Cram Flashcards
(175 cards)
1
Q
A collection of services including EC2, ECS, EKS, Lambda, Batch, and Beanstalk which allow users to run apps and process data in the cloud.
A
AWS Compute
2
Q
A suite of services that manage and optimize cloud spending, including Cost Explorer, Budgets, Cost and Usage Reports.
A
AWS Cost Management
3
Q
General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, and High-Performance Computing Optimized are instance types of what?
A
AWS EC2
https://aws.amazon.com/ec2/faqs/
4
Q
A community-driven Q&A service
A
AWS re:Post
5
Q
A global community of tech and consulting partners
A
AWS Partner Network
6
Q
time-tested strategies, guides, and patterns to help accelerate your cloud migration, modernization, and optimization projects. These resources were developed by AWS technology experts and the global community of AWS Partners, based on their years of experience helping customers realize their business objectives on AWS
A
AWS Prescriptive Guidance
7
Q
a central location from which you can obtain the latest versions of our security whitepaper, receive security updates and where you can report any security concerns
A
AWS Security Center
8
Q
a suite of services for storing and managing data in the cloud. These services are categorized into block storage, file storage, and object storage, allowing users to choose the most appropriate type for their needs - includes EBS, EFS, S3, FSx, Glacier, and Storage Gateway
A
AWS Storage
9
Q
the hub for managing your support cases
A
AWS Support Center
10
Q
a serverless query service that allows users to analyze data stored in Amazon S3 using standard SQL, but cannot be used as an in-memory database
A
AWS Athena
11
Q
a service that simplifies data sharing by allowing data providers to publish and deliver their data to a wide range of AWS customers
A
AWS Data Exchange
12
Q
is a managed service on Amazon Web Services (AWS) that makes it easy to process and analyze large datasets using open-source big data frameworks like Apache Hadoop and Apache Spark. It simplifies running these frameworks on AWS by automating the setup, scaling, and configuration of the cluster. Integrates with S3 and DynamoDB.
A
AWS EMR (Elastic MapReduce)
13
Q
a fully managed ETL (Extract, Transform, Load) service that simplifies the process of preparing and loading data for analytics and machine learning
A
AWS Glue
14
Q
a fully managed real-time streaming service that enables the collection, processing, and analysis of large volumes of streaming data. It’s designed to handle high-throughput data streams from various sources, providing insights and enabling real-time actions. ________ offers different services like Data Streams, Data Firehose, and Video Streams, each optimized for specific use cases.
A
AWS Kinesis
15
Q
a fully managed service that makes it easier to build and run applications using Apache Kafka, a distributed streaming platform
A
AWS Managed Streaming for Apache Kafka (MSK)
16
Q
a fully managed service that simplifies the deployment, operation, and scaling of OpenSearch clusters on AWS
A
AWS OpenSearch Service
17
Q
a fully managed, cloud-based business intelligence (BI) service that enables users to create and share interactive dashboards and visualizations. It’s designed to provide fast and cost-effective analytics, allowing organizations to gain insights from their data
A
AWS QuickSight
18
Q
a fully managed, petabyte-scale data warehouse service
A
AWS Redshift
19
Q
a serverless event bus service that facilitates event-driven architectures, allowing applications to communicate asynchronously and react to events from various sources
A
AWS EventBridge
20
Q
a serverless workflow orchestration service that allows you to build and manage multi-step applications in the cloud. It enables you to define and execute workflows as a series of steps, making it easier to coordinate and control multiple Lambda functions and other AWS services
A
AWS Step Functions
21
Q
a cloud-based contact center service from Amazon Web Services that simplifies the setup and management of customer support operations
A
AWS Connect
22
Q
a service that enables AWS Solution Providers and Enterprise customers to create custom, alternative billing data for showback and chargeback workflows. It allows you to group accounts, set custom pricing rules, and generate reports based on your own billing logic, without changing how AWS bills your main account
A
AWS Billing Conductor
23
Q
a cost management tool that allows users to set custom budgets for their AWS spending, track their usage, and receive alerts when they exceed or are forecasted to exceed their spending limits. Can create Cost budget, Usage budget, Reservation budget and Savings Plans budget.
