C-CATODSW flashcards
C-CATODSW · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Shared Responsibility Model
- A division of security duties: AWS secures the cloud itself (facilities, hardware, hypervisor), while customers secure what they put in the cloud (data, identities, guest OS patching).
- Availability Zone
- One or more discrete data centers with independent power, cooling, and networking inside an AWS Region, used to build fault-tolerant, highly available architectures.
- Elasticity
- The ability to automatically acquire resources when demand rises and release them when demand falls, so capacity tracks actual workload instead of peak forecasts.
- Infrastructure as a Service
- A cloud model delivering virtualized compute, storage, and networking that customers configure and manage, including the operating system and applications, while the provider manages hardware.
- Well-Architected Framework
- AWS guidance organized into six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability, used to review workloads against best practices.
- Recovery Point Objective
- The maximum acceptable amount of data loss measured in time; it determines backup frequency and replication strategy in a disaster recovery plan.
- Explicit Deny
- An IAM policy statement that refuses an action and always overrides any Allow statement in identity, resource, or boundary policies during request evaluation.
- Service Control Policy
- An AWS Organizations policy that sets the maximum permissions available to accounts in the organization or an organizational unit; it filters permissions but grants none by itself.
- IAM Role
- An identity with permission policies that trusted entities such as EC2, Lambda, or federated users can assume to receive temporary credentials, avoiding long-lived access keys.
- Security Group
- A stateful virtual firewall attached to instances or elastic network interfaces that evaluates allow rules only; return traffic for permitted connections is automatically allowed.
- Network ACL
- A stateless subnet-level filter with numbered allow and deny rules evaluated in order, applied separately to inbound and outbound traffic and requiring explicit return rules.
- AWS CloudTrail
- A service that records AWS API calls and management events across accounts, providing an audit trail of who did what, when, and from which source address.
- AWS KMS
- A managed service for creating and controlling encryption keys used to protect data at rest across AWS services, with key policies defining which principals may use them.
- AWS Artifact
- A self-service portal providing on-demand access to AWS compliance reports such as SOC and ISO certifications, plus agreements including the Business Associate Addendum.
- Multi-Factor Authentication
- An authentication requirement combining a password with a second factor such as a virtual or hardware token, reducing risk from stolen credentials in an AWS account.
- Amazon VPC
- A logically isolated virtual network in AWS where you define IP address ranges, subnets, route tables, gateways, and security controls for your resources.
- Amazon S3
- An object storage service offering eleven nines of durability, versioning, lifecycle policies, and multiple storage classes from frequently accessed to deep archive.
- EC2 Spot Instances
- Unused EC2 capacity offered at a large discount, interruptible when capacity is reclaimed with a two-minute warning, suited to fault-tolerant batch and stateless work.
- AWS Lambda
- A serverless compute service that runs event-driven code without managing servers, scales automatically, and bills per request and per gigabyte-second of execution.
- Amazon RDS Multi-AZ
- A deployment that maintains a synchronous standby replica in a second Availability Zone and automatically fails over to it if the primary database instance becomes unavailable.
- Amazon CloudFront
- A global content delivery network that caches content at edge locations near users to reduce latency, and integrates with AWS WAF and Shield for protection.
- Amazon Route 53
- A highly available DNS web service supporting routing policies such as simple, weighted, latency, failover, geolocation, and multivalue answers for traffic management.
- Amazon SQS
- A managed message queue service that decouples producers from consumers, buffering messages so components can scale and fail independently without losing work.
- AWS CloudFormation
- An infrastructure-as-code service that provisions AWS resources from declarative JSON or YAML templates, supporting repeatable, versioned, and rollback-capable deployments.
- AWS Fargate
- A serverless compute engine for containers that runs tasks and pods without provisioning or managing servers, compatible with Amazon ECS and Amazon EKS.
- Data Transfer Out
- Billing for data leaving AWS to the internet, charged per gigabyte after any free allowance; inbound transfer to AWS is generally not charged.
- AWS Budgets
- A tool that sets custom cost, usage, or reservation thresholds and sends alerts or triggers actions when actual or forecast spending exceeds them.
- Savings Plans
- A flexible pricing model committing to a consistent hourly spend for one or three years in exchange for lower rates on compute usage across eligible services.
- Consolidated Billing
- An AWS Organizations feature combining all member account usage into one bill, aggregating volume discounts and sharing Reserved Instance and Savings Plan benefits.
- AWS Cost Explorer
- A console tool that visualizes historical spending by service, account, or tag, and forecasts future costs to support budget planning and optimization.
- AWS Free Tier
- An offer with three parts: services always free within limits, twelve-month free allowances from account creation, and short-term trials for specific services.
- AWS Pricing Calculator
- A web tool for estimating the monthly cost of an architecture by selecting services, regions, and usage quantities before any resources are deployed.