Services, Tools And Terminology Flashcards

1
Q

Access Control List (ACL)

A

A document that defines who can access a particular bucket or object. Each bucket and object in Amazon S3 has an ACL. This document defines what each type of user can do, such as write and read permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Account Management

A

AWS Account Management is a tool that you can use to update the contact info for each of your AWS accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS Certificate Manager (ACM)

A

AWS Certificate Manager is a web service for provisioning, managing, and deploying Secure Sockets Layer / Transport Layer Security (SSL/TLS) certificates for use with AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon Machine Image (AMI)

A

An Amazon Machine Image (AMI) is an encrypted machine image stored in Amazon EBS or Amazon S3.
AMIs function similarly to a template of a computer’s root drive. The contain the OS and can also include software and layers of your application, such as database servers, middleware, and web servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

API Gateway

A

Amazon API Gateway is a fully managed service that developers can use to create, publish, maintain, monitor, and secure APIs at any scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AWS App2Container

A

A transformation tool that modernizes .NET and Java applications by migrating them into containerized applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AWS AppConfig

A

A serviced used to update software at runtime without deploying new code. With AWS AppConfig, you can configure, validate, and deploy feature flags and application configurations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon AppFlow

A

A fully managed integration service that you can use to transfer data securely between software as a service (SaaS) applications and AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Application Auto Scaling

A

A web service that you can use to configure automatic scaling for AWS resources beyond Amazon EC2, such as Amazon ECS services, Amazon EMR clusters, and DynamoDB tables.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Application Cost Profiler

A

AWS Application Cost Profiler is a solution to track the consumption of shared AWS resources used by software applications and report granular cost breakdown across tenant base.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Application Discovery Service

A

A web service that helps you plan to migrate to AWS by identifying IT assets in a data center (DC) - including servers, virtual machines (VMs), applications, application dependencies, and network infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Application Revision

A

Skipped. (see “CodeDeploy”)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AppStream 2.0

A

Amazon AppStream 2.0 is a fully managed, secure service for streaming desktop apps to users without rewriting those apps.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS AppSync

A

An enterprise level, fully managed GraphQL service with real-time data synchronization and offline programming features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Asynchronous Bounce

A

A type of “bounce” (failed email delivery attempt) that occurs when a receiver initially accepts an email message for delivery and then subsequently fails to deliver it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Athena

A

Amazon Athena is an interactive query service that you can use to analyze data in Amazon S3 using ANSI SQL. Athena is serverless, so there’s no infrastructure to manage. Athena scales automatically and is simple to use, so you can start analyzing your datasets within seconds.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AUC

A

Area Under a Curve. An industry-standard metric to evaluate the quality of a binary classification machine learning model. AUC measures the ability of the model to predict a higher score for positive examples, those that are “correct,” than for negative examples, those that are “incorrect.”
The AUC metric returns a decimal value from 0 to 1.
AUC values near 1 indicate an ML model that’s highly accurate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Aurora

A

Amazon Aurora is a fully managed MySQL-compatible relational database engine that combines the speed and availability of commercial databases with the simplicity and cost-effectiveness of open-source databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

AWS Auto Scaling

A

A fully managed service that you can use to quickly discover the scalable AWS resources that are part of your application and to configure dynamic scaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Auto Scaling Group

A

A representation of multiple EC2 instances that share similar characteristics, and that are treated as a logical grouping for the purposes of instance scaling and management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Availability Zone (AZ)

A

A distinct location with a Region that’s insulated from failures in other AZs, and provides inexpensive, low-latency network connectivity to other AZs in the same Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

batch prediction

A

“Amazon Machine Learning” - An operation that processes multiple input data observations at one time (asynchronously).
Unlike real-time predictions, batch predictions aren’t available until all predictions have been processed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

BGP ASN = Border Gateway Protocol Autonomous system Number

A

Border Gateway Protocol Autonomous System Number is a unique identifier for a network, for use in BGP routing.
Amazon EC2 supports all 2-byte ASN numbers in the range of 1 - 65335, with the exception of 7224, which is reserved.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Binary Attribute

A

Amazon Machine Learning: An attribute for which one of two possible values is possible.
Valid positive values are 1, y, yes, t, and true answers.
Valid negative values are 0, n, no, f, and false.
Amazon Machine Learning outputs 1 for positive values and 0 for negative values.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Block

A

A dataset.
Amazon EMR breaks large amounts of data into subsets; each subset is called a data block.
Amazon EMR assigns an ID to each block and uses a hash table to keep track of block processing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Block Device

A

A block device is a storage device that supports reading and (optionally) writing data in fixed-size blocks, sectors, or clusters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Block Device Mapping

A

A mapping structure for every AMI and instance that specifies the block devices attached to the instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

bootstrap action

A

A user-specified default or custom action that runs a script or an application on all nodes of a job flow before Hadoop starts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Bracket

A

Amazon Bracket is a fully managed quantum computing service that helps you run quantum algorithms to accelerate your research and discovery,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

breach

A

(In relation to) Amazon EC2 Auto Scaling: The condition where a user-set threshold (upper or lower boundary) is passed. If the duration of the breach is significant, as set by a breach duration parameter, it can possibly start a “scaling activity”.

A scaling activity is a process that changes the size, configuration, or makeup of an Auto Scaling group by launching or terminating instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

bucket

A

A bucket is a container for objects. To store your data in Amazon S3, you first create a bucket and specify a bucket name and AWS Region. Then, you upload your data to that bucket as objects in Amazon S3. Each object has a key (or key name), which is the unique identifier for the object within the bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

bundling

A

A commonly used term for creating an Amazon Machine Image (AMI). It specifically refers to creating “instance store-backed AMIs”; A type of AMI whose instances use an instance store volume as the root device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

cache cluster and cache cluster identifier

A

A logical cache distributed over multiple cache nodes. A cache cluster can be set up with a specific number of cache nodes.
The identifier for the cache cluster is supplied by the customer and MUST be unique for that customer in an AWS Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

cache node and cache node type

A

A cache node is a fixed-size chunk of secure, network-attached RAM that each run an instance of the Memcached service, and has its own DNS name and port. Multiple types of cache nodes are supported, each with varying amounts of associated memory.
A cache node type is an EC2 instance type used to run the cache node.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

cache parameter group

A

A container for cache engine parameter values that can be applied to one or more cache clusters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

cache security group

A

A group maintained by ElastiCache that combines inbound authorizations to cache nodes for hosts belonging to Amazon EC2 security groups that are specified through the console or the API or command like tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

campaign

A

Amazon Personalize: A deployed solution version (trained model) with provisioned dedicated transaction capacity for creating real-time recommendations for your application users.
After you create a campaign, you use the getRecommendations or getPersonalizedRanking personalization operations to get recommendations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

canned access policy

A

A standard access control policy that you can apply to a bucket or object. Options include: private, public-read, public-read-write, and authenticated-read.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

canonicalization

A

The process of converting data into a standard format that a service such as Amazon S3 can recognize.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

capacity

A

The amount of available compute size at a given time.
Each Auto Scaling group is defined with a min and max compute size.
A scaling activity increases or decreases the capacity within the defined minimum and maximum values.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Cartesian product

A

A mathematical operation that returns a product from multiple sets.

