Aws Certified Cloud Practitioner Quiz Flashcards ionicons-v5-c

AWS Service Area:Service: Direct Connect

* Establish a dedicated network connection between your network and one of the AWS Direct Connect locations* Works with all AWS services that are accessible over the Internet* 1 Gbps and 10 Gbps connections; provision multiple connections if you need more capacity* Establish a private virtual interface from your on-premise network directly to your Amazon VPC* Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces* Establish private connectivity to multiple VPCs using multiple virtual interfaces* Reduces your network costs into and out of AWS in two ways: * Reduce your bandwidth commitment to your Internet service provider * Data transferred over your dedicated connection is charged at the reduced AWS Direct Connect data transfer * Avoid the need to utilize VPN hardware

AWS Service Area:Service: Amazon Elastic Compute Cloud (EC2)

* Resizable compute capacity in the cloud* Boot new server instances to minutes* Scale capacity as needs change* Controlled via Amazon Website or via Web Service APIs* Root access to instances* 99.95% availability for each Amazon EC2 Region * Choose either the size or type of CPU, memory, and boot partition* Use Security Groups and Network ACLs to control inbound and outbound network access* Use dedicated instances to offer additional isolation by running on dedicated hardware* Pay based on computing power used (e.g. size of instance)* On-Demand Instances let you pay for compute capacity by the hour with no long-term commitments. * Dedicated Instances are Amazon EC2 Instances that run on hardware dedicated to a single customer for additional isolation.

AWS Service Area:Service: Route53

* Highly available and scalable cloud Domain Name System (DNS) web service* Connects user requests to infrastructure running in AWS* Used to route users to infrastructure outside of AWS.* Manage traffic globally through a variety of routing types, including Latency Based Routing, Geo DNS, and Weighted Round Robin—all* Offers Domain Name Registration

AWS Service Area:Service: Virtual Private Cloud

* Provision a logically isolated section of the Amazon Web Services (AWS) Cloud * You define the entire virtual networking environment * Control IP addresses, subnets, route tables, and network gateways

AWS Service Area:Service: CloudFront

Amazon CloudFront is a content delivery web service. distribute content to end users with low latency, high data transfer speeds, and no minimum usage commitments. can be used to deliver your entire website, including dynamic, static, streaming, and interactive content Requests for your content are automatically routed to the nearest edge locatio optimized to work with other Amazon Web Services also works seamlessly with any non-AWS origin server, which stores the original, definitive versions of your files Support for POST/PUT and other HTTP Methods Use your own domain name and your own SSL certificate to deliver content over HTTPS Remove copies of a file from all Amazon CloudFront edge locations. Map a wildcard domain name to your Amazon CloudFront distribution network. Visitors to your website can now access your site at the zone apex (or "root domain") Configure how CloudFront handles error responses for your website.

AWS Service Area:Service: Glacier

* Extremely low-cost cloud archive storage service that provides secure and durable storage for data archiving and online backup.* As little as $0.01 per gigabyte per month* Average annual durability of 99.999999999% for an archive.* Transfer of your data over Secure Sockets Layer (SSL)* Automatically encrypts data at rest using Advanced Encryption Standard (AES) 256-bit symmetric keys* Redundantly stores data in multiple facilities and on multiple devices within each facility.* Move data between Amazon S3 and Amazon Glacier using data lifecycle policies.

AWS Service Area:Service: Amazon Simple Storage Service (S3)

* Write, read, and delete objects containing from 1 byte to 5 terabytes of data each. The number of objects you can store is unlimited. * Each object is stored in a bucket and retrieved via a unique, developer-assigned key * A bucket can be stored in one of several regions. You can choose a region to optimize for latency, minimize costs, or address regulatory requirements * Objects can be made private or public, and rights can be granted to specific users. * Options for secure data upload/download and encryption of data at rest are provided * Uses standards-based REST and SOAP interfaces * The default download protocol is HTTP. A BitTorrent™ protocol interface is provided to lower costs for high-scale distribution.* Manage of data through its lifetime. Includes options for segregating data by buckets, monitoring and controlling spend, and automatically archiving data to even lower cost storage options.

AWS Service Area:Service: Storage Gateway

* Connect an on-premises software appliance with cloud-based storage * Transfers your data to AWS over SSL* Encryption at rest in S3 or Glacier using AES-256* No re-architecture needed* Only uploads data that has changed

AWS Service Area:Service: DynamoDB

a fast and flexible NoSQL database serviceconsistent, single-digit millisecond latency at any scale. fully managed database and supports both document and key-value data models great fit for mobile, web, gaming, ad-tech, IoT

AWS Service Area:Service: ElasticCache

* A web service that makes it easy to deploy, operate, and scale an in-memory cache in the cloud.* Supports two open-source in-memory caching engines: Memcached and Redis* Automatically detects and replaces failed nodes

AWS Service Area:Service: Relational Database Service

* A web service to quickly provision and scale a database* Supports MySQL, Oracle, Microsoft SQL Server, or PostgreSQL* Automatically patches the database software and backs up your database according to a policy you set* Can be provisioned with General Purpose (SSD) Storage, Provisioned IOPS (SSD) Storage, or Magnetic Storage* Multi-AZ deployment option you can run mission critical workloads with high availability and built-in automated fail-over

AWS Service Area:Service: Redshift

* Fast, fully managed, petabyte-scale data warehouse solution* Analyze all your data using your existing business intelligence tools* Fast query performance by using columnar storage technology* Uses standard PostgreSQL JDBC and ODBC drivers* Automated most of the common administrative tasks* Backups to Amazon S3 are continuous, incremental and automatic.* Pay only for the resources you provision

AWS Service Area:Service: CloudFormation

* Create and manage a collection of related AWS resources* Ordering and dependencies automiatically handled* Deploy colleciton of resources using a 'template'. Templates can be re-used* Free. No additional charge to use.* Describe resource dependencies if needed* Pass special paraemters in at runtime* Template files are JSON-formatted text files* Publish progress of events using Amazon SNS

AWS Service Area:Service: CloudTrail

* A web service that records AWS API calls for your account * Can deliver log files via email* Captures API caller, time, source, rqst. parameters, and rsp. elements* Enables security analysis, change tracking, and compliance auditing.

AWS Service Area:Service: CloudWatch

* Monitoring service for AWS cloud resources* Collect and track metrics, collect and monitor log files, and set alarms.* Create custom metrics for YOUR application or service, and any log file * Free to monitor CPU, Data Transfer, and disk usage activity* Integrate with SNS to expand alarming capabilities

AWS Service Area:Service: Elastic Beanstalk

service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.upload your code and Elastic Beanstalk automatically handles the deployment you retain full control over the AWS resources powering your application and can access the underlying resources at any time. no additional charge for Elastic Beanstalk - you pay only for the AWS resources needed

AWS Service Area:Service: Identity and Access Management

* Control access to AWS services and resources for your users.* Create and manage AWS users and groups. Create roles.* Use permissions to allow and deny their access to AWS resources, and control which operations a user can perform.* Assign them individual security credentials (i.e., access keys, passwords, and multi-factor authentication devices)* Request temporary security credentials to provide users access to AWS services and resources.* Enable identity federation to allow existing identities (e.g. users)

AWS Service Area:Service: OpsWorks

AWS OpsWorks is a cloud application management servicecan define the application's architecture and the specification of each component including package installation, software configuration and resources such as storageautomation to scale your application based on time or load

AWS Service Area:Service: Trusted Advisor

AWS Trusted Advisor provides best practices in four categories:Cost OptimizationSecurityFault TolerancePerformance ImprovementYou can use over 40 Trusted Advisor checks to monitor and improve the deployment of Amazon EC2, Elastic Load Balancing, Amazon EBS, Amazon S3, Auto Scaling, AWS Identity and Access Management, Amazon RDS, Amazon Route 53, and other services. You can view the overall status of your AWS resources and savings estimations on the Trusted Advisor dashboard.

AWS Service Area:Service: Data Pipeline

a web service that helps you reliably process and move data between different AWS compute and storage services as well as on-premise data sources at specified intervalsaccess your data where it's stored, transform and process it at scale, and efficiently transfer the results to AWS services

AWS Service Area:Service: Elastic MapReduce

Amazon Elastic MapReduce (Amazon EMR) is a web service that makes it easy to quickly and cost-effectively process vast amounts of data.Amazon EMR uses Hadoop, an open source framework, to distribute your data and processing across a resizable cluster of Amazon EC2 instances. Amazon EMR is used in a variety of applications, including log analysis, web indexing, data warehousing, machine learning, financial analysis, scientific simulation, and bioinformatics.

AWS Service Area:Service: Kinesis

* Platform for streaming data on AWS* Load and analyze streaming data* Build custom streaming data applications for specialized needs

AWS Service Area:Service: Cognito

* Save mobile user data, such as app preferences or game state, in the AWS Cloud * No writing any backend code or managing any infrastructure* Offers mobile identity management and data synchronization across devices.* Save data locally on users' devices allowing your applications to work even when the devices are offline* Synchronize data across a user's devices so that their app experience will be consistent regardless of the device they use

AWS Service Area:Service: Mobile Analytics

With Amazon Mobile Analytics, you can measure app usage and app revenue. By tracking key trends such as new vs. returning users, app revenue, user retention, and custom in-app behavior events, you can make data-driven decisions to increase engagement and monetization for your app. You can view key charts in the Mobile Analytics console and automatically export your app event data to Amazon S3 and Amazon Redshift to run custom analysis. Amazon Mobile Analytics is free up to 100 million events per month and just $1 per million events thereafter.

