CCP Basic Flashcards
1
Q
Access control list (ACL)
A
A firewall/security layer on the subnet level
2
Q
Auto scaling
A
Automates the process of adding or removing EC2 instances based on traffic demand for your application
3
Q
Buckets
A
Root-level “folders”
4
Q
CloudFront
A
Content delivery network (CDN) that allows you to store your content at “edge locations” located all around the world, allowing customers to access your content more quickly
5
Q
CloudTrail
A
Allows you to monitor all actions taken by IAM users
6
Q
CloudWatch
A
Service that allows you to monitor various elements of your AWS account
7
Q
Consolidated billing
A
Allows you to view, manage, and pay bills for multiple AWS accounts in one user interface
8
Q
DNS server
A
A database of website domains and their corresponding IP addresses
9
Q
DynamoDB
A
NoSQL database service that does not provide other NoSQL software options
10
Q
Elastic Block Store (EBS)
A
Provides persistent block storage volumes for use of EC2 instances.
11
Q
Elastic Compute Cloud (EC2)
A
A virtual computer, very similar to a desktop/laptop computer
12
Q
Elastic Load Balancing (ELB)
A
Evenly distributes traffic between EC2 instances that are associated with it
13
Q
ElastiCache
A
Data caching service used to help improve the speed/performance of web applications running on AWS
14
Q
Elasticity
A
The ability of a system to increase and decrease in size
15
Q
Fault tolerance
A
Property that enables a system to continue operating properly in the event of the failure of one or more components
16
Q
Firewall
A
A type of software that either allows or blocks certain kinds of internet traffic to pass through it
17
Q
Folder
A
Any “subfolder” created in a bucket
18
Q
High availability
A
Refers to systems that are durable and likely to operate continuously without failure for a long time
19
Q
IAM users
A
Individuals who have been granted access to an AWS account
20
Q
Identity and Access Management (IAM)
A
Service where AWS user accounts and their access to various AWS services are managed
21
Q
Lambda
A
Serverless computing that will replace EC2 instances, for the most part
22
Q
Object availability
A
Percent over a one-year time period that a file stored in S3 will be accessible
23
Q
Object durability
A
Percent over a one-year time period that a file stored in S3 will not be lost
24
Q
Object lifecycle
A
Set rules to automatically transfer objects between storage classes at defined time intervals
25
Object sharing
Ability to make any object publicly available via a URL link
26
Object versioning
Automatically keep multiple versions of an object (when enabled)
27
Organizations
Allow you or your company access to manage billing and access to multiple AWS accounts in one user interface
28
Principle of least privilege
Giving a user only the rights/access to the AWS services and resources they need to do their job and nothing more
29
Publishers
Human/alarm/event that gives SNS the message that needs to be sent
30
Relational Database Service (RDS)
SQL database service that provides a wide range of SQL database options to select from
31
RedShift
Data warehouse database service designed to handle petabytes of data for analysis
32
Roles
How different AWS services are granted permission to communicate and share data
33
Route 53
Where you configure and manage web domains for websites or applications you host on AWS
34
Scalability
The ability of a system to easily increase in size and capacity in a cost-effective way
35
Security group (SG)
Firewall/security layer on the server/instance level
36
Shared responsibility model
Defines what you and AWS are responsible for when it comes to security and compliance
37
Simple Notification Service (SNS)
AWS service that allows you to automate the sending of email or text messaging notifications based on events that happen in your AWS account
38
Simple Storage Service (S3)
Online bulk storage service you can access from almost any device
39
Storage class
Represents “classification” assigned to each object in S3 (standard, RRS, S3-IA, Glacier)
40
Subnet
A subsection of a network and generally includes all the computers in a specific location
41
Subscriptions
Endpoints to which a topic sends messages
42
Topics
How you label and group different endpoints to which you send messages
43
Trusted Advisor
Service that “advises” and helps you optimize aspects of your AWS account
44
User credentials
IAM user’s username and password for logging in to AWS
45
Virtual Private Cloud (VPC)
A private subsection of AWS you control and in which you can place AWS resources
46
Cloud computing
The delivery of computing services over the internet. provides on-demand access to resources over the internet with pay-as-you-go pricing.
