AWS Solutions Architect Definitions Flashcards
IAM (Identity and Access Management)
control access to resources
IAM User
not root, access to aws account
IAM Group
groups for IAM users
IAM policy
rules for access for user, groups, role to services
IAM MFA
Multi Factor Auth for IAM user login
AWS Access Keys
programmatic access to AWS services
AWS CLI, SDK, CloudShell, Management Console
ways to request services through AWS API
IAM Security Tools
- monitor IAM
- IAM credentials report, IAM access advisor
EC2
virtual server
EC2 Lifecycle states
pending, running, stopping, stopped, shutting-down, terminated
EC2 setup
- choose AMI
- choose instance type
- assign tags
- create key pair
- sec groups with rules
- choose VPC, subnet, AZ
- assign storage
aws configure
- specify access key under IAM user for AWS CLI setup
Security groups
- inbound and outbound rules for traffic control and resource protection
Ports
virtual network connection endpoint
SSH
Secure Shell Connect
- used for remote login and CLI execution
Spot Instances
interruptable spare EC2 capacity
Spot Fleet
pool of spot and on demand instances
Reserved Instances
reserved instances
- standard, convertible
IP addresses
connection of device on network
EC2 Placement Groups
instance placement strategy
EC2 placement groups strategies
cluster, spread, partition
Elastic Network Interface
network card gives device access to a network
EC2 Hibernate
option to save RAM state post termination
VPC (virtual private cloud)
isolated virtual network within certain ip range
Subnets
ip range within VPC, single AZ, in which resources are allocated
EBS (Elastic Block Storage)
persistent virtual storage volume mountable to instances
EBS Snapshot
backup of data and workloads at a point in time
EBS multi-attach
attach single EBS volume shared between instances
EBS Encryption
encrypted volume with data at rest and in transit using AWS KMS keys
AMI (Amazon Machine Image)
preconfigured image with OS, software, tools, utilities, data, scripts pre-installed to start on ec2
EC2 Instance Store
ephemeral storage to an instance
EFS (Elastic File System)
scalabale file storage for instances
Scalability
adjusting supply based on fluctualting demands
- horizontal, vertical
Availability
- state of having application available despite failures
ELB (Elastic Load Balancer)
distribute network traffic across resources
ALB (Application)
routing at HTTP/HTTPS layer
NLB (Network)
routing at TCP/SSL layer
GWLB (Gateway)
distribute traffic to network security monitoring
IAM Role
temp role for access by ec2 or users
AWS account
- resources assigned here
- root account
