AWS Certified Cloud Practitioner Flashcards
(113 cards)
AWS CloudTrail
- log, monitor and retain account activity related to actions across your AWS infrastructure.
-provides an event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.
AWS Config
-assess, audit, and evaluate the configurations of your AWS resources.
-continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.
AWS Cloudwatch
- monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), and IT managers.
-provides data and actionable insights to monitor applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. This is an excellent service for building Resilient systems.
AWS Trusted Advisor
online tool that provides you real-time guidance to help you provision your resources following AWS best practices on cost optimization, security, fault tolerance, service limits and performance improvement.
CloudWatch vs CloudTrail vs Config.
Think resource performance monitoring, events, and alerts; think CloudWatch.
Think account-specific activity and audit; think CloudTrail.
Think resource-specific change history, audit, and compliance; think Config.
AWS Quick Starts references
-help you deploy popular technologies on AWS, based on AWS best practices for security and high availability.
-These accelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.
-includes AWS CloudFormation templates that automate the deployment and a guide that discusses the architecture and provides step-by-step deployment instructions.
AWS Forms
an AWS community platform where people can help each other. It is not used to deploy technologies on AWS.
AWS CodeDeploy
a service that automates code deployments to any instance, including EC2 instances and instances running on-premises.
AWS Whitepapers
-technical content authored by AWS and the AWS community to expand your knowledge of the cloud.
-They include technical whitepapers, technical guides, reference material, and reference architectures diagrams.
AWS OpsWorks
-configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.
-lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments.
AWS CloudFormation
gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion.
AWS Batch
enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS
AWS Systems Manager Session Manager
-fully-managed service that provides you with an interactive browser-based shell and CLI experience.
- It helps provide secure and auditable instance management without the need to open inbound ports, maintain bastion hosts, and manage SSH keys.
- helps to enable compliance with corporate policies that require controlled access to instances, increase security and auditability of access to the instances while providing simplicity and cross-platform instance access to end-users.
Amazon EC2 Instance Connect
-provides a simple and secure way to connect to your Linux instances using Secure Shell (SSH).
-, you use AWS Identity and Access Management (IAM) policies and principals to control SSH access to your instances, removing the need to share and manage SSH keys.
Amazon Inspector
- automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
-automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.
-After performing an assessment, produces a detailed list of security findings prioritized by level of severity.
Amazon Route 53
- highly available and scalable cloud Domain Name System (DNS) web service. It
- It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other
Reliability pillar of the AWS Well-Architected Framework.
AWS states that before architecting any system, foundational requirements that influence reliability should be in place. The services that are part of foundations are: Amazon VPC, AWS Trusted Advisor, AWS Service Quotas (formerly called AWS Service Limits).
AWS Service Quotas
-view and manage your quotas for AWS services from a central location
-Quotas, also referred to as limits in AWS, are the maximum values for the resources, actions, and items in your AWS account. Each AWS service defines its quotas and establishes default values for those quotas.
AWS Single Sign-On (SSO)
-enables you to makes it easy to centrally manage access to multiple AWS accounts and business applications and provide users with single sign-on access to all their assigned accounts and applications from one place.
AWS Cognito
- lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily
-, you also have the option to authenticate users through social identity providers such as Facebook, Twitter, or Amazon, with SAML identity solutions, or by using your own identity system. It is an identity management solution for customers/developers building B2C or B2B apps for their customers.
AWS Identity and Access Management (IAM)
-enables you to securely control access to AWS services and resources for your users.
- you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
AWS Directory Service
- enables your directory-aware workloads and AWS resources to use managed Active Directory in the AWS Cloud.
Amazon LightSail
Lightsail is an easy-to-use cloud platform that offers you everything needed to build an application or website, plus a cost-effective, monthly plan. Lightsail offers several preconfigured, one-click-to-launch operating systems, development stacks, and web applications, including Linux, Windows OS,
Amazon DynamoDB with global tables
-a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale.
- built-in security, continuous backups, automated multi-region replication, in-memory caching, and data export tools.
- global tables replicate data automatically across your choice of AWS Regions and automatically scale capacity to accommodate your workloads.
-With global tables, your globally distributed applications can access data locally in the selected regions to get single-digit millisecond read and write performance.