AWS Service Area:Service: Simple Notification Service

* Fast, flexible, fully managed push messaging service* Notifications to Apple, Google, Fire OS, and Windows devices* Deliver notifications by SMS text message or email, to Amazon Simple Queue Service (SQS) queues, or to any HTTP endpoint.* All messages are stored redundantly across multiple availability zones* Publish a message once, and deliver it one or more times. * Direct unique messages to individual Apple, Google or Amazon devices, or* Broadcast deliveries to many mobile devices with a single publish request.* SNS allows you to group multiple recipients using topics. * A topic is an "access point" for allowing recipients to dynamically subscribe for identical copies of the same notification.* $1.00 to send one million notifications via push messaging.

AWS Service Area:Service: AppStream

* Stream your existing Windows applications from the cloud* Application will be deployed and rendered on AWS infrastructure and the output is streamed to mass-market devices (e.g. phones, tablets)* Scale computational and storage needs, regardless of the devices your customers are using * Use Amazon SDK for streaming your application from the cloud* Integrate your own custom clients, subscriptions, identity, and storage solution

AWS Service Area:Service: CloudSearch

Built for high throughput and low latency, Amazon CloudSearch supports a rich set of features including language-specific text processing for 34 languages, free text search, faceted search, geospatial search, customizable relevance ranking, highlighting, autocomplete and user configurable scaling and availability options.

AWS Service Area:Service: Elastic Transcoder

Amazon Elastic Transcoder is media transcoding in the cloud. It is designed to be a highly scalable, easy to use and a cost effective way for developers and businesses to convert (or "transcode") media files from their source format into versions that will playback on devices like smartphones, tablets and PCs.

AWS Service Area:Service: Amazon Simple Email Service (SES)

* Outbound-only email-sending service* Pay low charges for the number of emails sent, data transfer fees, and attachments.* Sending statistics and built-in notifications for bounces, complaints, and deliveries* Outgoing messages are stored redundantly across multiple servers and datacenters* Amazon SES takes proactive steps to maximize the percentage of your emails that arrive in your recipients' inboxes* Track your bounces, complaints, and deliveries with Amazon SNS and easily set up DKIM for any domain you manage via Amazon Route 53.

AWS Service Area:Service: Amazon Simple Queue Service (SQS)

* A fast, reliable, scalable, fully managed message queuing service.* Transmit any volume of data, at any level of throughput* Offload the administrative burden of operating a messaging cluster

AWS Service Area:Service: Amazon Simple Workflow

* Build, run, and scale background jobs that have parallel or sequential steps.* A fully-managed state tracker and task coordinator in the Cloud.* Separation between the control flow of your background job's stepwise logic and the actual units of work* Redundantly stores the tasks, reliably dispatches* Eliminates the need for developers to manage the infrastructure plumbing of process automation* Write your application components and coordination logic in any programming language

AWS Service Area:Service: WorkSpaces

Amazon WorkSpaces offers you an easy way to provide a managed, cloud-based desktop experience to your end-users. You don't have to worry about procuring or deploying hardware or installing complex software to deliver a desktop experience to your users. Amazon WorkSpaces takes care of all the heavy lifting of managing hardware and software, and tasks such as patching and maintenance, enabling you to deliver a high quality desktop experience to your users.

AWS Service Area:Service: Amazon WorkDocs

Amazon WorkDocs offers you an easy way to provide your end users with secure enterprise storage and sharing, with strong administrative controls and feedback capabilities that improve user productivity. As Amazon WorkDocs is a fully managed service, you don't have to worry about procuring hardware, installing and managing complex collaboration software, or deploying FTP servers or network file storage to deliver these benefits to your users. All you need to do is enable Amazon WorkDocs for your organization and invite your users.

AWS Service Area:Service: AWS Certificate Manager

* Deploy SSL/TLS certificates for use with AWS Services (e.x ELB, CloudFront)* Automatically renews certificates, if desired* Service is FREE* Key management is handled by Amazon using "best practices"

AWS Service Area:Service: Direct Connect

* Establish a dedicated network connection between your network and one of the AWS Direct Connect locations* Works with all AWS services that are accessible over the Internet* 1 Gbps and 10 Gbps connections; provision multiple connections if you need more capacity* Establish a private virtual interface from your on-premise network directly to your Amazon VPC* Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces* Establish private connectivity to multiple VPCs using multiple virtual interfaces* Reduces your network costs into and out of AWS in two ways: * Reduce your bandwidth commitment to your Internet service provider * Data transferred over your dedicated connection is charged at the reduced AWS Direct Connect data transfer * Avoid the need to utilize VPN hardware

AWS Service Area:Service: Amazon Elastic Compute Cloud (EC2)

* Resizable compute capacity in the cloud* Boot new server instances to minutes* Scale capacity as needs change* Controlled via Amazon Website or via Web Service APIs* Root access to instances* 99.95% availability for each Amazon EC2 Region * Choose either the size or type of CPU, memory, and boot partition* Use Security Groups and Network ACLs to control inbound and outbound network access* Use dedicated instances to offer additional isolation by running on dedicated hardware* Pay based on computing power used (e.g. size of instance)* On-Demand Instances let you pay for compute capacity by the hour with no long-term commitments. * Dedicated Instances are Amazon EC2 Instances that run on hardware dedicated to a single customer for additional isolation.

AWS Service Area:Service: Route53

* Highly available and scalable cloud Domain Name System (DNS) web service* Connects user requests to infrastructure running in AWS* Used to route users to infrastructure outside of AWS.* Manage traffic globally through a variety of routing types, including Latency Based Routing, Geo DNS, and Weighted Round Robin—all* Offers Domain Name Registration

AWS Service Area:Service: Virtual Private Cloud

* Provision a logically isolated section of the Amazon Web Services (AWS) Cloud * You define the entire virtual networking environment * Control IP addresses, subnets, route tables, and network gateways

AWS Service Area:Service: CloudFront

Amazon CloudFront is a content delivery web service. distribute content to end users with low latency, high data transfer speeds, and no minimum usage commitments. can be used to deliver your entire website, including dynamic, static, streaming, and interactive content Requests for your content are automatically routed to the nearest edge locatio optimized to work with other Amazon Web Services also works seamlessly with any non-AWS origin server, which stores the original, definitive versions of your files Support for POST/PUT and other HTTP Methods Use your own domain name and your own SSL certificate to deliver content over HTTPS Remove copies of a file from all Amazon CloudFront edge locations. Map a wildcard domain name to your Amazon CloudFront distribution network. Visitors to your website can now access your site at the zone apex (or "root domain") Configure how CloudFront handles error responses for your website.

AWS Service Area:Service: Glacier

* Extremely low-cost cloud archive storage service that provides secure and durable storage for data archiving and online backup.* As little as $0.01 per gigabyte per month* Average annual durability of 99.999999999% for an archive.* Transfer of your data over Secure Sockets Layer (SSL)* Automatically encrypts data at rest using Advanced Encryption Standard (AES) 256-bit symmetric keys* Redundantly stores data in multiple facilities and on multiple devices within each facility.* Move data between Amazon S3 and Amazon Glacier using data lifecycle policies.

AWS Service Area:Service: Amazon Simple Storage Service (S3)

* Write, read, and delete objects containing from 1 byte to 5 terabytes of data each. The number of objects you can store is unlimited. * Each object is stored in a bucket and retrieved via a unique, developer-assigned key * A bucket can be stored in one of several regions. You can choose a region to optimize for latency, minimize costs, or address regulatory requirements * Objects can be made private or public, and rights can be granted to specific users. * Options for secure data upload/download and encryption of data at rest are provided * Uses standards-based REST and SOAP interfaces * The default download protocol is HTTP. A BitTorrent™ protocol interface is provided to lower costs for high-scale distribution.* Manage of data through its lifetime. Includes options for segregating data by buckets, monitoring and controlling spend, and automatically archiving data to even lower cost storage options.

AWS Service Area:Service: Storage Gateway

* Connect an on-premises software appliance with cloud-based storage * Transfers your data to AWS over SSL* Encryption at rest in S3 or Glacier using AES-256* No re-architecture needed* Only uploads data that has changed

AWS Service Area:Service: DynamoDB

a fast and flexible NoSQL database serviceconsistent, single-digit millisecond latency at any scale. fully managed database and supports both document and key-value data models great fit for mobile, web, gaming, ad-tech, IoT

AWS Service Area:Service: ElasticCache

* A web service that makes it easy to deploy, operate, and scale an in-memory cache in the cloud.* Supports two open-source in-memory caching engines: Memcached and Redis* Automatically detects and replaces failed nodes

AWS Service Area:Service: Relational Database Service

* A web service to quickly provision and scale a database* Supports MySQL, Oracle, Microsoft SQL Server, or PostgreSQL* Automatically patches the database software and backs up your database according to a policy you set* Can be provisioned with General Purpose (SSD) Storage, Provisioned IOPS (SSD) Storage, or Magnetic Storage* Multi-AZ deployment option you can run mission critical workloads with high availability and built-in automated fail-over

AWS Service Area:Service: Redshift

* Fast, fully managed, petabyte-scale data warehouse solution* Analyze all your data using your existing business intelligence tools* Fast query performance by using columnar storage technology* Uses standard PostgreSQL JDBC and ODBC drivers* Automated most of the common administrative tasks* Backups to Amazon S3 are continuous, incremental and automatic.* Pay only for the resources you provision

AWS Service Area:Service: CloudFormation

* Create and manage a collection of related AWS resources* Ordering and dependencies automiatically handled* Deploy colleciton of resources using a 'template'. Templates can be re-used* Free. No additional charge to use.* Describe resource dependencies if needed* Pass special paraemters in at runtime* Template files are JSON-formatted text files* Publish progress of events using Amazon SNS

AWS Service Area:Service: CloudTrail

* A web service that records AWS API calls for your account * Can deliver log files via email* Captures API caller, time, source, rqst. parameters, and rsp. elements* Enables security analysis, change tracking, and compliance auditing.

