AWS Software Flashcards

1
Q

Accelerated Computing Instances

Compute Services/Families

A

Uses hardware accelerators to perform some functions more efficiently than is possible in software running on CPUs (floating-point number calculations, graphics processing, data pattern matching).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Amazon Athena

A

An serverless, interactive query service to analyze data directly in Amazon S3, using standard SQL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon Aurora

A

Enterprise-class RDS, high availabilty, replicates up to six copies of data across three availability zones, continuous backup to S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon CloudFront

A

A service that delivers data, video, apps, and APIs to customers using low latency and high transfer speeds.

Accelerates communication with Edge Locations.

A global content delivery service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS CloudTrail

Monitoring and Analytics

A

API auditing tool that captures the ID of the API caller, time of the API call, source IP address of the API caller, what action was taken or denied, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Amazon CloudWatch

Monitoring and Analytics

A

Enables monitoring and managing various metrics and configures automatic alarm actions based on data from the metrics.

Dashboards provide a single location to access all metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon Cognito

Security, Identity, and Compliance Service

A

Allows user sign-up, sign-in, and access control to web and mobile apps quickly and easily with authentication through identity providers (Apple, Facebook, Google, Amazon) and enterprise identity providers via SAML 2.0 and OpenID Connect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon Detective

Security, Identity, and Compliance Service

A

A service that makes it easy to analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities.

Automatically collects log data from AWS resources and uses machine learner, statistical analysis, and graph theory to build a linked set of data that enables you to easily conduct faster and more efficient security investigations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon Direct Connect

A

A services that establishes a dedicated private connection between an on-premise data center and a VPC or AWS. No shared public internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Amazon DynamoDB

Storage and Database Services

A

A key-value database system, fast and flexible NoSQL datable for any scale.

Delivers single-digit millisecond performance at any scale.

Serverless with automatic scaling, great for high performance while scaling with granular API access.

Use case for RDS: business analytics

Use case for DynamoDB: everything else without overhead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Amazon DynamoDB Accelerator

A

An in-memory cache for DynamoDB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Amazon EBS

Storage Services

A

Amazon Elastic Block Store

Provides block level storage volumes for EC2 instances that can be attached and access when an EC2 instances is started.

Stores data in a single AZ - instances and EBS must be in the same AZ.

User can select the size and type of storage, provision it and back it up with snapshots.

An EBS snapshot is an incremental backup in which only blocks of data that have changed are saved.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Amazon EC2

Compute and Serverless

A

Amazon Elastic Compute Cloud

A virtual server, or instance, that can be accessed when needed and returned when finished.

Data centers that contain servers that have already been built, installed, secured, and online ready for usage.

The customer is responsible for the OS, passwords or keys, and any data stored in the account.

Billing starts when the instance starts and is in a running state. The customer is not billed if an instance is in a stopped state.

Coffee shop analogy:

Barista = virtual server/instance. Only pay for the number of baristas working, if the baristas are not being used, they are not paid.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Amazon EC2 AutoScaling

A

Automatically add or remove Amazon EC2 instances in response to changing application demand.

At any minute of the day, there are always enough instances.

Beginning with needed resources and designing architecture to automatically respond to changing demands by scaling out or in.

Coffee shop analogy:

As more customers arrive and order coffee, more baristas are supplied to handle the register and making of drink orders. When customers leave and business dies down, baristas are sent home.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Amazon EC2 Instance Type: Dedicated Hosts

Billing and Pricing

A

Physical services dedicated for a company’s use.

The most expensive purchase option for instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Amazon EC2 Instance Type: On-Demand

Billing and Pricing

A

Instance that runs continuously until stopped.

Customer only pays for what was used - no upfront cost or minimum contract.

Ideal for short-term, irregular workloads for less than a year.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon EC2 Instance Type: Reserved Instances

Billing and Pricing

A

A standard reserve and convertible reserved instance or scheduled reserve instance.

1 to 3 year commitment with a billing discount for on-demand instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon EC2 Instance Type: Savings Plan

Billing and Pricing

A

A consistent usage of instances.

1 to 3 year commitment with a 72% discount for on-demand rates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Amazon EC2 Instance Type: Spot

Billing and Pricing

A

Instances that are unused until Amazon needs them.

Designed for workloads that are flexible and can withstand interruptions.

Offers a 90% discount for on-demand instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Amazon ECS

Containers

A

Amazon Elastic Container Service

A highly scalable, high-performance container management system that enables you to run and scale containerized workloads on a managed cluster of Amazon EC2 instances.

You manage the EC2 instances.

