AWS Cloud Practitioner flashcards
AWS Cloud Practitioner · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- AWS Shared Responsibility Model
- AWS secures the cloud itself, meaning facilities, hardware, and managed service software, while customers secure what they place in it: data, identities, and configurations.
- Elasticity
- The ability to automatically acquire and release resources as demand changes, so provisioned capacity closely matches workload needs and spending tracks actual usage.
- Availability Zone
- One or more discrete data centers within an AWS Region, each with independent power, cooling, and networking, isolated from failures affecting other zones.
- AWS Region
- A separate geographic area containing multiple isolated Availability Zones, selected to place workloads near users and to satisfy data residency requirements.
- Vertical scaling
- Increasing the size or power of a single resource, such as resizing an EC2 instance to a larger type; bounded by the largest available instance size.
- Six advantages of cloud
- Trade capital for variable expense, gain economies of scale, stop guessing capacity, increase speed and agility, drop data-center spending, and go global in minutes.
- Hybrid deployment
- A model connecting on-premises or private infrastructure with AWS, often used for regulated data or gradual migration while legacy systems keep running.
- Well-Architected Framework
- AWS guidance organized into six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability, used to review workload design.
- Least privilege
- Granting only the permissions an identity needs for its task, which limits the blast radius if those credentials are compromised or misused.
- IAM role
- An identity carrying permission policies that trusted entities can temporarily assume, issuing short-lived credentials instead of long-term access keys.
- Security group
- A stateful virtual firewall at the instance level that supports allow rules only; return traffic for permitted connections is automatically allowed back.
- Network ACL
- A stateless subnet-level firewall with allow and deny rules evaluated in numbered order; traffic in each direction must be explicitly permitted.
- AWS Artifact
- A self-service portal providing AWS compliance reports such as SOC and ISO certifications, plus online agreements including the Business Associate Addendum.
- Amazon GuardDuty
- A managed threat-detection service that continuously analyzes CloudTrail events, VPC flow logs, and DNS logs for malicious or unauthorized activity.
- AWS Shield Advanced
- A paid DDoS protection service offering enhanced detection, access to a 24/7 response team, and cost protection for scaling during an attack.
- AWS CloudTrail
- A service that records API calls and account activity as events, supporting auditing, compliance reporting, and investigation of who changed what.
- Amazon S3
- Object storage with effectively unlimited capacity that keeps data as objects in buckets addressed by key, offered in multiple durability and cost tiers.
- Amazon EBS
- Block storage volumes attached to a single EC2 instance, replicated within one Availability Zone and persisting independently of the instance lifecycle.
- AWS Lambda
- Serverless compute that runs code in response to events, scales automatically, bills only for execution time, and caps a run at 15 minutes.
- RDS Multi-AZ
- A standby database replica maintained in a second Availability Zone with automatic failover, used for high availability rather than for scaling reads.
- Amazon CloudFront
- A content delivery network that caches content at edge locations worldwide to reduce latency for users and offload requests from the origin.
- AWS CloudFormation
- An infrastructure-as-code service where JSON or YAML templates define and provision AWS resources repeatably, managing them together as stacks.
- Amazon CloudWatch
- A monitoring service that collects metrics, logs, and events, and fires alarms that trigger actions when defined thresholds are breached.
- Amazon DynamoDB
- A serverless NoSQL key-value and document database delivering single-digit millisecond latency at any scale, with optional global table replication.
- Spot Instances
- Spare EC2 capacity sold at steep discounts that can be interrupted with short notice, suited to fault-tolerant batch and stateless workloads.
- Savings Plans
- A commitment to a consistent hourly compute spend for one or three years in exchange for lower rates on eligible usage.
- AWS Pricing Calculator
- A web tool for estimating the monthly cost of a proposed architecture before deployment by selecting services, regions, and expected usage amounts.
- AWS Cost Explorer
- A console tool that visualizes historical spending, filters by service or cost allocation tag, and forecasts future costs up to twelve months ahead.
- Consolidated billing
- An AWS Organizations feature that combines member account usage into one bill while sharing volume discounts and reserved capacity benefits across accounts.
- AWS Free Tier
- A set of always-free allowances, twelve-month introductory limits, and short-term trials; usage beyond those limits is billed at standard on-demand rates.
- Enterprise Support
- The highest support tier, with a minimum of about $15,000 per month, a designated Technical Account Manager, and 15-minute response for business-critical outages.
- Data transfer charges
- Inbound data transfer into AWS is generally free, while outbound transfer to the internet is billed per gigabyte, with some exceptions inside service boundaries.