CCP Flashcards
1
Q
IAM Users
A
mapped to a physical user, has a password for AWS Console
2
Q
IAM Groups
A
Containers users only
3
Q
IAM Policies
A
JSON document that outlines permissions for users or groups
4
Q
IAM Policies
Effect
A
Whether the statement allows or denies access (Allow, Deny)
5
Q
IAM Policies
Principal
A
account/user/role to which this policy applies to
6
Q
IAM Policies
Action
A
list of actions this policy allows or denies
7
Q
IAM Policies
Resource
A
List of resources to which the actions applied to
8
Q
IAM Security
A
MFA + Password Policy
9
Q
AWS CLI
A
manage your aws services using a programming language
10
Q
Access Keys
A
access AWS services using a programming language
11
Q
IAM Audit Tools
A
-IAM Credentials Report (account-level)
-IAM Access Advisor (user-level)
12
Q
Ports to know
SSH (Secure Shell) - log into Linux instance
A
Port 22
13
Q
Ports to know
FTP (File Transfer Protocol) - upload files into a file share
A
Port 21
14
Q
Ports to know
SFTP (Secure File Transfer Protocol) - uploading files using SSH
A
Port 22
15
Q
Ports to know
HTTP - access unsecured websites
A
Port 80
16
Q
Ports to know
HTTPS - access secured websites
A
Port 433
17
Q
Ports to know
RDP (Remote Desktop Protocol) - log into a windows instance
A
Port 3389
18
Q
What is a EC2 instance made of
A
AMI (OS) + Instance Size (CPU + RAM) + Storage + security groups + EC2 User Data
19
Q
What is a security Group
A
Firewall attached to the EC2 instance
20
Q
What is EC2 User Data
A
Script launched at the first start of an instance
21
Q
EBS Volume
A
(Elastic Block Storage Volume)
-Network drives attached to one EC2 instance at a time
-Mapped to Availability Zones
-Can use EBS Snapshots for backups / transferring EBS volumes across AZ
22
Q
AMI
A
(Amazon Machine Image)
Create Ready to use EC2 instances with our customizations
23
Q
EC2 Image Builder
A
Automatically build, test, and distribute AMI’s
24
Q
EC2 Instance Store
A
-High performance hardware disk attached to our EC2 instance
-Lost if our instance is stopped / terminated
25
EFS
(Amazon Elastic File System)
Network file system, can be attached to 100s of instanced ina region
26
EFS-IA
Cost optimized storage class for infrequent accessed files
27
FSx for Windows
Network File system for windows servers
28
FSx for Lustre
High performance computing linux file system
29
High Availability
Run instances for same application cross multi AZ incase of failure
30
Scalability
Ability to accommodate a larger load by making the hardware stronger (scale up), or by adding nodes (scale out)
31
Elasticity
Once a system is scalable, elasticity means that there will be some “auto-scaling” so that the system can scale based on the load. This is “cloud-friendly”: pay per use, match demand, optimize costs
32
Agility
(not related to scalability - distractor on exam) new IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes.
33
ELB
(Elastic Load Balancers)
-Distribute traffic across backend EC2 instances, can be Multi-AZ
-Supports health checkers
-3 types: Application LB (HTTP - L7), Network LB (TCP - L4), Classic LB (old)
34
ASG
(Auto Scaling Groups)
-Implement Elasticity for your application, across multiple AZ
-Scale EC2 instances based on the demand on your system, replace unhealthy
-Integrated with the ELB
35
S3 Buckets
-Globally unique name (across all regions all accounts)
-Created in a region
36
S3 Objects
-Objects (files) have a key
-The key is the FULL url path
-The key is composed of a prefix + object name
-There’s no concept of directories within buckers although the UI will trick you to think otherwise.