Supports docker containers = a platform to build, test, and deploy apps quickly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Amazon EFS

A

Amazon Elastic File System

A scalable file system used with AWS cloud services and on-premise resources.

Scales on-demand with petabytes without disrupting services.

Is a regional service and stores data in multiple AZs.

Access can be done concurrently across all AZs.
On-premise servers can access EFS with direct connect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Amazon ElastiCache

Security, Identity, and Compliance Service

A

Adds caching layers on top of databases to help improve the read times of common requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Amazon GuardDuty

Security, Identity, and Compliance Service

A

Provides intelligent threat detection by continuously monitoring the network activity and account behavior.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Amazon Inspector

A

Improves security and compliance by running automated security assessments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Amazon Kinesis

A

A scalable and durable real-time data streaming service that can continuously capture gigabytes for real-time data such as video, audio, application logs, website clickstreams, and IoT telemetry data for machine learning, analytics, and other applications.

Captures and automatically loads streaming data Amazon S3 and Amazon Redshift, allowing for near-real-time analytics with business intelligence tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Amazon Lightsail

A

A virtual private server (VPS) or instance provider in which users can run websites and web applications in a highly secure and available environment.

Provides developers with compute, storage, and networking capacity and capabilities to deploy and manage websites and web applications in the cloud.

A low-cost, pre-configured cloud resource for simple workloads just starting on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Amazon RDS

A

Relational Database Service

Service that enables running relational databases in the AWS Cloud. Automates tasks such as hardware provisioning, DB setup, patching, and backups.

A database service that makes it easy to set up, operate, and scale a relational database in the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Amazon Redshift

Database

A

A large scale, managed data warehouse service used for big data analytics with Amazon S3.

Collects data from many sources and helps you understand relationships and trends across your data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Amazon Route 53

Network Service Category

A

A DNS web service that gives developers and businesses a reliable way to route and users to internet applications hosted in AWS, as EC2 instances and load balancers.

Also manages DNS records for domain names.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Amazon S3

Storage Service

A

Amazon Simple Storage Service
A data store that allows storage and retrieval of an unlimited amount of data at any scale.
Stores data as objects in buckets.
Six different storage types exist:
- S3 Standard
- S3 Standard Infrequent Access
- S3 One Zone Infrequent Access
- S3 Intelligent Tiering
- S3 Glacier
- S3 Glacier Deep Archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Amazon S3 Glacier

Storage Service

A

Retrieval of objects that may take a few minutes to a few hours.
Low cost storage for data archiving.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Amazon S3 Glacier Deep Archive

Storage Service

A

Object retrieval in 12 hours.
Lowest cost object storage class.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Amazon S3 Intelligent Tiering

Storage Service

A

Ideal for data with unknown or changing access patterns.
Fee per object for monthly monitoring and automation.
Tiered between Standard and Standard IA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Amazon S3 One Zone IA

Storage Service

A

Amazon S3 One Zone Infrequent Access
Stores data in 1 AZ with a lower storage price.
Recommended for data that can be easily reproduced.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Amazon S3 Standard

Storage Service

A

Used to store frequently accessed data.
Stored in a minimum of 3 AZs.
High availability.

36
Q

Amazon S3 Standard IA

Storage Service

A

Amazon S3 Standard Infrequent Access
Infrequently accessed data with a lower storage price but a higher retrieval price.
Stored in a minimum of 3 AZs.

37
Q

Amazon SNS

Application Integration

A

Amazon Simple Notification Service

A notification service for the mass delivery of messages to both application-to-application (A2A) and application-to-person (A2P) communications at scale via SMS, mobile push, and email.

Coffee shop analogy:

Notification can be sent out to customers to let them know their order is ready.

38
Q

Amazon SQS

Application Integration

A

Amazon Simple Queue Service

A messaging queuing service to send, store and receive messages between software components without losing messages or requiring other services to be available.

Use with decoupled applications and microservices.

Coffee shop analogy:

Coffee orders are displayed on a screen or queue, allowing the cashiers to input orders and baristas to accept the orders when ready.

39
Q

AWS Elastic Beanstalk

A

A tool to provision and build-out EC2-based environments automatically by providing application codes and desired configurations.
Environments can be saved for easy deployment and shifts focus to the business applications vs the infrastructure.
- Adjusts capacity
- Load balancing
- Automatic scaling
- Application health monitoring

40
Q

Amazon VPC

Network Service Category

A

Amazon Virtual Private Cloud
A networking service used to establish boundaries around an AWS resource (barista with security guard example).

It can be further sectioned into a subnet which holds resources/EC2 instances and can span multiple availability zones.