AWS Service Area:Service: CloudWatch

* Monitoring service for AWS cloud resources* Collect and track metrics, collect and monitor log files, and set alarms.* Create custom metrics for YOUR application or service, and any log file * Free to monitor CPU, Data Transfer, and disk usage activity* Integrate with SNS to expand alarming capabilities

AWS Service Area:Service: Elastic Beanstalk

service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.upload your code and Elastic Beanstalk automatically handles the deployment you retain full control over the AWS resources powering your application and can access the underlying resources at any time. no additional charge for Elastic Beanstalk - you pay only for the AWS resources needed

AWS Service Area:Service: Identity and Access Management

* Control access to AWS services and resources for your users.* Create and manage AWS users and groups. Create roles.* Use permissions to allow and deny their access to AWS resources, and control which operations a user can perform.* Assign them individual security credentials (i.e., access keys, passwords, and multi-factor authentication devices)* Request temporary security credentials to provide users access to AWS services and resources.* Enable identity federation to allow existing identities (e.g. users)

AWS Service Area:Service: OpsWorks

AWS OpsWorks is a cloud application management servicecan define the application's architecture and the specification of each component including package installation, software configuration and resources such as storageautomation to scale your application based on time or load

AWS Service Area:Service: Trusted Advisor

AWS Trusted Advisor provides best practices in four categories:Cost OptimizationSecurityFault TolerancePerformance ImprovementYou can use over 40 Trusted Advisor checks to monitor and improve the deployment of Amazon EC2, Elastic Load Balancing, Amazon EBS, Amazon S3, Auto Scaling, AWS Identity and Access Management, Amazon RDS, Amazon Route 53, and other services. You can view the overall status of your AWS resources and savings estimations on the Trusted Advisor dashboard.

AWS Service Area:Service: Data Pipeline

a web service that helps you reliably process and move data between different AWS compute and storage services as well as on-premise data sources at specified intervalsaccess your data where it's stored, transform and process it at scale, and efficiently transfer the results to AWS services

AWS Service Area:Service: Elastic MapReduce

Amazon Elastic MapReduce (Amazon EMR) is a web service that makes it easy to quickly and cost-effectively process vast amounts of data.Amazon EMR uses Hadoop, an open source framework, to distribute your data and processing across a resizable cluster of Amazon EC2 instances. Amazon EMR is used in a variety of applications, including log analysis, web indexing, data warehousing, machine learning, financial analysis, scientific simulation, and bioinformatics.

AWS Service Area:Service: Kinesis

* Platform for streaming data on AWS* Load and analyze streaming data* Build custom streaming data applications for specialized needs

AWS Service Area:Service: Cognito

* Save mobile user data, such as app preferences or game state, in the AWS Cloud * No writing any backend code or managing any infrastructure* Offers mobile identity management and data synchronization across devices.* Save data locally on users' devices allowing your applications to work even when the devices are offline* Synchronize data across a user's devices so that their app experience will be consistent regardless of the device they use

AWS Service Area:Service: Mobile Analytics

With Amazon Mobile Analytics, you can measure app usage and app revenue. By tracking key trends such as new vs. returning users, app revenue, user retention, and custom in-app behavior events, you can make data-driven decisions to increase engagement and monetization for your app. You can view key charts in the Mobile Analytics console and automatically export your app event data to Amazon S3 and Amazon Redshift to run custom analysis. Amazon Mobile Analytics is free up to 100 million events per month and just $1 per million events thereafter.

AWS Service Area:Service: Simple Notification Service

* Fast, flexible, fully managed push messaging service* Notifications to Apple, Google, Fire OS, and Windows devices* Deliver notifications by SMS text message or email, to Amazon Simple Queue Service (SQS) queues, or to any HTTP endpoint.* All messages are stored redundantly across multiple availability zones* Publish a message once, and deliver it one or more times. * Direct unique messages to individual Apple, Google or Amazon devices, or* Broadcast deliveries to many mobile devices with a single publish request.* SNS allows you to group multiple recipients using topics. * A topic is an "access point" for allowing recipients to dynamically subscribe for identical copies of the same notification.* $1.00 to send one million notifications via push messaging.

AWS Service Area:Service: AppStream

* Stream your existing Windows applications from the cloud* Application will be deployed and rendered on AWS infrastructure and the output is streamed to mass-market devices (e.g. phones, tablets)* Scale computational and storage needs, regardless of the devices your customers are using * Use Amazon SDK for streaming your application from the cloud* Integrate your own custom clients, subscriptions, identity, and storage solution

AWS Service Area:Service: CloudSearch

Built for high throughput and low latency, Amazon CloudSearch supports a rich set of features including language-specific text processing for 34 languages, free text search, faceted search, geospatial search, customizable relevance ranking, highlighting, autocomplete and user configurable scaling and availability options.

AWS Service Area:Service: Elastic Transcoder

Amazon Elastic Transcoder is media transcoding in the cloud. It is designed to be a highly scalable, easy to use and a cost effective way for developers and businesses to convert (or "transcode") media files from their source format into versions that will playback on devices like smartphones, tablets and PCs.

AWS Service Area:Service: Amazon Simple Email Service (SES)

* Outbound-only email-sending service* Pay low charges for the number of emails sent, data transfer fees, and attachments.* Sending statistics and built-in notifications for bounces, complaints, and deliveries* Outgoing messages are stored redundantly across multiple servers and datacenters* Amazon SES takes proactive steps to maximize the percentage of your emails that arrive in your recipients' inboxes* Track your bounces, complaints, and deliveries with Amazon SNS and easily set up DKIM for any domain you manage via Amazon Route 53.

AWS Service Area:Service: Amazon Simple Queue Service (SQS)

* A fast, reliable, scalable, fully managed message queuing service.* Transmit any volume of data, at any level of throughput* Offload the administrative burden of operating a messaging cluster

AWS Service Area:Service: Amazon Simple Workflow

* Build, run, and scale background jobs that have parallel or sequential steps.* A fully-managed state tracker and task coordinator in the Cloud.* Separation between the control flow of your background job's stepwise logic and the actual units of work* Redundantly stores the tasks, reliably dispatches* Eliminates the need for developers to manage the infrastructure plumbing of process automation* Write your application components and coordination logic in any programming language

AWS Service Area:Service: WorkSpaces

Amazon WorkSpaces offers you an easy way to provide a managed, cloud-based desktop experience to your end-users. You don't have to worry about procuring or deploying hardware or installing complex software to deliver a desktop experience to your users. Amazon WorkSpaces takes care of all the heavy lifting of managing hardware and software, and tasks such as patching and maintenance, enabling you to deliver a high quality desktop experience to your users.

AWS Service Area:Service: Amazon WorkDocs

Amazon WorkDocs offers you an easy way to provide your end users with secure enterprise storage and sharing, with strong administrative controls and feedback capabilities that improve user productivity. As Amazon WorkDocs is a fully managed service, you don't have to worry about procuring hardware, installing and managing complex collaboration software, or deploying FTP servers or network file storage to deliver these benefits to your users. All you need to do is enable Amazon WorkDocs for your organization and invite your users.

AWS Service Area:Service: AWS Certificate Manager

* Deploy SSL/TLS certificates for use with AWS Services (e.x ELB, CloudFront)* Automatically renews certificates, if desired* Service is FREE* Key management is handled by Amazon using "best practices"

Scalable

S3 Storage

Amazon Glacier

low cost archive

Amazon Elastic Block Storage (EBS) (Beanstalk)

Persistent block storage for Amazon EC2 (raw). Note: s3 (alternative) is object based, files only.

Amazon EC2 Instance Storage

Temporary block storage

AWS Storage Gateway

On premises IT environment integration with cloud storage

Snowball

large data volume data transfer

Amazon Cloudfront

Global content deliverycan be used to deliver entire website dynamic static streaming and interactive content Using a global network of edge locations.

