Akamai Cloud Computing Foundations flashcards
Akamai Cloud Computing Foundations · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Infrastructure as a Service
- Cloud model where the provider supplies virtualized compute, storage, and network, while the customer manages the operating system, middleware, runtime, and application layers on top.
- Shared responsibility model
- The provider secures physical data centers, hardware, and hypervisor; the customer secures guest OS patching, application code, identities, access rules, and data.
- Region and data center
- Akamai cloud resources are deployed into a specific data center within a region; instances, volumes, and NodeBalancers cannot span data centers.
- Vertical scaling
- Increasing a single instance's plan size with more vCPU, RAM, and disk; on Akamai this requires a shutdown and reboot, and disk space cannot shrink below used data.
- Horizontal scaling
- Adding more instances and distributing traffic with a NodeBalancer or DNS; this suits stateless application tiers and provides redundancy across data centers.
- Uptime SLA
- Akamai's 99.99% uptime commitment for eligible services; credits are requested through a support ticket rather than applied automatically to the account.
- Nanode
- Smallest shared-CPU plan entry, giving 1 vCPU, 1 GB RAM, 25 GB storage, and 1 TB transfer at the lowest monthly price in the lineup.
- Dedicated CPU plan
- Plan family where physical CPU cores are reserved exclusively for the instance; used for sustained, latency-sensitive workloads that shared CPU plans may throttle.
- Block Storage volume
- Network-attached disk that attaches to exactly one Linode at a time, must reside in the same data center, and can be detached, reattached, or cloned.
- Object Storage bucket
- S3-compatible container for unstructured data accessed over HTTP API with access and secret keys; storage is billed per GB-month separately from compute.
- Custom Image
- A saved copy of an instance's disk that can deploy new Linodes with identical software; captured through Cloud Manager, the API, or the CLI.
- StackScript
- Boot-time script with user-defined fields that automates first-boot configuration, is reusable across deployments, and can be shared within the account.
- Managed Database
- Database service where Akamai runs the engine, replication, failover, and backups; the customer has no OS or root access to the nodes.
- NodeBalancer
- Managed regional load balancer offering TCP and HTTP/HTTPS modes, health checks, TLS termination, session stickiness, and configurable balancing algorithms.
- VPC
- Region-scoped private network with user-defined subnets that isolates traffic among your own resources, separate from the public internet and other accounts.
- VLAN
- Layer 2 network inside a single data center that instances join by adding a network interface; traffic stays private and is not billed as transfer.
- Cloud Firewall
- Stateful packet filter attached to Linodes or NodeBalancers; inbound traffic is denied by default until rules allow specific ports and source ranges.
- Private IP
- Address in a non-routable range used for traffic between instances in the same data center; such traffic does not count against the transfer allowance.
- Network transfer pool
- Monthly outbound data allowance pooled across all billable services in an account; usage beyond the pooled amount is billed per gigabyte.
- Restricted user
- Account user whose access is limited by explicit grants, choosing read-only or read-write on specific Linodes, volumes, domains, or other resources.
- Personal access token
- Scoped API credential with configurable expiry and read/write permissions; used by the API, CLI, and integrations, and revoked independently of the account password.
- Two-factor authentication
- Second verification step for Cloud Manager logins; the account owner can enforce it for every user on the account.
- SSH key pair
- Public key stored on the instance at deploy time; the private key proves identity, so deployments can skip setting a root password.
- Object Storage access key
- Credential pair used to sign S3 API requests to buckets; it is distinct from the account login and revocable without changing the password.
- Least privilege
- Granting users, tokens, and firewall rules only the permissions needed for their task, reducing blast radius if a credential or host is compromised.
- API v4
- REST and JSON interface authenticated with bearer tokens that powers Cloud Manager, the CLI, and Terraform; every UI action maps to an API call.
- Hourly billing with monthly cap
- Services are metered per hour and never exceed the plan's monthly list price, so short-lived instances cost only a fraction of a month.
- Transfer overage rate
- Outbound data beyond the pooled monthly allowance is billed at a per-gigabyte rate, equivalent to roughly five dollars per terabyte of egress.
- Cloud Manager
- Akamai's web console for creating and managing Linodes, volumes, NodeBalancers, DNS, and billing; it calls the same public API customers use.
- Terraform provider
- Plugin that declares Linode resources in configuration files so infrastructure is created, versioned, and destroyed repeatably instead of being built by hand.
- Longview
- Monitoring agent and dashboard that collect CPU, memory, disk, and network metrics from an instance, with alerting when thresholds are breached.
- LKE node pool
- Group of worker instances inside a Kubernetes cluster; the control plane is managed by Akamai while node pools are billed as regular compute.