Key Terms Flashcards

1
Q

TCP

A

Transmission Control Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

VPC

A

Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

access key

A

A special set of keys linked to a specific AWS IAM user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

ACID

A

The storage consistency of a relational database, based on atomicity, consistency, isolation, and durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

active-active

A

Multi-region active-active deployment of resources across multiple regions for workloads requiring high availability and failover.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

alarm

A

A warning issued when a single metric crosses a set threshold over a defined number of time periods.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon CloudFront

A

The AWS content delivery network (CDN) hosted in all edge locations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon EBS

A

Amazon Elastic Block Store (EBS)
A virtual hard disk block storage device that is attached to Amazon EC2 instances.
EBS is not mountable outside the AZ. EBS volumes do not provide NFS mounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon Elastic Compute Cloud (EC2)

A

A web service that provides secure, resizable compute capacity in the cloud. It enables you to launch and manage virtual servers, called Amazon Elastic Compute Cloud (EC2) instances, in the AWS cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Amazon ElastiCache

A

A distributed in-memory data store.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AMI

A

Amazon Machine Image
A template of an instance’s root drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

application programming interface (API)

A

A defined set of protocols that enables applications and services to communicate with each other.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

archive

A

An Amazon S3 Glacier grouping of compressed and encrypted files.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

asymmetric key

A

One key of a public/private key pair.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Auto Scaling

A

An AWS service that adjusts compute capacity to maintain desired performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

ASG

A

Auto Scaling Group
A group of Amazon EC2 instances that is controlled (that is, scaled up, scaled down, or maintained) using the EC2 Auto Scaling service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

availability zone (AZ)

A

An insulated separate location within a region that contains at least one data center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

AWS Artifact

A

Allows AWS customers to review the compliance standards supported by AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

AWS Direct Connect

A

A dedicated private fiber connection to AWS VPCs or AWS public services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

access control list (ACL)

A

A list that enables you to control access to Amazon S3 buckets by granting read/write permissions to other AWS accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

AWS Identity and Access Management (IAM)

A

The hosted security system for the AWS cloud that controls access to AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

AWS Key Management Service (KMS)

A

An AWS service that centrally manages AWS customers’ cryptographic keys and policies across AWS services that require data encryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

AWS well-architected framework

A

A framework for designing, deploying, and operating workloads hosted at AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

block storage

A

Data records stored in blocks on a storage area network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

bucket

A

The storage unit for an Amazon S3 object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

bucket policy

A

A resource policy that is assigned directly to a storage entity such as an Amazon S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

burst capacity

A

The ability of a storage unit or a compute instance to increase processing power for a short period of time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

burst credits

A

Performance credits that make it possible to burst above a defined performance baseline.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

capacity units

A

A measure of Amazon DynamoDB performance in terms of either reading or writing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

certificate authority (CA)

A

A company or an entity that validates the identities of websites or domains using cryptographic public/private keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

CloudWatch log group

A

A group that logs information in near real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

codebase

A

The body of source code for a software program or application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

cold storage

A

Infrequently accessed storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

condition

A

Special rule in a permission policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

connection draining

A

The process of deregistering (removing) a registered instance from a load balancer target group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

cooldown period

A

A defined time period when no changes are allowed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

cost allocation tags

A

Tags that are used to categorize and track AWS costs displayed with monthly and hourly cost allocation reports.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Cost and Usage Report (CUR)

A

Tracks your AWS usage and provides estimated charges associated with your account for the current month.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

data consistency

A

A definition of how data records are either the same or not the same due to replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

data transfer

A

Incoming (ingress) and outgoing (egress) packet flow.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

defense in depth (DiD)

A

Deployment of multiple security controls (physical, administrative, and technical) to protect a hosted workload.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

dependencies

A

Cloud services, applications, servers, and various technology components that depend upon each other when providing a business solution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

distributed session

A

A user session for which user state information is held in a separate durable storage location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

DHCP

A

Dynamic Host Configuration Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

EBS

A

Amazon Elastic Block Storage (EBS).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

EC2

A

Amazon Elastic Compute Cloud (EC2).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

ECR

A

Elastic Container Registry

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

ECS

A

Elastic Container Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

EFS

A

Amazon Elastic File System (EFS)
EFS can provide a simple NFS mount point. These mount points can be accessed and mounted from outside the VPC, either in another region, via VPN or VPC peering, or over a Direct Connect or VPN connection to an on-premises location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

egress-only Internet gateway (EOIG)

A

A one-way gateway connection for EC2 instances with IPv6 addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

EKS

A

Elastic Kubernetes Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Elastic IP (EIP) address

A

A static public IP address that is created and assigned to your AWS account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

endpoint

A

A location where communication is made; a private connection from a VPC to AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

ENI

A

Elastic Network Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

ephemeral storage

A

Temporary local block storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

event notification

A

Communications about changes in the application stack.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

externally authenticated user

A

A user that has authenticated outside Amazon before requesting access to AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

FedRAMP

A

Federal Risk and Authorization Management Program, establishes the security requirements for usage of cloud services for federal government agencies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

health check

A

A status check for availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

high availability

A

A group of compute resources that continue functioning even when some of the components fail.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

IAM group

A

A group of AWS IAM users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

IAM role

A

A permission policy that provides temporary access to AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

IAM

A

AWS Identity and Access Management (IAM).