Cloud computing advantage - Money

- Trade capital expense for variable expense- Pay only when you consume resources- Pay only per how much you consume- min / sec / hr / GB /TB

Cloud computing advantage - Godzilla

- Benefit from massive economies of scale

Cloud computing advantage - Guess

- Stop guessing about capacity- scales to business needs- no long term contracts

Cloud computing advantage - The Flash

- scales infinitely with demand- Acloud guru was built in 3 weeks using serverless architecture

Cloud computing advantage - Samson

- focus on your strengths- let someone else manage infrastructure for you

Cloud computing advantage - Earth

- go global in minutes - deploy app in multiple regions around the world in a few clicks- lower cost - lower latency - better experience

Infrastructure As A Service (IAAS) - Amazon - Rackspace

- I manage the server and OS- Data provider has no access to server

Platform As A Service (PAAS) - GoDaddy

- Someone else manages H/W & S/W- I focus on my app- Someone else manages - security - patching - updates - maintenance

Software As A Service (SAAS) - Gmail

- I manage my inbox- Google takes care of everything else

Hybrid Cloud

Mixture of public and private

Private Cloud (On Premise)- Openstact-VMWare

Managed in your data center

Region

Geographical area - 2 or more Availability Zones

Availability Zones

Many data centers

Edge Location

CDN Endpoints for CloudfrontLocation where content will be cachedThis is separate from an AWS Region/AZ

Developer Support Plan

- $ 29 / Month- 12 / 24 Hour response

Business Support Plan

- $100 / month- 24 x 7 access- 1 hour response

Enterprise Support Plan

- 15K / Month- 15 minute response- Tam

Access AWS Platform in 3 ways

- Console- Command Line- SDK

Root Account

Email account you used to set up account

Root Account Features

- Full Admin Access- Do not give account credentials away- create user for each individual- use MFA to secure root account

Group

- Place to store users that inherit all permissions of the group - developers - sa's - hr

Group policy

Set up with JSON

JSON

Key Value Pairs- { "name" : "MikeMcMac1" } - between the brackets

S3 Bucket

Place to store objects- directory on a computer accessible from anywhere in the world - console - command line

S3 Unique Name Space

Each object has a unique name

S3 is object based

Files only

S3 suitability for OS

S3 is not suitable for installing operating systems

HTTP 200

successful S3 uploads result in this status code

SSL

Encrypt objects in transit to S3

REST

Encrypt object at REST

S3 data

Current

Glacier data

Archive3 - 5 Hour retrieval time

Bucket Policies

Restrict access to entire bucketyou can make entire s3 buckets public

ACL (Access Control Lists)

Restrict access to individual objects (files)

Transfer Acceleration

Upload files to edge locations and Amazon transfers the files, over there internal network, to buckets.

Bucket viewing

Globallyyou can also have buckets in individual regions

Universal Name Space

Names have to be uniqueYou can not have the same name as someone else

Private

Newly created buckets are private

Cross Region Replication

Replicate the contents on one bucket to another bucket automatically

The Fly

You can change the storage class and encryption level of your objects on the fly

ARN

Amazon Resource Name

Wordpress websites

requiring database connections can not be hosted on S3

S3 Scales to meet demand

orgs may place static websites on S3 when they anticipate large numbers of requests (for instance the Bond movie)

Cloudfront

Amazon's -CDN - Content Delivery Network

CDN

network (system of distributed servers) that deliver web pages and other web content to a user

Cloudfront content delivery factors (users)

Geographic locationOrigin of the webpageContent delivery server

Origin

origin of all the files that the CDN will distribute.

Origin Types

S3 BucketEC2 InstanceElastic Load BalancerRoute 53

Distribution

Name given to the CDN which consists of a collection of Edge Locations.

Cloudfront Requests

for content are automatically routed to the nearest edge location, so content is delivered with the best possible performance

Cloudfront with non-AWS origin servers

Seamlessnon-AWS servers that store original, definitive versions of your files.

Cloudfront Optimization

works with other AWS services - S3 - EC2 - Elastic Load Balancer - Route 53.

Cloudfront distribution types

Web Distribution - websitesRTMP - Used for Media Streaming

Amazon EC2

Amazon Elastic Cloud Compute

EC2

Web service that provides resizable compute capacity in the cloud

EC2 Advantage

reduces time required to obtain and boot new server instances in minutes allowing you to quickly scale capacity up or down as required

On Demand Instances

Allow you to pay a fixed rate by the hour (or by the second) with no commitment.

Reserved Instances

Provide you with a capacity reservation, and offers discount on the hourly charge for an instance. 1 Year or 3 Year terms

Spot instance

Enables you to bid whatever price you want for instance capacity, providing for even greater savings if your applications have flexible start and end times.

Dedicated Hosts

Physical EC2 server dedicated for your use. reduce costs by allowing you to use your existing server-bound software licenses.

On Demand scenario

Users that want the low cost and flexibility of Amazon EC2 without any up-front payment or long-term commitmentApplications with short term, spiky or unpredictable workloads that cannot be interruptedApplications being developed or tested on Amazon EC2 for the first time.

Reserved Scenario

Applications with steady state or predictable usageApplications that require reserved capacityUsers able to make upfront payments to reduce their total computing costs even furtherStandard RI's (Up to 75% off on demand)Convertible RI's (Up to 54% off on demand) capability to change the attributes of the RI as long as the exchange results in the creation of RI's of => ValueScheduled Ri's available to launch within the time window you reserve. This option allows you to match your capacity reservation to a predictable recurring schedule that only requires a fraction of a day, a week, or a month.

Spot Instance

Apps with flexible start and end timesApps that are only feasible at very low compute pricesUsers with urgent computing needs for large amounts of additional capacityPricing moves up and down all the time like the stock marketIf bid price is exceeded then computing stopsElseIf bid price is < = spot priceTHEN computing continues

Dedicated Hosts Instance

Useful for regulatory requirements that may not support multi-tenant virtualization.Great for licensing which does not support multi-tenacy or cloud deployments.Can be purchased On-Demand (hourly)Can be purchased as a Reservation for up to 70% off the On-Demand price.

Spot Pricing

If terminated by Amazon EC2 then you are not charged for partial hour usage.If you terminate the instance yourself, you are charged for any hour in which the instance ran.

D2

Dense StorageFileservers/Data Warehousing/Hadoop

R4

Memory OptimizedMemory Intensive Apps/DBs

M4

General PurposeApp Servers

C4

Compute OptimizedCPU Intensive Apps/DB's

G2

Graphics IntensiveVideo Encoding/3D Application Streaming

I2

High Speed StorageNoSQL DBs, Data Warehousing

F1

Field Programmable Gate ArrayHardware acceleration for your code.

T2

Lowest Cost, General PurposeWeb Servers/Small Dbs

P2

Graphics/General Purpose GPUMachine Learning, Bit Coin Mining etc

X1

Memory OptimizedSAP HANA/Apache Spark

EBS

Elastic Block Storageallows you to create storage volumes and attach them to Amazon EC2 instances.Once attached you can create a file system on top of these volumes.4:14

EC2

Compute based service

EC2 features

It is a server It is not serverless

EC2 connections

Private key

Security Groups

Virtual Firewalls

SSH

22

HTTP

80

HTTPS

443

RDP

3389

Cloud Computing

Cloud computing is the on-demand delivery of compute power, database storage, applications,and other IT resources through a cloud services platform via the Internet with pay-as-you-gopricing

6 advantages to cloud computing

1. trade capital expense for variable expense2. Economies of scale3. Stop guessing about capacity4. increase speed and agility5. stop spending money running data centers6. go global in minutes

IAAS

Infrastructure as a Service (IaaS) contains the basic building blocks for cloud IT and typicallyprovide access to networking features, computers (virtual or on dedicated hardware), and datastorage space. Highest level of flexibility and control

PaaS

Platform as a Service (PaaS) removes the need for your organization to manage the underlyinginfrastructure (usually hardware and operating systems) and allows you to focus on thedeployment and management of your applications.

SaaS

Software as a Service (SaaS) provides you with a completed product that is run and managedby the service provider. In most cases, people referring to Software as a Service are referringto end-user applications.

region

A Region is a physical location in the world where we have multiple AZs. Not connected to each other. Regions hold "availability zones".

AZs

AZs consist of one or more discretedata centers, each with redundant power, networking, and connectivity, housed in separatefacilities. These AZs offer you the ability to operate production applications and databases thatare more highly available, fault tolerant, and scalable than would be possible from a singledata center.

Benefits of AWS security

1. keep data safe2. meet compliance requirements3. save money4. scale quickly

AWS Cloud Compliance

AWS Cloud Compliance enables you to understand the robust controls in place at AWS tomaintain security and data protection in the cloud.Complies with: SOC 1/ISAE 3402, SOC 2, SOC 3 FISMA, DIACAP, and FedRAMP PCI DSS Level 1 ISO 9001, ISO 27001, ISO 27018

AWS Management Console

Access and manage Amazon Web Services through the AWS Management Console,9 a simpleand intuitive user interface. You can also use the AWS Console Mobile App to quickly viewresources on the go.10

AWS COmmand Line Interface

The AWS Command Line Interface (CLI) is a unified tool to manage your AWS services.11 Withjust one tool to download and configure, you can control multiple AWS services from thecommand line and automate them through scripts.

Software Development Kits

Our Software Development Kits (SDKs) simplify using AWS services in your applications with anApplication Program Interface (API) tailored to your programming language or platform.