In mathematics, the Cartesian Product of sets A and B is defined as the set of all ordered pairs (x, y) such that x belongs to A and y belongs to B. For example, if A = {1, 2} and B = {3, 4, 5}, then the Cartesian Product of A and B is {(1, 3), (1, 4), (1, 5), (2, 3), (2, 4), (2, 5)}.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

AWS CDK

A

AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining your cloud infrastructure in code and provisioning it through AWS CloudFormation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

chargeable resources

A

Features or services whose use incurs fees.
For example, in a CloudFormation stack, AWS resources that have been created incur charges and the amount charged depends on the usage load.

It is recommended that you use the AWS Simple Monthly Calculator to estimate your cost prior to creating instances, stacks, or other resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

AWS Chatbot

A

An interactive agent that makes it easier to monitor, troubleshoot, and operate AWS resources in your Slack channels and Amazon Chine chatrooms.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Amazon Chime

A

A secure, real-time, unified communications service that transforms meetings by making them more efficient and easier to conduct.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

CIDR block

A

Classless Inter-Domain Routing (CIDR).

A CIDR block is an internet protocol address allocation and route aggregation methodology.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

ciphertext

A

info that has been encrypted, as opposed to plaintext, which the info has not been encrypted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Client VPN

A

AWS Client VPN is a client-based, managed VPN service that remote clients can use to securely access your AWS resources using an Open VPN-based software client.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

AWS Cloud Control API

A

AWS Cloud Control API is a set of standardized application programming interfaces (APIs) that developers can use to create, read, update, delete, and list supported cloud infrastruture.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Cloud Directory

A

Amazon Cloud Directory is a service that provides a highly scalable directory store for your application’s multi-hierarchical data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

AWS Cloud Map

A

A service that you use to create and maintain a map of the backend services and resources that your applications depend on.
With AWS Cloud Map, you can name and discover your AWS Cloud resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

cloud service provider (CSP)

A

A cloud service provider is a company that provides subscribers with access to internet-hosted computing, storage, and software services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

AWS Cloud WAN

A

(WAN = wide-area networking)

AWS Cloud WAN is a managed wide-area networking service used to build, manage, and monitor a unified global network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

AWS Cloud9

A

A cloud-based integrated development environment (IDE) that you use to write, run and debug code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

CloudFormation

A

AWS CloudFormation is a service for writing or changing templates that create and delete related AWS resources together as a unit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

CloudFront

A

Amazon CloudFront is an AWS content delivery service that helps you improve the performance, reliability, and availability of your websites and applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

CloudHSM

A

AWS CloudHSM is a web service that helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware security module (HSM) appliances within the AWS Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

CloudSearch

A

Amazon CloudSearch is a fully managed service in the AWS Cloud that you can use to set up, manage, and scale a search solution for your website or application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

CloudTrail

A

AWS CloudTrail is a web service that records AWS API calls for your account and delivers log files to you.
The recorded info includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements that the AWS service returns.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

CloudWatch

A

Amazon CloudWatch is a web service that you can use to monitor and manage various metrics, and configure alarm actions based on data from those metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

CloudWatch Events

A

Amazon CloudWatch Events is a web service that you can use to deliver a timely stream of system events that describe changes in AWS resources to Lambda functions, streams in Kinesis Data Streams, Amazon SNS topics, or built-in targets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

CloudWatch Logs

A

Amazon CloudWatch Logs is a web service for monitoring and troubleshooting your systems and applications from your existing system, app, and custom log files.
You can send your existing log files to CloudWatch Logs and monitor these logs in near-real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

cluster

A

A logical grouping of container instances that you can place tasks on.

OpenSearch Service: A logical grouping of one or more data nodes, optional dedicated master nodes, and storage required to run Amazon OpenSearch Service and operate your OpenSearch Service domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

cluster compute instance

A

A type of instance that provides a great amount of CPU power coupled with increased networking performance, making it well suited for High Performance Compute (HPC) applications and other demanding network-bound applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

cluster placement group

A

A logical cluster compute instance grouping to provide lower latency and high-bandwidth connectivity between the instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

cluster status

A

OpenSearch Service:
An indicator of the health of a cluster.
A status can be green, yellow, or red.

At the shard level,
green means that all shards are allocated to nodes in a cluster,
yellow means the primary shard is allocated but the replica shards aren’t,
red means the primary and replica shards of at least one index aren’t allocated.

The shard status determines the index status, and the index status determines the cluster status.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

CNAME

A

Canonical Name Record - A type of resource record in the Domain Name System (DNS) that specifies that the domain name is an alias of another, canonical domain name. Specifically, it’s an entry in a DNS table that you can use to alias one fully qualified domain name to another.

NOTE: “Canonical” is the standard state or behavior of an attribute.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

CodeBuild

A

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

CodeCommit

A

AWS CodeCommit is a fully managed source control service that companies can use to host secure and highly scalable private Git repositories.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

CodeDeploy

A

AWS CodeDeploy is a service that automates code deployments to any instance, including EC2 instances and instances running on-premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

AWS CodeDeploy agent

A

A software package that, when installed and configured on an instance, enables that instance to be used in CodeDeploy deployments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

CodeGuru

A

Amazon CodeGuru is a collection of developer tools that automate code reviews and provide intelligent recommendations to optimize application performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

CodePipeline

A

AWS CodePipeline is a continuous deliver service for fast and reliable application updates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Amazon Cognito

A

Amazon Cognito is a web service that you can use to save mobile user data in the AWS Cloud without writing any backend code or managing any infrastructure.
Examples of mobile user data that you can save include app preferences and game states.
Amazon Cognito offers mobile identity management and data synchronization across devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

AWS CLI

A

AWS Command Line Interface is a unified downloadable and configurable tool for managing AWS services.
It allows you to control multiple AWS services from the command line and automate them through sripts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

compound query

A

CloudSearch: A search request that specifies multiple search criteria using the Amazon CloudSearch structured search syntax.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Amazon Comprehend

A

A natural language processing (NLP) service that uses machine learning to find insights and relationships in text.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

Amazon Comprehend Medical

A

A HIPAA-eligible NLP service that uses ML and has been pre-trained to understand and extract health data from medical text, such as prescriptions, procedures, or diagnoses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

AW Config

A

A fully managed service that provides an AWS resource inventory, configuration history, and configuration change notifications for better security and governance.
You can create rules that automatically check the config of AWS resources that AWS config records.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Amazon Connect

A

A service solution that offers self-service configuration and provides dynamic, personal, and natural customer engagement at any scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Consistency Model

A

The method a service uses to achieve high availability.

