CCP Flashcards
1
Q
Abbreviation : IAM
A
Identity and Access Management
2
Q
Define : IAM
A
IAM is a Global Service that allows you to create users and groups to access your AWS environment.
3
Q
What can IAM groups consist of
A
IAM groups can only contain users
4
Q
IAM Users
A
Mapped to a physical user, has a password for AWS Console access
5
Q
IAM Policies
A
JSON documents that outline permissions for users or groups
6
Q
Where can you apply IAM policies
A
Policies can be applied to users, groups, and roles
7
Q
What type of policy is applied directly to a user
A
An inline policy
8
Q
IAM Roles
A
Allows you to create permissions so services can perform tasks in AWS. Common roles are
EC2 instance, Lambda function, and CloudFormation roles
9
Q
AWS CloudShell
A
Browser-based shell that gives command-line access to your AWS resources in the selected AWS region
10
Q
Three MFA options
A
- Virtual MFA Device
- Universal 2nd Factor (U2F) Security Key
- Other hardware MFA device
11
Q
Three ways to access AWS
A
- AWS Management Console
- AWS Command Line Interface
- AWS Software Developer Kit
12
Q
IAM Credentials Report
A
A report that lists all your account’s users and the status of their various credentials
13
Q
IAM Access Advisor
A
Access Advisor shows the service permissions granted to a user and when those services were last accessed
14
Q
Abbreviation : EC2
A
Elastic Compute Cloud
15
Q
Abbreviation : AMI
A
Amazon Machine Image
16
Q
Port : 22
A
SSH (Secure Shell)
17
Q
Port : 21
A
FTP (File Transfer Protocol)
18
Q
Port : 22
A
SFTP (Secure File Transfer Protocol)
19
Q
Port : 80
A
HTTP
20
Q
Port : 443
A
HTTPS
21
Q
Port : 3389
A
RDP (Remote Desktop Protocol)
22
Q
EC2 configuration options
A
- OS : Linux, Windows, Mac OS
- CPU/RAM
- How much storage space
- Network Card : Speed of the card, Public IP address
- Firewall rules : Security group
- Bootstrap script (configure at first launch) : EC2 User Data
23
Q
EC2 User Data
A
-Using a EC2 User Data Script we can bootstrap our machines
-That script is only ran once at the instance first start
-EC2 user data is used to automate boot tasks such as
-Installing updates
-Installing software
-Downloading common files from the internet
-Anything you can think of
The EC2 User Data Script runs with the root user
24
Q
What is an AMI
A
Amazon Machine Image (AMI) : An AMI is a template that contains the software configuration (operating system, application server, and applications) required to launch your instance. You can select an AMI provided by AWS, our user community, or the AWS Marketplace; or you can select one of your own AMIs.
25
EC2 Instance Types
- General Purpose
- Compute Optimized
- Memory Optimized
- Accelerated Computing
- Storage Optimized
26
EC2 General Purpose
General purpose instances provide a balance of compute, memory and networking resources, and can be used for a variety of diverse workloads. These instances are ideal for applications that use these resources in equal proportions such as web servers and code repositories.
27
EC2 Compute Optimized
Compute Optimized instances are ideal for compute bound applications that benefit from high performance processors. Instances belonging to this family are well suited for batch processing workloads, media transcoding, high performance web servers, high performance computing (HPC), scientific modeling, dedicated gaming servers and ad server engines, machine learning inference and other compute intensive applications.
28
EC2 Memory Optimized
Memory optimized instances are designed to deliver fast performance for workloads that process large data sets in memory.
29
EC2 Accelerated Computing
Accelerated computing instances use hardware accelerators, or co-processors, to perform functions, such as floating point number calculations, graphics processing, or data pattern matching, more efficiently than is possible in software running on CPUs.
30
EC2 Storage Optimized
Storage optimized instances are designed for workloads that require high, sequential read and write access to very large data sets on local storage. They are optimized to deliver tens of thousands of low-latency, random I/O operations per second (IOPS) to applications.
31
What is a Security Group
- Security groups act as a 'firewall' on EC2 instance
- The control access ports, authorized IP ranges, and control inbound and outbound networks
- Only contain allow rules
32
EC2 Instance Connect
Substitute for logging into your instance though a terminal. Launches a web-based SSH connection.
