AWS Certified Cloud Practitioner (CLF-C02) flashcards
AWS CRAW · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Shared Responsibility Model
- AWS secures the cloud itself, including facilities, hardware, and hypervisor. Customers secure what they put in the cloud, such as data, identities, and guest operating systems.
- Availability Zone
- One or more discrete data centers within a Region, each with independent power, cooling, and networking. Multiple zones enable fault tolerance and high availability.
- AWS Region
- A separate geographic area containing multiple isolated Availability Zones. Regions let you place resources close to users and meet data residency requirements.
- IAM Role
- An identity with permissions that can be assumed temporarily by users, applications, or services. It issues short-lived credentials through AWS Security Token Service.
- Explicit Deny
- An IAM policy statement that forbids an action. It always overrides any Allow statement, and the request is rejected regardless of other policies.
- Security Group
- A stateful virtual firewall attached to network interfaces. It supports allow rules only, and return traffic for permitted connections is automatically allowed.
- Network ACL
- A stateless subnet-level filter that supports both allow and deny rules. Rules are evaluated in numbered order, and return traffic must be explicitly permitted.
- AWS Artifact
- A self-service portal providing on-demand access to AWS compliance reports and agreements, such as SOC and ISO certifications, for audit and procurement purposes.
- Amazon S3
- Durable object storage for any amount of data, organized into buckets with keys. It offers multiple storage classes and lifecycle policies for cost control.
- Amazon EBS
- Block storage volumes attached to a single EC2 instance within one Availability Zone. Snapshots back up volumes to S3 for durability and restoration.
- Amazon EFS
- A managed elastic file system for Linux workloads that can be mounted concurrently by many EC2 instances across multiple Availability Zones.
- AWS Lambda
- A serverless compute service that runs code in response to events. You pay only for invocation count and execution duration, with no server management.
- Amazon VPC
- A logically isolated virtual network where you define IP ranges, subnets, route tables, and gateways to control traffic for your AWS resources.
- Internet Gateway
- A horizontally scaled, redundant VPC component that allows communication between resources in a public subnet and the internet, using public IP addresses.
- Amazon CloudFront
- A content delivery network that caches content at edge locations worldwide, reducing latency and offloading origin servers such as S3 buckets.
- Amazon Route 53
- A highly available DNS web service that translates domain names to IP addresses and supports routing policies such as latency, failover, and weighted routing.
- Amazon SQS
- A fully managed message queue that decouples producers from consumers, buffering messages and enabling asynchronous processing and retry patterns.
- Amazon DynamoDB
- A serverless key-value and document NoSQL database delivering single-digit millisecond latency at any scale, with automatic scaling and built-in replication options.
- Amazon CloudWatch
- A monitoring service that collects metrics and logs, displays dashboards, and triggers alarms that can invoke automated actions such as scaling policies.
- AWS CloudTrail
- A service that records API calls and account activity as events, supporting auditing, security analysis, and compliance investigations across your accounts.
- Capital vs Operating Expense
- Capital expense is upfront spending on owned infrastructure. Operating expense is ongoing usage-based spending. Cloud shifts most IT spending toward operating expense.
- Elasticity
- The ability to automatically acquire and release resources to match current demand. It avoids over-provisioning while maintaining performance during traffic spikes.
- Well-Architected Pillars
- Six design pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. They guide reviews of workloads against best practices.
- Loose Coupling
- A design principle where components interact through intermediaries such as queues, so a failure in one component does not cascade to others that depend on it.
- EC2 On-Demand Pricing
- You pay per second or hour with no long-term commitment. It suits unpredictable or short-lived workloads where flexibility matters more than discount.
- Savings Plans
- A commitment to a consistent amount of compute usage, measured in dollars per hour, for one or three years in exchange for lower prices.
- Spot Instances
- Spare EC2 capacity offered at steep discounts. AWS can interrupt them with a two-minute warning, so they suit fault-tolerant, flexible workloads.
- AWS Free Tier
- Offers always-free allowances, twelve-month free usage after sign-up, and short-term trials. It lets new customers explore services at no cost within limits.
- Consolidated Billing
- An AWS Organizations feature that combines usage from member accounts into one bill, aggregating volume for discounts and simplifying payment management.
- AWS Budgets
- A tool that sets cost or usage thresholds and sends alerts when forecasts or actual spend exceed them, helping prevent unexpected charges.
- AWS Trusted Advisor
- A service that inspects your account against best practices for cost, performance, security, fault tolerance, and service limits, reporting findings by severity.
- Technical Account Manager
- A named AWS advisor included with Enterprise Support who provides proactive guidance, architecture reviews, and coordination during critical events.