Huawei Cloud Platform and Cloud Services
Domain 1: Huawei Cloud Platform and Cloud Services
This domain tests how well you map a workload to Huawei Cloud infrastructure and core services: regions and availability zones (AZs), IAM and enterprise projects, VPC networking, ECS, EVS, OBS, SFS, and managed database/container services. Questions usually ask you to select a service from a requirement, not to list SKUs.
Core rules
- A region contains multiple AZs with independent power and network. EVS volumes are AZ-scoped and cannot attach to an ECS in another AZ.
- IAM authorizes at the action level, for example
ecs:cloudServers:create; policies attach to users, groups, or agencies. Agencies delegate service-to-service access, not human login. - VPC provides subnets, route tables, security groups (stateful), and network ACLs (stateless). A subnet is bound to one AZ.
- OBS is HTTP/API object storage; SFS Turbo provides shared POSIX file access within a region; EVS is block storage for one ECS or a cluster-aware shared disk.
- Enterprise projects and tags partition resources for cost and quota control; they do not replace IAM authorization.
Worked example
A web tier runs in two AZs and needs a shared read/write directory for uploaded configuration files. EVS is rejected because a volume lives in one AZ. OBS is rejected because the app needs POSIX locking and random writes. SFS Turbo is selected because it presents NFS/CIFS to ECS instances across AZs in the same region. If the requirement were static image hosting, OBS plus CDN would be cheaper.
Traps
- Treating an AZ as a region for disaster recovery; multi-AZ is high availability, not cross-region DR.
- Assuming a stopped ECS stops all charges: EVS, EIP, and reserved resources may still bill.
- Using security groups and network ACLs interchangeably; ACLs are stateless and need both directions.