33
EC2 Purchasing Options
- On-Demand Instance : short workload, predictable pricing
- Reserved : (min 1 year) long workloads
- Convertible Reserved Instance : Long and flexible workload
- Spot Instance : short workload, cheap, can lost instance
- Dedicated Hosts : book entire physical server
- Dedicated Instance : has hardware dedicated to that instance
34
EC2 Instance Role
A Role applied to an instance that links to an IAM role allowing the EC2 instance to connect to IAM
35
Abbreviation : EBS Volume
Elastic Block Store Volume
36
What is an EBS Volume
- Network drive you can attach to your instance while they run
- Can only be mounted to one instance
- Locked to AZ
37
What is a EBS Snapshot
Backup of an EBS volume at a point in time. Can be copied across AZ or Region
38
What is EC2 Image Builder
A tool used to create custom AMIs for use in your AWS environments.
39
What is EC2 Instance Store
EC2 Instance Store is a physical hard drive attached to your EC2 instance for increased performance over an EBS volume. EC2 Instance Store lose their storage if they're stopped
40
Abbreviation : EFS
Elastic File System
41
What is EFS
A managed network file system that can be mounted on 100s of EC2s. EFS works with Linux instances in multi-AZ only.
42
What is EFS-IA
EFS Infrequent Access is used to save on files that are not often accessed. EFS can move files automatically based off a Lifecycle Policy into EFS-IA. Transparent to the applications accessing EFS
43
What is Amazon FSx
A fully managed, highly reliable, and scalable native shared file system for Windows File Server, Lustre, and NetApp. Can be integrated into you on-premises.
44
What is elasticity mean in AWS
Once a system is scalable, elasticity means that there will be some 'auto-scaling' so that the system can scale based on the load. This is 'cloud-friendly' : pay-per-use, match demand, optimize costs
45
What is scalability in AWS
Ability to accommodate a larger load by making the hardware stronger (scale up), or by adding nodes (scale out)
46
What is HA in AWS
Run instances for the same application across multi AZ for redundancy
47
Abbreviation : ELB
Elastic Load Balancer
48
What is ELB
A managed load balancer that forward internet traffic to multiple servers downstream.
49
Three types of load balancers offered by AWS
- Application Load Balancer (HTTP/HTTPS only)
- Network Load Balancer (TCP)
- Classic Load Balancer (slowly retiring)
50
Abbreviation : ASG
Auto Scaling Group
51
What is an ASG
An ASG allows us to spin up or down instances to meet demand based on pre-defined thresholds. Also provides health checks on instances and replaces bad instances.
52
Abbreviation : S3
Simple Storage Service
53
What is Amazon S3
S3 allows people to store objects (files) in buckets (directories).
54
What are some S3 security options
- IAM policy to restrict what type of access an IAM user has
- Encryption of the S3 bucket
- Resource based policies
55
What is an S3 Website
S3 can host static websites and have them accessible on the www
56
What is S3 Versioning
It will allow you to create versions for your files in the S3 bucket. Allowing you to roll back to previous versions and even deletion. This is not a retroactive setting.
57
What is S3 Access Logs
A log that tracks all access to an S3 bucket.
58
What is S3 Replication CRR
Cross Region Replication
59
What is S3 Replication SRR
Same Region Replication
60
What is S3 Replication
A replication of object in an S3 bucket to another bucket, asynchronous. Can be used to replicate information across accounts with the proper permissions. Not retroactive.
61
What are the six S3 Storage Classes
- Standard
- Standard IA
- One Zone-IA
- Intelligent Tiering
- Glacier
- Glacier Deep Archive
62
What is an S3 Object Lock
It blocks an object version deletion for a specified amount of time.
63
What is Glacier Vault Lock
A policy that is locked from editing for data compliance and retention.
64
What is the AWS Snow Family
Offline devices to perform data migrations. If it takes more than a week to transfer over the network, use Snowball devices. Highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS
65
What are some Data Migration Tools
Snowcone
Snowball Edge
Snowmobile
66
What are some Edge Computing Tools
Snowcone
| SnowMobile
67
What is a AWS SnowBall Edge
Physical data transport solution, moves TBs or PVs of data in or out of AWS. Comes in Storage and Compute optimized versions.
68
What is AWS Snowcone
Small, portable computing device, very durable. 8TB of storage. Used for edge computing.
69
What is AWS Snowmobile
A truck used to move EBs and PBs of information to and from AWS.
70
What is AWS OpsHub
OpsHub is an agent that help you manage your Snow Family devices.
