HCIA-Cloud Service key terms

A geographic area where Huawei Cloud deploys infrastructure, containing one or more isolated data centers; users pick a region to reduce latency and meet data residency requirements.

A physically separate data center with independent power, cooling, and network inside a region; spreading resources across AZs protects workloads from a single-site failure.

A logical resource-isolation unit inside a region, used to group and separate resources and to scope permissions; resources in different projects are not visible to each other by default.

A pay-per-use model where resources are charged by actual usage in seconds or hours, with no upfront commitment, suitable for short-lived or unpredictable workloads.

A prepaid billing mode where a resource is purchased for a fixed period such as one month or one year, typically at a lower price than pay-per-use.

A virtual machine service that provides configurable compute instances with selectable flavors, images, disks, and networks, billed by usage or subscription.

A predefined ECS specification describing vCPU count, memory size, and instance family type; the flavor determines the compute capacity of a created server.

A service for creating, storing, and sharing server images, including public images, private images made from existing servers, and images replicated across regions.

A service that automatically adjusts the number of ECS instances in a group based on scheduled or metric-triggered policies, keeping performance stable while controlling cost.

A rule inside an Auto Scaling group that defines when and how to add or remove instances, triggered by alarms, schedules, or fixed target values.

A massively scalable storage service for storing unstructured data as objects inside buckets, accessed over HTTP/HTTPS through APIs, SDKs, or tools.

A container in OBS that holds objects; its name must be globally unique, and it defines the region, access policy, and default storage behavior for its contents.

The basic data unit in OBS, consisting of data plus metadata and a key that identifies it within a bucket; objects can range from bytes to terabytes.

A tier assigned to OBS data that trades retrieval speed and availability for price, such as standard, infrequent access, and archive tiers with different restore requirements.

A policy that automatically transitions objects to cheaper storage classes or deletes them after a defined age, reducing manual cleanup and long-term storage cost.

Block storage for ECS instances, offering disks that can be attached, detached, resized, and snapshotted; disks persist independently of the server lifecycle.

A point-in-time copy of an EVS disk stored independently, used to roll back data or to create new disks and images from a known-good state.

An EVS disk type that can be attached to multiple ECS instances at once, enabling clustered or high-availability applications that need concurrent block access.

A managed network file system that multiple ECS instances can mount simultaneously, scaling capacity automatically and suited to shared content and home directories.

An isolated virtual network where you define IP address ranges and subnets and control routing and security for cloud resources.

A segmented IP range inside a VPC where resources are deployed; each subnet belongs to one AZ and provides the address space and gateway for its instances.

A stateful virtual firewall applied to instances that allows or denies inbound and outbound traffic by protocol, port, and source or destination address.

A stateless subnet-level traffic filter that evaluates rules in order for packets entering or leaving a subnet, adding a layer beyond instance-level security groups.

A public IP address that can be bound to or unbound from cloud resources, letting instances reach the internet and be reached from it without changing private addresses.

A managed service that lets instances in private subnets access the internet or be exposed to it through address and port translation, without assigning each instance a public IP.

A service that distributes incoming traffic across multiple backend servers using listeners, health checks, and algorithms, improving availability and fault tolerance.

A periodic probe that ELB sends to backend servers to confirm they can serve traffic; unhealthy servers are removed from rotation until they recover.

A service for creating users, groups, and roles and granting them permissions through policies, controlling who can perform which actions on which resources.

A JSON document in IAM that specifies allowed or denied actions on resources; policies are attached to users, groups, roles, or agencies to grant permissions.

A delegated identity in IAM that lets a trusted cloud service or account act on your resources temporarily, avoiding the sharing of permanent credentials.

A managed service for creating and controlling encryption keys used to protect data at rest in services such as OBS and EVS, with rotation and audit support.

The monitoring service that collects metrics and events from cloud resources, displays dashboards, and sends alarms that can trigger notifications or scaling actions.

A Cloud Eye condition that watches a metric against a threshold for a period and fires notifications or actions when the condition is met.

An audit service that records API operations performed on cloud resources, showing who did what and when, for compliance and troubleshooting.

A managed service for collecting, storing, searching, and analyzing logs from hosts, applications, and cloud services, with structured queries and log alarms.

A framework for evaluating cloud architecture: whether systems withstand failure, stay reachable, protect data and access, and grow with demand.

An encrypted connection between an on-premises network and a VPC over the internet, letting private resources communicate securely across sites.

A dedicated private physical link between an on-premises data center and Huawei Cloud, offering more consistent bandwidth and lower latency than internet-based VPN.