47
Examples of compute services
EC2
| Lambda
48
6 advantages to cloud computing
1. Go global in minutes
2. Stop spending money running and maintaining data centers
3. Benefit from massive economies of scale
4. Increase speed and agility
5. Stop guessing capacity
6. Trade capital expense for variable expense
49
Benefit from massive economies of scale
Volume discounts are passed on to you, which provides lower pay-as-you-go prices.
50
Trade capital expense for variable expense
You pay for what you use instead of making huge upfront investments.
51
Benefits of cloud computing
High Availability
Elasticity
Agility
Durability
52
Capital Expenditures (CapEx)
Upfront purchases toward fixed assets.
53
Operating Expenses (OpEx)
Funds used to run day-to-day operations.
54
Cloud Computing Models
Iaas
Paas
Saas
55
Infrastructure as a Service (IaaS)
Contains the basic building blocks for cloud IT and typically provides access to networking features, computers (virtual or on dedicated hardware), and data storage space.
Provides you with the highest level of flexibility and management control over your IT resources and is most similar to existing IT resources that many IT departments and developers are familiar with today.
56
Platform as a Service (PaaS)
Removes the need for your organization to manage the underlying infrastructure (usually hardware and operating systems) and allows you to focus on the deployment
and management of your applications. This helps you be more efficient as you don’t need to worry about resource procurement, capacity planning, software maintenance, patching, or any of the other undifferentiated heavy lifting involved in running your application.
57
Software as a Service (SaaS)
Provides you with a completed product that is run and managed by the service provider
58
Region
Fully Independent and Isolated physical location
59
Availability Zones
consist of one or more physically separated data centers, each with redundant power, networking, and connectivity, housed in separate facilities.
A collection of data centers
60
Edge Locations
Cache content for fast delivery to your users.
| Ensure low latency by placing content closer to users.
61
AWS Management Console
allows you to access your AWS account and manage applications running in your account from a web browser
62
AWS Command Line Interface (CLI)
allows you to access your AWS account through a terminal or command window.
63
Elastic Compute Cloud (EC2)
allows you to rent and manage virtual servers in the cloud. Virtual servers in the cloud
64
Amazon Machine Images (AMI)
Preconfigured template to launch your instance.
65
When you would use EC2 in the real world
Deploying a database to EC2 gives you full control over the database.
Deploy to multiple AZs to make the web application highly available.
66
EC2 Instance Connect (EIC)
allows you to use IAM policies to control SSH access to your instances, removing the need to manage SSH keys.
67
What is the most common way to connect to Linux EC2 instances?
SSH
68
EC2 Pricing Options
```
On-Demand
Spot
Reserved Instances
Dedicated Hosts
Savings Plans
```
69
EC2 Pricing Options
```
On-Demand
Spot
Reserved Instances
Dedicated Hosts
Savings Plans
```
70
On-Demand pricing
No contact, pay for what you use
Billed down to the second
For applications with short-term, spiky, or unpredictable workloads that cannot be interrupted
For applications being developed or tested on Amazon EC2 for the first time
71
Spot pricing
Cheapest pricing option
Lets you take advantage of unused Amazon EC2 capacity
Applications that have flexible start and end times
72
Reserved Instances
Allow you to commit to a specific instance type in a particular region for 1 or 3 years
Use when app has steady usage for 1 or 3 years
73
Savings Plans
a flexible pricing model that offer low prices on EC2 and Fargate
usage, in exchange for a commitment to a consistent amount of usage (measured in $/hour) for a 1 or 3 year term
74
Dedicated Hosts
Allow you to pay for a physical server that is fully dedicated to running your instances
75
Elastic Load Balancing
automatically distributes your incoming application traffic across multiple EC2 instances.
76
EC2 Auto Scaling
adds or replaces EC2 instances automatically across AZs, based on need and changing demand.