71
What is AWS Storage Gateway
A bridge between on-premise data and cloud data in S3 and EBS
72
Abbreviation : RDS
Relational Database Service
73
What is AWS RDS
- Relational Database / OLTP
| - Managed DB service for DBs that use SQL language
74
What is Aurora
- Relational Database
- Cloud optimized
- PostgreSQL and MySQL both supported
- Proprietary tech
75
What is ElasticCache
- In-Memory database
- Helps reduce load off databases for read intensive workloads
- Managed service
76
What is DynamoDB
-Key/Value Database
-Low latency
-NoSQL/not a relational database
Serverless
77
What is DynamoDB Accelerator (DAX)
-Similar to ElastiCache, but specific to DynamoDB
78
What is Redshift
- Warehouse OLAP (online analytical processing (analytics and date warehousing)
- Data stored in Columns
79
Abbreviation : EMR
Elastic MayReduce
80
What is EMR
EMR helps creating Hadoop clusters (Big Data) to analyze and process vast amounts of data
81
What is Athena
Serverless query service to perform analytics against S3 objects.
82
What is QuickSight
Serverless machine learning-powered business intelligence service to create interactive dashboards
83
What is DocumentDB
'Aurora for MondoDB' (JSON - NoSQL database)
84
What is Neptune
Fully managed graph database
85
Abbreviation : QLDB
Quantum Ledger Database
86
What is QLDB
Financial Transaction Ledger (immutable journal, cryptographically verifiable)
87
What is Amazon Managed Blockchain
Managed Hyperledger Fabric & Ethereum blockchains
88
Abbreviation : DMS
Database Migration Service
89
What is DMS
Quickly and securely migrate databases to AWS, resilient, self-healing
90
What is AWS Glue
Managed ETL (Extract Transform Load) and Stat Catalog service used to prepare and load data for analytics
91
Abbreviation : ECS
Elastic Container Service
92
What is ECS
Runs Docker containers of EC2 instances
93
What is Fargate
Run Docker containers without provisioning the infrastructure. Serverless offering (no EC2 instance)
94
Abbreviation : ECR
Elastic Container Registry
95
What is ECR
This is where you store your personalized Docker images so they can be run by ECS or Fargate
96
What is Lambda
An on-demand Virtual Function service. Run tasks like creating and moving thumbnails from images uploaded into an S3 bucket. Goes across whole AWS suite
97
What is Amazon API Gateway
Fully managed service for developers to easily create, publish, maintain, monitor, and secure APIs in the cloud. Serverless.
98
What is AWS Batch
Runs batch jobs on AWS across managed EC2 instances. Defined as Docker images
99
What is Amazon Lightsail
Service providing VMs, storage, DBs, and networking. Similar to EC2, ELB, Route 53, etc.. Meant for people with little cloud experience. Usually distractor on test.
100
What is Code Commit
store code in private git repository (version controlled)
101
What is CodeBuild
Build & test code in AWS
102
What is CodeDeploy
Deploy code onto servers
| Update any application onto servers
103
What is CodePipeline
Orchestration of pipeline (from code to build to deploy)
104
What is CodeArtifact
Store software packages / dependencies on AWS
105
What is CodeStar
Unified view for allowing developers to do CICD and code
106
What is Cloud9
Cloud IDE with collab
107
What is AWS CDK
Define your cloud infrastructure using a programming language
108
Abbreviation : CDK
Cloud Development Kit
109
What is CloudFormation
Create Infrastructure as Code, works with almost all of AWS resources.
110
What is AWS Elastic Beanstalk
Elastic Beanstalk is a developer centric view of deploying an application on AWS. All in one view and easy to make sense of.
111
What is AWS System Manager (SSM)
Helps mange your EC2 and On-Premises systems at scale. Patching automation for enhanced compliance and runs commands across an entire fleet of servers.
112
What is AWS OpsWorks
Managed Chef and Puppet in AWS
113
What is a Region in AWS
Each AWS Region is designed to be isolated from the other AWS Regions. This design achieves the greatest possible fault tolerance and stability.
When you view your resources, you see only the resources that are tied to the AWS Region that you specified. This is because AWS Regions are isolated from each other, and we don't automatically replicate resources across AWS Regions.
Exp: us-west-1
114
What is an AZ in AWS
Availability Zones are multiple, isolated locations within each Region.
Exp: us-west-1a and us-west-1b
115
What is a Local Zone in AWS
A Local Zone is an extension of an AWS Region that is geographically close to your users. You can extend any VPC from the parent AWS Region into Local Zones by creating a new subnet and assigning it to the AWS Local Zone
Exp: us-west-2-lax-1a
116
What is an Edge Location in AWS
Edge locations are AWS data centers designed to deliver services with the lowest latency possible. Amazon has dozens of these data centers spread across the world. They're closer to users than Regions or Availability Zones, often in major cities, so responses can be fast.
