HCIA-Cloud key terms

Technology that uses software to divide one physical server into multiple isolated virtual machines, each running its own operating system and sharing the underlying CPU, memory, and storage.

The software layer that creates, runs, and isolates virtual machines on physical hardware, allocating resources and intercepting privileged instructions so guests behave as if on dedicated machines.

A cloud service model that delivers virtualized compute, storage, and network resources over the internet, leaving the customer responsible for operating systems, middleware, and applications.

A cloud service model that provides a managed runtime, databases, and development tooling so customers deploy application code without managing servers or operating systems.

A cloud service model in which a provider hosts and operates a complete application, and users access it over a network, typically through a browser, without managing infrastructure.

Huawei Cloud's virtual machine service, offering selectable flavors of vCPU and memory, images, disks, and elastic IP addresses that can be created, resized, and released on demand.

A dedicated physical server offered as a cloud service, providing exclusive hardware performance and isolation while still being provisioned and managed through the cloud console and APIs.

A template containing an operating system and optional preinstalled software, used to create cloud servers consistently and to redeploy identical environments across regions.

A predefined specification of vCPU count and memory size that determines a cloud server's compute capacity and is selected when creating or resizing an instance.

Huawei Cloud's block storage service, providing disks that attach to cloud servers, support snapshots and backups, and can be resized or migrated between storage types.

A scalable service that stores unstructured data as objects inside buckets, accessed over HTTP or HTTPS, suited to backups, media, logs, and static website content.

A tier assigned to stored objects that balances access frequency against cost, such as standard, infrequent access, or archive tiers with differing retrieval times and durability guarantees.

A policy that automatically transitions objects or deletes them after a defined age, reducing storage cost by moving rarely accessed data to cheaper tiers.

A logically isolated network in the cloud where you define subnets, IP address ranges, route tables, and security groups to control traffic for your resources.

A range of IP addresses carved from a VPC's address space, associated with an availability zone, in which cloud servers and other resources obtain their private IP addresses.

A stateful virtual firewall attached to cloud instances that permits or denies inbound and outbound traffic according to rules based on protocol, port, and source or destination address.

A stateless, subnet-level filter that evaluates ordered allow and deny rules for traffic entering or leaving a subnet, complementing instance-level security groups.

A public IP address that can be bound to a cloud instance or NAT gateway and reassigned quickly, letting resources reach the internet without exposing fixed private addresses.

A managed service that lets instances with only private IP addresses initiate outbound internet connections, translating addresses and conserving public IP resources.

A service that distributes incoming traffic across multiple backend servers, improving availability and throughput while performing health checks to remove failed nodes.

A service that automatically adds or removes cloud servers based on configured policies such as CPU utilization or scheduled time windows, matching capacity to demand.

A managed database service for engines such as MySQL and PostgreSQL that handles provisioning, patching, backup, and failover so users focus on schemas and queries.

A read-only copy of a primary database that asynchronously receives changes, offloading read queries and providing a promotion target during failover.

An isolated physical location within a region, with independent power and network, used to spread resources so a single failure does not take down the whole application.

A geographic area containing one or more availability zones, chosen to place workloads near users, satisfy data residency requirements, and reduce network latency.

An architecture in which one instance of software and shared infrastructure serves many customers while keeping each tenant's data and configuration logically separated.

A service for creating users, groups, and roles and granting them permissions through policies, controlling who can perform which actions on which cloud resources.

A JSON-formatted document that specifies allowed or denied actions on specified resources, attached to users, groups, or roles to define effective permissions.

A delegated identity that lets one cloud service or account act on resources in another account or service, granted through a trust relationship rather than shared credentials.

A managed service for creating, storing, rotating, and auditing cryptographic keys, used to encrypt data at rest in storage and database services.

Protection of stored data by encoding it with keys so that disks, buckets, or backups remain unreadable to anyone who gains physical or logical access without authorization.

A point-in-time copy of a disk or database volume that can be used to restore data or create new volumes, typically stored redundantly and billed by capacity used.

A design property in which redundant components and automatic failover keep a service running despite failures, often measured as a percentage of uptime per year.

Huawei Cloud's monitoring service that collects metrics, sets threshold alarms, and sends notifications about the health and performance of cloud resources.

A managed service for collecting, storing, searching, and analyzing logs from cloud services and applications, supporting alerting on log content.

An audit service that records API operations performed on cloud resources, including caller identity, time, and result, supporting compliance investigations and troubleshooting.

A key-value label attached to cloud resources for grouping, cost allocation, and permission scoping, enabling bulk operations and clearer inventory management.

The division of security duties between provider and customer: the provider secures the cloud infrastructure, while the customer secures data, identities, and configurations they control.