77
AWS Lambda
a serverless compute service that lets you run code without managing servers
Supports popular programming languages like Java, Go, PowerShell, Node.js, C#, Python, and Ruby.
The functions have a 15-minute timeout
78
AWS Fargate
a serverless compute engine for containers.
allows you to manage containers, like Docker
Scales automatically
serverless meaning you don’t worry about provisioning, configuring, or scaling servers.
79
Amazon Lightsail
a compute service
allows you to quickly launch all the resources you need for small projects
Deploy preconfigured applications, like WordPress websites, at the click of a button
80
AWS Outposts
a compute service
allows you to run cloud services in your internal data center
supports workloads that need to remain on-premises due to latency or data sovereignty needs
supports a hybrid deployment model
81
AWS Batch
a compute service
allows you to process large workloads in smaller chunks
Runs hundreds and thousands of smaller batch processing jobs
Dynamically provisions instances based on volume
82
(Amazon S3) Amazon Simple Storage Service
an object storage service for the cloud that is highly available
Objects (or files) are stored in buckets (or directories)
You can upload objects via the console, the CLI, or programmatically from within code using SDKs
83
Durability
important so your objects are never lost or compromised
84
Availability
is important so you can access your data quickly when you need it
85
S3 Standard
```
S3 storage class
General purpose storage
Data stored across multiple AZ
Low latency, high throughput
Recommended for frequently accessed data
```
86
S3 Intelligent Tiering
```
Automatically moves your data to the most cost effective storage class
Data stored across multiple AZs
Recommended for data with unknown or changing access pattern
```
87
S3 Standard-Infrequent Access (IA)
Data accessed less frequently but requires rapid access
Data stored across multiple AZ
Millisecond access when needed
88
S3 One Zone-Infrequent Access(IA)
Data stored in single AZ
Data stored can be lost
Recommended for re-creatable data
89
S3 Glacier
Long term data storage and archival for lower costs
stored across multiple AZ
cheaper storage option
Recommended for long term backups
90
S3 Glacier Deep Archive
long access times
cheapest of all s3 options
data stored across multiple AZ
recommended for long term data archival accessed 1 or 2 times a year
91
S3 Outposts
provide object storage on premises
| store data across multiple devices and servers
92
S3 Outposts
provide object storage on premises
| store data across multiple devices and servers
93
Amazon Elastic Block Store (EBS)
a storage device (called a volume) that can be attached to (or removed from) your instance
Data persists when the instance is not running
Can only be attached to one instance in the same Availability Zone
Recommended for:
Quickly accessible data
Running a database on an instance
Long-term data storage
94
EC2 Instance Store
local storage that is physically attached to the host computer and cannot be removed
Storage on disks physically attached to an instance
Recommended for:
Temporary storage needs
Data replicated across multiple instances
95
Amazon Elastic File System (EFS)
a serverless network file system for sharing files
Only supports the Linux file system
Accessible across different Availability Zones in the same Region
96
Storage Gateway
a hybrid storage service
Connect on-premises and cloud data
Recommended for:
Moving backups to the cloud
Reducing costs for hybrid cloud storage
Low latency access to data
97
AWS Backup
helps you manage data backups across multiple AWS services
Integrates with resources like EC2, EBS, EFS, and more
Create a backup plan that includes frequency and retention
98
Amazon CloudFront
is a CDN that delivers data and applications globally with low latency
Makes content available globally or restricts it based on location
Uses edge locations to cache content
can stop certain web attacks, like DDoS.
99
content delivery network (CDN)
a mechanism to deliver content quickly and efficiently based on geographic location.
100
Amazon Global Accelerator
a CDN
sends your users through the AWS global network when accessing your content, speeding up delivery
Improves latency and availability of single-Region applications
101
Amazon S3 Transfer Acceleration
a CDN
improves content uploads and downloads to and from S3 buckets.