Used for content delivery as close as possible to users
117
What is Route 53
Global DNS service. Great to route users to the closest deployment with least latency. Great for disaster recovery strategies.
118
Abbreviation : CDN
Content Delivery Network
119
What is CloudFront
Service that replicates part of your application to AWS Edge Locations - decrease latency.
Caches common requests - Improves user experience and decrease latency
120
What is S3 Transfer Acceleration
Accelerate global uploads & downloads into S3
121
What is AWS Global Accelerator
Improves global application availability and performance using the AWS global network
122
What is an AWS Outpost
Outposts are AWS server racks that are deployed into and on-premises network extending AWS services into your data center
123
What is AWS WaveLength
This service bring AWS services to the edge of the 5G network. Used for ultra-low latency applications
124
What is Amazon SQS
Amazon Simple Queue Service is one of the oldest AWS offerings. Used to decouple applications by providing a queue where messages are kept up to 14 days. Multiple Consumers share the read and delete messages when done
125
Abbreviation : SQS
Simple Queue Service
126
Abbreviation : SNS
Simple Notification Service
127
What is Amazon SNS
Amazon Simple Queue Service is a notification service with no message retention.
128
What is Amazon Kinesis
A managed service to collect, process, and analyze real-time streaming data at any scale. For exam Kinesis = real-time big data streaming
129
What is Amazon MQ
When migrating to the cloud, instead of re-engineering an applications queue/notification service we can use Amazon MQ instead of SQS and SNS.
Amazon MQ = managed Apache ActiveMQ
130
What is Amazon CloudWatch
it is a reporting tool in AWS.
- Metrics : monitor the performance of AWS services and billing metrics
- Alarms : automate notification, perform EC2 action, notify to SNS based on metric
- Logs : collect log files from EC2 instances, servers, Lambda functions…
- Events (or EventBridge) : react to events in AWS, or trigger a rule on a schedule
131
What is Amazon EventBridge
EventBridge is the next evolution of CloudWatch Events. For exam its the same as CloudWatch Events
132
What is AWS CloudTrail
audit events / API calls made within your AWS account
133
What is AWS CloudTrail Insights
Automated analysis of your Cloud Trail Events to detect unusual activity
134
What is AWS X-Ray
AWS X-Ray helps developers analyze and debug production, distributed applications
135
What is the Service Health Dashboard
It provides the status of all AWS services across all regions
136
What is the Personal Health Dashboard
It is a dashboard that provides status of AWS events that impact your infrastructure
137
What is Amazon CodeGuru
Amazon CodeGuru is a developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code.
138
Abbreviation : VPC
Virtual Private Cloud
139
What is a VPC
A VPC is a private network to deploy your AWS resources in. This is a regional resource
140
What is a subnet in AWS
Subnets allow you to partition your network inside you VPC. Subnets are ties to an AZ.
141
What is a Internet Gateway
The IGW helps our VPC instances connect with the internet.
142
Difference between NAT Gateway and NAT Instances
NAT Gateways (AWS managed) & NAT Instances (self-managed) allow your instance in your Private Subnets to access the internet while remaining private
143
What is a Network ACL (NACL)
Stateless, subnet rules for inbound and outbound traffic. A firewall that can have allow and deny rules.
144
What is a Security Group
Stateful, operate at the EC2 instance level or ENI. A firewall that controls traffic to and from. Only Allow rules
145
What is VPC Peering
Connects two VPC with non-overlapping IP ranges, nontransitive
146
What is a VPC Endpoint
Endpoints allow you to connect to AWS Services using a private network instead of the public www network.
147
What is a VPC Flow Log
Network traffic logs
148
What is a Site to Site VPN
VPN over public internet between on-premises DC and AWS.
149
What is Direct Connect
This is a direct private connection to AWS which take at least a month to establish to local data center.
150
What is a Transit Gateway
Connects thousands of VPC and on-premises networks together.
151
What is AWS Shield
Free Automatic DDoS protection / 24/7 support for advanced
152
What is AWS WAF
Layer 7 (HTTP) firewall that protects your web applications from common web exploits. Filters incoming requests based on rules
153
Abbreviation : WAF
Web Application Firewall
154
Abbreviation : KMS
Key Management Service
155
What is AWS KMS
An encryption key managed by AWS. If you see encryption on test is is most likely this.