For example, it could involve replicating data across multiple servers in a data center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

Console Mobile Application

A

AWS Console Mobile Application lets AWS customers monitor and manage a select set of resources to stay informed and connect with their AWS resources while on the go.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

consolidated billing

A

A feature of the AWS Organizations service for consolidating payment for multiple AWS accounts. Can see a combined view of costs by all accounts and get detailed reports for each account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

container

A

A container is a standard unit of software that contains application code and all relevant dependencies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

container definition

A

A container definition specifies the details that are associated with running a container on Amazon Elastic Container Service (Amazon ECS). More specifically, a container definition specifies details such as the container image to use and how much CPU and memory the container is allocated.
The container definition is included as part of an Amazon ECS task definition.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

container instance

A

A container instance is a self-managed EC2 instance or an on-premises server or virtual machine (VM) that’s running the Amazon Elastic Container Service (Amazon ECS) container agent and has been registered into a cluster.
A container instance serves as the infrastructure that your Amazon ECS workloads are run on.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

container registry

A

A container registry is a collection of repositories that store container images.
One example is Amazon Elastic Container Registry (Amazon ECR).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

content delivery network (CDN)

A

A web service that speeds up distribution of your static and dynamic web content - such as .html, .css, .js, media files, and image files - to your users by using a worldwide network of data centers.
When a user requests your content, the request is routed to the DC that provides the lowest latency (time delay).
If the content is already in the location with the lowest latency, the CDN delivers it immediately. If not, the CDN retrieves it from an origin that you specify (for example, a web server or an Amazon S3 bucket).

With some CDNs, you can secure your content by configuring an HTTPS connection between users and data centers, and between data centers and your origin.
Amazon CloudFront is an example of a CDN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

AWS Control Tower

A

A service used to set up and govern a secure, multi-account AWS environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

core node

A

An EC2 instance that runs Hadoop map and reduce tasks and stores data using the Hadoop Distributed File System (HDFS).
Core nodes are managed by the master node, which assigns Hadoop tasks to nodes and monitors their status.

The EC2 instance you assign as core nodes must have allotted capacity for entire job flow run.
Because core nodes store data, you can’t remove them from a job flow. However, you can add more core nodes to a running job flow.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

Corretto

A

Amazon Corretto is a no-cost, multiplatform, production-ready distribution of the Open Java Development Kit (OpenJDK)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

cross-Region replication

A

A solution for replicating data across different AWS Regions, in near-real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

customer gateway

A

A router or software application on your side of a VPN tunnel that’s managed by Amazon VPC. The internal interfaces of the customer gateway are attached to one or more devices in your home network.
The external interface is attached to the virtual private gateway (VGW) across the VPN tunnel.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

AWS Data Exchange

A

A service that helps you find, subscribe to, and use third-party data in the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

Amazon Data Lifecycle Manager

A

An Amazon service that automates and manages the lifecycle of Amazon EBS snapshots and EBS-backed AMIs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

Data Pipeline

A

AWS Data Pipeline is a web service for processing and moving data between different AWS compute and storage services, as well as on-premises data sources, at specified intervals.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

DataSync

A

AWS DataSync is an online data transfer service that simplifies, automates, and accelerates moving data between storage systems and services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

AWS DeepComposer

A

A web service designed specifically to educate developers through tutorials, sample code, and training data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

AWS DeepLens

A

AWS DeepLens is a tool that provides AWS customers with a centralized place to search, discover, and connect with trusted AWS Partner Network (APN) Technology and Consulting Partners, based on customers’ business needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Detective

A

Amazon Detective is a service that collects log data from your AWS resources to analyze and identify the root cause of security findings or suspicious activities.
The Detective behavior graph provides visualizations to help you determine the nature and extent of possible security issues and conduct an efficient investigation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

Device Farm

A

AWS Device Farm is an app testing service that allows developers to test Android, iOS, and Fire OS devices on real, physical phones and tablets that are hosted by AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

Amazon DevOps Guru

A

A fully managed operations service powered by ML, designed to improve an app’s operational performance and availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

Direct Connect

A

AWS Direct Connect is a web service that simplifies establishing a dedicated network connection from your premises to AWS.

Using AWS Direct Connect, you can establish private connectivity between AWS and your data center, office, or co-location environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

Directory Service

A

AWS Directory Service is a managed service for connecting your AWS resources to an existing on-premises Microsoft Active Directory or to set up and operate a new, standalone directory in the AWS Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

distribution

A

A link between an origin server (such as an Amazon S3 bucket) and a domain name, which CloudFront automatically assigns.
Through this link, CloudFront identifies the object you have stored in your origin server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

DKIM

A

DomainKeys Identified Mail is a standard that email senders use to sign their messages. ISPs use those signatures to verify that messages are legitimate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

AWS DMS

A

AWS Database Migration Service is a web service that can help you migrate data to and from many widely used commercial and open-source databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

Docker image

A

A layered file system template that’s the basis of a Docker container. Docker images can comprise specific operating systems or applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

Amazon DocumentDB

A

Amazon DocumentDB (with MongoDB compatibility) is a managed database service that you can use to set up, operate, and scale MongoDB-compatible databases in the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

Domain Name System (DNS)

A

Domain Name System is a service that routes internet traffic to websites by translating human-readable domain names (i.e., www.example.com) into the numeric IP address, such as 192.0.2.1, which computers use to connect to each other.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

DynamoDB

A

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

Amazon DynamoDB Encryption Client

A

A software library that helps you protect your table data before you send it to DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

Amazon DynamoDB Storage Backend for Titan

A

A graph database implemented on top of Amazon DynamoDB. Titan is a scalable graph database optimized for storing and querying graphs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

DynamoDB Streams

A

An AWS service that captures a time-ordered sequence of item-level modifications in any Amazon DynamoDB table.
This service also stores this info in a log for up to 24 hours.
Apps can access this log and view the data items as they appeared before and after they were modified, in near-real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

Amazon EBS

A

Amazon Elastic Block Storage is a service that provides block level storage volumes or (not sure if “or” is a typo in documentation - could be “for”) use with EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

Amazon EBS-backed AMI

A

Type of AMI whose instances use an Amazon EBS volume as their root device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

Amazon EC2

A

Amazon Elastic Compute Cloud is a web service for launching and managing Linus/UNIX and Windows Server instances in Amazon data centers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

Amazon EC2 Auto Scaling

A

A web service that launches or terminates instances automatically based on user-defined policies, schedules, and health checks.

119
Q

Amazon ECR

A

Amazon Elastic Container Registry (Amazon ECR) is a fully managed Docker container registry that you can use to store, manage, and deploy Docker container images. Amazon ECR is integrated with Amazon ECS and IAM.

120
Q

Amazon ECS

A

Amazon Elastic Container Service (Amazon ECS) is a highly scalable, fast, container management service that you can use to run, stop, and manage Docker containers on a cluster of EC2 instances.

121
Q

edge location

A

An edge location is a data center that an AWS service uses to perform service-specific operations.

For example, CloudFront uses edge locations to cache copies of your content, so the content is closer to your users and can be delivered faster regardless of their locations.
Route 53 uses edge locations to speed up the response to public DNS queries.