37
S3 security
IAM policy, S3 Bucket Policy (public access), S3 Encryption
38
S3 Websites
Host a static website on Amazon S3
39
S3 Versioning
multiple versions for files, prevent accidental delete
40
S3 Replication
same-region or cross-region, must enable versioning
41
S3 Storage classes
Standard, IA, IZ-IA, Intelligent, Glacier (Instant, Flexible, Deep)
42
SnowFamily
import data onto S3 through a physical device, edge computing
43
OpsHub
Desktop application to manage Snow Family Devices
44
Storage Gateway
Hybrid solution to extend on-premises storage to S3
45
Databases
Relational Databases OLTP SQL
(Online Transactional Processing)
RDS managed service for MySQL, MAriaDB, etc
Aurora (SQL) proprietary database optimized for cloud
46
Databases
Read Replicas
Scale the read workload of your DB
Can create up to 5 read replicas
Data is only written to main DB
47
Databases
Multi-AZ
Failover in case of AZ outage (High availability)
Data is only read/written to main database
Can only have 1 other AZ as failover
48
Databases
Multi-Region
MultiRegion (Read Replicas)
Disaster Recovery in case of region issue
Local performance for global reads
Replication cost
49
Databases
In-memory Database
ElastiCache
50
Databases
Key/Value Database
DynamoDB (serverless) & DAX (Cache for DynamoDB)
51
Databases
Warehouse OLAP
(Online Analytical Processing): Redshift SQL
52
Databases
Hadoop Cluster
EMR (Elastic MapReduce)
53
Databases
Athena
Query data on Amazon S3 (serverless & SQL)
54
Databases
QuickSight
Dashboards on your data (Serverless)
55
Databases
DocumentDB
“Aurora for MongoDB” (JSON - NoSQL database
56
Databases
Amazon QLDB
(Quantum Ledger Database)
Financial Transactions Ledger, like centralized blockchain
57
Databases
Amazon Managed Blockchain
Managed HyperLedger Fabric & Ethereum blockchains`
58
Databases
Glue
Managed ETL (Extract Transform Load) and Data Catalog service
59
Databases
DMS
Database Migration
60
Databases
Neptune
Graph database used websites like wikipedia, facebook
61
Docker
container technology to run applications
62
ECS
(Elastic Container Service)
run Docker containers on EC2 instances you provision and maintain
63
Fargate
-Run Docker containers without provisioning the infrastructure
-Serverless offering (no EC2 instances)
64
ECR
(Elastic Container Registry)
Private Docker Images Repository
65
Batch
run batch jobs on AWS across managed EC2 instances
66
Lightsail
-predictable & low pricing for simple application & DB stacks
-AWS for dummies
67
Lambda
Lambda is Serverless, Function as a Service, seamless scaling, reactive
68
Lambda Billing
(pay per call or pay per duration)
By the time run multiplied by the RAM provisioned
By the number of invocations
69
CloudFormation
(AWS only)
-Infrastructure as Code, works with almost all of AWS resources
-Repeat across Regions & Accounts
70
Beanstalk
(AWS only)
-Platform as a Service (PaaS), limited to certain programing languages or Docker
-Deploy code consistently with a known architecture
71
CodeDeploy
(Hybrid)
Deploy & upgrade any app onto servers
72
Systems Manager
(Hybrid)
patch, configure, and run commands at scale
73
OpsWorks
(Hybrid)
managed Chef and Puppet in AWS
74
CodeCommit
Store code in private git repository (version controlled)
GitHub for AWS
75
CodeBuild
Build & test code in AWS
76
CodeDeploy
Deploy code on to servers
77
CodePipeline
Orchestration of pipeline (from code to build to deploy)
78
CodeArtificat
Store software packaged / dependencies on AWS
79
CodeStar
Unified view for allowing devs to do CI/CD and code
One stop shop for all Code... services
80
Cloud9
Cloud IDE like visual code with collab
81
AWS CDK
Define your cloud infrastructure using a programming language
82
Route 53
Global DNS
Great to route users to the closet deployment with least latency
Great for disaster recovery strategies
83
CloudFront
Global Content Delivery Network (CDN)
-Replicate part of our app to AWS Edge Locations decrease latency
-Cache common request improved user experience & decreased latency
84
S3 Transfer Acceleration
Accelerate global uploads & downloads into Amazon S3
85
AWS Global Accelerator
Improve global app availability and performance using the AWS global private network
86
AWS Outposts
Deploy Outposts Racks in your own Data Centers to extend AWS services
87
AWS WaveLength
Brings AWS services to the edge of the 5G networks
Ultra-low latency applications
88
AWS Local Zones
Bring AWS resources closer to users in in large populations
Good for latency sensitive applications
89
CloudWatch Metrics
Monitor the performance of AWS services and billing metrics
90
CloudWatch Alarms
Automate notification, perform EC2 action, notify to SNS based on metric
91
CloudWatch Logs
Collect log files from EC2 instances, servers, Lambda functions, etc
92
CloudWatch Events (or EventBridge)
Collect log files from EC2 instances, servers, Lambda functions, etc
93
CloudTrail
audit API calls made within your AWS account
94
CloudTrail Insights
automated analysis of your CloudTrail Events
95
X-Ray
trace requests made through your distributed applications
96
Service Health Dashboard
Status of all AWS services across all regions
97
Personal Health Dashboard
AWS events that impact your infrastructure
98
Amazon CodeGuru
Automated code reviews and application performance recommendations
99
VPC
(Virtual Private Cloud)
private regional network to deploy your resources
100
Subnets
Tied to an AZ, network partition of the VPC
101
Internet Gateway
at the VPC level, provide internet Access
102
Nat Gateway (Managed) / Nat Instances (You manage)
give internet access to private subnets
103
NACL
(Network Access Control List)
Stateless (Allow or Deny) firewall, subnet rules for inbound and outbound
104
Security Groups
Stateful (Allow), operate at the EC2 instance level or ENL
105
VPC Peering
Connect two VPC with non overlapping IP ranges, nontransitive
106
