Section 1 AWS and SA Fundamentals Flashcards
Principle
A Person or App that ccan make Authenticated or Anonymous Requests
Authentication
Authenticating a Principle against an Identity
Identity
Objects that require authentication and are authorized to access resources
Authorization
The process of checking and allowing or denying access toa resource for an identity
Shared Resposibility Model - Customer
- Customer Data
- Platform
- Applications
- Identity & Access Managment
- OS
- Network & Firewall Configuration
- Encryption
- Network Protection
Shared Resposibility Model - AWS
- Software
- Compute
- Storage
- Databse
- Networking
- Hardware
- Regions
- Availibility Zones (AZ)
- Edge Locations
Service Model
Defines how a service or product is delivered, how you pay, and what you receive
Stack
- Data Center
- Network Storage
- Hosts / Servers
- Virtulization
- Operating System (OS)
- Runtme
- Application
- Data
3 types of Service Models
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
Infrastructure as a Service (IaaS)
AWS Resposibility
- Data Center
- Network & Storage
- Virtulization
Infrastructure as a Service (IaaS)
Client Resposibility
- Operating System (OS)
- Runtime
- Application
- Data
Platform as a Service (PaaS)
AWS Resposibility
- Data Center
- Network & Storage
- Virtulization
- Runtime
Platform as a Service (PaaS)
Client Resposibility
- Application
- Data
Software as a Service (Saas)
AWS Responsibility
- Data Center
- Network & Storage
- Virtulization
- Host / Servers
- Application
Software as a Service (Saas)
Client Responsibility
- Data
High Availability (HA)
Hardware, Software, and Configuration allowing system to recover quickly in the event of a failure with some User impact
Fault Tolerant
System Designed to operate through a failure with no User Impact
Recovery Point Objective (RPO)
Max time between a failure and the last successful backup