122
Q

Amazon EFS

A

Amazon Elastic File System is a file storage service for EC2 instances.

Amazon EFS provides an interface that you can use to create and configure file systems.
Amazon EFS storage capacity grows and shrinks automatically as you add and remove files.

123
Q

Amazon EKS

A

Amazon Elastic Kubernetes Service is a managed service that you can use to run Kubernetes on AWS without needing to stand up or maintain your own Kubernetes control plane.

124
Q

Elastic Beanstalk

A

AWS Elastic Beanstalk is a web service for deploying and managing applications in the AWS Cloud without worrying about the infrastructure that runs those applications.

125
Q

Elastic Inference

A

Amazon Elastic Inference is a resource that customers can use to attach low-cost GPU-powered acceleration to Amazon EC2 and SageMaker instances, or Amazon ECS tasks, to reduce the cost of running deep learning inference by up to 75%.

126
Q

Elastic IP address

A

A fixed (static) IP address that you have allocated in Amazon EC2 or Amazon VPC and then attached to an instance.
Elastic IP addresses are associated with your account, not a specific instance.

They are ELASTIC because you can easily allocate, attach, detach, and free them as your needs change.

Unlike traditional static IP addresses, Elastic IP addresses allow you to mask instance or AZ failures by rapidly remapping your public IP addresses to another instance.

127
Q

Elastic Load Balancing (ELB)

A

A web service that improves an application’s availability by distributing incoming traffic between two or more EC2 instances.

128
Q

elastic network interface

A

An additional network interface that can be attached to an instance. Elastic Network Interfaces include a primary private IP address, one or more secondary private IP addresses, an Elastic IP address (optional), a MAC address, membership in specified security groups, a description, and a source/destination check flag.
You can create an elastic network interface, attach it to an instance, detach it from an instance, and attach it to another interface.

129
Q

Elastic Transcoder

A

Amazon Elastic Transcoder is a cloud-based media transcoding service.
It is a highly scalable tool for converting (or transcoding) media files from their source format into versions that play on devices such as smartphones, tablets, and PCs.

130
Q

ElastiCache

A

Amazon ElastiCache is a web service that simplifies deploying, operating, and scaling an in-memory cache in the cloud. The service improves the performance of web apps by providing info retrieval from fast, managed, in-memory caches, instead of relying entirely on slower disk-based databases.

131
Q

ElasticSearch

A

An open-source, real-time distributed search an analytics engine used for full-text search, structured search, and analytics.
OpenSearch was developed by the Elastic company.

132
Q

(SKIP THIS - IT’S NOT ON CCP EXAM)

AWS Elemental MediaConnect

A

AWS Elemental MediaConnect is a fully-managed live video distribution service that reliably and securely ingests video into the AWS Cloud and transports it to multiple destinations within the AWS network and the internet.

133
Q

NOTE THAT THE FOLLOWING WERE SKIPPED:
MediaConvert, MediaLive, MediaPackage, MediaStore, and MediaTailor

A

134
Q

EMP

A

The AWS End-of-Support Migration Program (EMP) for Windows Server provides the technology and guidance to migrate your apps running on Windows server 2003, 2008, and Windows Server 2008 R2 to the latest, supported versions of Windows Server running on AWS.

135
Q

Amazon EMR

A

Amazon Elastic Map Reduce is a web service that you can use to process large amounts of data efficiently.
Amazon EMR uses Hadoop processing combined with several AWS products to do such tasks as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehousing.

136
Q

AWS Encryption SDK

A

A client-side encryption library that you can use to encrypt and decrypt data using industry standards and best practices.

137
Q

EventBridge

A

Amazon EventBridge is a serverless event bus service that you can use to connect your apps with data form a variety of sources and routes that data targets, such as AWS Lambda.

You can set up routing rules to determine where to send your data to build app architectures that react in real-time to all of your data sources.

138
Q

eventual consistency

A

The method that AWS services use to achieve high availability.

This involves replicating data across multiple servers in Amazon data centers. When data is written or updated and Success is returned, all copies of the data are updated. However, it takes time for the data to propagate to all storage locations.
The data will eventually be consistent, but an immediate read might not show the change. Consistency is usually reached within seconds.

139
Q

extract, transform, and load (ETL)

A

A process that’s used to integrate data from multiple sources. Data is collected from sources (extract), converted to an appropriate format (transform), and written to a target data store (load) for purposes of analysis and querying.

ETL tools combine these three functions to consolidate and move data from one environment to another.

AWS Glue is a fully managed ETL service for discovering and organizing data, transforming it, and making it available for search and analytics.

140
Q

Fault Injection Simulator
or (AWS FIS)

A

AWS Fault Injection Simulator is a managed service that you can use to perform fault injection experiments on your AWS workloads.

141
Q

feature transformation

A

Amazon Machine Learning:
The ML process of constructing more predictive input representations or “features” from the raw input variables to optimize a machine learning model’s ability to learn and generalize. Also known as “data transformation or feature engineering”.

142
Q

federated identity management (FIM)

A

Allows individuals to sing in to different networks or services, using the same group or personal credentials to access data across all networks.
With identity federation in AWS, external identities (federated users) are granted secure access to resources in an AWS account without having to create IAM users.
These external identities can come from a corporate identity store (such as LDAP or Windows Active Directory) to form a third party (such as Login with Amazon, Facebook, or Google). AWS federation also supports SAML 2.0.

143
Q

FinSpace

A

Amazon FinSpace is a data management and analytics service purpose-built for the financial services industry (FSI).

144
Q

Firewall Manager

A

AWS Firewall Manager is a service that you use with AWS WAF to simplify your AWS WAF administration and maintenance tasks across multiple accounts and resources. With AWS Firewall Manager, you set up your firewall rules only once.
The service automatically applies your rules across your accounts and resources, even as you add new resources.

145
Q

Forecast

A

Amazon Forecast is a fully managed service that uses statistical and machine learning algorithms to produce highly accurate time-series forecasts.

146
Q

Skipping the following:

GameKit, GameLift, GameSparks

A

don’t need to know these for CCP

147
Q

Global Accelerator

A

AWS Global Accelerator is a network layer service that you use to create accelerators that direct traffic to optimal endpoints over the AWS global network. This improves the availability and performance of your internet applications that are used by a global audience.

148
Q

AWS Glue

A

AWS Glue is a fully managed extract, transform, and load (ETL) service that you can use to catalog data and load it for analytics.
With AWS Glue, you can discover your data, develop scripts to transform sources into targets, and schedule and run ETL jobs in a serverless environment.

149
Q

AWS GovCloud (US)

A

An isolated AWS Region that hosts sensitive workloads in the cloud, ensuring that this work meets the US government’s regulatory and compliance requirements.

150
Q

GuardDuty

A

Amazon GuardDuty is a continuous security monitoring service that can help to identify unexpected and potentially unauthorized or malicious activity in your AWS environment.