A
AWS Budgets
24
Q
a digital catalog offered by Amazon Web Services (AWS) that allows customers to find, buy, deploy, and manage third-party software, data, and services that run on AWS
A
AWS Marketplace
25
a fully managed batch computing service that lets you run large-scale compute workloads on AWS without needing to manage or provision compute resources
AWS Batch
26
a cloud service that simplifies the deployment and management of web applications and services on Amazon Web Services (AWS). It handles the complex tasks of provisioning, scaling, and load balancing, allowing developers to focus on their code.
AWS Elastic Beanstalk
27
a simplified cloud service that makes it easy to launch and manage virtual private servers (VPS), containers, and other infrastructure components in the AWS cloud. It's designed for developers, small businesses, and individuals who want to get started with cloud computing without the complexity of AWS's more advanced services
AWS Lightsail
28
infrastructure deployments that bring AWS services closer to large population centers, industry, and IT hubs to enable low-latency applications. They essentially extend an AWS Region's capabilities to specific geographic locations, allowing customers to run applications that require single-digit millisecond latency.
AWS Local Zones
29
a distributed computing platform that brings AWS services to the edge of telecommunications service providers' 5G networks. It allows developers to build applications that require ultra-low latency and a connection to AWS services in the Region
AWS Wavelength
30
a fully managed Docker container registry service offered by AWS. It provides a secure and scalable environment for storing, managing, and deploying Docker images, which are used to run applications in containers
AWS ECR (Elastic Container Registry)
31
a fully managed container orchestration service that makes it easy to deploy, manage, and scale containerized applications on AWS. It simplifies the process of running and managing Docker containers, allowing developers to focus on application code rather than infrastructure management.
AWS ECS (Elastic Container Service)
32
a managed Kubernetes service offered by Amazon Web Services
AWS EKS (Elastic Kubernetes Service)
33
a program that provides startups with access to free tools and resources, including cloud credits, technical support, and exclusive offers to help them build, launch, and scale their businesses on AWS
AWS Activate
34
a service that connects customers with AWS Certified experts for on-demand project assistance
AWS IQ
35
a service provided by Amazon Web Services that helps businesses manage their AWS infrastructure and operations more efficiently and securely. It's essentially outsourcing the daily management and technical support of your AWS environment to AWS, allowing you to focus on your core business while AWS handles tasks like infrastructure setup, security, and compliance.
AWS Managed Services (AMS)
36
one-on-one, fast-response support from experienced technical support engineers. The service helps customers use AWS's products and features. With pay-by-the-month pricing and unlimited support cases, customers are freed from long-term commitments
AWS Support
37
a fully managed relational database service built for the cloud, compatible with MySQL and PostgreSQL. It's part of Amazon RDS (Relational Database Service)
AWS Aurora
38
NoSQL
DynamoDB
39
a fully managed, in-memory database service that offers ultra-fast performance and Multi-AZ durability, designed to be compatible with both Valkey and Redis OSS
AWS MemoryDB
40
a fully managed graph database service designed for building and running graph-based applications on the AWS cloud. It's optimized for handling and querying billions of relationships in milliseconds, making it suitable for social networking, fraud detection, and other applications where complex relationships are crucial.
AWS Neptune
41
a managed relational database service offered by AWS which supports popular database engines like MySQL, PostgreSQL, Oracle, SQL Server, and Amazon Aurora
AWS RDS (Relational Database Service)
42
simplifies the administration of applications at scale by deploying configuration changes from a central location
AWS AppConfig
43
a cloud-based IDE (Integrated Development Environment) that allows you to write, run, and debug code directly from your web browser
AWS Cloud9
44
a browser-based terminal that allows you to manage and interact with AWS resources from a web browser
AWS CloudShell
45
a fully managed software package repository service that helps organizations securely store, publish, and share software packages used in their development process. It simplifies the management of package dependencies, allowing developers to easily integrate with existing workflows and manage packages for multiple projects and teams
AWS CodeArtifact
46
a fully managed continuous integration (CI) service that compiles source code, runs tests, and produces software packages ready for deployment. It eliminates the need to provision, manage, and scale build servers, allowing you to focus on building your application.