156
What is CloudHSM
AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud.
157
What is AWS Certificate Manager
WS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources
158
What is AWS Artifact
Portal that provides customers with on-demand access to AWS compliance documentation and AWS agreements
159
What is Amazon GuardDuty
Find malicious behavior with VPC, DNS & CloudTrail Logs
160
What is Amazon Inspector
For EC2 only, install agent and find vulnerabilities
161
What is AWS Config
Track config changes and compliance against rules
162
What is Amazon Macie
Amazon Macie is a fully managed data security and data privacy service that users machine learning and pattern matching to discover and protect your sensitive data in AWS
163
What is AWS Security Hub
Central security tool to manage security across several AWS accounts and automate security checks
164
What is Amazon Detective
Used to find the root cause of security issues or suspicious activities
165
What is AWS Abuse
Report AWS resources used for abusive or illegal purposes
166
What are some Root user permissions
- Change account settings
- Clouse your AWD account
- Change or cancel your AWS support plan
- Register as a seller in the Reserved Instance Marketplace
167
What is Amazon Rekognition
face detection, labeling, celebrity recognition
168
What is Amazon Transcribe
audio to text
169
What is Amazon Polly
text to audio
170
What is Amazon Translate
translations
171
What is Amazon Lex
build conversational bots - chatbots
172
What is Amazon Connect
cloud contact center
173
What is Amazon Comprehend
natural language processing
174
What is Amazon SageMaker
machine learning for every developer and data scientist
175
What is Amazon Forcast
build highly accurate forecasts
176
What is Amazon Kendra
ML-powered search engine
177
What is Amazon Personalize
real-time personalized recommendations
178
What is AWS Organizations
This is a global service that allows you to manage multiple AWS accounts. This provides the benefit of consolidating billing across all accounts.
179
Abbreviation : SCP
Service Control Policies
180
What is SCP
These policies are applied at the OU or Account level and do not apply to the Master account. These policies allow you to whitelist/blacklist IAM actions additional accounts/users have in the organization
181
What is AWS Control Tower
This is a management dashboard that allows you to quickly and easily manage your organization
182
Why use Tags & Cost Allocation Tags
These will make management and billing easier
183
What are some IAM guidelines
Setup MFA
Provide users with least-privilege
Create a password policy
Rotate passwords
184
What is AWS Trusted Advisor
It is a service that provides a high level account assessment based on Cost Optimizations, Performance, Security, Fault tolerance, and Service Limits. Recommends a support plan.
185
Where are good places to send log files
Into an S3 bucket or CloudWatch Logs
186
What should you do if your account is compromised
Change the root password
Delete and rotate all passwords/keys
Contact AWS Support
187
What are the 4 AWS Support Plans
1. AWS Basic Support Plan
2. AWS Developer Support Plan
3. AWS Business Support Plan
4. AWS Enterprise Support Plan
188
What is the Compute Optimizer used for
It recommends resources' configurations to reduce cost
189
What is the TCO Calculator used for
Used to calculate your on-premises data center cost of ownership and what it would cost to host it in AWS.
190
What is the Simple Monthly Calculator/Pricing Calculator used for
To calculate the cost of services on AWS
191
What is the Billing Dashboard used for
It provides a high level overview of billing and the free-tier
192
What is Cost Allocation Tags used for
They tag resources to create detailed reports
193
What is Cost and Usage Reports used for
They are the most comprehensive billing dataset
194
What is the Cost Explorer used for
View current usage (detailed) and forecast usage
195
What are Billing Alarms used for
They are alarms that notify you based on overall and per-service billing
196
What is Budget used for
More advanced track usage, costs, RI, and get alerts
197
What is the Savings Plan used for
This is an easy way to saved based on long-term usage of AWS
198
Abbreviation : STS
Security Token Service
199
What is a STS
The Security Token Service is used to provide temporary, limited-privilege credentials to access AWS resources
200
What is Amazon Cognito
It creates a database of users to allow access control to your web and mobile apps quickly and easily. Used for potentially millions of users.
201
What is AWS Directory Services
This is a integrated Microsoft AD in AWS that can establish trusts to local AD environments.
202
What is AWS SSO
This SSO provides one login for multiple AWS accounts & applications
203
What is Amazon WorkSpace
- Managed Desktop as a Service (DaaS) solution to easily provision Windows or Linux desktops
- Great to eliminate management of on-premise VDI (Virtual Desktop Infrastructure)
- Fast and quickly scalable to thousands of users
- Secure data : integrates with KMS
- Pay-as-you-go service with monthly or hourly rates
- To minimize latency deploy the WorkSpaces close to the users Region.