151
Q

Hadoop

A

Software that enables distributed processing for big data by using clusters and simple programming models.

152
Q

AWS Health

A

A service that provides ongoing visibility into AWS customers’ accounts and the availability of their AWS services and resources.

153
Q

health check

A

A system call to check on the health status of each instance in an Amazon EC2 Auto Scaling group.

154
Q

HealthLake

A

Amazon HealthLake is a HIPPA-eligible service that helps customers store, query, and generate artificial intelligence (AI) and machine learning (ML) insights from healthcare data and enables healthcare data interoperability.

155
Q

HMAC

A

Hash-based Message Authentication Code is a specific construction for calculating a message authentication code (MAC) involving a cryptographic has function in combination with a secret key.
You can use it to verify both the data integrity and the authenticity of a message at the same time.
AWS calculates the HMAC using a standard, cryptographic hash algorithm, such as SHA-256.

156
Q

hosted zone

A

A collection of resource record sets that Route 53 hosts.
Similar to a traditional DNS zone file, a hosted zone represents a collection of records that are managed together under a single domain name.

157
Q

HVM virtualization

A

Hardware Virtual Machine virtualization.
Allows the guest VM to run as though it’s on a native hardware platform, except that it still uses paravirtual (PV) network and storage drivers for improved performance.

158
Q

IAM

A

AWS Identity and Access Management is a web service that AWS customers can use to manage users and user permissions within AWS.

159
Q

IAM Access Analyzer

A

Access Management Access Analyzer is a feature of IAM that you can use to identify the resources in your organization and accounts that are shared with an external entity.

Example resources include Amazon S3 buckets or IAM roles.

160
Q

IAM Identity Center

A

A cloud-based service that brings together administration of users and their access to AWS accounts and cloud applications.
You can control single sign-on access and user permissions across all your AWS accounts in AWS Organizations.

161
Q

Identity provider (IdP)

A

An IAM entity that holds metadata about external identity providers.

162
Q

Image Builder

A

EC2 Image Builder is a service that facilitates building, maintaining, and distributing customized server images that launch EC2 instances, or that run in Docker containers.

163
Q

AWS Import/Export

A

A service for transferring large amounts of data between AWS and portable storage devices.

An Import/Export Station is the machine that uploads or downloads your data to or from Amazon S3.

164
Q

inline policy

A

An IAM policy that’s embedded in a single IAM user, group, or role.

165
Q

Amazon Inspector

A

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
It automatically assesses apps for vulnerabilities or deviations from best practices.
After performing an assessment, Amazon Inspector produces a detailed report with prioritized steps for remediation.

166
Q

instance store

A

Disk storage that’s physically attached to the host computer for an EC2 instance, and therefor has the same lifespan as the instance. When the instance is terminated, you lose any data in the instance store.

167
Q

instance store-backed AMI

A

A type of AMI whose instances use an instance store volume as the root device.

Compare this with instances launced from Amazon EBS-backed AMIs, which use an Amazon EBS volume as the root device.

168
Q

Internet Gateway

A

Connects a network to the internet.
You can route traffic for IP addresses outside your Amazon VPC to the internet gateway.

169
Q

Skipping the following AWS services and/or platforms:

IoT (1-Click, Analytics, Core, Device Defender, Device Management, Events, FleetWise, Greengrass, RoboRunner, SiteWise, Things Graph)

A

It doesn’t seem like any of these IoT services are on the CCP. Will double back and confirm after further review.

170
Q

AWS IQ

A

AWS IQ is a cloud service that AWS customers can use to find, engage, and pay AWS Certified third-party experts for on-demand project work.

171
Q

Amazon Kendra

A

Amazon Kendra is a search service powered by ML that developers can use to add search capabilities to their applications so their end users can discover info stored within the vast amounts of content spread across their company.

172
Q

Amazon Keyspaces

A

Amazon Keyspaces (for Apache Cassandra) is a scalable, highly available, and managed Apache Cassandra-compatible database service.

173
Q

Kinesis

A

Amazon Kinesis is a platform for streaming data on AWS.

Kinesis offers services that simplify the loading and analysis of streaming data.

174
Q

Kinesis Data Firehose

A

Amazon Kinesis Data Firehose is a fully managed service for loading streaming data into AWS.
It can capture and automatically load streaming data into Amazon S3 and Amazon Redshift, enabling near real-time analytics with existing business intelligence tools and dashboards.
It automatically scales to match the throughput of your data and requires no ongoing administration.
It can also batch, compress, and encrypt the data before loading it.

175
Q

Kinesis Data Streams

A

Amazon Kinesis Data Streams is a web service for building custom apps that process or analyze streaming data for specialized needs
It can continuously capture and store terabytes of data per hour from hundreds of thousands of stores.

176
Q

AWS KMS

A

AWS Key Management Service is a managed service that simplifies the creation and control of encryption keys that are used to encrypt data.

177
Q

KMS key

A

The primary resource in AWS Key Management Service.
In general, KMS keys are created, used, and deleted entirely within KMS.
It supports symmetric and asymmetric KMS keys for encryption and signing.
KMS keys can be either customer managed, AWS managed, or AWS owned.

178
Q

Lake Formation

A

AWS Lake Formation is a managed service that makes it easy to set up, secure, and manage your data lakes. Lake formation helps you discover your data sources and then catalog, cleanse, and transform the data.

179
Q

Lambda

A

AWS Lambda is a web service that you can use to run code without provisioning or managing servers.

You can run code for virtually any type of application or backend service with zero administration.

You can set up your code to automatically start from other AWS services or call it directly from any web or mobile app.

180
Q

Launch Wizard

A

AWS Launch Wizard is a cloud solution that offers a guided way of sizing, configuring, and deploying AWS resources for third-party apps, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual AWS resources.

181
Q

Amazon Lex

A

Amazon Lex is a fully managed artificial intelligence (AI) service with advanced natural language models to design, build, test, and deploy conversational interfaces in applications.

182
Q

Lightsail

A

Amazon Lightsail is a service used to launch and manage a virtual private server with AWS.

Lightsail offers bundled plans that include everything you need to deploy a virtual private server, for a low monthly rate.

183
Q

load balancer

A

A DNS name combined with a set of ports, which together provide a destination for all requests intended for your application.

A load balancer can distribute traffic to multiple app instances across every AZ within a Region. So, the span multiple AZs within an AWS Region into which an Amazon EC2 instance was launched, but load balancers can NOT span multiple Regions.

184
Q

Amazon Location

A

Amazon Location Service is a fully managed service that makes it easy for a developer to add location functionality, such as maps, points of interest, geocoding, routing, tracking, and geofencing, to their apps, without sacrificing data security, user privacy, data quality, or cost.

185
Q

Skipping the following ML services:

“Lookout for” Equipment, Metrics, Vision

A

Those 3 ML services don’t appear to be on the CCP. Will circle back and add them if necessary.

Also skipped “Amazon Lumberyard”

186
Q

Macie

A

Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS.