AWS CodeBuild
47
a fully managed source control service that allows you to store and manage your Git repositories in the AWS Cloud
AWS CodeCommit
48
a fully managed software deployment service that automates deployments to various compute services like Amazon EC2, Amazon ECS, AWS Lambda, and on-premises instances. It helps automate the process of deploying and updating applications, reducing manual effort and potential errors
AWS CodeDeploy
49
a continuous delivery service that helps automate the release process for software, including building, testing, and deploying applications. It allows you to model and visualize your release workflow, which can be done through a graphical user interface or a command-line interface. It supports integrations with various tools and services, including AWS CodeBuild, AWS CodeDeploy, and third-party tools like GitHub.
AWS CodePipeline
50
a cloud-based software development service that helps teams quickly develop, build, and deploy applications on AWS. It provides a unified user interface, project templates, and integrated development toolchains, streamlining the software development lifecycle. While AWS ended support for it on July 31, 2024
AWS CodeStar
51
a distributed tracing service that helps developers analyze and debug distributed applications
AWS X-Ray
52
a fully managed, non-persistent application and desktop streaming service that enables users to access their desktop applications from anywhere. It allows you to centrally manage your desktop applications on ____ and deliver them securely to any computer.
AWS AppStream 2.0
53
a managed virtual desktop service on Amazon Web Services. It allows users to access their applications and data from anywhere, on any supported device, using virtual desktops that run Windows or Linux. _____ eliminates the need for users to manage physical hardware and software, providing a secure and scalable solution for remote work, temporary workers, and other scenarios. Global in scope.
AWS WorkSpaces
54
a fully managed, cloud-native, hosted browser service that allows users to securely access private websites, SaaS web applications, and the internet from a disposable container. It facilitates web-based workloads by streaming web content to the user's browser while isolating the session in AWS. This approach protects sensitive corporate data and reduces the risk of browser-borne attacks.
AWS WorkSpaces Web, now called WorkSpaces Secure Browser
55
a suite of tools and features that simplifies building and deploying full-stack web and mobile applications on AWS. It allows developers to focus on building their application's UI and logic rather than managing complex backend infrastructure
AWS Amplify
56
a fully managed service for building scalable and secure GraphQL APIs. It allows developers to connect client applications to data and events using GraphQL and Pub/Sub APIs without managing any servers
AWS AppSync
57
a cloud-based app testing service that allows developers to test iOS, Android, and Fire OS apps on a range of real, physical devices hosted by Amazon Web Services (AWS)
AWS Device Farm
58
a fully managed cloud service that simplifies the connection and management of billions of IoT devices. It allows devices to communicate securely with cloud applications and other devices, facilitating data collection, processing, and analysis
AWS IoT Core
59
a service that allows you to run local compute, messaging, data caching, synchronization, and machine learning inference capabilities on connected devices. It's an open-source edge runtime and cloud service that helps you build, deploy, and manage software on your edge devices
AWS IoT Greengrass
60
a natural language processing (NLP) service that utilizes machine learning to analyze and extract insights from text data. It enables users to identify elements like entities, key phrases, sentiment, and the language of text without requiring specialized machine learning knowledge or infrastructure
AWS Comprehend
61
a fully-managed, cognitive search service powered by machine learning that allows organizations to easily search and discover information across multiple data sources. It helps users find the information they need quickly and accurately, even when it's spread across different locations and formats
AWS Kendra
62
an AWS service that helps developers build conversational interfaces for voice and text-based applications. It uses natural language understanding (NLU) and automatic speech recognition (ASR) to enable users to interact with applications using spoken or written language. Think of it as the engine that powers chatbots, voice assistants, and other conversational interfaces.
