Aws Certification Cloud Practitioner Flashcards ionicons-v5-c

AWS Athena

Used in conjunction with S3 as a query service to analyze data using standard SQL. - Serverless- Integrated with Glue Data Catalog which provides more data repositories - You control and create the schema

AWS CloudSearch

Search index/search function without a need to maintain a server or maintain resources. - You provision resources to be available to search.

AWS EMR

Processing large amounts of data with Hadoop and other Big Data tech across EC2 instances.- Flexible- Elastic- Reliable- SecureUse Cases: Log analysis, web indexing, ETL, machine learning, financial analysis, simulation.

AWS Elastisearch

Uses and creates ELK stacks and creates analysis on your applications.- Reduced operational overhead

AWS Kinesis

Collect, process and analyze real time streamed data.- Need to react as quick as possible- Ingests, stores, and protects data streams and archives for analysis

AWS MSK

Lets you scalably and flexible use Apache Kafka without having to monitor infrastructure- More time on building your applications- Producing stream data from applications to a data store

AWS Redshift

Data storage warehouse that can produce highly-concurrent workloads, modern business solutions, and fully integrate into your chosen data lake ie: S3 bucket- low latency

AWS QuickInsight

BI service that - delivers insights to the organization- creates dashboards for insights- pay-per-session

AWS Data Pipeline

Web service to move data between different AWS services to storage buckets based on specified intervals. Can also access data and change and move it accordingly.- fault tolerant- highly available- cheap- reliable- flexible- scalable

AWS Glue

Fully managed ETL data transfer tool that catalogs via AWS Glue Catalog. Also available for search, query functions, and ETL extraction to another database. - cheap- easy to use- automated

AWS Lake Formation

Breaks down data to gain better insight and enables you to create data lakes easily. All you need with AWS is to specify data location and data security. All automated.

AWS Step Functions

Coordinate multiple AWS services through flows/workflows and steps.- Populate steps with code

AWS MQ

Message broker service that translates messages as a program to effectively decouple applications. Allows different software systems to communicate with other different software systems with different languages. - low latency- durable and available- easy migration- automated

AWS AppSync

Creates a specific and flexibile API tool to access, manipulate, and combine data from multiple sources of data.

AWS Cost Explorer

Allows you to manage and view costs in AWS. Allows you to find cost drivers and trends in your costs.

AWS Budget

Manage and create budgets to be alerted if a certain threshold is breached.

AWS Cost and Usage Report

Shows AWS usage for each service category and for each account's usage.

AWS Elastic Container Registry (ECR)

Docker container registry that makes it easy for you to deploy Docker container images with AWS Elastic Container Service. - Fully Managed- Secure, Scalable, and Available

AWS ECS

Supports Docker containers and easily accessible/run containerized apps on AWS.- Orchestration service that is serverless

AWS Lightsail

Easy to use cloud platform to build a virtual private server in AWS. Includes everything you need to create a website application or whatever project. SSD storage, virtual server, DNS management, static IP, and data transfer.

Amazon Aurora

MySQL and PostgreSQL compatible relational database that is durable and highly available with backup in S3 and multi region deployment with read replicas. - Faster than MySQL and PostgreSQL databases

AWS DynamoDB

No SQL Database. In memory caching, backup, and security- Serverless and key access- Single digit millisecond performance- Can handle more than 10 trillion requests per day

AWS Batch

Enables developers to run batch computing jobs on AWS. Automatically provisions resources and capacity needed based on the requirements from the batch jobs submitted. - Allows you to focus on analysis and solving problems- Fully managed infrastructure - No need to provision, monitor or log files - Executed across all AWS services

AWS Fargate

Compute engine that lets you run containers without you having to manage servers and clusters meaning you dont have to worry about server types or when to scale clusters.- Integrated with ECS

AWS Serverless Application Repository

Removes the need to build, publish, and deploy code to AWS and instead use pre-built serverless approved apps on the repository like data processing, web and mobile backends, logging, monitoring, and IoT.