187
Q

Mail Transfer Agent (MTA)

A

Software that transports email messages from one computer to another by using a client-server architecture.

188
Q

AWS Mainframe Modernization

A

AWS Mainframe Modernization service is a cloud native platform for migration, modernization, execution, and operation of mainframe applications.

189
Q

Managed Blockchain

A

Amazon Managed Blockchain is a fully managed service for creating and managing scalable blockchain networks using popular open source frameworks.

190
Q

Amazon Managed Grafana

A

A fully managed and secure data visualization service that you can use to instantly query, correlate, and visualize operational metrics, logs, and traces from multiple data sources.

191
Q

Amazon Managed Service for Prometheus

A

A service that provides highly available, secure, and managed monitoring for your containers.

192
Q

AWS Management Console

A

A graphical interface to manage compute, storage, and other cloud resources.

193
Q

management portal

A

AWS Management Portal for vCenter is a web service for managing your AWS resources using VMware vCenter (specifically).

194
Q

AWS Marketplace

A

A web portal where qualified partners market and sell their software to AWS customers.

It is an online software store that helps customers find, buy and immediately start using the software and services that run on AWS.

195
Q

MemoryDB

A

Amazon MemoryDB for Redis is a Redis-compatible, durable, in-memory database service that’s purpose-built for modern applications with microservices architectures.

196
Q

Migration Hub

A

AWS Migration Hub is a service that provides a single location to track migration tasks across multiple AWS tools and partner solutions

197
Q

Amazon ML

A

Amazon Machine Learning is a cloud-based service that creates ML models by finding patterns in your data, and uses these models to process new data and generate predictions.

198
Q

Mobile Analytics

A

Amazon Mobile Analytics is a service for collecting, visualizing, understanding, and extracting mobile app usage data at scale.

199
Q

Mobile Hub

A

AWS Mobile Hub is an integrated console for building, testing, and monitoring mobile apps.

200
Q

AWS Mobile SDK

A

AWS Mobile SDK is a software development kit whose libraries, code examples, and documentation help you build high-quality mobile apps for the iOS, Android, Fire OS, Unity, and Xamarin platforms.

201
Q

Amazon Monitron

A

Amazon Monitron is an end-to-end system that uses ML to detect abnormal behavior in industrial machinery.

Use Amazon Monitron to implement predictive maintenance and reduce unplanned downtime.

202
Q

Amazon MQ

A

Amazon MQ is a managed message broker service for Apache ActiveMQ that you can use to set up and operate message brokers in the cloud.

203
Q

Multi-AZ deployment

A

A primary DB instance that has a synchronous standby replica in a different AZ.
The primary DB instance is synchronously replicated across AZs to the standby replica.

204
Q

Multipurpose Internet Mail Extension (MIME)

A

An internet standard that extends the email protocol to include non-ASCII text and nontext elements, such as attachments.

205
Q

Multitool

A

A cascading application that provides a simple command line interface for managing large datasets.

206
Q

Amazon MWAA

A

Amazon Managed Workflows for Apache Airflow is a managed orchestration service for Apache Airflow to assist in setting up and operating end-to-end data pipelines in the cloud at scale.

207
Q

NAT

A

Network Address Translation.

A strategy of mapping one or more IP addresses to another while data packets are in transit across traffic routing devices.
This is commonly used to restrict internet communications to private instances while allowing outgoing traffic.

208
Q

NAT gateway

A

A NAT device, managed by AWS, that performs network address translation in a private subnet, to secure inbound internet traffic.

A NAT gateway uses both NAT and port address translation.

209
Q

NAT instance

A

A NAT device, configured by a user, that performs network address translation in an Amazon VPC public subnet to secure inbound internet traffic.

210
Q

Neptune

A

Amazon Neptune is a managed graph database service that you can use to build and run applications that work with highly connected databases.

Neptune supports the popular graph query languages Apache TinkerPop Gremlin and W3C’s SPARQL, enabling you to build queries that efficiently navigate highly connected datasets.

211
Q

Network ACL

A

An optional layer of security that acts as a firewall for controlling traffic in and out of a subnet.
You can associate multiple subnets with a single network ACL, but a subnet can be associated with ONLY ONE network ACL at a time.

212
Q

Network Firewall

A

AWS Network Firewall is a managed service that deploys essential network protections for all Amazon Virtual Private Clouds (Amazon VPCs).

213
Q

NoSQL

A

Non-relational database systems (non-RDSs) that are highly available, scalable, and optimized for high performance.

Instead of the relational model, NoSQL databases (for example, DynamoDB) use alternate models for data management, such as key-value pairs or document storage.

214
Q

object

A

Amazon S3: The fundamental entity type stored in Amazon S3. Objects consist of object data and metadata. The data portion is opaque to Amazon S3.

CloudFront: Any entity that can be served either over HTTP or a version of RTMP.

215
Q

OpenSearch Service

A

Amazon OpenSearch Service is an open-source search and analytics engine that offers security options, high availability, data durability, and direct access to the OpenSearch API.

It is an AWS managed service for deploying, operating, and scaling OpenSearch in the AWS Cloud.

216
Q

OpsWorks

A

AWS OpsWorks is a Configuration management service that helps you use Chef to configure and operate groups of instances and applications.
You can define the app’s architecture and the specification of each component including package installation, software config, and resources such as storage.
You can automate tasks based on time, load, or lifecycle events.

217
Q

AWS Organizations

A

An account management service that you can use. to consolidate multiple AWS accounts into an organization that. you create and centrally manage.

218
Q

origin access identity (OIA)

A

When using Amazon CloudFront to serve content with an Amazon S3 bucket as the origin, a virtual identity that you use to require users to access your content through CloudFront URLs instead of Amazon S3 URLs.
Usually used with CloudFront private content.

219
Q

Outposts

A

AWS Outposts is a fully managed service by AWS that extends AWS infrastructure, services, APIs, and tools to on-premises data centers and edge locations.

Use AWS Outposts for workloads and devices requiring low latency access to on-premises systems, local data processing, data residency, and application migration with local system interdependencies.

220
Q

AWS ParallelCluster

A

An AWS supported open-source cluster management tool that helps you to deploy and manage high performance computing (HPC) clusters in the AWS cloud.

221
Q

Amazon Personalize

A

An artificial intelligence service for creating individualized product and content recommendations.

222
Q

Amazon Pinpoint

A

Amazon Pinpoint is a multichannel communications service that helps organizations send timely, targeted content through SMS, email, mobile push notifications, voice messages, and in-application channels.

223
Q

Amazon Polly

A

a text-to-speech (TTS) service that turns text into natural-sounding human speech.

224
Q

Premium Support

A

A one-on-one, fast-response support channel that AWS customers can subscribe to for support for AWS infrastructure services.

225
Q

AWS Private CA

A

AWS Private Certificate Authority is a hosted private certificate authority service for issuing and revoking private digital certificates.

226
Q

private subnet

A

An Amazon VPC subnet whose instances can’t be reached from the internet.