AWS Lex
63
a text-to-speech (TTS) service offered by Amazon Web Services (AWS). It allows developers to convert text into lifelike spoken audio, enabling the creation of speech-enabled applications and products
AWS Polly
64
an image and video analysis service offered by AWS that uses machine learning to identify objects, scenes, and people in images and videos. It can also perform facial analysis, compare faces, and detect unsafe content.
AWS Rekognition
65
a fully-managed service for machine learning (ML) that enables users to build, train, and deploy ML models. It simplifies the ML process by automating tasks like data preparation, model training, and deployment. It provides a range of tools and features, including integrated Jupyter notebooks, pre-built algorithms, and support for various deep learning frameworks
AWS SageMaker
66
a powerful machine learning service offered by AWS that allows for the automated extraction of text, handwriting, and data from scanned documents and images. It goes beyond basic optical character recognition (OCR) by also identifying and extracting data from forms and tables.
AWS Textract
67
an AWS service that converts speech to text using automatic speech recognition (ASR). It leverages deep learning models to transcribe audio into text, including features for improving accuracy, customization, and content filtering.
AWS Transcribe
68
a cloud-based, neural machine translation service provided by Amazon Web Services (AWS). It allows users to translate text between various languages using advanced deep learning models for high-quality and natural-sounding translations. This service enables businesses and developers to localize content and applications for a global audience efficiently and cost-effectively.
AWS Translate
69
a fully managed service that helps you discover, audit, and evaluate the configurations of your AWS resources. It provides a detailed view of your resources, including their configurations, relationships, and how they have changed over time. This allows you to track changes, manage compliance, and ensure your resources are configured according to your desired state
AWS Config
70
a service that automates the setup and governance of a secure, compliant, multi-account AWS environment based on AWS best practices. It simplifies the process of creating and managing multiple AWS accounts, enforcing security and compliance policies, and enabling organizations to quickly establish a well-architected cloud environment.
AWS Control Tower
71
a web-based tool that provides real-time visibility into the health and performance of your AWS resources and accounts. It helps you stay informed about service events, planned changes, and account-specific issues that might impact your infrastructure. The dashboard categorizes events into general service events, account-specific events, and organization events.
AWS Health Dashboard
72
a service that simplifies the deployment of applications, databases, and SAP systems on AWS by automating the sizing, configuration, and resource provisioning
AWS Launch Wizard
73
a service that simplifies the management of software licenses from vendors like Microsoft, Oracle, and SAP across AWS and on-premises environments. It allows you to centrally distribute, track, and enforce your licenses, providing better visibility and control to prevent overages and compliance issues.
AWS License Manager
74
a web-based interface that provides users with a centralized, intuitive way to manage and monitor AWS resources. It allows users to access various AWS services, provision resources, configure settings, and manage their account and billing
AWS Management Console
75
helps you centrally manage and govern your environment as you grow and scale your AWS resources. Using _____, you can create accounts and allocate resources, group accounts to organize your workflows, apply policies for governance, and simplify billing by using a single payment method for all of your accounts.
AWS Organizations
76
a service that simplifies searching and discovering AWS resources across regions and accounts within your AWS account. It provides a unified search experience, similar to an internet search engine, to find resources like EC2 instances, Kinesis streams, and DynamoDB tables. You can search by resource metadata like names, tags, and IDs.
AWS Resource Explorer (formerly AWS Resource Groups and Tag Editor)
77
a service that lets you create, manage, and distribute catalogs of approved AWS resources and IT services. It enables users to quickly deploy these services, while administrators can maintain control over the services offered, ensuring compliance and consistency across the organization
AWS Service Catalog
78
an operations management service that provides a unified interface for managing and operating your AWS infrastructure. It allows you to centrally view, manage, and operate nodes (instances) across AWS, on-premises, and multicloud environments
AWS Systems Manager
79
a service that inspects your AWS environment and provides recommendations to optimize costs, improve performance, and enhance security. It acts like a personal cloud expert, helping you identify areas where you can reduce expenses, increase efficiency, and close security gaps.