Amazon EC2

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizablecompute capacity in the cloud. It is designed to make web-scale computing easier fordevelopers.e allows you to obtain and configure capacity withminimal friction. It provides you with complete control of your computing resources and letsyou run on Amazon's proven computing environment. Amazon EC2 reduces the time requiredto obtain and boot new server instances (called Amazon EC2 instances) to minutes, allowingyou to quickly scale capacity, both up and down, as your computing requirements change.Amazon EC2 changes the economics of computing by allowing you to pay only for capacity thatyou actually use. Amazon EC2 provides developers and system administrators the tools tobuild failure resilient applications and isolate themselves from common failure scenarios

Benefits to EC2

1. Elastic Web Scale Computing2. Completely Controlled3. Flexible Cloud Hosting Services4. Integrated (w/ S3, RDS, VPC)5. Reliable6. Secure ( works with VPC to provide security and networking functionality)7. Inexpensive

Dedicated Instances

You can provision your Amazon EC2 resources as Dedicated Instances.15 DedicatedInstances are Amazon EC2 instances that run on hardware dedicated to a singlecustomer for additional isolation.

Dedicated hosts

You can provision your Amazon EC2 resources on Dedicated Hosts, which are physicalservers with EC2 instance capacity fully dedicated to your use. Dedicated Hosts canhelp you address compliance requirements and reduce costs by allowing you to useyour existing server-bound software licenses.

EC2 Purchasing Options

1. On-demand Instances: With On-Demand instances, you pay for computecapacity by the hour with no long-term commitments. You can increase or decreaseyour compute capacity depending on the demands of your application and only paythe specified hourly rate for the instances you use. The use of On-Demand instancesfrees you from the costs and complexities of planning, purchasing, and maintaininghardware and transforms what are commonly large fixed costs into much smallervariable costs. On-Demand instances also remove the need to buy "safety net"capacity to handle periodic traffic spikes.2. Reserved Instances: Reserved Instances provide you with a significant discount(up to 75%) compared to On-Demand instance pricing.17 You have the flexibility tochange families, operating system types, and tenancies while benefitting fromReserved Instance pricing when you use Convertible Reserved Instances.3. Spot Instance:—Spot Instances allow you to bid on spare Amazon EC2 computingcapacity.18 Since Spot instances are often available at a discount compared to OnDemandpricing, you can significantly reduce the cost of running your applications,grow your application's compute capacity and throughput for the same budget, andenable new types of cloud computing applications.

Amazon EC2 Container Service

Amazon EC2 Container Service (ECS) is a highly scalable, high-performance containermanagement service that supports Docker containers.19 It allows you to easily run applicationson a managed cluster of Amazon EC2 instances. Amazon ECS eliminates the need for you toinstall, operate, and scale your own cluster management infrastructure. With simple API calls,you can launch and stop Docker-enabled applications, query the complete state of yourcluster, and access many familiar features like security groups, Elastic Load Balancing, AmazonElastic Block Store (Amazon EBS) volumes, and AWS Identity and Access Management (IAM)roles.

EC2 Container Registry

Amazon EC2 Container Registry (ECR) is a fully-managed Docker container registry that makesit easy for developers to store, manage, and deploy Docker container images.20 Amazon ECR isintegrated with Amazon EC2 Container Service (ECS), simplifying your development toproduction workflow. Amazon ECR eliminates the need to operate your own containerrepositories or worry about scaling the underlying infrastructure. Amazon ECR hosts yourimages in a highly available and scalable architecture, allowing you to reliably deploy containers for your applications. Integration with AWS Identity and Access Management (IAM)provides resource-level control of each repository. With Amazon ECR, there are no upfrontfees or commitments. You pay only for the amount of data you store in your repositories anddata transferred to the Internet

Amazon Lightsail

easiest way to launch and manage a virtual private server with AWS. Include: virtual machine, SSD based storage, data transfer, DNS management, and static IP address

AWS batch

allows for thousands of batch computing jobs on aws. Provisions optimal quantity and type of compute resources based on volume and resource requirements of batch jobs submitted. Plans, schedules, and executes batch computing across full range of AWWS compute services

aws elastic beanstalk

used for deploying and scaling web apps and services developed with Java, .NET, PHP, Node.js, Python, Ruby, GO and Dock on Apache, Nginx, Passenger, and IIS servers. Upload code and beanstalk handles deployment (capacity provisioning, load balancing, and auth scaling, and health monitoring)

aws lambda

AWS Lambda lets you run code without provisioning or managing servers. You pay only forthe compute time you consume—there is no charge when your code is not running.

Auto Scaling

Auto Scaling helps you maintain application availability and allows you to scale your AmazonEC2 capacity up or down automatically according to conditions that you define.

Compute

EC2, Lightsail, Beanstalk, Lambda, Auto Scaling

S3`

Amazon Simple Storage Service (Amazon S3) is object storage with a simple web serviceinterface to store and retrieve any amount of data from anywhere on the web.26 It is designedto deliver 99.999999999% durability, and scales past trillions of objects worldwide.easy to move large volumes of data

Features of S3

1. Simple (easy to integrate with third party tech)2. Durable: data redundantly stored3. Scalable4. Secure5. Available6. Low Cost7. Simple Data Transfer8. Integrated (with: AmazonCloudFront, Amazon CloudWatch, Amazon Kinesis, Amazon RDS, AmazonGlacier, Amazon EBS, Amazon DynamoDB, Amazon Redshift, Amazon Route53, Amazon EMR, Amazon VPC, Amazon Key Management Service (KMS), and AWSLambda.)9. Easy to manage

Elastic Block Store

Amazon Elastic Block Store (Amazon EBS) provides persistent block storage volumes for usewith Amazon EC2 instances in the AWS Cloud.29 Each Amazon EBS volume is automaticallyreplicated within its Availability Zone to protect you from component failure, offering highavailability and durability. Amazon EBS volumes offer the consistent and low-latencyperformance needed to run your workloads. With Amazon EBS, you can scale your usage up ordown within minutes—all while paying a low price for only what you provision.

EBS Features

High Performance Volumes: Choose between solid-state disk (SSD)-backed or harddisk drive (HDD)-backed volumes that can deliver the performance you need for yourmost demanding applications. Availability: Each Amazon EBS volume is designed for 99.999% availability andautomatically replicates within its Availability Zone to protect your applications fromcomponent failure. Encryption: Amazon EBS encryption provides seamless support for data-at-rest anddata-in-transit between EC2 instances and EBS volumes. Access Management: Amazon's flexible access control policies allow you to specifywho can access which EBS volumes ensuring secure access to your data. Snapshots: Protect your data by creating point-in-time snapshots of EBS volumes,which are backed up to Amazon S3 for long-term durability

Elastic File System

Amazon Elastic File System (Amazon EFS) provides simple, scalable file storage for use withAmazon EC2 instances in the AWS Cloud.30 Amazon EFS is easy to use and offers a simpleinterface that allows you to create and configure file systems quickly and easily. With AmazonEFS, storage capacity is elastic, growing and shrinking automatically as you add and removefiles, so your applications have the storage they need, when they need it.multiple EC2 instances can access file and same time

Amazon Glacier

Amazon Glacier is a secure, durable, and extremely low-cost storage service for data archivingand long-term backup.31 You can reliably store large or small amounts of data for as little as$0.004 per gigabyte per month, a significant savings compared to on-premises solutions. Tokeep costs low yet suitable for varying retrieval needs, Amazon Glacier provides three optionsfor access to archives, from a few minutes to several hours.

AWS Storage Gateway

The AWS Storage Gateway service seamlessly enables hybrid storage between on-premisesstorage environments and the AWS Cloud.32 It combines a multi-protocol storage appliancewith highly efficient network connectivity to Amazon cloud storage services, delivering localperformance with virtually unlimited scale. You can use it in remote offices and data centersfor hybrid cloud workloads involving migration, bursting, and storage tiering.

Start DB: Amazon Aurora

Amazon Aurora is a MySQL and PostgreSQL compatible relational database engine thatcombines the speed and availability of high-end commercial databases with the simplicity andcost-effectiveness of open source databases.33 Amazon Aurora provides up to five times betterperformance than MySQL with the security, availability, and reliability of a commercialdatabase at one tenth the cost.

Benefits of Aurora

High Performance: Amazon Aurora provides 5 times the throughput of standardMySQL or twice the throughput of standard PostgreSQL running on the samehardware. This consistent performance is on par with commercial databases, at onetenthof the cost. On the largest Amazon Aurora instance, you can achieve up to500,000 reads and 100,000 writes per second. You can further scale read operationsusing read replicas that have very low 10 ms latency. Highly Secure: Amazon Aurora provides multiple levels of security for your database.These include network isolation using Amazon VPC, encryption at rest using keys youcreate and control through AWS Key Management Service (KMS), and encryption ofdata in transit using SSL. On an encrypted Amazon Aurora instance, data in theunderlying storage is encrypted, as are the automated backups, snapshots, andreplicas in the same cluster. MySQL and PostgreSQL Compatible: The Amazon Aurora database engine is fullycompatible with MySQL 5.6 using the InnoDB storage engine. This means the code,applications, drivers, and tools you already use with your MySQL databases can beused with Amazon Aurora with little or no change. This also allows for easy migrationof existing MySQL databases using standard MySQL import and export tools or usingMySQL binlog replication. We're now previewing PostgreSQL compatible AmazonAurora database instances, supporting the SQL dialect and functionality of PostgreSQL9.6. Highly Scalable: You can scale your Amazon Aurora database from an instance with 2vCPUs and 4 GiB of memory up to an instance with 32 vCPUs and 244 GiB of memory.You can also add up to 15 low latency read replicas across three Availability Zones tofurther scale read capacity. Amazon Aurora automatically grows storage as needed,from 10 GB up to 64 TB. High Availability and Durability: Amazon Aurora is designed to offer greater than99.99% availability. Recovery from physical storage failures is transparent, andinstance failover typically requires less than 30 seconds. Amazon Aurora's storage is Amazon Web Services - Overview of Amazon Web ServicesPage 15fault-tolerant and self-healing. Six copies of your data are replicated across threeAvailability Zones and continuously backed up to Amazon S3. Fully Managed: Amazon Aurora is a fully managed database service. You no longerneed to worry about database management tasks such as hardware provisioning,software patching, setup, configuration, monitoring, or backups. Amazon Auroraautomatically and continuously monitors and backs up your database to S3, enablinggranular point-in-time recovery.