VPC Endpoints
Provide private access to AWS services within VPC
107
PrivateLink
Privately connect to a service in a 3rd party VPC
108
VPC Flow Logs
Network traffic logs
109
Site to Site VPN
VPN over public internet between on-premises DC and AWS
110
Client VPN
OpenVPN connection from your computer to your VPC
111
Direct Connect
Direct private connection to AWS
112
Transit Gateway
Connect thousands of VPC and on-premises networks together
113
Shield
Automatic DDos Protection + 24/7 support for advanced
114
WAF
Web Application Firewall to filter incoming requests based on rules
115
KMS
(Key Management Service)
Encryption keys managed by AWS
116
CloudHSM
Hardware encryption, customer manages encryption keys
117
AWS Certificate Manager
provision, manage, and deploy SSL/TLS Certificates
118
Artifact
Get access to compliance reports such as PCI, ISO, etc
119
GuardDuty
Find malicious behavior with VPC, DNS, and CloudTrail Logs
120
Inspector
For EC2 only, install agent and find vulnerabilities
121
Config
Track config changes and compliance against rules
122
Macie
Find sensitive data (ex:PII data) in Amazon S3 buckets
123
CloudTrail
Track API calls made by users within account
124
AWS Security Hub
Gather security findings from multiple AWS accounts
125
Amazon Detective
Find the root cause of security issues or suspicious activities
126
AWS Abuse
report AWS resources used for abusive or illegal purposes
127
Root user privileges
Change account settings
Close your AWS account
Change or cancel your AWS Support plan
Register as a seller in a Reserved Instance Marketplace
128
Rekognition
face detection, labeling, celebrity recognition
129
Transcribe
audio to text (ex: subtitles)
130
Polly
text to audio
131
Translate
language translations
132
Lex
build conversational bots - chatbots
Powers Alexa
133
Connect
use with lex to create cloud contact center
134
Comprehend
For Natural Language Processing - NLP
135
SageMaker
Fully managed service for developers / data scientists to build ML models
136
Forcast
Machine learning for highly accurate forecasts and predictions
137
Kendra
Fully managed document search service powered by ML
138
Personalize
Personalized recommendations, same tech used on amazon.com
139
Textract
detect text and data in documents
140
AWS 4 Pricing Models
-Pay as you go
-Save when you reserve
-Pay less by using more
-Pay less as AWS grows
141
EC2 Pricing
-On-demand, pay as you go
-Reserved, up to 75% off, 1 or 3 years commitment, All upfront, partial upfront, or no upfront
-Spot Instances, Bid for unused capacity, can loose it
-Dedicated Host, on-demand, reservation for 1 or 3 years
-Savings plans save on sustained usage
142
Lambda and ECS Pricing
-Lambda
Pay per call
Pay per duration
-ECS
EC2 Launch Type Model: No additional fees, you pay for AWS resources stored and created in your application
-Fargate
Fargate Launch Type Model: Pay for vCPU and memory resources allocated to your applications in your containers
143
Cost and Usage Reports
-Comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, reservations
-Lists AWS usage for each service category used by an account and its IAM users in hourly or daily line items, as well as any tags that you have activated for cost allocation purposes
144
Cost Explorer
-Virtualize, understand, and manage your AWS costs and usage over time
-Choose an optimal Savings plan (to lower prices on your bill)
-Forecast usage up to 12 months based on previous usage
145
AWS Budgets
Create budget and send alarms when costs exceeds the budget
146
Trusted Advisor and categories
High level AWS account assessment tool
-Cost optimization
-Performance
-Security
-Fault tolerance
-Service limits
147
Trusted Advisor 7 Core Checks
For Basic & Developer Support Plan
-S3 Bucket Permissions
-Security Groups - Specific Ports Unrestricted
-IAM use (one IAM user minimum)
-MFA on Root Account
-EBS Public Snapshots
-RDS Public Snapshots
-Service limits
148
Trusted Advisor Full Checks
-Full checks available on 5 categories
-Ability to set CloudWatch alarms when reaching limits
-Programmatic Access using AWS Support API
149
Compute Optimizer
Recommends resources’ configurations to reduce cost using machine learning
150
Pricing Calculator
Cost of services on AWS
151
Billing Dashboard
High level overview + free tier dashboard
152
Cost Allocation Tags
Tag resources to create detailed reports
153
Cost and Usage Reports
Most comprehensive billing dataset
154
Cost Explorer
View current usage (detailed) and forecast usage
155
Billing Alarms
In us-east-1 -track overall and per-service billing
156
Budgets
more advanced - track usage, costs, RI, and get alerts
157
Savings Plans
easy way to save based on long-term usage of AWS
158
IAM
Identity and Access Management inside your AWS account
For users that you trust and belong to your company
159
Organizations
Manage multiple AWS accounts
160
STS
(Security Token Service)
Temporary, limited privileges credentials to access AWS resources
161
Cognito
create a database of users for your mobile & web applications
162
Directory Services
integrate Microsoft Active Directory in AWS
163
IAM Identity Center
One login for multiple AWS accounts & applications
164
Amazon WorkSpaces
-Managed Desktop as a Service (DaaS) solution to easily provision Windows or Linux desktops
-Great to eliminate management of on-premise VDI (Virtual Desktop Infrastructure)
165
Amazon AppSteam 2.0
-Desktop Application Streaming Service
-The Application is delivered from within a web browser
-Example: Steam and use blender via the browser
166
Amazon Sumerian
Create and run virtual realty (VR, augmented reality (AR), and 3D applications
167
AWS IoT Core
Allows you to easily connect IoT devices to the AWS Cloud
168
Amazon Elastic Transcoder
Used to convert media files stored in S3 into media files in the formats required by consumer playback devices (phones etc.)