AWS Trusted Advisor
80
an interactive, web-based service that helps users evaluate their cloud architecture against AWS best practices, using the AWS Well-Architected Framework. It provides guidance and personalized recommendations to improve the design and operation of workloads. This tool helps document architectural decisions, identify improvement areas, and achieve a more reliable, secure, efficient, and cost-effective cloud environment
AWS Well-Architected Tool
https://aws.amazon.com/architecture/well-architected/
81
a tool that helps businesses plan application migration projects to the AWS cloud. It gathers information about their on-premises data centers, including servers, virtual machines, and network dependencies, to facilitate the migration process. _____ collects data on server configuration, usage, and behavior, enabling a comprehensive understanding of the existing IT environment.
AWS Application Discovery Service
82
a tool that simplifies and automates the process of migrating applications to AWS, particularly through a "lift-and-shift" (rehost) approach. It enables you to move large numbers of physical, virtual, or cloud servers to AWS quickly and efficiently, minimizing disruption and cost.
AWS Application Migration Service
83
a centralized service for planning, managing, and tracking your migrations to AWS. It helps businesses discover, assess, plan, and execute migrations to the AWS cloud, providing a single location to manage migration tasks across different AWS and partner tools.
AWS Migration Hub
84
a managed service that simplifies migrating databases to and from AWS. It helps you move data from various sources, including on-premises databases, other AWS services like Amazon RDS, and even other database instances on Amazon EC2, to AWS. This service supports both homogeneous (same database engine) and heterogeneous (different database engines) migrations.
AWS Database Migration Service (DMS)
85
a Java utility that helps automate the conversion of database schemas and code objects from one database engine to another, especially when migrating databases to AWS. It simplifies the process of converting schemas and custom code like stored procedures and functions, making heterogeneous database migrations easier.
AWS Schema Conversion Tool (SCT)
86
a group of physical devices (Snowcone, Snowball, and Snowmobile) designed to help customers transfer massive amounts of data to and from AWS. They also allow for running compute and processing workloads at the edge, even in locations with limited or no network connectivity.
AWS Snow Family
87
a secure, managed file transfer service that enables you to transfer files into and out of Amazon S3 and Amazon EFS using popular protocols like SFTP, FTPS, FTP, and AS2. It simplifies file transfers, data migration, and sharing between on-premises and cloud storage.
AWS Transfer Family
88
a fully managed service that enables developers to create, publish, maintain, and secure APIs at any scale. It acts as a central entry point for applications to access backend services, including AWS Lambda functions, other AWS services, and HTTP backends.
AWS API Gateway
89
a networking service that optimizes the performance and availability of applications for global users. It directs traffic through the AWS global network, improving connection speeds and reducing latency by up to 60%. It also provides static IP addresses and supports various endpoints, ensuring a more reliable user experience.
AWS Global Accelerator
90
a service that allows you to create secure connections between your on-premises network and your AWS resources, or between remote clients and your AWS resources. It essentially establishes a private, encrypted tunnel for data transfer over the internet.
AWS VPN
91
a fully-managed service that helps organizations continuously audit their AWS usage to simplify risk management and compliance with regulations and industry standards. It automates evidence collection and reporting, making it easier to demonstrate compliance with policies and regulations
AWS Audit Manager
92
a managed service that simplifies the process of obtaining, managing, and deploying public and private SSL/TLS certificates for use with AWS services and other connected resources. It automates tasks like certificate requests, renewals, and deployment, reducing the time and effort associated with manually managing certificates.
AWS Certificate Manager (CM)
93
a managed cloud service that provides a secure way to store and manage cryptographic keys using Hardware Security Modules (HSMs). It allows you to generate, store, and use keys for various cryptographic operations within the AWS cloud, while ensuring compliance with regulatory and security standards.
AWS CloudHSM
94
a fully managed identity service that helps developers add user sign-up, sign-in, and access control to their web and mobile applications. It provides a scalable and secure way to manage users, offering features like user pools for storing user information and identity pools for granting access to AWS services.