41
Q

Amazon VPN

Network Service Category

A

Virtual Private Network

The connection that encrypts or protects internet traffic from all other requests around it (like a bodyguard).

Establishes a connection between the VPC and a private network (on-premise data center or internal corporate network).

42
Q

AWS WAF

A

AWS Web Application Firewall
Allows monitoring of network requests that come into web applications.
Works with CloudFront and application load balancer by using a web access control list (ACL).
Example: VIP list that excludes blocked IP addresses.

43
Q

Application Load Balancer

A

The 2nd type of load balancers offered through Elastic Load Balancer.

Offers all services of the Classic Load Balancer with additional features: supported protocols, enhanced CloudWatch metrics, enhanced access logs, and health checks.

44
Q

Availability Zone

Infrastructure

A

A single data center or group of data centers in a region, located tens of miles from each other for low latency between zones.

*A fully isolated portion of the AWS infrastructure.

Running apps in multiple zones promotes redundancy in case of a data center failure.

45
Q

AWS Artifact

Security, Identity, and Compliance Service

A

Provides on-demand access to AWS Security and compliance reports and select online agreements.

46
Q

AWS Budgets

Pricing and Support

A

Creates budgets to plan for service uses, costs, and instance reservations. Alerts can be set when a budget has exceeded a threshold.

47
Q

AWS CLI

A

AWS Command Line Interface
A unified tool to manage Amazon S3 data, buckets, and objects via a command line using commands or scripts.

48
Q

AWS CloudFormation

A

Allows building environment by writing lines of code.
Provisions resources in a safe, repeatable manner by determining the right operations to perform when managing stacks and rolls back changes automatically if it detects errors.

49
Q

AWS CloudFront

A

A service that delivers data, video, aps, and APIs to customers using low latency and high transfer speeds.
Accelerates communication with Edge Locations - a global content delivery service.

50
Q

AWS Direct Connect

Network Service Category

A

A service that establishes a dedicated private connection between a data center and a VPC (private hallway to the coffee example).
No public internet is shared.

51
Q

AWS Fargate

Containers

A

A serverless compute engine for containers that does not require provisioning or managing of servers, the customer only pays for resources required to run the containers.

AWS Fargate manages servers for you.

Also works with ECS and EKS.

52
Q

AWS Global Infrastructure

Infrastructure

A

A technology infrastructure that delivers high-availability and fault tolerance by distributing datacenters throughout the world into different areas called regions.

53
Q

AWS IAM

Security, Identity, and Compliance Service

A

Identity and Access Management

Used to create users and manage their respective access to resources, including buckets and objects.

54
Q

AWS Lambda

Compute and Serverless

A

A serverless computing service that lets you run code without needing to provision or manage servers - only pay for computing time when your code is running.

No containers, no virtualization, only code.

Host short running functions, service-oriented applications, event driven application, no provisioning or managing servers.

Upload code - set code to trigger from event source - code runs when triggered - pay only when code runs.

55
Q

AWS Management Console

A

Provides a simple web interface to view buckets and objects, upload and download data and manage permissions and security without having to write code.
- Max upload 160GB

56
Q

AWS Marketplace

A

A digital catalog to find, test, and buy software that runs on AWS.

57
Q

AWS Organizations

Security, Identity, and Compliance Service

A

A service that offers policy-based management for multiple AWS accounts in a central location.

58
Q

AWS SDK

A

AWS Software Development Kits

59
Q

AWS Shield

Security, Identity, and Compliance Service

A

A service that protects applications against distributed denial-of-service (DDoS) attacks.

Standard: automatically protects against attacks, at no cost, using analysis techniques to detect malicious traffic in real time and mitigate it.

Advanced: A paid service that provides detailed attack diagnostics and ability to detect and mitigate sophisticated DDoS attacks.

60
Q

AWS Snowball Edge

A

An offline data transfer service that uses a physical device to physically transport data into and out of AWS to up 80TB.

  • Snowball Edge Storage Optimized is for large-scale data migration and reoccurring transfer workflows.
  • Snowball Edge Compute Optimized for powerful computing resources like advanced machine learning, full motion video analysis, analytics, and local computing stacks.
61
Q

AWS Storage Gateway

A

A set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.

62
Q

AWS Support Center

Pricing and Support

A

A hub for managing support cases.

63
Q

AWS Support Plans

Pricing and Support

A

Help with troubleshooting issues at a lower cots and efficiently use AWS services.

Basic Support: Free support through white papers, documentation and support communities, personal health dashboard.

Developer Support: Best practice guidance, client diagnostic tools, building block architecture support.