Amazon RDS

Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scalea relational database in the cloud.34, 35 It provides cost-efficient and resizable capacity whilemanaging time-consuming database administration tasks, freeing you up to focus on yourapplications and business. Amazon RDS provides you six familiar database engines to choosefrom, including Amazon Aurora, PostgreSQL,36 MySQL,37 MariaDB,38 Oracle,39 and MicrosoftSQL Server.

Benefits to RDS

Fast and Easy to Administer: Amazon RDS makes it easy to go from projectconception to deployment. Use the AWS Management Console, the AWS RDSCommand Line Interface, or simple API calls to access the capabilities of a productionreadyrelational database in minutes. No need for infrastructure provisioning, and noneed for installing and maintaining database software. Highly Scalable: You can scale your database's compute and storage resources withonly a few mouse clicks or an API call, often with no downtime. Many Amazon RDSengine types allow you to launch one or more Read Replicas to offload read trafficfrom your primary database instance. Available and Durable: Amazon RDS runs on the same highly reliable infrastructureused by other Amazon Web Services. When you provision a Multi-AZ DB instance,Amazon RDS synchronously replicates the data to a standby instance in a differentAvailability Zone (AZ). Amazon RDS has many other features that enhance reliabilityfor critical production databases, including automated backups, database snapshots,and automatic host replacement. Secure: Amazon RDS makes it easy to control network access to your database.Amazon RDS also lets you run your database instances in Amazon VPC, which enablesyou to isolate your database instances and to connect to your existing ITinfrastructure through an industry-standard encrypted IPsec VPN. Many Amazon RDSengine types offer encryption at rest and encryption in transit. Inexpensive: You pay very low rates and only for the resources you actually consume.In addition, you benefit from the option of On-Demand pricing with no up-front or Amazon Web Services - Overview of Amazon Web ServicesPage 16long-term commitments, or even lower hourly rates using our Reserved Instance pricing

Amazon Dynamo DB

Amazon DynamoDB is a fast and flexible NoSQL database service for all applications that needconsistent, single-digit millisecond latency at any scale.41 It is a fully managed database andsupports both document and key-value data models. Its flexible data model and reliableperformance make it a great fit for mobile, web, gaming, ad-tech, Internet of Things (IoT), andmany other applications.

Benefits of Dynamo DB

Fast, Consistent Performance: Amazon DynamoDB is designed to deliver consistent,fast performance at any scale for all applications. Average service-side latencies aretypically single-digit milliseconds. As your data volumes grow and applicationperformance demands increase, Amazon DynamoDB uses automatic partitioning andSSD technologies to meet your throughput requirements and deliver low latencies atany scale. Highly Scalable: When you create a table, simply specify how much request capacityyou require. If your throughput requirements change, simply update your table'srequest capacity using the AWS Management Console or the Amazon DynamoDBAPIs. Amazon DynamoDB manages all the scaling behind the scenes, and you are stillable to achieve your prior throughput levels while scaling is underway. Fully Managed: Amazon DynamoDB is a fully managed cloud NoSQL database service.You simply create a database table, set your throughput, and let the service handlethe rest. You no longer need to worry about database management tasks such ashardware or software provisioning, setup and configuration, software patching,operating a reliable, distributed database cluster, or partitioning data over multipleinstances as you scale. Event-Driven Programming: Amazon DynamoDB integrates with AWS Lambda toprovide Triggers that enable you to architect applications that automatically react todata changes. Fine-grained Access Control: Amazon DynamoDB integrates with AWS IAM for finegrainedaccess control for users within your organization. You can assign uniquesecurity credentials to each user and control each user's access to services andresources. Flexible: Amazon DynamoDB supports both document and key-value data structures,giving you the flexibility to design the best architecture that is optimal for your application

Amazon ElastiCache

Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an inmemorycache in the cloud.42 The service improves the performance of web applications byallowing you to retrieve information from fast, managed, in-memory caches, instead of relyingentirely on slower disk-based databases.

Amazon ElastiCache Supports TWo open source in memory caching engines

1. Redis (Iot, Mobile apps)2. Memcached (memory object caching system)

AWS Application Discovery

AWS Application Discovery Service helps systems integrators quickly and reliably planapplication migration projects by automatically identifying applications running in on-premisesdata centers, their associated dependencies, and their performance profiles.

AWS Database Migration Service

AWS Database Migration Service helps you migrate databases to AWS easily and securely.47The source database remains fully operational during the migration, minimizing downtime toapplications that rely on the database. The AWS Database Migration Service can migrate your Amazon Web Services - Overview of Amazon Web ServicesPage 18data to and from most widely used commercial and open-source databases. The servicesupports homogenous migrations such as Oracle to Oracle, as well as heterogeneousmigrations between different database platforms, such as Oracle to Amazon Aurora orMicrosoft SQL Server to MySQL. It also allows you to stream data to Amazon Redshift from anyof the supported sources including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, SAPASE, and SQL Server, enabling consolidation and easy analysis of data in the petabyte-scaledata warehouse. AWS Database Migration Service can also be used for continuous datareplication with high availability

AWS Server Migration Service

agentless service for migrating thouands of on-premise workloads to aws. SMS allows for automation, scheduling, and tracking replications of live server volumes

AWS Snowball

AWS Snowball is a petabyte-scale data transport solution that uses secure appliances totransfer large amounts of data into and out of AWSaddress common challenges of large transfer: high network costs, long transfer times, and security concerns

AWS snowball edge

AWS Snowball Edge is a 100 TB data transfer device with on-board storage and computecapabilities.50 You can use Snowball Edge to move large amounts of data into and out of AWS, as a temporary storage tier for large local datasets, or to support local workloads in remote oroffline locations

AWS snowmobile

AWS Snowmobile is an exabyte-scale data transfer service used to move extremely largeamounts of data to AWSup to 100 PB per snowmobile

Amazon VPC

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section ofthe AWS Cloud where you can launch AWS resources in a virtual network that you define.Complete control over environment (IP address range, creation of subnets, and configuration of route tables and network gatewayscan use IPv4 or IPv6

Amazon CloudFront

Amazon CloudFront is a global content delivery network (CDN) service that acceleratesdelivery of your websites, APIs, video content, or other web assets.53 It integrates with otherAWS products to give developers and businesses an easy way to accelerate content to endusers with no minimum usage commitments.Requests for yourcontent are automatically routed to the nearest edge location, so content is delivered with thebest possible performance.works with : s3, EC2, Elastic Load Balancing, and Route 53pay for what use

Amazon Route 53

Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) webservice.54 It is designed to give developers and businesses an extremely reliable and costeffectiveway to route end users to Internet applications by translating human readablenames, such as www.example.com, into the numeric IP addresses, such as 192.0.2.1, thatcomputers use to connect to each other. Amazon Route 53 is fully compliant with IPv6 as welleasy to manage traffic

AWS Direct Connect

AWS Direct Connect makes it easy to establish a dedicated network connection from yourpremises to AWS.55 Using AWS Direct Connect, you can establish private connectivity betweenAWS and your data center, office, or co-location environment, which in many cases can reduceyour network costs, increase bandwidth throughput, and provide a more consistent networkexperience than Internet-based connections

Elastic Load Balancing (ELB)

Elastic Load Balancing (ELB) automatically distributes incoming application traffic acrossmultiple EC2 instances.56 It enables you to achieve greater levels of fault tolerance in yourapplications, seamlessly providing the required amount of load balancing capacity needed todistribute application traffic2 types w/ high availability, auto scaling, and security:1. CLassic load balancer: routes traffic based on app or network level info2. Application Load Balancer: routes traffic based on advanced application level info (more advanced)

AWS CodeCommit

AWS CodeCommit is a fully managed source control service that makes it easy for companiesto host secure and highly scalable private Git repositories.59 AWS CodeCommit eliminates theneed to operate your own source control system or worry about scaling its infrastructure. Youcan use AWS CodeCommit to securely store anything from source code to binaries, and itworks seamlessly with your existing Git tools

AWS CodeBuild

AWS CodeBuild is a fully managed build service that compiles source code, runs tests, andproduces software packages that are ready to deploy.60 With CodeBuild, you don't need toprovision, manage, and scale your own build servers. CodeBuild scales continuously andprocesses multiple builds concurrently, so your builds are not left waiting in a queue. You canget started quickly by using prepackaged build environments, or you can create custom buildenvironments that use your own build tools

AWS CodeDeploy

AWS CodeDeploy is a service that automates code deployments to any instance, including EC2instances and instances running on premises.61 AWS CodeDeploy makes it easier for you torapidly release new features, helps you avoid downtime during application deployment, andhandles the complexity of updating your applications. You can use AWS CodeDeploy toautomate software deployments, eliminating the need for error-prone manual operations.The service scales with your infrastructure so you can easily deploy to one instance orthousands

AWS CodePipeline

AWS CodePipeline is a continuous integration and continuous delivery service for fast andreliable application and infrastructure updates.62 CodePipeline builds, tests, and deploys yourcode every time there is a code change, based on the release process models you define. Thisenables you to rapidly and reliably deliver features and updates. You can easily build out anend-to-end solution by using our pre-built plugins for popular third-party services like GitHubor by integrating your own custom plugins into any stage of your release process.

