Management and Governance Flashcards
A monitoring and management service built for developers, system operators, site reliability engineers (SRE), and IT managers. Collects monitoring and operational data in the form of logs, metrics, and events,
Amazon CloudWatch
Monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost
AWS Auto Scaling
Interactive agent that makes it easy to monitor and interact with your AWS resources in your Slack channels and Amazon Chime chat rooms
AWS Chatbot
Recommends optimal AWS resources for your workloads to reduce costs and improve performance by using machine learning to analyze historical utilization metrics. Helps you choose optimal configurations for three types of AWS resources: Amazon EC2 instances, Amazon EBS volumes, and AWS Lambda functions,
based on your utilization data
AWS Compute Optimizer
Automates the set-up of a baseline environment, or landing zone, that is a secure, well-architected multi-account AWS environment. It configures AWS management and security services based on established best practices in a secure, compliant, multi-account environment.
AWS Control Tower
Gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion. You can also use the sample templates or create your own templates to describe your AWS resource
AWS CloudFormation
After the AWS resources are deployed, you can modify and update them in a controlled and predictable way, in effect applying version control to your AWS infrastructure the same way you do with your software. You can also visualize your templates as diagrams and edit them using a drag-and-drop interface with the AWS CloudFormation Designer
A web service that records AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service
AWS CloudTrail
A fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.
AWS Config
Config Rules feature enables you to create rules that automatically check the configuration of AWS resources recorded by AWS Config
Use case: discover existing and deleted AWS resources, determine your overall compliance against rules, and dive into configuration details of a resource at any point in time. These capabilities enable compliance auditing, security analysis, resource change tracking, and troubleshooting.
Offers a guided way of sizing, configuring, and deploying AWS resources for third-party applications such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual AWS resources.
AWS Launch Wizard
Use case: Provides an estimated cost of deployment, and lets you modify your resources to instantly view an updated cost assessment. Once you approve the AWS resources, Launch Wizard automatically provisions and configures the selected resources to create a fully-functioning, production-ready application. AWS Launch Wizard also creates CloudFormation templates that can serve as a baseline to accelerate subsequent deployments.
Centrally manage and govern your environment as you grow and scale your AWS resources.
AWS Organizations
Use case: programmatically create new AWS accounts and allocate resources, group accounts to organize your workflows, apply policies to accounts or groups for governance, and simplify billing by using a single payment method for all of your accounts.
Configuration management service that provides managed instances of Chef and Puppet
AWS OpsWorks
Chef and Puppet: automation platforms that allow you to use code to automate the configurations of your servers
First fully managed delivery service for container and serverless applications. Connect and coordinate all the different tools needed for infrastructure provisioning, code deployments, monitoring, and updates.
AWS Proton
USE CASE: giving platform teams the tools they need to manage this complexity and enforce consistent standards while making it easy for developers to deploy their code using containers and serverless technologies
Allows organizations to create and manage catalogs of IT services that are approved for use on AWS. Centrally manage commonly deployed IT services and helps you achieve consistent governance and meet your compliance requirements, while enabling users to quickly deploy only the approved IT services they need.
AWS Service Catalog
Gives you visibility and control of your infrastructure on AWS
AWS Systems Manager
USE CASE: you can group resources, like Amazon EC2 instances, Amazon S3 buckets, or Amazon RDS instances, by application, view operational data for monitoring and troubleshooting, and take action on your groups of resources.
AWS Systems Manager tool:
Lets you create a logical group of resources associated with a particular workload such as different layers of an application stack, or production versus development environments.
Resource groups