169
AWS AppSync
-Store and sync data across mobile and web apps in real-time
-Makes use of GraphQL (mobile technology from Facebook)
170
AWS Amplify
A set of tools and services that helps you develop and deploy scalable full stack web and mobile applications
171
AWS Device Farm
Fully-managed service that tests your web and mobile apps against desktop browsers, real mobile devices, and tablets
172
AWS Backup
Fully-managed service to centrally manage and automate backups across AWS services
173
Disaster Recovery Strategies
-Cheapest: Backup and restore
-average: Pilot Light
-Expensive: Warm StandBy
-Most expensive: Multi-site / Hot-site
174
AWS Elastic Disaster Recovery (DRS)
Quickly and easily Recover your physical, virtual, and cloud-based servers into AWS
175
AWS DataSync
Replication tasks are incremental after the first full load
176
AWS Application Discovery Service
Plan migration projects by gathering information about on-premises data centers
Agentless Discovery (AWS Agentless Discovery Connector)
Agent-based Discovery (AWS Application Discovery Agent)
AWS Application Migration Service (MGN)
Lift and shift (rehost) solution which simplify migrating applications to AWS
177
AWS Fault Injection Simulator (FIS)
Based on Chaos Engineering stressing an application by creating disruptive events (sudden increase of CPu or memory), observing how the system responds, and implementing improvements
178
AWS Step Functions
-Build serverless visual workflow to orchestrate your Lambda functions
-Features: sequence, parallel, conditions, timeouts, error handling
179
AWS Ground Station
Fully managed service that lets you control satellite communications, process data, and scale your satellite operations
180
Amazon Pinpoint
-Scalable 2-way (outbound/inbound) marketing communications service
-Supports email, SMS, push, voice, and in-app messaging
181
1st Pillar
Operation Excellence
Includes the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures
-Perform operations as code
-Annotate documentation
-Make frequent, small, reversible changes
-Refine operations procedures frequently
-Anticipate failure
-Learn from all operational failures
182
2nd Pillar
Security
Includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies
-implement a strong identity foundation
-Enable traceability
-Apply security at all layers
-Automate security best practices
-Protect data in transit and at rest
-Keep people away from data
-Prepare for security events
183
3rd Pillar
Reliability
Ability of a system to recover from infrastructure or service disruptions dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues
-Test recovery procedures
-automatically recover from failure
-Scale horizontally to increase aggregate system availability
-Stop guessing capacity
-Manage change in automation
184
4th Pillar
Performance Efficiency
Includes the ability to use computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve
-Democratize advances technologies
-Go global in minutes
-Use serverless architectures
-Experiment more often
-Mechanical sympathy
185
5th Pillar
Cost Optimization
Includes the ability to run systems to deliver business value at the lowest price point
-Adopt a consumption mode
-Measure overall efficiency
-Stop spending money on data center operations
-Analyze and attribute expenditure
-Use managed and application level services to reduce cost of ownership
186
6th Pillar
Sustainability
The sustainability pillar focuses on minimizing the environmental impacts of running cloud workloads.
-Understand your impact
-Establish sustainability goals
-Maximize utilization
-Anticipate and adopt new, more efficient hardware and software offerings
-Use managed services
-Reduce the downstream impacts of your cloud workloads
187
AWS Professional Services & Partner Network
APN = AWS Partner Network
-APN Technology Partners: Providing hardware, connectivity, and software
-APN Consulting Partners: professional services firm to help build on AWS
-APN Training Partners: Find who can help you learn AWS
-AWS Competency Program: AWS Competencies are granted to APN partners who have demonstrated technical proficiency and proven customer success in specialized solution areas
-AWS Navigate program: help partners become better Partners
188
AWS IQ
Quickly find a professional help for your AWS projects