AWS DocumentDB (MongoDB compatible)

Fast, scalable, available, fully managed document database service with MongoDB integration.- 15 read replicas- 6 copies replicated to minimum 3 AWS AZs

AWS ElastiCache

In-memory caching service with Redis and MemCached. Deploy and run open source in-memory data sources. - Fully managed and scalable

AWS Neptune

Graph database engine to store billions of highly connected datasets and quering graphs with milliseconds latency. - Integrated with property Graph RDF, Apache Tinkerpop- Highly available, read replicas- Recovery and S3 backup, fully managed

AWS Timestream

Stores and analyzes time series data in intervals and is stored in its own database. Serverless and 1000 x faster at 1/10 the cost.

AWS DMS

Database migration service that migrates databases to AWS quickly and securely. Leaves the source database operational and running during migration so operations are not stopped. - Simple, low cost, reliable, scalable, fast and easy with low downtime

AWS Cloud9

Lets you run, debug, and write code with just a web browser. Removes the need for you to install programs for the programming language. - Can code in real time and anywhere

AWS X-Ray

Analyze and debug your application and find the root cause of an error or problem. - Tracing request to the root cause

AWS Config

Assess, audit, and evaluate configurations of AWS services. Simplifies compliance, auditing, analysis by automating evaluations of your AWS resources specified in your internal guidelines. - Change management

AWS Control Tower

Way to centrally govern and provision multi-AWS accounts and make sure distributed accounts are complying with the governance policies of the company. Allows you to maintain control over interdependent teams, security, and compliance and govern AWS accounts in their environment.

AWS License Manager

Allows you to manage licenses from third-party vendors like Microsoft and establish rules for them pre-launch and implements it whenever that instance is launched. - More visibility of licenses and compliance of agreements- Costs and misreporting notified

AWS Managed Services

When enterprise businesses are migrating to the AWS cloud to scale, training for employees need to take place. AWS Managed SErvice allows for you to focus only on differentiating your business while the service performs common tasks like managing, monitoring, backups, infrastructure, security, and software patching. Lowers operational overhead.

AWS Organizations

Helps you manage central governance through billing, control access, compliance, and security services all across your AWS accounts. - Available at no charge- Allows you to create accounts and apply policies to them- Manage policies and billing across multiple accounts

AWS Personal Health Dashboard

A visualized dashboard that you can customize to see what is impacting your applications. Allows you to react and actively remediate issues through alerts and guidance for resolution.- IAM policy control- Automated and integrated with CloudWatch

AWS Service Catalog

Create and manage catalogs of IT services such as images, servers, software, and databases to use and deploy in the AWS architecture.

AWS Systems Manager

Provides with a UI that shows visibility and control of your infrastructure in AWS. Allows you to easily resource provision across operations, identity operational issues/errors, and manage your infrastructure safely. - Automated- Security and visibility- Compliance and security maintenance- Hybrid environment managementTools:- Resource Groups - Insights Dashboard- Run Command: automating admin tasks- State Manager: Define consistent OS configs- Inventory- Maintenance Window- Patch Manager- Automation- Parameter Store: Store important admin information

AWS API Gateway

Makes it easy for developers to create, publish, monitor, maintain, and secure APIs. Create Rest and Websocket APIs to act as the front door for apps to access first, in order to access data, business logic, workloads like Lambda code or EC2 instances. - pay for IOPS only- no startup/upfront payments- integrated with Cloudfront for lower latency and content delivery

AWS AppMesh

Service mesh that allows services to communicate with each other over different types of compute infrastructure. Previously it was hard to find errors and re-route traffic after failures and had to implement code and redeploy the service to make the change. - Appmesh removes the need to update code every time and forces services to publish data and deploys a communication language across the application- Allows for root cause error identification easier and rerouting traffic faster.

AWS CloudMap

Cloud resource discovery service. Challenges with traditional design: Most applications need to find locations of all infrastructure resources on which it depends on to function. Most of the time the names of the resources are managed manually. Manual = more error prone as services scale up and resources begin to scale as well. CloudMap allows you to give custom names to the resources and allows for you to register any type of application resource and constantly checks the health of the resources making it easier to query the location of the resources and higher availability of them. All done in a single registry.

AWS Direct Connect

Allows for a dedicated network connection from your on-premise to AWS. Private connection enabled which enables higher throughput and a consistent network connection. - Lower costs, elastic to your speed demands- Compatible with all AWS services

AWS Cognito

Allows you to set up user login and access controls to your mobile apps or websites.- Scalable to number of users- Complies to standards for authentication method with MFA enabled

AWS Guard Duty

Continuous threat detection and malicious activity monitoring. Uses machine learning and anomaly detection to detect threats and take action.- Done through AWS Management Console- Analyzed across multiple AWS services

AWS Macie

Uses machine learning to identify, classify, and protect sensitive data. Sensitive data as in personal information and intellectual property.

