stuff in cache and improved performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Dynamo DB

A

SERVERLESS (no setup), noSQL, very fast (ms latency), high available, scalable. Cna set up global tables, so people will access sync replica of you table. Cna improve performace with DAX (Dyn accelerator( to keep stuff in cache, microseconds latancy(

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

DAX (Dynamo accelerator)

A

like elastichace but for dynamo instead of RD. Microseconds latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Redshift

A

analytics and data warehousing, OLAP, SQL based (also serverless version)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Amazon EMR

A

HADOOP CLusters (elastic map reduce) for big data analysis , connect to 100s ec2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Athena

A

to analyze/access S3 buckets, serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Quicksight

A

serverless dashboard to visualize db for Business Intelligence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Neptune

A

graph DB, social network, wikipedia

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Document Db

A

mongo implementation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Timestream

A

Time series data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

QLDB

A

quantum ledger, for financial transaction/crypto, inmutable, centralized, cryptographic hash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Managed blockchain

A

Decentralize blockchain networks, hethereum, hyperledger

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

GLUE

A

for ETL (extraction, transform, load), extract data and prepare it for analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

DMS

A

migration service from one db to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

lambda

A

SERVERLESS, REACTIVE, FaaS, quick execution. Pay per call and executioin time* RAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

ECS

A

Managed container manager that runs stop containers on ec2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

FARGATE

A

run containers SERVERLESS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

ECR

A

private container registry to keep your docker images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

EKS

A

managed kubernetis clusters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Amazon API Gateway

A

create API to access lambda functions, since they are not public

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

AWS Batch

A

manages process of batches submitted on docker images: it will run them on ECS (it launches ec2 inside ecs). DIfferent from lambda bcz no time limit, not fully serverless, relies on ecs and works with docker images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

lightsail

A

fon non cloud expert, frindly interface to manage servers, DB, networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Cloud Formation

A

Platfotm as code, free (only pay the used resources). Use yaml/json template to buil and replicate your infrastructure (application composer: visual way)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

AWS CDK

A

convert normal code in CF templates. You can deploy app code and infrastructure together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Beanstalk

A

Platform aaS, free, has health monitoring features. You provide the code of you app, the preferences for server (ec2 config, os, security, asg, elb, db..) and it takes care of creating and managing the infrstructure. Just worry about the code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

CodeDeploy

A

deploy new code to your servers (on premise or cloud). Hybrid service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

CodeCommit

A

host git repo in AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

CodeBUild

A

compile code and produce deployable artifact. SERVERLESS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

CodeArtifacts

A

artifacts (libraries/dependencies) management service

65
Q

CodePipeline

A

code (git) -> build -> test -> deploy to beanstalk. Base for CICD continuous integration continuos developent

66
Q

AWS System manger (SSM)

A

run commands or patch the whole fleet of servers (cloud or on premise)

67
Q

SSM session manager

A

acces your server’s shell w/o port 22 open

68
Q

SSM Parameter Store

A

store pw, config, keys, strings; encrypted, serverless

69
Q

Route 53

A

managed DNS, pay for dominio + fixed monthly fee. Routing policies: simple, weighted, latancy, failover

70
Q

CloudFront

A

GLOBAL, CONTENT DELIVERY NETWORK (CDN). use 216 edge loc (pt of presence) to cache data for better latancy. COntent is not updated live. THe origin can be S3 bucket (secured by Origin Access Control), or any http origin (ec2, s3 website). You can also upload stuff
good for static content available world wide (s3 CRR is good for dinamic content available in some regions)
NB: CF is a new layer btw user and data, it will always be used to access data, and if it is not cached, cf will retrieve it from the origin

71
Q

s3 transfer acceleration

A

use edge loc network instead of public network to reache the AZ of the s3 (no chachin, just using the net)

72
Q

GLobal accelerator

A

use edge loc network instead of public network to reache the desired resurces/data (no chachin, just using the net)

73
Q

AWS Outpost

A

for hybrid busines, request an AWS server rack in your facilities

74
Q

wavelength

A

5G, ultra low latency, outside aws net, in the internet provider net

75
Q

AWS Local zone

A

you can unlock a new zone in a specific area for better letancy

76
Q

SQS

A

DECOUPLE APPS: dont have apps that comunicate directly, use something to organize their comunication. SERVERLESS queue manager. Pull Based. Producer and consumer, (if it’s not fifo the order is not guarantess). keep msg in q for upt to 14 days