227
Q

Provisioned IOPS

A

A storage option that delivers fast, predictable, and consistent I/O performance.
When you specify an IOPS rate while creating a DB instance, Amazon RDS provisions that IOPSS rate for the lifetime of the DB instance.

228
Q

PV Virtualization

A

Paravirtual Virtualization allows guest VMs to run on host systems that don’t have special support extensions for full hardware and CPU virtualization.
Because PV guests run a modified OS that doesn’t use hardware emulation, they can’t provide hardware-related features, such as enhanced networking or GPU support.

229
Q

Amazon QLDB

A

Amazon Quantum Ledger Database is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a central trusted authority.

230
Q

QuickSight

A

Amazon QuickSight is a fast, cloud-powered business analytics service that you. can use to build visualizations, perform analysis, and quickly get business insights from your data.

231
Q

AWS RAM

A

AWS Resource Access Manager is a web service that AWS customers can use to securely share AWS resources with any AWS account or within your organization.

232
Q

Amazon RDS

A

Amazon Relational Database Service is a web service that makes it easier to set up, operate, and scale a relational database in the cloud.

It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common DB administrations tasks.

233
Q

Redis

A

A fast, open-source, in-memory key-value data structure store.

Redis comes with a set of versatile in-memory data structures with which you can easily create a variety of custom applications.

234
Q

Amazon Redshift

A

Amazon Redshift is a fully managed, petabyte-scaled data warehouse service in the cloud.
With Amazon Redshift, you can analyze your data using your existing business intelligence tools.

235
Q

Amazon Rekognition

A

Amazon Rekognition is a machine learning service that identifies objects, people, text, scenes, and activities, including inappropriate content, in either image or video files.
With Amazon Rekognition Custom Labels, you can create a customized ML model that detects objects and scenes specific to your business in images.

236
Q

Resource Groups

A

AWS Resource Groups is a web service that AWS customers can use to manage and automate tasks on large numbers of resources at one time.

237
Q

Amazon Resource Name (ARN)

A

A standardized way to refer to an AWS resource (for example, arn:aws:iam::123456789012:user/division_abc/subdivision_xyz/Bob).

238
Q

REST

A

Representational state transfer.

A simple stateless architecture that generally runs over HTTPS/TLS.

REST Emphasizes that resources have unique and hierarchical identifiers (URIs), are represented by common media types (such as HTML, XML, or JSON), and that operations on the resources are either predefined or discoverable within the media type.
In practice, this generally results in a limited number of operations.

239
Q

root device volume

A

A volume that ocntains the image used to boot the instance (aka root device).
If you launched the instance from an AMI backed by instance store, this is an instance store volume created from a template stored in Amazon S3.
Or, by Amazon EBS, its an EBS volume created from an EBS snapshot.

240
Q

route table

A

A set of routing rules that controls the traffic leaving and subnet that’s associated with the route table. You can associate multiple subnets with a single route table, but a subnet can only be associated with one route table at a time.

241
Q

Route 53

A

Amazon Route 53 is a web service that you can use to create a new DNS service or to migrate your existing DNS service to the cloud.

242
Q

Amazon S3

A

Amazon S3 is storage for the internet. You can use it to store and retrieve any amount of data at any time, from anywhere on the web.

243
Q

Amazon S3 Glacier

A

S3 Glacier is a secure, durable, and low-cost storage service for data archiving and long-term backup. You can reliably store large or small amounts of data for significantly less than on-premises solutions.
S3 Glacier is optimized for infrequently accessed data, where a retrieval time of several hours is suitable.

244
Q

Amazon SageMaker

A

Amazon SageMaker is a fully managed cloud service that builds, trains, and deploys machine learning (ML) models by using AWS infrastructure, tools, and workflows.

245
Q

AWS SAM

A

AWS Serverless Application Model is an open-source framework for building and running serverless applications.
It provides a command line interface tool and a shorthand syntax template specification that you can use to quickly iterate through your serverless application lifecycle.

246
Q

“scale in” vs “scale out”

A

To scale in is to remove EC2 instances from an Auto Scaling group.
To scale OUT is to add instances.

247
Q

AWS SCT

A

AWS Schema Conversion Tool is a desktop application that automates heterogenous database migrations.
You can use AWS SCT to convert DB schemas and code objects, SQL code in your apps, and ETL scripts to a format compatible with the target database.
Then, you can use AWS SCT data extraction agents to migrate data to your target DB.

248
Q

Secrets Manager

A

AWS Secrets Manager is a service for securely encrypting, storing, and rotating credentials for databases and other services.

249
Q

security group

A

A named set of allowed inbound network connections for an instance.
(Security groups in Amazon VPC also include support for outbound connections).
Each security group consists of a list of protocols, ports, and IP address ranges.
A security group can apply to multiple instances, and multiple groups can regulate a single instance.

250
Q

Security Hub

A

AWS Security Hub is a service that provides a comprehensive view of the security state of your AWS resources.
It collects security data from AWS accounts and services and helps you analyze your security trends to identify and prioritize the security issues from your AWS environment.

251
Q

AWS Serverless Application Repository

A

A managed repo that teams, orgs, and individual devs can use to store and share reusable apps, and assemble and deploy serverless architectures in powerful ways.

252
Q

server-side encryption (SSE)

A

The encrypting of data at the server level. Amazon S3 supports three modes of server-side encryption: SSE-S3, where Amazon S3 manages the keys; SSE-C, where the customer manages the keys; and SSE-KMS, where AWS KMS manages the keys.

253
Q

AWS Service Catalog

A

Web service that helps orgs create and manage catalogs of IT services that are approved for use on AWS. These IT services can include everything from virtual machine images, servers, software, and databases to complete multi-tier application arhitectures.

254
Q

AWS Service Management Connector

A

Enables customers to provision, manage, and operate AWS resources and capabilities in familiar IT Service Management (ITSM) tooling.

255
Q

Service Quotas

A

A service for viewing and managing your quotas easily and at scale as your AWS workloads grow.
Quotas, also referred to as limits, are the maximum number of resources that you can create in an AWS account.

256
Q

Amazon SES

A

Amazon Simple Email Service is a simple and cost-effective email solution for applications.

257
Q

SHA

A

Secure Hash Algorithm.

SHA1 is an earlier version of the algorithm, which AWS has replaced with SHA256.

258
Q

Shield

A

AWS Shield is a service that helps to protect your resources against DDoS attacks. (Resources like Amazon EC2 instances, Elastic Load Balancing load balancers, Amazon CloudFront distributions, and Route 53 hosted zones).
AWS Shield is automatically included at no extra cost beyond what you already pay for AWS WAF and your other AWS services.
For added protection against DDoS attacks, AWS offers AWS Shield Advanced.

259
Q

AWS SMS

A

AWS Server Migration Service is a service that combines data collection tools with automated server replication to speed the migration of on-premises servers to AWS.

260
Q

Snowball

A

AWS Snowball is a petabyte-scaled data transport solution that uses devices that are secure to transfer large amounts of data into and out of the AWS Cloud.