AWS Artifact

On-demand access to your compliance reports for AWS.

AWS Certificate Manager

Manage and deploy private (SSL/TLS) certificates or public certificates within your AWS services. - No need to consume, install, and renew certificates- Easy deployment- No charge for Elastic beanstalk, CloudFormation, API Gateway, ELB, and CloudFront or ACM Integrated Services

AWS CloudHSM

Hardware Security Module that lets you use and create your own encryption keys on AWS. Auto manages hardware provisioning, software patching, high availability, and backups.- Scalable

AWS Directory Service

Allows you to use managed AD directory on AWS. For Microsoft Active Directory.

AWS Resource Access Manager

Securely share AWS resources with any account within AWS Organization. - No need to duplicate resources across accounts with RAM. Lower operational overhead.

AWS Secrets Manager

Protects secrets needed to access your applications, services, and resources. Can easily rotate, manage, and retrieve secrets and credentials. - No need to hardcode calls for secrets retrieval and instead done through the Secrets Manager API.- Pay as you go based on number of API calls and number of secrets

AWS Security Hub

An overview of all security alerts and compliance status across AWS accounts. No need to go back and forth between security services to check for alerts. - Single view - Integrated with alerts from AWS Security services

AWS SSO

Single sign on service that allows you to centrally manage SSO across AWS accounts. SSO is located in one place so a user can find all their resources there after SSO login. Can configure accounts to users through SSO.- Integrated with AWS Active Directory service- Can create SAML 2.0 SSO integrations for single credential sign in for SSO enabled applications.

AWS EFS

Scalable storage service for Linux based applications and workloads. Elastic, fully managed, scalable, cost-effective, security and compliance , shared file storage.

AWS Glacier with S3

Extremely low cost for long term backup and archive data storage. High durability and scalable distributed across minimum of 3 AZs. - Expedited Retrieval: 1-5 min- Standard Retrieval: 3-5 hours- Bulk Retrieval: 5-12 hours

AWS Snowball

Petrabyte data storage migration service. 1/5 cost of transferring data. - No code or hardware needed to transfer data- You only need the Management Console and create a job- High-speed and scalable- Low cost and easy data retrieval- Cloud migration and disaster recovery

AWS Pay-as-you-go Model

Pay for only what you use. Pay based on demand and business needs not on forecasts. Allows you to focus on innovation and invention and reduces the risk of over provisioning resources.

AWS Save more when you reserve Model

The larger the upfront cost, the larger the discount. AURI: All up front with the largest discount. PURI: Partial up front with the second largest discount.NURI: No upfront with the least discount but allows you to free up your capital and focus on other projects.

AWS Pay less when using more Model

Services such as S3 and EC2 outbound data transfers, pricing is tiered meaning the more you use, the less you pay per gb. Inbound data transfers = free.

AWS SWF

Helps developers build background jobs with simple or parallel steps. Tracks states in the cloud and allows for recovery and retry if steps take longer than 500 milliseconds to complete.

AWS On-Demand Instances

Pay for hourly based compute capacity with no long term commitments. Only pay for the specified hourly rate for the instances you use when peak demand occurs. Removes the need for you to plan, provision, and maintain hardware and instead charge you for variable costs.

AWS Reserved Instances

Significant discount compared to on-demand instances (75%). Set to time commitments of either 1 year or 3 years. AWS Standard RI: Greatest discount and best suited for steady-state usage. 1 year: 40% 3 years: 60% AWS Convertible RI: Allows you to change the system type, operational tenancies with a 54% discount compared to On-Demand. Steady-state usage. 1 year: 31% 3 years: 54%AWS Scheduled RI: Allows you to schedule to operate in the time window that you specify.

AWS Spot Instances

Provides up to a 90% discount compared to On-Demand instances. Lets you take advantage of unused AWS EC2 capacity.

Cloud Computing Models IAAS

IAAS: Infrastructure as a Service (IaaS) contains the basic building blocks for cloud IT andtypically provide access to networking features, computers (virtual or on dedicatedhardware), and data storage space.