77
Q

Kinesis

A

process real time stream of big data

78
Q

SNS

A

NOTIFICATION, PUBLISH/SUBSCRIBE. Push based, when a msg is published on a topic, all subs receive the msg notification

79
Q

Amazon mq

A

sns, sqs but for third party protocols

80
Q

CloudWatch

A

collects metrics from all services and can create dashboards to visualize them. default update every 5 min, can pay to get 1 min. Eg view ec2 utilization (not ram tho)

81
Q

claudwatch alarms

A

trigger a notification/action when a certain metric of a service metts a condition (eg create new ec2 instance, terminate instance)

82
Q

Claudwatch logs

A

collects terminal logs of all services (for ec2 you need CW log agent)

83
Q

EventBridge

A

create rules to trigger events when a certain event happens. EG send msg when ec2 status change, or someone log into your account (you can also schedule events every tot)

84
Q

AWS x-ray

A

trace and visualize calls btw different part of you infrastructure, useful for analysis, bottlenecks, delays

85
Q

CLouTrails

A

used to INVESTIGATE/INSPECT/RECORD action of your account. keeps track of all actions, call, made in you account.c

86
Q

codeGuru

A

ML code review and application performce reccomandation

87
Q

Health dashboard

A

history of status of all services in all regions (sends alert if a service you use has a problem)

88
Q

VPC

A

you get one for you when you create an account. COrresponds to a region, and has subnets (range of Ip). Subnet can be private (for db, can access internet via NAT gateways, but not be reached) or public.
each vpc and subnet have a specific CIDR (rang of public ip allocated)
security is managed via network ACL: rules for ip allowed/denied (security groups for ec2)

89
Q

vpc flow log

A

record ip traffic of net/subnet/service (can be set up for different levels)

90
Q

VPC peering

A

connect 2 vpc privately, not transitive

91
Q

vpc endpoint interface

A

used to access service via public net instead of public internet (for s3 and dynamo: you need endpoint gateway)

92
Q

private link

A

expose app to other vps privately, scalable secure.

93
Q

site to site vpn

A

to connect on premise with cloud via public internet

94
Q

direct connect (DX)

A

connect on primise stuff with cloud via phisical dedicate connection

95
Q

client vpn

A

access stuff in you private vpc from anywhere

96
Q

Transit Gateway

A

connect 100s of vpc, on premise stuff, vpn, everything, via a sta shaped connection

97
Q

Shield

A

protect against DDoS attack, layer 3/4,
standard: enabled by default, gratis
advanced: response team, sofisticated

98
Q

WAF (Web app Firewall)

A

layer 7 (http), define IP rules, protect your app from web ecploit

99
Q

AWS Network firewall

A

protect the entire VPCfrom all traffic, layer 3 to 7

100
Q

Firewall Manager

A

manage security groups across all account of the organization

101
Q

penetration/secutiry test

A

allowed on your infrastructure (only on EC2, RDS, aurora, lambda, ELB, cloud Formation/front)

102
Q

AWS KMS (AWS managed keys)

A

key manager service; encryption for AWS service. You dont get the keys. It’s autoenabled for cloudtrail, S3 glacier

103
Q

AWS HSM

A

hardware that AWS give you ti manage encription

104
Q

ACM Aws certificate manager

A

service for inflight encryptionfor https (ssl/tls protocol)

105
Q

Secret manager

A

manage/rotate credentials, mainly for RDS

106
Q

Aws Artifacts

A

portal for AWS compliance docs

107
Q

GuardDuty

A

find vulnerabilities in your account using various logs(trail, dns, vpc flow logs). Can trigger event bridge if it finds something

108
Q

Amazon Inspector

A

security assesment service that can run on
EC2 (checks os etc), ECR, lambda (checks the code)
can trigger eventbridge

109
Q

AWS config

A

Check if the config of your resources satisfy some rule that you can define (eg unrestricted ssh access), and record a timeline of compliance

110
Q

Macie

A

finds sensitive information in s3 buckets

111
Q

AWS security hub

A

dashboard that shows secutity alert from a lot of security services

112
Q

Detective

A

find root cause of security alert, using data from various log and ML

113
Q

AWS abuse

A

report to them if you see stuff in AWS used/abused for illegal matter

114
Q

IAM access analyzer

A

you define a “zone of trust”, and this service tells you which resources are accessible/shared outside of this zone.