204
What is Amazon AppStream 2.0
- Desktop Application Streaming Service
- Deliver to any computer, without acquiring, provisioning infrastructure
- The application is delivered from within a web browser
205
What is Amazon Sumerian
- Create and run virtual reality (VR), augmented reality (AR), and 3D applications
- Can be used to quickly create 3D models with animations
- Ready-to-use templates and assets : no programming or 3D expertise required
- Accessible via a web-browser URLs or on popular hardware for AR/V
206
What is AWS IoT Core
- IoT stands for 'Internet of Things' : the network of internet-connected devices that are able to collect and transfer data
- AWS IoT Core allows you to easily connect IoT devices to the AWS Cloud
- Serverless, secure & scalable to billions of devices and trillions of messages
- Your applications can communicate with your devices even when they aren't connected
- Integrates with a lot of AWS services (Lambda, S3, SageMaker, etc.)
207
What is Amazon Elastic Transcoder
Elastic Transcoder is used to convert media files stored in S3 into media files in the formats required by consumer playback devices (phones etc..)
208
What is AWS Device Farm
- Fully-managed service that tests your web and mobile apps against desktop browsers, real mobile devices, and tablets
- Run tests concurrently on multiple devices (speed up execution)
- Ability to configure device settings (GPS, language, Wi-Fi, Bluetooth,…)
209
What is AWS Backup
- Fully-managed service to centrally manage and automate backups across AWS services
- On-demand and scheduled backups
- Supports PITR (Point-in-time-Recovery)
- Retention Periods, Lifecycle Management, Backup Policies,..
- Cross-Region Backup
- Cross-Account Backup (Using AWS Organizations)
210
What are some Disaster Recovery Strategies
- Backup and Restore
- Cheapest
- Pilot Light
- Warm Standby
- Multi-Site / Hot-Site
- Most Expensive
211
What is CloudEndure Disaster Recovery
- Quickly and easily recover your physical, virtual, and cloud-based servers into AWS
- Example : protect your most critical databases (including Oracle, MySQL, and SQL Server), enterprise apps (SAP), protect your data from ransomware attacks,…
- Continuous block-level replication for your servers
212
What is AWS DataSync
- Move large amount of data from on-premises to AWS
- Can synchronize to : Amazon S3 (any storage classes - including Glacier), Amazon EFS, Amazon FSx for Windows
- Replication tasks can be scheduled hourly, daily, weekly
- The replication tasks are incremental after the first full load
213
What is AWS Fault Injector Simulator (FIS)
- A fully managed service for running fault injection experiments on AWS workloads
- Based on Chaos Engineering : stressing an application by creating disruptive events (e.g., sudden increase in CPU or memory), observing how the system responds, and implementing improvements
- Helps you uncover hidden bugs and performance bottlenecks
- Supports the following AWS services : EC2, ECS, EKS, RDS…
- Use pre-built templates that generate the desired disruptions
214
What are Amazons Well Architected Framework 5 Pillars
1) Operational Excellence
2) Security
3) Reliability
4) Performance Efficiency
5) Cost Optimizations
They are not something to balance, or trade-offs, they're a synergy
215
What are some AWS Security Principles
- Implement a strong identity foundation
- Enable traceability
- Apply security at all layers
- Automate security best practices
- Protect data in transit and at rest
- Keep people away from data
- Prepare for security events
216
What is the AWS Well-Architected Tool
Free tool to review your architectures against the 5 pillars framework and adopt architectural best practices
217
What is the AWS Marketplace
It is a digital catalog with thousands of software listings from independent software vendors
218
What are some AWS Training options
- AWS Digital (online) and classroom training (in-person & digital)
- AWS Private Training (for org)
- Training and Cert for the US Gov
- Training and Cert for Enterprise
- AWS Academy : helps universities teach AWS
- And your favorite online teacher teaching you all about AWS certs
219
Abbreviation : APN
AWS Partner Network
220
What is a APN Technology Partner
providing hardware, connectivity, and software
221
What is a APN Consulting Partner
professional services firm to help build on AWS
222
What is a APN Training Patner
find who can help you learn AWS
223
What is the AWS Competency Program
AWS Competencies are granted to APN Partners who have demonstrated technical proficiency and proved customer success in specialized solution areas
224
What is the AWS Navigate Program
help partners become better partners