Business Support: use-case guidance, trusted advisor checks, limited support for third-party software.

Enterprise Support: Application architecture guidance, infrastructure event management, technical account manager (TAM, primary point of contact at AWS).

64
Q

AWS WAF

Security, Identity, and Compliance Service

A

Web Application Firewall

Allows monitoring of network requests that come into web applications.

Works with CloudFront and Application Load Balancer by using a web access control list (ACL). For example, a VIP list that excludes blocked IP addresses.

65
Q

AWS Well-Architected Framework

A

A services that help you understand how to design and operate reliable, secure, efficient, and cost-effective systems in AWS Cloud.

Based on 5 Pillars:

Operational Excellence

Security

Reliability

Performance Efficiency

Cost Optimization

66
Q

Compute Optimized Instances

Compute Services/Families

A

Ideal for compute-bound applications that benefit from high-performance processors (batch processing, web, application, gaming servers).

67
Q

Compute Services Categorized

A
68
Q

Cost Explorer

A

A tool that enables you to visualize, understand, and manage AWS costs and usage over time.

69
Q

EC2 Instance Types

Compute Services/Families

A
  • General purpose instances
  • Compute optimized instances
  • Memory optimized instances
  • Accelerated computing instances
  • Storage optimized instances
70
Q

Edge Locations

Infrastructure

A

A site that Amazon CloudFront uses to store cached copies of content closer to customers for faster delivery (Brazil and China example).

71
Q

Amazon EKS

Containers

A

Amazon Elastic Kubernetes Services

A fully managed service that you can use to run Kubernetes on AWS.

You manage the EC2 instances.

Kubernetes is an open source system for automating deployment, scaling, and management of containerized applications.

72
Q

Elastic Load Balancers

A

Ensures that no single Amazon EC2 instance has to carry the full workload on its own.

Automatically distributes incoming application traffic across multiple resources, such as EC2 instances, ensuring no single Amazon EC2 instance has to carry the full workload on its own.

Evenly distributes requests to EC2 instances when demand increases.

Coffee shop analogy:

Host that directs customers to lines to ensure even distribution of customers to cashiers.

73
Q

General Purpose Instances

Compute Services/Families

A

Provides a balance of compute, memory, and networking resources (application servers, gaming servers, backend servers for enterprise applications, small and medium databases).

74
Q

IAM Group

A

Identity and Access Management Group

A collection of IAM users that are granted the same permissions specified by the IAM policy.

75
Q

IAM Policy

A

Identity and Access Management Policy

A document that allows or denies permissions to AWS services and resources.
- Recommends to follow the security principle of least privilege when granting permissions.

76
Q

IAM Roles

A

Identity and Access Management Roles

An identity that can be assumed to gain temporary access to permissions.

77
Q

IAM User

A

Identity and Access Management User

An identity created in AWS with specific permissions.

  • Default user has no permissions.
  • Each user has their own set of security credentials.
78
Q

Memory Optimized Instances

Compute Services/Families

A

Ideal for high-performance databases.

Designed to deliver fast performance for workloads that process large datasets in memory.

79
Q

Regions

Infrastructure

A

A geographical area that contains AWS resources with multiple locations that are isolated from each other.

They are designed and built closest to where business traffic demands: Paris, Tokyo, Sao Paulo, Dublin, Ohio.

There are multiple data centers within each region. Regions are connected by high-speed fiber network.

4 key factors to selecting a region:

  1. Compliance - Does your data need to physically reside within specific boundaries?
  2. Proximity - Latency increases the further away the data is from the customer.
  3. Availability - Where do the AWS services reside?
  4. Pricing - Pricing is determined by factors that include the country’s tax structure.
80
Q

Storage Optimized Instances

Compute Services/Families

A

Suitable for data warehouse applications.

Designed for workloads that require high, sequential read and write access to large datasets on local storage (distributed file systems, data warehousing applications, high-frequency online transaction processing systems).

81
Q

AWS Cost Explorer

Pricing and Support

A

A tool that enables you to visualize, understand, and manage AWS costs and usage over time.

82
Q

AWS Outposts

A

Extends AWS infrastructure and services to your on-premises data center.

83
Q

AWS KMS

Security and Compliance

A

Key Management Service

Enables encryption operations through the use of cryptographic keys.

A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data.

84
Q

AWS Trusted Advisor

A

A web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.

Includes security checks, such as Amazon S3 buckets with open access permissions.

Best practice recommendations:

  • cost optimization
  • performance
  • security
  • fault tolerance
  • service limits
85
Q

AWS Config

A

A service that enables you to assess, audit, and evaluate the configurations of your AWS resources.

Continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.