64
Q

immutable

A

During deployment and updates components are replaced rather than changed.

65
Q

IOPS

A

Input-Output Operations per Second
A performance specification that defines the rate of input and output per second when storing and retrieving data.

66
Q

Internet gateway (IG)

A

An AWS connection to the Internet for a virtual private cloud (VPC).

67
Q

KMS

A

AWS Key Management Service (KMS).

68
Q

key-value

A

An item of data where the key is the name and the value is the data.

69
Q

Lambda@Edge

A

A custom-created function to control ingress and egress Amazon CloudFront traffic.

70
Q

launch template

A

A set of detailed EC2 instance installation and configuration instructions.

71
Q

lifecycle hook

A

A custom action to be performed before or after an Amazon EC2 instance is added to or removed from an Auto Scaling Group.

72
Q

lifecycle policy

A

A set of rules for controlling the movement of Amazon S3 objects between S3 storage classes.

73
Q

lifecycle rules

A

Rules that allow customers to transition backups that are stored in warm storage to cheaper cold storage.

74
Q

listener

A

A load balancer process that checks for connection requests using the defined protocols and ports.

75
Q

load balancer capacity unit (LCU)

A

Defines the maximum resource consumed calculated on new connections, active, connections, bandwidth, and rule evaluations.

76
Q

Local Zone

A

A single deployment of compute, storage, and select services close to a large population center.

77
Q

metric

A

Data collected for an AWS CloudWatch variable.

78
Q

mount point

A

A logical connection to a directory in a file system; a method to attach Amazon EFS storage to a Linux workload.

79
Q

multi-factor authentication (MFA)

A

Authentication that involves multiple factors, such as something you have and something you know.

80
Q

multipart upload

A

An upload in which multiple parts of a file are synchronously uploaded.

81
Q

NACL

A

Network Access Control Lists
A stateless subnet firewall that protects both inbound and outbound subnet traffic.

82
Q

NAT

A

Network Address Translation

83
Q

NAT gateway service

A

A service that provides indirect Internet access to Amazon EC2 instances that are located on private subnets.

84
Q

Nitro

A

The latest AWS hypervisor, which replaces the Xen hypervisor and provides faster networking, compute, encryption, and management services.

85
Q

NoSQL

A

A database that does not follow SQL rules and architecture, hence the name “no” SQL.

86
Q

NVMe

A

Non-Volatile Memory Express, a standard hardware interface for SSD drives connected using PCI Express bus.

87
Q

object storage

A

Data storage as a distinct object with associated metadata containing relevant information.

88
Q

origin access identity (OAI)

A

A special AWS IAM user account that is provided the permission to access the files in an Amazon S3 bucket.

89
Q

origin failover

A

An alternate data source location for Amazon CloudFront distributions.

90
Q

password policy

A

A policy containing global password settings for AWS account IAM users.

91
Q

peering connection

A

A private networking connection between two VPCs or two transit gateways.

92
Q

Pilot light

A

An active/passive disaster recovery design that involves maintaining a limited set of compute and data records to be used in case of a disaster to the primary application resources. The compute records are turned off until needed, but the data records are active and are kept up-to-date.

93
Q

primary database

A

The primary copy of database records.

94
Q

queue

A

A redundant storage location for messages and application state data for processing.

95
Q

read capacity unit

A

One strongly consistent read per second, or two eventually consistent reads per second, for items up to 4 KB in size.

96
Q

read replica

A

A read-only copy of a linked primary database.

97
Q

recovery point objective (RPO)

A

A metric that specifies the acceptable amount of data that can be lost within a specified period.

98
Q

recovery time objective (RTO)

A

A metric that specifies the maximum length of time that a service can be down after a failure has occurred.

99
Q

region

A

A set of AWS cloud resources in a geographic area of the world.

100
Q

regional edge cache

A

A large throughput cache found at an edge location that provides extra cache storage.

101
Q

regional endpoint

A

A device that provides HTTPS access to AWS services within a defined AWS region.

102
Q

reliability

A

The reasonable expectation that an application or service is available and performs as expected.

103
Q

Reserved instance

A

An Amazon EC2 instance for which you have prepaid.

104
Q

RPO

A

recovery point objective (RPO).

105
Q

RTO

A

recovery time objective (RTO).

106
Q

SG

A

Security Group

107
Q

scale out

A

To increase compute power automatically.

108
Q

scaling policy

A

A policy that describes the type of scaling of compute resources to be performed.

109
Q

security group

A

A stateful firewall protecting Amazon EC2 instances’ network traffic.

110
Q

Server Message Block (SMB)

A

A network protocol used by Windows systems on the same network to store files.

111
Q

serverless

A

A type of computing in which compute servers and integrated services are fully managed by AWS.

112
Q

server-side encryption (SSE)

A

Encryption of data records at rest by an application or a service.