Fast transfer of files over long distances
Uses CloudFront’s globally distributed edge locations
102
VPC Virtual Private Cloud
a foundational service that allows you to create a secure private network in the AWS cloud where you launch your resources
spans Availability Zones in a Region
Launch resources like EC2 instances inside
103
Network Access Control List (Network ACL)
ensures proper traffic is allowed into the subnet
104
Internet gateway
allows public traffic to the internet from the VPC
105
VPC peering
allows you to connect 2 VPCs together
106
Domain Name System DNS
directs internet traffic by connecting domain names with web servers
107
Amazon Route 53
a DNS service that routes users to applications
Performs health checks on AWS resources
Supports hybrid cloud architectures
108
AWS Direct Connect
a dedicated physical network connection from your on-premises data center to AWS
Data travels over a private network
Supports a hybrid environment
109
AWS VPN
creates a secure connection between your internal networks and your AWS VPCs
Similar to Direct Connect, but data travels over the public internet
Data is automatically encrypted
Connects your on-premises data center to AWS
110
API Gateway
allows you to build and manage APIs
Share data between systems
Integrate with services like Lambda
111
Amazon Relational Database Service (RDS)
a service that makes it easy to launch and manage relational databases
Offers high availability and fault tolerance using Multi-AZ deployment option
AWS manages the databases with automatic software patching, automated backups, operating system maintenance, and more
112
Amazon Aurora
a relational database compatible with MySQL and PostgreSQL that was created by AWS
Scales automatically while providing durability and high availability
Managed by RDS
113
Amazon DynamoDB
a fully managed NoSQL key-value and document database
Fully managed and serverless
Non-relational
Scales automatically to massive workloads with fast performance
114
Amazon DocumentDB
a fully managed document database that supports MongoDB
Fully managed and serverless
Non-relational
115
Amazon ElastiCache
a fully managed in-memory datastore compatible with Redis or Memcached
Compatible with Redis or Memcached engines
Data can be lost
Offers high performance and low latency
116
Amazon Neptune
a fully managed graph database that supports highly connected datasets like social media networks
Fully managed and serverless
Fast and reliable
117
Migrate an on-premises Oracle database to the cloud.
RDS
118
Migrate an on-premises PostgreSQL database
| to the cloud
RDS
and
Aurora
119
Alleviate database load for data that is accessed often.
ElastiCache
120
Process large sets of user profiles and social interactions.
Neptune
121
NoSQL database fast enough to handle millions of requests per second.
DynamoDB
122
operate MongoDB workloads at scale.
DocumentDB
123
supported RDS database engines
Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server
124
Database Migration Service (DMS)
Migrate on-premises databases to AWS
Continuous data replication
Supports homogeneous and heterogeneous migrations
Virtually no downtime
125
Server Migration Service (SMS)
allows you to migrate on-premises servers to AWS
Server saved as a new Amazon Machine Image (AMI)
Use AMI to launch servers as EC2 instances
126
DataSync
allows for online data transfer from on-premises to AWS storage services like S3 or EFS
Copy data over Direct Connect or the internet
Copy data between AWS storage services
Replicate data cross-Region or cross-account
127
data warehouse
a data storage solution that aggregates massive amounts of historical data from disparate sources
supports querying, reporting, analytics, and business intelligence. They are not used for transaction processing.
128
Amazon Redshift
a scalable data warehouse solution
Improves speed and efficiency
Handles exabyte-scale data
use when: you need to consolidate multiple data sources for reporting
you want to run a database that doesn't require real-time transaction processing (insert, update, and delete)
129
Athena
a query service for Amazon S3
Analyze S3 data using SQL
Pay per query
serverless
130
Glue
prepares your data for analytics
Extract, transform, load (ETL) service
131
Kinesis
allows you to analyze data and video streams in real time
Supports video, audio, application logs, website clickstreams, and IoT
132
Elastic MapReduce (EMR)
helps you process large amounts of data
Analyze data using Hadoop
Works with big data frameworks
133
Data Pipeline
helps you move data between compute and storage services running either on AWS or on-premises
Sends notifications on success or failure
134
QuickSight
helps you visualize your data
Build interactive dashboards
Embed dashboards in your applications
135
Rekognition
Machine learning service
allows you to automate your image and video analysis
Face and text detection in images and videos
136
Comprehend
a natural-language processing (NLP) service that finds relationships in text
137
Polly
turns text into speech
138
SageMaker
helps you build, train, and deploy machine learning models quickly
Prepare data for models
139
Translate
provides language translation
140
Lex
helps you build conversational interfaces like chatbots
Powers Amazon Alexa
141
Cloud9
allows you to write code within an integrated development environment (IDE) from within your web browser
preconfigures the development environment with the needed SDKs and libraries. You can easily write the code for your Lambda function directly in your web browser.