261
Q

Amazon SNS

A

Amazon Simple Notification Service is a web service that applications, users, and devices can use to instantly send and receive notifications from the cloud.

262
Q

SOAP

A

Simple Object Access Protocol.

An XML-based protocol that you can use to exchange info over a particular protocol between applications.
(protocols like HTTP or SMTP).

263
Q

Spot instance

A

A type of EC2 instance that you can bid on to use unused Amazon Ec2 capacity.

264
Q

Amazon SQS

A

Amazon Simple Queue Service is a reliable and scalable hosted queues for storing messages as they travel between computers. (this definition seems poorly worded in their documentation.)

265
Q

Amazon SWF

A

Amazon Simple Workflow Service is a fully managed service that helps devs build, run, and scale background jobs that have parallel or sequential steps.
SWF functions similar to a state tracker and task coordinator in the AWS Cloud.

266
Q

Step Functions

A

AWS Step Functions. isa web service that coordinates the components of distributed applications as a series of steps in a visual workflow.

267
Q

Storage Gateway

A

AWS Storage Gateway is a web service that connects an on-premises software appliance with cloud-based storage.
Storage Gateway provides seamless and secure integration between an org’s on-premises IT environment and AWS storage infrastructure.

268
Q

AWS STS

A

AWS Security Token Service is a web service for requesting temporary, limited-privilege credentials for IAM users or for users that you authenticate (federated users).

269
Q

subnet

A

A segment of. theIP address range of an Amazon VPC that an EC2 instance can be attached to.
You can create subnets to group instances according to security and operational needs.

270
Q

Systems Manager

A

AWS Systems Manager is the operations hub for AWS and hybrid cloud environments that can help achieve secure operations at scale.
It provides a unified user interface for users to view operations data from multiple AWS services and automate tasks across their AWS resources.

271
Q

Timestream

A

Amazon Timestream is a scalable and serverless time series database service for real-time analytics, DevOps, and IoT applications that you can use to store and analyze trillions of events per day.

272
Q

Traffic Mirroring

A

An Amazon VPC feature that you can use to copy network traffic from an elastic network interface of Amazon EC2 instances.
You can send this network traffic to out-of-band security and monitoring appliances for content inspection, threat monitoring, and troubleshooting.

273
Q

Transfer Family

A

AWS Transfer Family offers fully managed support for transferring files over SFTP, FTPS, and FTP into and out of Amazon S3 or Amazon EFS, as well as support for the Applicability Statement 2 (AS2) protocol for business-to-business (B2B) transfers.

NOTE: SFTP builds on secure shell protocol (SSH) and adds on file transfer capabilities. FTPS builds on file transfer protocol (FTP) and adds on a security and encryption layer. It uses a single connection through only one port, making it easier to install firewall solutions.

274
Q

Transport Layer Security (TLS)

A

A cryptographic protocol that provides security for communication over the internet. Its predecessor is Secure Sockets Layer (SSL).

275
Q

trust policy

A

An IAM policy that’s an inherent part of an IAM role.
The trust policy specifies which principals are allowed to use the role.

276
Q

Trusted Advisor

A

AWS Trusted Advisor is a web service that inspects your AWS environment and makes recommendations for saving money, improving system availability and performance, and helping to close security gaps.

277
Q

trusted key groups

A

Amazon CloudFront key groups whose public keys CloudFront can use to verify the signatures of CloudFront signed URLs and signed cookies.

278
Q

tunnel

A

A route for transmission of private network traffic that uses the internet to connect nodes in the private network.

The tunnel uses encryption and secure protocols such as PPTP to prevent the traffic from being intercepted as it passes through public routing nodes.

279
Q

PPTP

A

The Point to Point Tunneling Protocol (PPTP) is a network protocol used to create VPN tunnels between public networks. PPTP servers are also known as Virtual Private Dialup Network (VPDN) servers. PPTP is preferred over other VPN protocols because it is faster and it has the ability to work on mobile devices.

280
Q

virtual private gateway (VGW)

A

The Amazon side of a VPN connection that maintains connectivity.
The internal interfaces of the virtual private gateway connect to your Amazon VPC through the VPN attachment.
The external interfaces connect to the VPN connection, which leads to the customer gateway.

281
Q

VM Import/Export

A

VM Import/Export is a service for importing virtual machine (VM) images from your existing virtualization environment to Amazon EC2 and then exporting them back.

282
Q

Amazon VPC

A

Amazon Virtual Private Cloud is a web service for provisioning a logically isolated section of the AWS Cloud virtual network that you define.
You control your virtual networking environment by selecting your own IP address range, creating subnets and configuring route tables and network gateways.

283
Q

VPC Endpoint

A

A feature that you can use to create a private connection between your Amazon VPC and another AWS service without requiring access over the internet, through. aNAT instance, a VPN connection, or Direct Connect.

284
Q

AWS VPN

A

AWS Virtual Private Network provides functionality that establishes encrypted connections between your network or device, and AWS.
AWS VPN is comprised of two services:
AWS Client VPN, and
AWS Site-to-Site VPN

285
Q

AWS VPN CloudHub

A

AWS VPN CloudHub is a feature that enables secure communication between branch offices using a simple hub-and-spoke model, with or without a VPN

286
Q

AWS WAF

A

AWS WAF is a web application firewall service that controls access to content by allowing or blocking web requests based on criteria that. you specify.
For example, you can filter access based on the header values or the IP addresses that the requests originate from.

AWS WAF helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.

287
Q

Amazon WAM

A

Amazon WorkSpaces Application Manager (WAM) is a web service for deploying and managing applications for WorkSpaces.
It accelerates software deployment, upgrades, patching, and retirement by packaging Windows desktop apps into virtualized application containers.

288
Q

AWS Wavelength

A

AWS Wavelength is a service by AWS that embeds AWS compute and storage services within 5G networks to provide mobile edge computing infrastructure.
Use AWS Wavelength to develop, deploy, and scale ultra-low-latency apps to mobile devices and end users.

289
Q

WorkDocs

A

Amazon WorkDocs is a managed, secure enterprise document storage and sharing service with administrative controls and feedback capabilities.

290
Q

Amazon WorkLink

A

Amazon WorkLink is a cloud-based service that provides secure access to internal websites and web apps from mobile devices.

291
Q

Amazon WorkSpaces

A

Amazon WorkSpaces is a managed, secure desktop computing service for provisioning cloud-based desktops and providing users access to documents, applications, and resources from supported devices.

292
Q

WSDL

A

Web Services Description Language.
A language that’s used to describe the actions that a web service can perform, along with the syntax of action requests and responses.

293
Q

X.509 certificate

A

A digital document that uses the X.509 public key infrastructure (PKI) standard to verify that a public key belongs to the entity that’s described in the certificate.

294
Q

X-Ray

A

AWS X-Ray is a web service that collects data about requests that your application serves.
X-Ray provides tools that you can use to view, filter, and gain insights into that data to identify issues and opportunities for optimization.