AWS Certified Cloud Practitioner flashcards
AWS CRWT · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- AWS Cloud Adoption Framework
- A framework with six perspectives (Business, People, Governance, Platform, Security, Operations) that helps organizations plan and execute their cloud adoption journey.
- Well-Architected Framework
- A set of best practices organized into six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.
- Availability Zone
- One or more discrete data centers within an AWS Region, with redundant power, networking, and connectivity, isolated from failures in other zones.
- Shared Responsibility Model
- AWS is responsible for security of the cloud (infrastructure), while customers are responsible for security in the cloud (data, access, configuration).
- Hybrid cloud
- A deployment model that connects on-premises infrastructure with AWS cloud services, allowing data and applications to move between them.
- Edge location
- A site used by services like CloudFront and Route 53 to cache content and resolve DNS closer to users, reducing latency.
- Total Cost of Ownership
- A financial comparison of all costs of owning and running infrastructure on-premises versus the costs of using AWS services.
- Migration 7 Rs
- Seven migration strategies: Retire, Retain, Rehost, Relocate, Replatform, Repurchase, and Refactor, used to plan moving workloads to AWS.
- IAM role
- An IAM identity with permission policies that can be assumed by trusted entities such as AWS services, applications, or users, providing temporary credentials.
- Security group
- A stateful virtual firewall for EC2 instances that allows only allow rules, evaluated as a whole, and returns traffic automatically for allowed connections.
- Network ACL
- A stateless subnet-level firewall with allow and deny rules, evaluated in order by rule number, applying to all traffic entering or leaving the subnet.
- AWS Artifact
- A self-service portal that provides on-demand access to AWS compliance reports and agreements, such as SOC and ISO certifications.
- AWS Shield
- A managed DDoS protection service; Standard is automatically included at no cost, while Advanced offers enhanced protection and 24/7 DDoS response support.
- AWS WAF
- A web application firewall that filters HTTP and HTTPS requests using rules to block common exploits like SQL injection and cross-site scripting.
- Amazon GuardDuty
- A threat detection service that continuously monitors AWS accounts and workloads for malicious activity using machine learning and threat intelligence.
- AWS KMS
- A managed service for creating and controlling encryption keys used to encrypt data across AWS services and applications.
- Least privilege
- A security principle of granting only the permissions required to perform a task, reducing the blast radius of compromised credentials.
- Service control policy
- An AWS Organizations policy that sets the maximum available permissions for accounts in an organization, restricting what IAM principals can do.
- Amazon EC2
- A web service that provides resizable compute capacity in the cloud as virtual servers, with various instance types and purchasing options.
- AWS Lambda
- A serverless compute service that runs code in response to events and automatically manages the underlying compute resources.
- Amazon S3
- An object storage service offering industry-leading scalability, data availability, security, and performance with various storage classes.
- Amazon EBS
- A block-level storage service for use with EC2 instances, providing persistent volumes that can be attached to a single instance.
- Amazon VPC
- A virtual private network dedicated to an AWS account, allowing control over IP addressing, subnets, routing, and security.
- Amazon Route 53
- A scalable and highly available Domain Name System (DNS) web service that also offers domain registration and health checking.
- Amazon CloudFront
- A content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users with low latency.
- Amazon DynamoDB
- A fully managed NoSQL key-value and document database that delivers single-digit millisecond performance at any scale.
- AWS CloudTrail
- A service that records AWS API calls and related events for an account, enabling auditing, security analysis, and operational troubleshooting.
- AWS Trusted Advisor
- A service that inspects an AWS environment and provides recommendations across cost optimization, performance, security, fault tolerance, and service quotas.
- AWS Budgets
- A service that lets you set custom budgets and receive alerts when actual or forecasted costs or usage exceed defined thresholds.
- Consolidated billing
- An AWS Organizations feature that combines usage across multiple accounts into a single bill and aggregates usage for volume discounts.
- Compute Savings Plan
- A flexible pricing model offering discounts in exchange for a commitment to a consistent amount of compute usage, applicable across EC2, Lambda, and Fargate.
- AWS Enterprise Support
- A support plan with 24/7 access to senior engineers, a designated Technical Account Manager, and a 15-minute response time for business-critical issues.