AWS x-ray

AWS X-Ray helps developers analyze and debug distributed applications in production orunder development, such as those built using a microservices architecture.

Amazon CloudWatch

Amazon CloudWatch is a monitoring service for AWS Cloud resources and the applications yourun on AWS.64 You can use Amazon CloudWatch to collect and track metrics, collect andmonitor log files, set alarms, and automatically react to changes in your AWS resources. can monitor: Ec2 instances, dynamoDB tables, and RDS DB instances You can use AmazonCloudWatch to gain system-wide visibility into resource utilization, application performance,and operational health

EC2 systems manager

a management service that helps you automatically collectsoftware inventory, apply operating system (OS) patches, create system images, and configureWindows and Linux operating systems

EC2 System Manager tools

1. run command (software updates, scripts)2. State Manager (firewall and malware settings)3. Inventory (collect and query config info)4. Maintenance window5. Patch Manager6. automation7. Parameter Store (stores passwords)

AWS CloudFormation

AWS CloudFormation gives developers and systems administrators an easy way to create andmanage a collection of related AWS resources, provisioning and updating them in an orderlyand predictable fashion

AWS CloudTrail

AWS CloudTrail is a web service that records AWS API calls for your account and delivers logfiles to yourecorded info: id API caller, time of API call, source of IP address, request parameters, response elements

AWS Config

AWS Config is a fully managed service that provides you with an AWS resource inventory,configuration history, and configuration change notifications to enable security andgovernanc

AWS OpsWorks

AWS OpsWorks is a configuration management service that uses Chef, an automation platformthat treats server configurations as code.71 OpsWorks uses Chef to automate how servers areconfigured, deployed, and managed across your EC2 instances or on-premises computeenvironments. OpsWorks has two offerings, AWS OpsWorks for Chef Automate and AWSOpsWorks Stacks

AWS Service Catalog

AWS Service Catalog allows organizations to create and manage catalogs of IT services that areapproved for use on AWS

AWS Trusted Advisor

AWS Trusted Advisor is an online resource to help you reduce cost, increase performance, andimprove security by optimizing your AWS environment.73 Trusted Advisor provides real-timeguidance to help you provision your resources following AWS best practices

AWS Personal Health Dashboard

AWS Personal Health Dashboard provides alerts and remediation guidance when AWS isexperiencing events that might affect you

AWS Managed Services

AWS Managed Services provides ongoing management of your AWS infrastructure so you canfocus on your applications.75 By implementing best practices to maintain your infrastructure,AWS Managed Services helps to reduce your operational overhead and risk. AWS ManagedServices automates common activities such as change requests, monitoring, patchmanagement, security, and backup services, and provides full-lifecycle services to provision,run, and support your infrastructure.

Amazon Cloud Directory

Amazon Cloud Directory enables you to build flexible, cloud-native directories for organizinghierarchies of data along multiple dimensions.

AWS Identify and Access Management

AWS Identity and Access Management (IAM) enables you to securely control access to AWSservices and resources for your usersAllows for: Manage IAM users and their access, Manaage IAM roles and permissions, Manage federated users and their permissions

Amazon Inspector

Amazon Inspector is an automated security assessment service that helps improve the securityand compliance of applications deployed on AWS

AWS Certificate Manager

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy SecureSockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services

AWS CloudHSM

The AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliancerequirements for data security by using dedicated Hardware Security Module (HSM)appliances within the AWS Cloudsecuring encryption keys

AWS Directory Service

AWS Directory Service for Microsoft Active Directory (Enterprise Edition), also known as AWSMicrosoft AD, enables your directory-aware workloads and AWS resources to use managedActive Directory in the AWS Cloud

AWS Key Management Service

AWS Key Management Service (KMS) is a managed service that makes it easy for you to createand control the encryption keys used to encrypt your data

AWS Organization

AWS Organizations allows you to create groups of AWS accounts that you can use to moreeasily manage security and automation settings

AWS SHield

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service thatsafeguards web applications running on AWSstandard and advanced

AWS WAF

AWS WAF is a web application firewall that helps protect your web applications from commonweb exploits that could affect application availability, compromise security, or consumeexcessive resources

Amazon Athena

Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3using standard SQLserverlesspay for only the queries you run

Amazon EMR

Amazon EMR provides a managed Hadoop framework that makes it easy, fast, and costeffectiveto process vast amounts of data across dynamically scalable EC2 instances.

Amazon CloudSearch

Amazon CloudSearch is a managed service in the AWS Cloud that makes it simple and costeffectiveto set up, manage, and scale a search solution for your website or applicationAmazon CloudSearch supports 34 languages and popular search features such as highlighting,autocomplete, and geospatial search.

Amazon EasticSearch Service

Amazon Elasticsearch Service makes it easy to deploy, operate, and scale Elasticsearch for loganalytics, full text search, application monitoring, and more.97 Amazon Elasticsearch Service isa fully managed service that delivers Elasticsearch's easy-to-use APIs and real-time capabilitiesalong with the availability, scalability, and security required by production workloads

Amazon Kinesis

Amazon Kinesis is a platform for streaming data on AWS, offering powerful services to make iteasy to load and analyze streaming data, and also providing the ability for you to build customstreaming data applications for specialized needsthree services: firehose, analytics, streams

Amazon Kinesis Firehose

Amazon Kinesis Firehose is the easiest way to load streaming data into AWS.99 It can capture,transform, and load streaming data into Amazon Kinesis Analytics, Amazon S3, AmazonRedshift, and Amazon Elasticsearch Service, enabling near real-time analytics with existingbusiness intelligence tools and dashboards you're already using today

Amazon Kinesis Analytics

Amazon Kinesis Analytics is the easiest way to process streaming data in real time withstandard SQL without having to learn new programming languages or processingframeworks

Amazon Kinesis Streams

you to build custom applications that process or analyzestreaming data for specialized needscan emit data to: s3, reshift, EMR, Lambda

Amazon Redshift

Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse that makes it simpleand cost-effective to analyze all your data using your existing business intelligence tools.0.25/hr 1,000/tb/year

Amazon QuickSight

Amazon QuickSight is a fast, cloud-powered business analytics service that makes it easy tobuild visualizations, perform ad-hoc analysis, and quickly get business insights from yourdata

AWS Data Pipeline

AWS Data Pipeline is a web service that helps you reliably process and move data betweendifferent AWS compute and storage services, as well as on-premises data sources, at specifiedintervalstransfer results to: s3, rds, dynamoDB, EMR

AWS Glue

AWS Glue is a fully managed ETL service that makes it easy to move data between your datastores.105 AWS Glue simplifies and automates the difficult and time-consuming tasks of datadiscovery, conversion, mapping, and job scheduling. AWS Glue guides you through the processof moving your data with an easy-to-use console that helps you understand your data sources,prepare the data for analytics, and load it reliably from data sources to destinations.integrated with s3, RDS, REdshift, connects with Java DB

Amazon Lex

Amazon Lex is a service for building conversational interfaces into any application using voiceand text

Amazon Polly

Amazon Polly is a service that turns text into lifelike speech.

Amazon Rekognition

Amazon Rekognition is a service that makes it easy to add image analysis to yourapplications.108 With Rekognition, you can detect objects, scenes, and faces in images. You canalso search and compare faces.

Amazon Machine Learning

Amazon Machine Learning (Amazon ML) is a service that makes it easy for developers of allskill levels to use machine learning technology

AWS Mobile Hub

AWS Mobile Hub provides an integrated console experience that you can use to quickly createand configure powerful mobile app backend features and integrate them into your mobileapp.Features include: App Analytics App Content Delivery Cloud Logic NoSQL Database Push Notifications User Data Storage User Sign-in Connectors Conversational Bots User Engagement

Amazon Cognito

Amazon Cognito lets you easily add user sign-up and sign-in to your mobile and web apps

Amazon Pinpoint

Amazon Pinpoint makes it easy to run targeted campaigns to drive user engagement in mobileapps.112 Amazon Pinpoint helps you understand user behavior, define which users to target,determine which messages to send, schedule the best time to deliver the messages, and thentrack the results of your campaign.