Cloud Computing Models PAAS

Removes the need for your organization to manage the underlying infrastructure like hardware and OS. Allows you to focus on the deployment and management of your applications. No need to worry about resource procurement, capacity, software maintenance, patching.

Cloud Computing Models SAAS

Provides with a completed product that is run and managed by the service provider. AKA end user application. No need to think about service and underlying infrastructure management.

Cloud Computing Deployment Models Cloud

Fully deployed in the cloud with all parts of applications running in the cloud. Created in the cloud or migrated from an existing infrastructure.

Cloud Computing Deployment Models Hybrid

Connecting infrastructure and applications with cloud resources and on-premise resources.

Cloud Computing Deployment Model On-Premise

AKA the private cloud. Ability to provide dedicated resources. Tries to increase resource utilization with cloud tech.

AWS Region

Physical location in the world with multiple AZs. Isolated for greatest possible fault tolerance and stability.

AWS AZ

Allows you to operate applications that are highly available, fault tolerant, and scalable compared to a single data center. AKA independent failure zone. Reduce SPOF.

AWS Kinesis Data Firehose

Easiest way to reliable load streaming data into data stores and analytics tools. Can capture, transform, and load streaming data into S3, Redshift, Elastisearch, and Splunk. Fully managed and created through MC.

AWS Kinesis Data Analytics

Analyze streaming data and gain insights for your business in real time. Reduces complexity of building and integrating streaming apps with other AWS services. Allows you to run queries continuously and scales to volume and throughput of incoming data.

AWS Workmail

Secured and managed business email and calendar service.

AWS Chime

Communications service that transforms online meetings with a secure application. Online meetings, video conferencing, calls, chat, and sharing content.

AWS EC2

Secure, resizable compute capacity in the cloud. Complete control of your resources. Allows you to scale capacity as your compute requirements change and is a pay only for what you use model.

AWS Auto Scaling

Helps maintain application availability and allows you to add or remove EC2 instances based on conditions you define. Dynamic scaling responds to changing demand and predictive scaling schedules right number of instances based on predicted demand.

AWS Elastic Beanstalk

Service for deploying and scaling web applications and services with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker. Just upload code and Elastic Beanstalk handles deployment.

AWS Lambda

Lets you run code without provisioning or managing servers. You pay only for compute time consumed not when code is running. 0 administration. JUST UPLOAD CODE. Scales code with high availability.

AWS Outposts

Bring native AWS services, infrastructure, and operating models to any data center, co-location space or on-premise facility. Delivers a truly consistent hybrid experience. Fully managed, maintained by AWS and is started with the AWS MC. Can use either VMWare Cloud or the AWS native variant.

AWS Support Plan Developer

- 7 core trusted advisor checks- Email access with business days to cloud support- Unlimited use cases with 1 primary contact- General architectural guidance- 3% of monthly AWS usage- Recommended for experimentation and testing in AWS

AWS Support Plan Business

- Full set of checks- 24/7 phone, email, and chat to Cloud Support Engineers- Unlimited cases with unlimited contacts- General, System impaired, Production system, and Production down cases- Contextual to use-cases guidance- AWS Support API - Interoperability and configuration guidance and troubleshooting for third party software- IAM for additional fee- Recommended if you have production workloads in AWS

AWS Support Plan Enterprise

- Full set of checks- 24/7 phone, email, and chat access to Cloud Support Engineers- Unlimited cases with unlimited contacts- General, System Impaired, Production System Impaired, Production System down, Business Critical system down- Consultative review based on applications- AWS Support API- Interoperability and configuration guidance and troubleshooting with third party software- IAM, Operations, Well-Architected Reviews with TAM as primary contact- Online self-paced labs- Concierge Support Team- Recommended if you have business-critical workloads on AWS

AWS Support Plan Basic

- One on one responses to account and billing responses- Support forums- Service health checks- Documentation and whitepapers

AWS Rekognition

Adds image analysis to your applications. Can detect objects, scenes, and faces in images. You can also search and compare faces.

AWS KMS Key Management Service

Allows you to create and manage keys and control encryption across your AWS services in your application. Uses FIPS 140-2 validated HSM to protect your keys.