113
Q

service-level agreement (SLA)

A

A commitment between a cloud service provider and a customer indicating the minimum level of service to be maintained.

114
Q

service-level indicator (SLI)

A

Indicates the quality of service an end user is receiving at a given time. SLIs are measured as a level of performance.

115
Q

service-level objective (SLO)

A

An agreement defined as part of each service-level agreement. Objectives could be uptime or response time.

116
Q

service quota

A

A defined limit for AWS services created for AWS accounts.

117
Q

simple scaling

A

Scaling instances up or down based on a single AWS CloudWatch metric.

118
Q

SLA

A

service-level agreement (SLA).

119
Q

snapshot

A

A point-in-time incremental backup of an EBS volume.

120
Q

Snow device

A

A variety of network-attached storage devices that can be used to transfer and receive data records to and from Amazon S3 storage.

121
Q

standby database

A

A synchronized copy of a primary database that is available in the event of a failure.

122
Q

stateful

A

Refers to a service that requires knowledge of all internal functions.

123
Q

stateless

A

Refers to a self-contained redundant service that has no knowledge of its place in the application stack.

124
Q

step scaling

A

Scaling up or down by percentages.

125
Q

sticky session

A

A user session for which communication is maintained with the initial application server for the length of the session. It ensures that a client is bound to an individual backend instance.

126
Q

Structured Query Language (SQL)

A

The de facto programming language used in relational databases.

127
Q

subnet

A

A defined IP address range hosted within a VPC.

128
Q

symmetric key

A

A key that can both lock and unlock.

129
Q

T instance

A

An instance provided with a baseline of compute performance.

130
Q

table

A

A virtual structure in which Amazon DynamoDB stores items and attributes.

131
Q

target group

A

A group of registered instances that receives specific traffic from a load balancer.

132
Q

task definition

A

A blueprint that describes how a Docker container should launch.

133
Q

Throughput Optimized

A

An EBS hard disk drive (HDD) volume option that provides sustained throughput of 500 Mb/s.

134
Q

tiered pricing

A

The more you use the less you are charged.

135
Q

time to live (TTL)

A

A value that determines the storage time of an Amazon CloudFront cache object.

136
Q

uptime

A

the percentage of time that a website is able to function during the course of a calendar year.

137
Q

user state

A

Data that identifies an end user and the established session between the end user and a hosted application.

138
Q

versioning

A

A process in which multiple copies of Amazon S3 objects, including the original object, are saved.

139
Q

virtual private cloud (VPC)

A

A logically isolated virtual network in the AWS cloud.

140
Q

virtual private gateway (VPG)

A

The AWS side of a VPN connection to a VPC.

141
Q

warm standby

A

An active/passive disaster recovery design that maintains a limited set of compute and data records that are both on and functioning. When the primary application resources fail, the warm standby resources are resized to production values.

142
Q

write capacity unit (WCU)

A

One write per second for items up to 1 KB in size.

143
Q

write-once/read-many (WORM)

A

A security policy that can be deployed on an Amazon S3 bucket or in S3 Glacier storage. The policy indicates that the contents can be read many times but are restricted from any further writes once the policy is enacted.

144
Q

zonal

A

Refers to an availability zone location.

145
Q

Amazon Timestream

A

is a fast and scalable serverless time series database designed to store and analyze trillions of events per day.

146
Q

AWS Backup

A

allowing you to schedule, copy, tag, and life cycle your DynamoDB on-demand backups automatically.

147
Q

VPC peering

A

is to connect two VPCs with low management overhead. VPC peering is perfect for simple VPC connectivity, such as connecting two VPCs. VPC peering works between AWS accounts and regions. Beyond creating the peering relationship and configuring the routing tables, there is no management with this solution.

148
Q

S3 Access Points

A

were created to simplify the use of varying access permissions with the same S3 bucket. You can create a separate S3 access for each group or service that requires access to S3 objects, with each point having its own Access Points policy.

149
Q

AWS Transfer Family

A

includes FTP, SFTP, and FTPS. Using this service would require no changes for companies accessing the shared data.

150
Q

AWS Config

A

can record all changes and alert through AWS Config rules and inventory. AWS Config can also provide relationship details across account resources. AWS Change Control is a made-up service name. Amazon CloudWatch is not designed to provide inventory, relationships, and record changes. AWS CloudTrail will log the API calls but cannot provide inventory

151
Q

AWS Cost Explorer

A

Visualize and manage AWS costs and usage over a daily or monthly granularity.

152
Q

TLD

A

Top Level Domain

153
Q

Service Quotas

A

utility is used to request a quota increase through AWS support.

154
Q

Elastic Fabric Adapter

A

provides the best networking performance, much faster than an elastic network interface.

155
Q

Compute Savings Plan

A

provides deep discounts for both EC2 instances and containers managed by AWS Fargate.

156
Q

DynamoDB on-demand

A

offers simple pay-per-request pricing for read and write requests so that you only pay for what you use, making it easy to balance costs and performance. For tables using on-demand mode, DynamoDB instantly accommodates customers’ workloads as they ramp up or down to any previously observed traffic level.