AWS Device Farm

AWS Device Farm is an app testing service that lets you test and interact with your Android,iOS, and web apps on many devices at once, or reproduce issues on a device in real time.1

AWS Mobile SDK

The AWS Mobile SDK helps you build high quality mobile apps quickly and easily.114 It provideseasy access to a range of AWS services, including AWS Lambda, Amazon S3, AmazonDynamoDB, Amazon Mobile Analytics, Amazon Machine Learning, Elastic Load Balancing, AutoScaling,

AMazon Mobile Analytics

can measure app usage and app revenue

AWS Step Functions

makes it easy to coordinate the components of distributed applicationsand microservices using visual workflows

Amazon API Gateway

Amazon API Gateway is a fully managed service that makes it easy for developers to create,publish, maintain, monitor, and secure APIs at any scale

Types of plans

Basic, Developer, Business, & EnterpriseDeveloper Support Plan- $ 29 / Month- 12 / 24 Hour responseBusiness Support Plan- $100 / month- 24 x 7 access- 1 hour responseEnterprise Support Plan- 15K / Month- 15 minute response- Tam

AWS Access

Select Programmatic access if the users require access to the API, AWS CLI, or Tools for Windows PowerShell. This creates an access key for each new user. You can view or download the access keys when you get to the Final page.Select AWS Management Console access if the users require access to the AWS Management Console. This creates a password for each new user.Console access via SDK

True or False: Transfer Acceleration uses AWS' network of Availability Zones to more quickly get your data into AWS.

False - S3 Transfer Acceleration uses AWS' network of Edge Locations to more quickly get your data into AWS.

True or False: A Distribution is what we call a series of Edge Locations that make up CDN.

True - The collection of a CDN's Edge Locations is called a Distribution

True or False: A CloudFront Origin can be an S3 bucket, an EC2 instance, an Elastic Load Balancer, or Route53.

True - A CloudFront Origin can be an S3 bucket, an EC2 instance, an ELB or Route53

True or False: There are more regions than there are Availability Zones.

False - There are at least 2 availability zones per AWS Region. There will always be more AZs than Regions

True or False: To restrict access to an entire bucket, you use bucket control lists; and to restrict access to an individual object, you use object policies.

False - To restrict access to an entire bucket you use bucket policies and to restrict access to an individual object, you use access control lists.

True or False: Access Control Lists are used to make entire buckets (like one hosting an S3 website) public.

False - Bucket policies are used to make entire buckets (like one hosting an S3 website) public.

Which of the following AWS Support levels offers 24x7 support via phone or chat?A. BasicB. IndividualC. DeveloperD. Business

D - The Business and Enterprise support plans offer 24x7 support via phone or chat

True or False: Objects stored in S3 are stored in a single, central location within AWS.

False - Objects stored in S3 are stored in multiple servers in multiple facilities across AWS.

True or False: Both you and a friend can have an S3 bucket called my test bucket.

False - S3 bucket names are global and must be unique.

AWS Shield

AWS Service offers you basic free DDOS protection

What is the main benefit of designing application components that are decoupled?

Reduce dependencies between components of an application

Cross-Region Replication

to replicate the contents of a bucket from one region to another

AWS Total Cost of Ownership (TCO) Calculator

can help you compare your on-premises IT Infrastructure costs with AWS

Real-Time Messaging Protocol (RTMP)

can stream media files using Adobe Media Server via the Adobe

On-Demand Instances

You pay for compute capacity by the hour with no long-term commitments.

Reserved Instances

Provide you with a significant discount (up to 75%) compared to On-Demand instance pricing.

Spot Instances

Allow you to bid on spare Amazon EC2 computingcapacity

Multi-AZ DB instance

Amazon RDS synchronously replicates the data to a standby instance in a different Availability Zone (AZ).

What is AWS CloudFormation?

AWS CloudFormation provides the sysadmin, network architect, and other IT personnel the ability to provision and manage stacks of AWS resources based on templates you create to model your infrastructure architecture.

Elastic Compute Cloud - EC2

A web service that provides resizable computing capacity in the cloud.

What is the charge for in-bound data transfer across all Amazon Web Services in all regions?

There is no charge for in-bound data transfer across all AWS services in all regions.

Which Amazon Services are offered at no-charge?

Amazon VPCAmazon BeanstalkAmazon CloudFormationAmazon IAMAmazon Auto-ScalingAmazon OpsWorks

What is a Spot Instance?

Spot instances are spare EC2 capacity that can save you up 90% off of On-Demand prices that AWS can interrupt with a 2-minute notification. Spot uses the same underlying EC2 instances as On-Demand and Reserved Instances, and is best suited for fault-tolerant, flexible workloads.

What is Amazon S3?

Amazon S3 is storage for the Internet. It provides a simple web interface that offers a highly-scalable, reliable, and low-latency data storage infrastructure at very low costs.

What is the largest object size that can be uploaded in S3 with a single PUT command?

The largest object that can be uploaded in a single PUT is 5 gigabytes.

What storage classes does Amazon S3 offer?

Amazon S3 Standard for general-purpose storage of frequently accessed data Amazon S3 Standard - Infrequent Access for long-lived, but less frequently accessed dataAmazon Glacier for long-term archive

What is Reduced Redundancy Storage?

Reduced Redundancy Storage (RRS) is an Amazon S3 storage option that enables customers to reduce their costs by storing noncritical, reproducible data at lower levels of redundancy than Amazon S3's standard storage.

What factors are taken in account to estimate S3 storage charges?

Storage Class, storage (the number and size of objects stored in your S3 bucket), requests (the number and type of requests), and data transfer(the amount of data transferred out of the S3 region) are factors that should be considered to estimate S3 charges.

Elastic Block Storage (EBS)

Block level storage volumes for use with EC2 instances

What are the Benefits of AWS EBS?

- Reliable and Secure Storage- Consistent Low Latency Performance- Long-term durability of data - point in time snapshots-Scale up/down quickly-Geographic Flexibility- Optimized Performance

What EBS storage is available in the free-tier for the 1st year?

30 GB of Amazon Elastic Block Storage in any combination of General Purpose (SSD) or Magnetic, plus 2 million I/Os (with EBS Magnetic) and 1 GB of snapshot storage*

What is the Amazon RDS?

RDS - Relational Database Service is a web service that makes it easy to setup, operate, and scale a relational database in the cloud. It takes away the time consuming tasks of hardware-provisioning, setup, patching, and backups so you can focus on your applications.

Which database engines are available in the AWS RDS?

Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, and Microsoft SQL Server are available in the AWS RDS.

What does Amazon manage on my behalf for RDS?

*Provisioning Infrastructure Capacity, Installing Software, replication of db across multiple AZ's (mult-AZ deployment), backups, patching software, and failovers are managed on behalf of RDS users.

What is the difference between using RDS and running an EC2 instance with a RDB installed?

The difference in these deployments is that you manage your own database in the cloud.

How is the use of AWS RDS billed?

* Database instance hours* Storage (amount of data stored in GB)* Number of Input/output Requests* Provisioned IOPS rate regardless of what is consumed.* Backup Storage* Data Transfer (Out)

True/False: The Free Tier Usage for RDS includes a multi-AZ deployment.

False. The AWS Free-Tier for RDS is a single AZ deployment.

How many instance hours are included in the AWS RDS free-tier account in the 1st year?

750 instance-hours of RDS is available in the free-tier in the 1st year as well as 20 GB of SSD general purpose storage and 20 GB of backup storage free per month.

What is the basic pricing philosophy for AWS services?

*Pay as you go*Pay for what you use*Pay less as you use more*Pay even less when you reserve capacity

What is AWS Elastic Beanstalk?

AWS Elastic Beanstalk is a service for deploying and scaling web application and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go and Docker on web servers such as Apache, Nginx, Passenger, and IIS.

How do you get started with AWS Elastic Beanstalk?

To get started with Beanstalk, you can use the management console, the command-line interface, or APIs.

What does AWS Beanstalk Manage for the User?

AWS Beanstalk manages for the user:- Load Balancing- Provisioning- Application Health Monitoring- Auto Scaling

What is AWS CloudFormation?

AWS CloudFormation provides the sysadmin, network architect, and other IT personnel the ability to PROVISION AND MANAGE STACKS OF RESOURCES based on TEMPLATES you create to model your infrastructure architecture.

What is AWS CodeCommit?

AWS CodeCommit is a highly available, highly scalable managed SOURCE-CONTROL service that hosts private Git repositories.

What is Amazon Inspector

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

What is AWS Snowball?

Snowball is a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of the AWS cloud.

AWS Consulting Partners

can be leveraged if you don't have the in-house resources

Consolidated billing

an option, can set up multiple accounts if needed

s3 transfer acceleration

Amazon S3 Transfer Acceleration is a bucket-level feature that enables faster data transfers to and from Amazon S3

aws iam api

AWS Identity and Access Management (IAM) is a web service that you can use to manage users and user permissions under your AWS account. This guide provides descriptions of IAM actions that you can call programmatically. For general information about IAM

Amazon Simple Notification Service (SNS)

Amazon Simple Notification ServiceAmazon Simple Notification Service is a notification service provided as part of Amazon Web Services since 2010. It provides a low-cost infrastructure for the mass delivery of messages, predominantly to mobile users. You can use Amazon SNS to send text messages, or SMS messages, to SMS-enabled devices. You can send a message directly to a phone number, or you can send a message to multiple phone numbers at once by subscribing those phone numbers to a topic and sending your message to the topic.