142
CodeCommit
a source control system for private Git repositories
Create repositories to store code
like github
143
CodeBuild
allows you to build and test your application source code
Enables continuous integration and delivery
Produces build artifacts ready to be deployed
144
CodeDeploy
manages the deployment of code to compute services in the cloud or on-premises.
Deploys code to EC2, Fargate, Lambda, and on-premises.
Maintains application uptime
eliminates the downtime of your application when deploying a new version due to its rolling deployments
145
CodePipeline
automates the software release process.
helps development teams implement DevOps practices that automate testing and the movement of code to production.
146
X-Ray
helps you debug production applications
Map application components
View requests end to end
can help you map requests made
to your RDS database from within your application. You can track information about the SQL queries generated and more.
147
CodeStar
helps developers collaboratively work on development projects
Integrates with CodeCommit, CodeBuild, and CodeDeploy
Contains issue tracking dashboard
can manage the development pipeline
148
Infrastructure as Code (IaC)
allows you to write a script to provision AWS resources. The benefit is that you provision resources in a reproducible manner that saves time
149
CloudFormation
allows you to provision AWS resources using Infrastructure as Code (IaC).
Provides a repeatable process for provisioning resources
Create templates for the resources you want to provision
150
Elastic Beanstalk
allows you to deploy your web applications and web services to AWS(not on prem)
Orchestration service that provisions resources
Monitors application health via a health dashboard
151
OpsWorks
allows you to use Chef or Puppet to automate the configuration of your servers and deploy code
Manage on-premises servers or EC2 instances in AWS Cloud
allows you to define software installation scripts and automate configuration for your application servers.
152
loose coupling
helps reduce the risk of cascading failures between components
153
Simple Queue Service (SQS)
a message queuing service that allows you to build loosely coupled systems
Allows component-to-component communication using messages
Messages are processed in an asynchronous manner
154
SQS
lets you build an app that is loosely coupled, allowing components to send, store, and receive messages. The use of a messaging queue helps to improve performance and scalability.
155
Simple Notification Service (SNS)
allows you to send emails and text messages from your applications
works with CloudWatch when an alarm's metric threshold is breached to send an email.
156
Simple Email Service (SES)
an email service that allows you to send richly formatted HTML emails from your applications.
157
CloudWatch
a collection of services that help you monitor and observe your cloud resources
Collects metrics, logs, and events
Detect anomalies in your environment
Set alarms
158
CloudTrail
tracks user activity and API calls within your account.
Track activity through the console, SDKs, and CLI
Identify which user made changes
Detect unusual activity in your account
can track: username, event time and name, IP address, access key, Region, and error code.
159
6 pillars of the Well-Architected Framework
describe design principles and best practices for running workloads in the cloud
* Operational Excellence
* Security
* Reliability
* Performance Efficiency
* Cost Optimization
* Sustainability
160
Identity and Access Management (IAM)
allows you to control access to your AWS services and resources
A free global service
Permissions Roles MFA
161
Users
entities you create in IAM to represent the person or application needing to access your AWS resources.
162
Groups
a collection of IAM users that helps you apply common access controls to all group members
163
EC2 Security groups vs IAM Groups
EC2 security groups act as firewalls, while IAM groups are collections of users
164
Roles
define access permissions and are temporarily assumed by an IAM user or service
165
Policies
You manage permissions for IAM users, groups, and roles by creating a ______ document in JSON format and attaching it
166
IAM Credential Report
lists all users in your account and the status of their various credentials.
