Alibaba Cloud Architect Professional key terms

A logically isolated virtual network in Alibaba Cloud where you define IP address ranges, subnets, route tables, and gateways. It provides network isolation and security for cloud resources.

A subnet within a VPC that partitions the VPC's IP address range. It is used to deploy cloud resources and can be associated with route tables and security groups.

A virtual firewall that controls inbound and outbound traffic for one or more ECS instances. Rules can be stateful and are applied at the instance level.

A cloud computing service that provides scalable virtual servers. Users can choose instance types, images, and storage to meet various workload requirements.

A service that automatically adjusts the number of ECS instances based on demand. It uses scaling groups, scaling configurations, and scaling rules to maintain performance and cost efficiency.

A service that distributes incoming traffic across multiple backend servers to improve availability and fault tolerance. It supports layer 4 and layer 7 load balancing.

A scalable, secure, and cost-effective cloud storage service for storing and retrieving any amount of data. It is ideal for unstructured data such as images, videos, and backups.

A container for objects stored in OSS. It has a globally unique name, resides in a specific region, and defines access permissions and storage classes for its objects.

A managed database service that supports MySQL, SQL Server, PostgreSQL, and other engines. It automates backups, patching, and scaling, reducing operational overhead.

A read-only copy of an RDS database instance that offloads read traffic from the primary instance. It helps improve performance and scalability for read-heavy applications.

A computing model where the cloud provider manages infrastructure and automatically scales resources based on demand. Users pay only for the resources consumed by their code or applications.

A serverless compute service that runs code in response to events. It automatically manages resource allocation and scaling, and charges only for the actual execution time.

A managed Kubernetes service that simplifies the deployment, management, and scaling of containerized applications. It integrates with Alibaba Cloud networking, storage, and security services.

An architectural style that structures an application as a collection of loosely coupled services. Each service is independently deployable and scalable, often using containers and orchestration.

The process of moving applications, data, and workloads from on-premises or other cloud environments to Alibaba Cloud. It involves assessment, planning, migration, and optimization.

A service that migrates physical servers, virtual machines, or cloud instances to Alibaba Cloud ECS. It supports online migration with minimal downtime.

A service that supports data migration, synchronization, and subscription between data stores. It helps migrate databases to Alibaba Cloud with minimal downtime.

A cloud computing environment that combines public cloud services with private infrastructure. It allows data and applications to be shared between them, providing flexibility and scalability.

A dedicated network connection service that provides high-bandwidth, low-latency connectivity between on-premises data centers and Alibaba Cloud. It supports private and secure data transfer.

A service that provides a global network for interconnecting VPCs and on-premises networks. It simplifies network management and enables high-quality, low-latency communication across regions.

A set of rules that determine where network traffic is directed. In Alibaba Cloud, route tables are associated with VSwitches and control routing within a VPC and to external networks.

A stateless firewall that controls inbound and outbound traffic at the subnet level. It provides an additional layer of security beyond security groups.

A service that manages user identities and permissions for Alibaba Cloud resources. It allows fine-grained access control through policies, roles, and groups.

A security feature that requires users to provide two or more verification factors to access resources. It adds an extra layer of protection beyond passwords.

A service that manages encryption keys for data protection. It helps create, rotate, and control access to keys used for encrypting data at rest and in transit.

The process of converting data into a coded form to prevent unauthorized access. Alibaba Cloud offers encryption for data at rest (e.g., OSS, RDS) and in transit (e.g., TLS).

Adherence to laws, regulations, and standards. Alibaba Cloud provides compliance certifications and tools to help customers meet requirements such as GDPR, PCI DSS, and ISO 27001.

A service that records API calls and events for Alibaba Cloud resources. It helps with auditing, security analysis, and compliance by providing a history of actions.

A service that monitors Alibaba Cloud resources and custom applications. It collects metrics, sets alarms, and provides dashboards for performance and health tracking.

A service for collecting, storing, and analyzing logs. It helps with troubleshooting, security auditing, and operational insights by providing real-time log query and analysis.

The process of creating and storing copies of data to protect against loss. Alibaba Cloud offers services like Hybrid Backup Recovery (HBR) and database backup features.

Strategies and services to recover IT systems and data after a disaster. Alibaba Cloud provides multi-zone and cross-region replication to ensure business continuity.

The ability of a system to remain operational and accessible for a high percentage of time. It is achieved through redundancy, failover mechanisms, and distribution across zones.

A geographic area where Alibaba Cloud data centers are located. Each region contains multiple isolated zones and provides services with low latency to nearby users.

An isolated location within a region that has independent power and network. Deploying resources across zones enhances fault tolerance and availability.

A policy in OSS that automates the transition of objects between storage classes or their deletion after a specified period. It helps optimize storage costs.

A design pattern where system components communicate through events. It enables loose coupling and scalability, often implemented with services like Function Compute and Message Queue.

A service that enables asynchronous communication between distributed systems. It decouples producers and consumers, improving reliability and scalability.