Chapter 1 & 2 Terms Flashcards
Overview Storage
Cloud Computing
The on demand delivery of IT resources and applications via the Internet. Pricing is generally pay-as-you-go.
Six Advantages of Cloud Computing (per AWS)
- Variable vs. Capital Expense
- Economies of Scale
- Increase Speed and Agility
- Focus on Business Differentiators
- Stop Guessing Capacity
- Global In Minutes
Trading Capital Expense For Variable Operational Expense
Instead of investing in hardware and resources that might not be used to their full capacity. Cloud computing allows for a company to only pay for exactly what they use.
Economies of Scale
Because there are so many customers using AWS it is easier for AWS providers to offer lower prices.
Increase Speed and Agility
Cloud computing allows for IT resources to be available in minutes as opposed to weeks.
Focus on Business Differentiators
Businesses no longer need to focus on running and maintaining data centers and hardware. Now they can focus on the data itself.
Stop Guessing Capacity
Business were left with guessing capacity prior to deploying an application, this would leave them with idle resources or limited capacity. With the cloud, now they can easily scale up and down.
Global in Minutes
With the cloud, organizations can deploy their applications to multiple locations around the world.
All-in Cloud Deployment
This is a Cloud deployment that is fully cloud centric. Meaning all components are in the cloud.
Hybrid Cloud Deployment
A deployment that connects infrastructure and applications between cloud based resources and existing resources.
Region
Separate geographic areas that contain multiple availability zones for data storage.
Availability Zones
Isolated locations within a Region that store data. These zones have multiple data centers in different places for greater fault tolerance.
AWS Management Console
A web application used to manage AWS Cloud services.
AWS Command Line Interface (CLI)
A unified tool used to mange AWS Cloud services.
AWS Software Development Kits (SDKs)
An application programming interface (API) that interacts with the web services that fundamentally make up the AWS platform.
Amazon Elastic Compute Cloud (Amazon EC2)
A web service that provides resizable compute capacity in the cloud.
AWS Lambda
A zero-administration compute platform for back-end web developers. It runs your code for you on the AWS Cloud and provides you with a fine-grained pricing structure.
Auto Scaling
A service that allows organizations to scale Amazon EC2 capacity up or down automatically according to conditions defined for the particular workload.
Elastic Load Balancing
A service that distributes incoming application traffic across multiple Amazon EC2 instances in the cloud.
AWS Elastic Beanstalk
A service that provides the fastest and simplest way to get a web application up and running on AWS.
Amazon Virtual Private Cloud (Amazon VPC)
A service that lets organizations provision a logically isolated section of the AWS Cloud where they can launch AWS resources in a virtual network that they define.
AWS Direct Connect
This service allows organizations to esablish dedicated network connections from their data centers to AWS.
Amazon Route 53
A highly available and scalable Domain Name Service (DNS) web service.
Amazon Simple Storage Service (Amazon S3)
Provides highly durable and scalable object storage that handles virtually unlimited amounts of data and a high number of concurrent users.
Amazon Glacier
A secure, durable, and extremely low cost-storage service for data archiving and long-term back up.
Amazon Elastic Block Store (Amazon EBS)
Provides persistent block level storage volumes for use with Amazon EC2 instances.
AWS Storage Gateway
A service connecting an on premises software appliance with cloud based storage to provide integration between an organizations local IT environment and the AWS storage infrastructure.
Amazon CloudFront
A content delivery web service.
Amazon Relational Database Service (Amazon RDS)
Provides a fully managed relational database with support for many popular open source and commercial database engines.
Amazon DynamoDB
A fast and flexible NoSQL database service for all applications that need consistent, single-digit millisecond latency at any scale.
Amazon Redshift
A fully managed, petabyte scale data warehouse service that makes it simple and cost effective to analyze structured data.
Amazon ElastiCache
A web service that simplifies deployment, operation, and scaling of an in-memory cache in the cloud.
Amazon CloudWatch
A monitoring service for AWS Cloud resources and the applications running on AWS.
Amazon CloudFormation
A service that allows for the creation and management of a collection of related AWS resources, provisioning and updating them as needed.
AWS CloudTrail
A web service that records AWS API calls for an account and delivers log files for audit and review.
AWS Config
Fully managed service that provides organizations with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.
AWS Identity and Access Management (IAM)
Enables organizations to securely control access to AWS Cloud services and resources for their users.