Used for auditing and compliance
167
IAM Best Practices
1. Enable MFA for privileged users
2. Implement strong password policies.
3. Create individual users instead of using root.
4. Use roles for Amazon EC2 instances.
168
Firewalls
prevent unauthorized access to your networks by inspecting incoming and outgoing traffic against security rules you've defined.
169
Web Application Firewall (WAF)
helps protect your web applications against common web attacks.
Protects against SQL injection
Protects against cross-site scripting
170
Distributed Denial of Service (DDoS)
this attack causes a traffic jam on a website or web application in an attempt to cause it to crash.
171
Shield
a managed Distributed Denial of Service (DDoS) protection service.
Always-on detection
172
Shield Standard
Provides free protection against common and frequently occurring attacks
173
Shield Advanced
Provides enhanced protection and 24/7 access to AWS experts for a fee
174
Macie
helps you discover and protect sensitive data.
Uses machine learning
Evaluates S3 environment
Uncovers personally identifiable information (PII)
175
Config
allows you to assess, audit, and evaluate the configurations of your resources.
Delivers configuration history file to S3
Notifications via Simple Notification Service (SNS
You can view network, software, and operating system (OS) configuration changes, system-level updates, and more.
176
GuardDuty
an intelligent threat detection system that uncovers unauthorized behavior.
Uses machine learning
Built-in detection for EC2, S3, and IAM
Reviews CloudTrail, VPC Flow Logs, and DNS logs
177
Inspector
works with EC2 instances to uncover and report vulnerabilities.
178
Artifact
offers on-demand access to AWS security and compliance reports.
Central repository for compliance reports from third-party auditors
Service Organization Controls (SOC) reports
Payment Card Industry (PCI) reports
179
Cognito
helps you control access to mobile and web applications.
provides functionality that allows your users to sign in to your application through social media accounts like Facebook and Google.
180
Data encryption
encodes data so it cannot be read by unauthorized users
181
Key Management Service (KMS)
allows you to generate and store encryption keys.
Automatically enabled for certain services
182
CloudHSM
a hardware security module (HSM) used to generate encryption keys.
AWS does not have access to your keys
allows you to meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware in the cloud.
183
Secrets Manager
allows you to manage and retrieve secrets (passwords or keys).
Integrates with services like RDS, Redshift, and DocumentDB
184
3 fundamental drivers of cost.
Compute
Storage
Outbound data transfer
185
5 ways to pay for Amazon EC2 instances.
```
On-Demand
Spot
Reserved Instances
Dedicated Hosts
Savings Plan
```
186
RDS Pricing: RDS features that drive pricing
```
Running clock hours
Storage
Data transfer
Deployment type
API requests
Purchase type
Database count
Type of database
```
187
Total Cost of Ownership (TCO)
a financial estimate that helps you understand both the direct and indirect costs of AWS
188
Application Discovery Service
helps you plan migration projects to the AWS Cloud.
Used to estimate TCO
Works with other services to migrate servers
189
A Few Ways to Reduce Your TCO Using AWS
Minimize capital expenditures
Utilize Reserved Instances
Right size your resources
190
AWS Price List API
allows you to query the price of AWS services.
Query using JSON or HTML
Receive price alerts when prices change
191
Budgets
allows you to set custom budgets that alert you when your costs or usage exceed your budgeted amount.
192
Cost and Usage Report
contains the most comprehensive set of cost and usage data.
Aggregate usage data on a daily, hourly, or monthly level
193
Cost Explorer
allows you to visualize and forecast your costs and usage over time.
194
Organizations
allows you to centrally manage multiple AWS accounts under one umbrella.
Single payment for all accounts
Automate account creation
195
Control Tower
helps you ensure your accounts conform to company-wide policies.
Enforces the best use of services across accounts
allows you to govern your multi-account environment by enabling cross-account security audits or preventing or detecting security issues through mandatory or optional guardrails.
