AWS Services Overview Flashcards
Lambda
“Serverless compute service that employs code referred to as functions and scales automatically”
Fargate
“Auto-scaling serverless compute engine for managing containers such as Docker”
Lightsail
“Service with a simple UI that allows you to quickly deploy pre-configured applications for small projects. Can be very inexpensive.”
Outposts
“Physical Hybrid-Cloud device that offers lower latency and gives you access to AWS Services and APIs on-prem”
Batch
“A service that breaks down and processes large workloads in smaller batches. Dynamically provisions instances based on job size.”
Elastic Block Storage (EBS)
“Attachable storage device with persistent storage for EC2. Conceptually similar to a flash drive.”
EC2 Instance Store
“Physical storage attached to server that provides ephemeral storage for EC2 instances. Cannot be detached.”
Elastic File System (EFS)
“A serverless network file system for sharing files. Only supports Linux file systems.”
Storage Gateway
“Hybrid storage service that connects on-prem and cloud data. Recommended for moving backups to the cloud or providing low latency access to data.”
CloudFront
“Global Content Delivery Network (CDN) that uses Edge Locations to cache content near Users for fast access. CloudFront is most commonly used with S3 and can stop some DDoS attacks and limit access by country.”
Global Accelerator
“Reduces latency and improves the availability of applications and can provide up to a 60% performance boost.”
S3 Transfer Accelerator
“Improves content upload and download speed for S3 buckets. Uses CloudFront edge locations to speed up access to a central bucket.”
Route 53
“A DNS service that provides domain name registration, performs health checks on AWS resources and can act as a load balancer.”
AWS Direct Connect
“A direct private connection from on-prem to AWS that bypasses internet service providers.”
AWS VPN (Virtual Private Network)
“Similar to Direct Connect but data travels over the public internet. Data is automatically encrypted.”
Amazon Virtual Private Cloud (VPC)
“Foundational service that allows you to create a secure private network in the AWS cloud. AWS resources can be launched in a VPC to help isolate and protect them.”
AWS Relational Databases
RDS, Aurora
AWS NoSQL Databases
DynamoDB
AWS In-Memory Databases
ElastiCache
AWS Document Databases
DocumentDB
Amazon Relational Database Service (RDS)
“Used to launch and manage relational databases using engines such as Aurora, PostgreSQL, MySQL, MariaDB, Oracle and SQL Server. Offers high availability and fault tolerance through Multi-AZ deployment options.”
Amazon Aurora
“Auto-scaling RDS managed service that supports MySQL up to five times faster than normal and PostgreSQL up to three times faster than normal.”
Amazon DynamoDB
“Fully managed and serverless NoSQL non-relational, key-value database that scales automatically.”
Amazon DocumentDB
“A fully managed and serverless non-relational service for MongoDB.”
Amazon ElastiCache
“High-performance, low-latency ephemeral in-memory data storage solution that is compatible with Redis or Memcached engines.”
Amazon Neptune
“A fully managed graph database service that is good for highly connected datasets such as social media networks.”
Database Migration Service (DMS)
“Helps you migrate on-prem databases to AWS with virtually no downtime and supports homogeneous (Oracle to Oracle) and heterogeneous (Oracle to SQL Server) migrations.”
Server Migration Service (SMS)
“Migrates servers from on-prem to AWS and saves them as Amazon Machine Images (AMI) that can be launched as EC2 instances.”
AWS Snow Family
“AWS Methods for transferring data from on-prem to the cloud using a physical device. Typically, faster and more cost effective than network transfers for large amounts of data.”
AWS DataSync
“Synchronizes on-prem data and cloud data through direct connect or public internet. Provides data transfer speeds up to 10x faster than open source tools.”
RedShift
“Data warehousing solution with improved speed and efficiency when querying. Good for data consolidation and databases that do not require real-time transaction processing (No Insert, Update, Delete). Handles up to exabyte scale data.”
Athena
“Serverless S3 query service that uses standard SQL.”
Glue
“Prepares data for analytics and helps you better understand your data. Generates ETL Code (Extract, Transform, Load).”
Kinesis
“Analyzes data and videos in real time. Supports video, audio, application logs, website clickstreams and IoT data.”
Elastic MapReduce (EMR)
“Helps process large amounts of data. Works with Hadoop and big data frameworks such as Apache Spark.”
Data Pipeline
“Helps you move data between compute and storage services on-prem or in the cloud. Data can be moved at specific intervals or based on certain conditions. Pipeline notifies you of success or failure.”
Rekognition
“Automates image and video analysis. It can identify custom labels in images and videos and perform face and text detection.”
Comprehend
“A natural-language processing (NLP) service that finds insights and relationships within text. Can be used to review social media posts to determine customer sentiment.”
Polly
“Text-to-Speech AI with natural sounding speech. Many voices are available across many languages and custom voices can be created.”
SageMaker
“The flagship AWS machine learning service that prepares data for models and helps you build, train and deploy machine learning models quickly.”
Translate
“Provides real time and batch language translation services for many languages.”
Lex
“Helps you build highly engaging conversational interfaces such as chatbots. Can recognize speech and understand language. Powers Amazon Alexa.”
Cloud9
“An integrated development environment (IDE) that allows you to write and debug code from your browser.”