115
Q

Rekognition

A

find object, faces, text in img, videos: for profiling, emotion analysis, sports tracking

116
Q

Transcribe

A

speech to text, can detect and censor personal info

117
Q

Polly

A

text to speechr

118
Q

Translate

A

translate stuff, useful to auto adapt website based on location

119
Q

Lex

A

base for alexa, specch recognition and language understanding for conversational bot

120
Q

Connect

A

virtual contact centers for call centers

121
Q

Comprehend

A

NLP, partition/extract info from docs: analyze reviews etc

122
Q

Sage Maker

A

help labeling, training, creating, tuning deploying ML models

123
Q

Forecast

A

given your data, it creates amodel able to predict future data

124
Q

Personalize:

A

service for recomendatoin based on user data (eg amazon products)

125
Q

Kendra

A

DOCUMENT SEARCH SERVICE, scans documents for answers

126
Q

Textract

A

Extract text from scanned/handwritten docs

127
Q

AWS organization

A

consolidated billings, share of reserved instance, aggregate usage benefits (more you use, less you pay)

128
Q

Service control policies (SCP)

A

enforce PCi Compliance. enabel access to various services based on account (all blocked by default)

129
Q

COntrol tower

A

easy organization and SCP setup, guardrail for policies

130
Q

Resource access Manager (RAM)

A

manage the sharing of resource in your org

131
Q

Service Catalog

A

portal with template for services (grouped in portfolios), made by the admi, so everyone can use/create new resources even w/o specific knowledge

132
Q

Saving plans

A

Commit to a certain $/h usage
different saving plans: Ec2, compute saving plans(ec2, fargate, lambda)
ML saving plans for sagemaker

133
Q

AWS compute optimizer

A

ml to recomend aws resource config based on your workload and reduce cost/optimize performance

134
Q

Pricing calculator

A

estimate how much a service will cost you by saying how you plan to use it

135
Q

Billing dashboard

A

high level overview for cost in the month, and month forecast

136
Q

cost and usager report

A

most detailed cost report, by resource category per hours

137
Q

Cost explorer

A

visual too with desired granularity for cost analysis, Can forecast up to 12 month

138
Q

billing alarm

A

set an alarm on the billing metric in cloud watch, most basic, aggregate all costs, no forecat

139
Q

budgets

A

create one of these to monitor the cost of a group of resoursesand get notified when they exceed the budget (or are forecasted to exceed). 4 typesa: cost, usage, resrvation, saving plans

140
Q

Cost anomaly detection

A

Ml to find anomalies in cost, or get periodic summary

141
Q

AWS service quotas

A

get notified whe one of your resource get close to the service quota (limit)

142
Q

Trusted advisor

A

analyse your account anf gives recomendation on security, service limits, cost performance, fault tolerance

143
Q

support plans

A

Basic (custom service, healt dashboraed)
Developer : email to cloud support, 12-24h response
BUsiness: fulll trusted advisor, phone to support, 1-4h repsonse
Enterprise on Ramp: tecnical account managers, <30 min response
ENterprise: <15 min, designate technical account manager, Incident detection and response

144
Q

Security Token Service (STS)

A

create token for short time credential with limited priviliges (for crosss accounto or temporary ec2 permission)

145
Q

Cognito

A

create million of users for your app, not AWS users

146
Q

AWS directory service

A

integrate Microsoft active directory in AWS

147
Q

AWS IAM identity Center

A

Single Sign On for AWS account of same organization. Single pw for multiple accounts

148
Q

design principle for architecture

A

Scalability, Disposable resources, Loose coupling of components, Think in service, not in servers, automation (serverless, ASG)

149
Q

6 Pillars of good architecture

A

1) operational excellence
2) Security
3) Performance efficiency
4) Reliability
5) Cost optimization
6) Sustainability

150
Q

Aws well architected tool

A

revie your architecture against the 6 pillars and give advice

151
Q

Cloud adoption Framework: guide book that identifies capabilities for succesfull cloud transformation and group them into these 6 groups:

A

Business, people, Governance, platform, Security, Operation

152
Q

Transformation domains (things that you can tranform with cloud)

A

Things that you can tranform with cloud: Technology, process, organization, product

153
Q

Transformation phases:

A

envision, align /with 6 pillars), launch, scale

154
Q

aws solution library

A

list of framework already made and ready for specific usecases

155
Q

AWS professional services and partner network

A

tech partners, consultin partners, training partners, navigate program

156
Q

AWS IQ

A

find professional help by asking and reviewing responses of experts

157
Q

AWS repost- knowedge center

A

like stack overflow, find threads, FAQs and best practices

158
Q

AWS Managed Service (AMS)

A

team of experts that can manage your infrastructure

Aws cloud practitioner (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions