Alibaba SysOps Administrator key terms

Alibaba Cloud's virtual server service that lets you launch configurable compute instances with a chosen image, instance type, disk, and network settings, billed on subscription or pay-as-you-go terms.

A named ECS specification that fixes the vCPU count, memory size, and network performance of an instance, grouped into families such as general purpose, compute optimized, or memory optimized.

A template containing an operating system and optional preinstalled software used to create ECS instances; it can be a public, custom, shared, or marketplace image.

A stateful virtual firewall attached to ECS instances that permits or denies inbound and outbound traffic by protocol, port range, and source or destination address.

A logically isolated private network you define with your own IP address range, subnets, route tables, and gateways, in which Alibaba Cloud resources communicate privately.

A subnet created inside a VPC that has a CIDR block drawn from the VPC range and is bound to a single availability zone, determining where resources are physically placed.

A set of rules associated with VSwitches that decides where traffic leaving a subnet is forwarded, including local routes, NAT gateway routes, and peering or VPN paths.

A managed VPC component that lets instances in private subnets reach the internet for outbound traffic, and optionally receive inbound connections through DNAT rules, without public IPs.

A public IPv4 address that you hold independently of any instance and can bind to or unbind from ECS instances, NAT gateways, or SLB instances on demand.

A managed traffic distribution service that spreads incoming requests across backend servers using listeners, health checks, and scheduling algorithms, offered in application and classic variants.

The group of ECS instances or elastic network interfaces that an SLB listener forwards traffic to, with weights that influence how much load each member receives.

A periodic probe configured on an SLB listener that tests backend servers and removes failing ones from rotation until they respond correctly again.

A managed domain name resolution service that maps names to IP addresses and supports record types, traffic routing policies, and health-check-driven failover between endpoints.

Alibaba Cloud's massively scalable object storage for storing and retrieving unstructured data as objects inside buckets, accessed over HTTP APIs and supporting lifecycle rules and versioning.

A container in OSS that holds objects, has a globally unique name, and is created in a specific region with its own access control, redundancy, and storage class settings.

A policy on a bucket that automatically transitions objects to cheaper storage classes or deletes them after a defined age or on a schedule, reducing long-term storage cost.

A durability and cost tier for stored data, such as standard, infrequent access, archive, or cold archive, trading retrieval speed and minimum storage duration for lower prices.

A managed shared file storage service that exposes NFS or SMB file systems mountable concurrently by many ECS instances, with capacity that scales without pre-provisioning disks.

The VPC-specific endpoint through which clients in that VPC mount a NAS file system, created per VPC and paired with permission groups that control client access.

A block storage volume attached to an ECS instance, available in several performance tiers, which can be resized, snapshotted, and detached or reattached between instances.

A point-in-time copy of a cloud disk or file system used to restore data, clone disks, or create custom images; automatic snapshot policies can run it on a schedule.

An identity created inside an Alibaba Cloud account that has its own credentials and permissions, used to avoid sharing root account keys among people or applications.

An identity assumed temporarily by trusted entities such as ECS instances or other accounts, granting permissions through a policy without storing long-term credentials on the resource.

A JSON document that states which actions are allowed or denied on which resources, optionally with conditions, and is attached to users, groups, or roles.

A short-lived credential issued by Security Token Service that carries the permissions of an assumed role and expires automatically, commonly used for temporary access.

A credential pair of an identifier and secret used to sign programmatic API requests; it must be rotated, stored securely, and preferably issued to RAM users rather than the root account.

A managed offering for requesting, uploading, and renewing TLS certificates that can be deployed to SLB listeners, CDN domains, or other services to encrypt traffic.

The platform service that collects metrics from Alibaba Cloud resources and custom sources, evaluates alarm rules, and sends notifications or triggers scaling and automation actions.

A CloudMonitor configuration that compares a metric against a threshold over a period and, when triggered, sends notifications to contacts or invokes actions such as scaling.

A managed log platform that ingests, indexes, stores, and queries logs and events from cloud services and applications, supporting alerts and dashboards over the collected data.

An agent-based service for running scripts or commands on ECS instances at scale without logging in, used for patching, configuration, and routine operational tasks.

An infrastructure-as-code service that provisions and manages groups of Alibaba Cloud resources from declarative templates, supporting change sets, stacks, and rollback.

A command-line tool that wraps the OpenAPI endpoints, letting operators script creation, inspection, and modification of resources with profiles and credential settings.

A service that adjusts the number of ECS instances in a scaling group according to schedules or metric-driven rules, and can register instances with an SLB automatically.

A logical collection of ECS instances managed together by Auto Scaling, defined by minimum, maximum, and desired capacities plus a configuration template for new instances.

An isolated physical location within a region with independent power and network, used to spread resources so a single failure does not take down the whole application.

A geographic area containing multiple availability zones where Alibaba Cloud resources are deployed; resources generally must be in the same region to connect over a private network.

A bucket feature that asynchronously copies objects to a bucket in another region, supporting disaster recovery and bringing data closer to distant users.

A private network link between two VPCs, in the same or different accounts, that lets their subnets communicate using private IP addresses without traversing the public internet.