Technology Flashcards
Elastic Compute Cloud
Allows you to rent and manage virtual servers in the cloud. The compute power can grow or shrink based on the needs or the load on your application.
EC2 Instances
Virtual servers running on physical servers. Instances are not considered serverless.
You can deploy an application directly to EC2 instances. 
Methods to access an EC2 instance
- AWS management console
- Secure Shell (SSH)
- EC2 Instance Connect (EIC)
- AWS Systems Manager
EC2 pricing options
On demand, spot, savings plan, reserved instances, dedicated hosts
The two EC2 features
Elastic Load Balancing and EC2 Auto Scaling
Elastic Load Balancing
Automatically distributes your incoming application traffic across multiple EC2 instances. Four different types: classic, application, gateway, and network load balancers.
EC2 Auto Scaling
Adds or replaces EC2 instances automatically across availability zones based on need and changing demand. Improves the availability of your applications.
Vertical scaling
Scaling up, or upgrading, your EC2 instance by adding more power (CPU, RAM).
Horizontal Scaling
Scaling out, or adding or removing servers.
Types of load balancers
Network, classic, application, and gateway.
Lambda
A serverless compute service that lets you run code without managing servers. It can execute your code in response to events by setting triggers.
Using Lambda, you are charged on:
Duration and number of requests. Even testing counts as a request to be charged. 1 million free requests each month.
AWS Fargate
A serverless compute engine for containers. Manages containers like Docker.
Amazon Lightsail
A compute service that allows you to quickly launch all the resources you need for small projects. 
AWS Outposts
Allows you to run cloud services in your internal data center.
Supports a hybrid deployment model.
Support workloads that need to remain on premises due to latency or data sovereignty needs.
AWS Batch
A compute service that allows you to process large work loads on smaller chunks typically for long running jobs. Dynamically provision Instances based on volume. 
S3
An object storage service for the cloud that is highly available. Essentially unlimited storage, with many storage classes. It is a regional service but has a global namespace.
S3 Security
You can set security at the bucket level or individual object level using access control lists, bucket policies, or access point policies. You can enable versioning.
S3 data accessibility
high availability and durability on a regional level.
The 7 types of S3 storage classes
- Standard: General purpose, across multiple AZs, low latency, high throughput.
Recommended for frequently accessed data - Intelligent-tiering: automatically moves data to the most effective cost-class. Across multiple AZs. Recommended for data changing access pattern or unpredicted like a data lake
- Standard Infrequent Access: access data less frequently but requires rapid access. Multiple AZs.
- One-zone Infrequent Access: like standard infrequent access but deployed in only one AZ
- Glacier: long term, retrieval options of 1-5min, 3-5h, or 5-12h. Multiple AZs.
- Glacier Deep Dive: like Glacier but longer access times. 12h or 48h retrieval options. Multiple AZs.
- Outposts: provides object storage on-premises. Only give a single storage class, store data across multiple devices and servers.
All EC2 instances must have a _________.
Root drive
What are the types of root drives for EC2 instance storage?
Elastic Block Store (EBS), instance store volume, and Elastic File System (EFS).
Elastic Block Store (EBS)
A type of root drive that attaches to EC2 instances and has persistent memory. You can attach multiple EBS volumes to an EC2 instance, but they are only tied to one AZ. You have to replicate it if you want to move the data to another AZ.
Recommended for quick access, long term data storage, running a database on an instance.
Instance store
A type of root drive for EC2 instances that is directly attached to the physical machine. They have lower latency but are ephemeral (temporary) - the data does not persist if an instance is stopped or terminated.
Elastic File System (EFS)
A serverless network file system for sharing files for EC2 instances. It can only be used in the Linux file system. Exist across an entire region. Recommended for main directories for business critical apps.
Storage Gateway
A hybrid storage service that lets you store data on the cloud and on premises. Recommended for moving backups to the cloud, reducing costs, lower latency.
AWS Backup
Helps you manage data backups across multiple services. Catch all backup service across different services. Can create a backup plan with frequency and retention.
Content Delivery Network
A mechanism to deliver content quickly and efficiently based on geographic location. Provides low latency.
CloudFront
A content delivery network that delivers data and applications globally with low latency. Uses edge locations to cache content.
Often used with S3 to deploy content globally. Can stop certain web attacks, and can do IP address blocking to certain countries.
CloudFront distribution cache
The name given to a collection of edge locations.
Amazon Global Accelerator
Sends your users through the AWS global network when accessing your content, speeding up delivery. Improves latency and availability of single-region applications.
S3 Transfer Acceleration
Improves content uploads and downloads to and from S3 buckets across long distances.
Virtual Private Cloud (VPC)
A foundational service that allows you to create a secure private network in the AWS cloud where you launch your resources.
Launch resources like your EC2 instances on your VPC, isolate and protect your resources.
Spans AZs in a single region.
VPC subnet
Allows you to split the network inside a VPC and is where you launch resources like EC2.
VPC private subnet
you put resources that you want to be private here like a database, inside a VPC.
VPC public subnets
Accessible from the internet, the resources you place here will be public. It uses components to make it public:
Network Access Control Lists (ACL): ensure the proper traffic is allowed into the subnet.
Router and route cable: defines where network traffic is routed.
Internet Gateway: allows public traffic to the internet from a VPC.
The internet