AWS Key Management Service (KMS)
A managed service that makes it easy for organizations to create and control the encryption keys used to encrypt their data.
AWS Directory Service
Allows organizations to set up and run Microsoft Active Directory on the AWS Cloud or connect their AWS resources with an existing local Microsoft Active Directory.
AWS Certificate Manager
A service that lets organizations provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS Cloud services.
AWS Web Application Firewall (WAF)
Helps protect web applications from common attacks and exploits that could affect the application.
Amazon API Gateway
A fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale.
Amazon Elastic Transcoder
Provides media transcoding in the cloud.
Amazon Simple Nontification Service (Amazon SNS)
A web service that coordinates and manages the delivery or sending of messages to recipients.
Amazon Simple Email Service (Amazon SES)
A cost effective email service.
Amazon Simple Workflow Service (Amazon SWF)
Helps developers build, run, and scale background job that have parallel or sequential steps.
Amazon Simple Queue Service (Amazon SQS)
Fully managed message queuing service.
Block Storage
Storage that operates at a lower level.
File Storage
Storage that operates at a higher level and manages data with as a hierarchy.
Object Storage
Storage that is made up of easily scalable objects and generally accessed using API’s.
Buckets
Buckets are containers (web folders) for objects (files) stored in S3.
Objects
Are the entities or files stored in S3 buckets.
Metadata
Informational data about a file.
Durability
The measure of how long data will be available.
Availability
The measure of how quick data can be made available.
Eventual Consistency
Data may take time to become consistent. Old data may appear until it is updated.
Static Website Hosting
A static website means that all of the pages on the website contain only static content and do not require serverside processing.
S3 prefix and delimiters
When listing key names (.) and (/ or ) can be used to make files appear to have a file structure even though there is none.
Storage Classes
Different levels of S3 storage to match business needs.
Amazon S3 Standard
High durability, high availability, low latency, and high performance object storage for general purpose use.
Amazon S3 Standard - Infrequent Access (Standard IA)
High durability, low latency, and high throughput. However, it is meant for infrequent access. It is not meant to be highly available.
Amazon S3 Reduced Redundancy Storage (RRS)
Low durability (4 nines). It is most appropriate for easily reproducible data.
Amazon Glacier
Extremely low cost storage for data that doesn’t require real time access.
Amazon S3 Object Lifecycle Management
Service that provides a set of rules to manage data over different sets of time periods.
Server-Side Encryption (SSE)
Amazon encrypts data at object level as it writes disks.
Client-Side Encryption
Clients encrypt their own data before sending it to AWS.
SSE-S3 (AWS-Managed Keys)
Fully integrated solution where AWS handles the key management and key protection for Amazon S3. Admins don’t manage these keys.
SSE-KMS (AWS KMS Keys)
Fully integrated solution where AWS hanles the key management and key protection for Amazon S3, but where an admin manages the keys.
SSE-C (Customer Provided Keys)
This solution is used when a user wants to maintain their own encryption keys but don’t want to manage or implement their own client side library.
Versioning
A feature that helps protect data against accidental or malicious deletion by keeping multiple versions of each object in a bucket.
MFA Delete
A bucket feature requiring additional authentication to delete objects in a bucket.
Pre-Signed URL
A url that grants limited-time permission to download an object linked to the url.
Multipart Upload
An API that allows users to upload large objects as a set of parts.
SHOULD be used for uploads greater than 100MB.
MUST be used for uploads over 5GB.
Cross Region Replication
A feature of Amazon S3 that allows admins to asynchronously replicate all new objects in the source bucket from one AWS region to another.
REST API
Representational State Transfer API
CRUD operations
Create, Read, Update, Delete operations
Range GETs
Using the Range HTTP header in the GET request it is possible to download a range of bytes from an object.
S3 Event Notifications
Event notifications send alerts, run workflows, or perform other actions in response when changes occur to an S3 object.
Archives (Amazon Glacier)
Archives store data for Amazon Glacier.
And they have these attributes:
Contain up to 40TB of data.
Can have an unlimited number of archives.
Each archive has a unique ID.
All archives are automatically encrypted.
Archives are immutable.
Vaults (Amazon Glacier)
Containers for archives.
An AWS account can only have 1000 Vaults.
Vault Lock Policy
Compliance controls from individual Amazon Glacier vaults.
Once locked these policies cannot be changed.