196
Systems Manager
gives you visibility and control over your AWS resources.
Automate operational tasks on your resources
Group resources and take action
Patch and run commands on multiple EC2 instances or manage RDS instances
197
Trusted Advisor
provides real-time guidance to help you provision your resources following AWS best practices.
Checks for unrestricted access for specific ports on EC2 instances
Checks IAM password policy
Checks for exposed access keys
helps reduce your overall costs by monitoring service limits.
198
License Manager
helps you manage software licenses.
Manage on-premises and AWS licenses
199
Certificate Manager
helps you provision and manage SSL/TLS certficates.
Integrates with Elastic Load Balancing, API Gateway, and more
Provides public and private certificates for free
200
Managed Services
helps you efficiently operate your AWS infrastructure.
Reduces operational risks and overhead
can increase your operational efficiency by helping you develop application-specific health monitoring using CloudWatch.
201
Professional Services
helps enterprise customers move to a cloud-based operating model.
202
AWS Partner Network (APN)
a global community of approved partners that offer software solutions and consulting services for AWS.
203
Marketplace
a digital catalog of prebuilt solutions you can purchase or license. You may also sell your own solutions to others via _________.
Try out an application before making a long-term commitment.
204
Personal Health Dashboard
alerts you to events that might impact your AWS environment.
Provides troubleshooting guidance
205
AWS Support Plans
Basic
Developer
Business
Enterprise
206
Basic
this support plan is included for free for all AWS accounts.
24/7 access via email only
207
Developer
this support plan starts at $29 a month and is recommended for testing and development.
208
Business
this support plan starts at $100 a month and is recommended for production workloads.
209
Enterprise
this support plan starts at $15,000 a month and is recommended for business or mission-critical production workloads.
210
Compute Services
```
EC2
EC2 Autoscaling
Lambda
Fargate
Lightsail
Outposts
Batch
App runner
Elastic Beanstalk
Snow Family
VMware
```
211
Storage Service
```
s3
EBS
EFS
Storage Gateway
FSX
snow Family
```
212
Content Delivery
CloudFront
Global Accelerator
S3 Transfer Acceleration
213
Networking Services
Route 53
VPC
Direct Connect
VPN
214
Databases
```
Relational database service
Aurora
DynamoDB
DocumentDB
ElastiCache
Neptune
```
215
Migration and Transfer Services
DMS
Server Migration Service
Snow Family
Datasync
216
Analytics services
```
Redshift
Athena
Glue
Kinesis
Elastic MapReduce EMR
Data Pipline
```
217
Machine Learning Services
```
Rekognition
Comprehend
Polly
Sagemaker
Translate
Lex
```
218
Developer Tools
```
Cloud9
Codecommit
CodeBuild
CodeDeploy
Codepipeline
XRay
```
219
Deployment and
Infrastructure Management
CloudFormation
Elastic Beanstalk
Opsworks
220
Messaging and Integration
Simple Queue Service(SQS)
Simple Notifcation Service( SNS)
Simple Email Service(SES)
221
Auditing, Monitoring, and Logging Services
Cloudwatch
| Cloudtrail
222
Management and Governance
```
Organizations
Control Tower
Systems Manager
Trusted Advisor
Marketplace
AWS Partner Network (APN)
Managed Services
Professional Services
```
223
Security services
```
Identity and Access Management (IAM)
Web Application Firewall (WAF)
Shield
Macie
Config
GuardDuty
Inspector
Artifact
```
224
Encryption Services
Key Management Service (KMS)
| CloudHSM
225
Horizontal scaling
(or scaling out) adds or replaces EC2 instances automatically across AZs, based on need and changing demand, and is used in the design of systems with high availability.
is the act of changing the number of nodes in a computing system without changing the size of any individual node.
226
Vertical scaling
(or scaling up) is a possible solution, it doesn't ensure a system will be highly available.
increasing the size and computing power of a single instance or node without increasing the number of nodes or instances