CodeCommit
“A source control system for private Git repositories that can create repositories and commit, branch and merge code.”
CodeBuild
“Allows you to build, test and compile your application source code. Enables Continuous Integration and Continuous Delivery (CICD).”
CodeDeploy
“Manages the deployment of code to compute services in the cloud and on-prem. Eliminates downtime during application deployment by leveraging rolling deployments.”
CodePipeline
“Integrates with CodeBuild, CodeCommit and CodeDeploy to automate the software release process.”
X-Ray
“Helps you debug, analyze and map production applications.”
Example: Could be used to map requests made to an RDS database from within your application.
CloudFormation
“Allows you to create templates to automate the provisioning of cloud resources.”
Elastic Beanstalk
“Orchestration service that automatically provisions resources and handles the deployment of web applications and web services on AWS.”
OpsWorks
“Allows you to use Chef or Puppet to automate the configuration of servers and deploy code.”
Simple Queue Service (SQS)
“A message queuing service that allows you to build loosely coupled systems. Improves performance and scalability by allowing multiple components to add messages to the queue and processing them asynchronously.”
Simple Notification Service (SNS)
“Allows you to send emails and text messages from your applications when certain conditions are met (Budget Alarms, for example).”
Simple Email Service (SES)
“Allows you to send richly formatted HTML emails from your application. Ideal for marketing campaigns or professional emails.”
CloudWatch
“Provides a collection of services such as alarms, logs, metrics and events to help you monitor your resources. Can detect anomalies such as root user activity.”
CloudTrail
“Tracks user activity and API calls within your account. Can track user, event time, event name, IP address, access key used, region and error codes.”
Web Application Firewall (WAF)
“Helps to protect web apps against common web attacks such as SQL Injections and Cross-Site Scripting by blocking attack patterns.”
Shield
“A managed Distributed Denial of Service (DDoS) protection service with free and paid tiers.”
Macie
“Uses machine learning to assist in discovering and protecting sensitive data such as Personally Identifiable Information (PII) in S3 environments.”
Config
“Allows you to assess, audit and evaluate the configurations of your resources. Config can track configuration changes over time and store the history files in S3.”
GuardDuty
“An intelligent threat detection system that uses machine learning to uncover unauthorized behavior in EC2, S3 and IAM. Reviews CloudTrail, VPC Flow and DNS logs.”
Inspector
“Works with EC2 instances to uncover and report vulnerabilities such as access from internet, remote root logins and vulnerable software versions.”
Artifact
“Provides on-demand access to AWS security and compliance, Service Organization Control (SOC) and Payment Card Industry (PCI) reports. Acts as a central repository for compliance reports from third-party auditors.”
Key Management Service (KMS)
“Generates and acts as a central repository for encryption keys. Automatically enabled for CloudTrail logs, S3 Glacier and Storage Gateway.”
CloudHSM
“A physical hardware security module (HSM) used by customers to generate encryption keys on-prem that AWS does not have access to.”
Secrets Manager
“Allows you to store, rotate, manage and retrieve secrets such as passwords and keys. Secrets are encrypted at rest. Integrates with services such as RDS, Redshift and DocumentDB.”
Application Delivery Service
“Helps you plan migration projects to the AWS Cloud. Can be used to estimate TCO.”
Budgets
“Allows you to set custom budgets that alert via email, text or chatbot when costs or usages exceed the budgeted amount. Budgets can be set for Cost, Usage and Reservation.”
Cost and Usage Report
“The most comprehensive overview of cost and usage data for your AWS account. Breaks charges down to the level of cost per instance ID.”
Cost Explorer
“Helps you visualize and forecast your costs and usages over time. Can view up to 12 months of past usage and forecast up to 3 months in the future.”
Organizations
“Allows you to centrally manage multiple AWS accounts under one umbrella and centrally manage accounts and billing. Aggregates account usages to increase savings.”
Control Tower
“Helps you ensure that your accounts are conforming to company-wide policies and provides a dashboard for account management.”
Systems Manager
“Provides automation, visibility and control over AWS resources. Allows you to group resources and take actions on the entire group simultaneously.”
Trusted Advisor
“Provides real-time guidance to help you provision resources while following AWS best practices. Checks your account and makes recommendations.”
- Example: Checks for unrestricted access for specific ports on EC2 instances.
- Example: Checks S3 bucket permissions to determine if there is public access.
- Example: Checks for MFA on root account.
- Example: Checks IAM password policy. (This is not a free check)
- Example: Checks for RDS public snapshots.
- Example: Checks for service usage greater than 80% over service limit. (This is not a free check)
- Example: Checks for exposed access keys. (This is not a free check)
- Example: Checks for CloudFront delivery optimization. (This is not a free check)
Managed Services
“Provides ongoing management of your AWS infrastructure by augmenting your internal staff and providing additional resources. Reduces operational risk and overhead.”
Professional Services
“Service that helps enterprise-level customers move to the cloud by proposing, architecting and implementing solutions.”
AWS Partner Network (APN)
“A global community of AWS-approved partners that offer software solutions and consulting services on AWS. The network includes partners for software solutions as well as professional services.”
AWS Marketplace
“A digital catalog of prebuilt solutions and third party software that can be purchased or licensed. Marketplace can also be used to sell your own solutions to other AWS customers.”