AWS Cognito
Amazon Cognito helps create the user database, which is not possible with STS (Security Token Service).
95
a cloud-based service from AWS that helps security analysts investigate security incidents across their AWS environment by providing a visual representation of resource behaviors and relationships. It automatically collects, analyzes, and aggregates log data from various AWS sources, including CloudTrail, VPC Flow Logs, and GuardDuty, to help identify potential security threats and suspicious activities
AWS Detective
96
a managed service that allows you to set up and manage directories (which contain information about users, groups, and devices) in the AWS Cloud or connect AWS resources with existing on-premises Microsoft Active Directory (AD). It offers a managed Active Directory, simplifying administration and allowing you to focus on your business applications.
AWS Directory Service
97
a security management service that allows you to centrally configure and manage firewall rules and protections across your AWS accounts and applications within AWS Organizations. It simplifies the process of enforcing consistent security policies and compliance across your infrastructure, making it easier to manage security at scale
AWS Firewall Manager
98
a threat detection service that continuously monitors your AWS accounts, workloads, and data for malicious or unauthorized behavior. It uses machine learning, anomaly detection, and integrated threat intelligence to identify potential threats, such as compromised instances, credential misuse, or unusual API calls. Analyzes billions of events across your AWS accounts from AWS CloudTrail, Amazon VPC Flow Logs, and DNS Logs
AWS GuardDuty
99
a centralized identity management service that simplifies workforce access to AWS resources and applications across multiple accounts. It allows organizations to manage users, groups, and their permissions in a single place, enabling secure and consistent access control.
AWS IAM Identity Center
100
a vulnerability management service that continuously scans your AWS workloads (like EC2 instances, container images, and Lambda functions) for software vulnerabilities and unintended network exposure. It helps identify security weaknesses that could be exploited by attackers, allowing you to take proactive steps to remediate them
AWS Inspector
(Does not track config changes.)
101
a managed service that helps you create, control, and manage cryptographic keys used to protect your data across AWS services and applications. It allows you to encrypt data at rest and in transit, and provides a centralized control for managing the lifecycle and permissions of your keys.
AWS Key Management Service (KMS)
102
a fully managed AWS data security and privacy service that uses machine learning and pattern matching to discover and protect sensitive data (e.g. PII) in your AWS environment, particularly within Amazon S3 buckets. It helps you identify, classify, and protect sensitive data, ensuring you meet compliance and data privacy requirements
AWS Macie
103
a managed service that simplifies the deployment of essential network protections for your Amazon Virtual Private Clouds (VPCs). It provides a stateful firewall and intrusion detection and prevention system for inspecting and filtering network traffic entering or leaving your VPCs. ________ can be used to filter traffic at the perimeter of your VPC, including traffic from internet gateways, NAT gateways, VPNs, and AWS Direct Connect.
AWS Network Firewall
104
a service that allows you to share AWS resources with other AWS accounts or within your AWS Organization, simplifying the process of managing and accessing resources across different accounts. It eliminates the need to provision resources in multiple accounts, reducing operational overhead and cost.
AWS Resource Access Manager (RAM)
105
a service that helps you securely manage and retrieve secrets like database credentials, API keys, and other sensitive information. It eliminates the need to hardcode secrets in your application code, which can pose security risks. _________ allows you to rotate secrets on a schedule or on demand, control access using fine-grained permissions, and audit secret rotation activities.
AWS Secrets Manager
106
provides you with a comprehensive view of your security state in AWS and helps you assess your AWS environment against security industry standards and best practices
AWS Security Hub
107
a serverless, on-demand compute engine that allows you to run containers without managing the underlying infrastructure. It's specifically designed to work with Amazon ECS (Elastic Container Service) and EKS (Elastic Kubernetes Service). With _________, you define your container's resource requirements (CPU, memory, networking), and AWS handles provisioning, scaling, and managing the necessary infrastructure, including the underlying servers or clusters
AWS Fargate
108
a serverless, event-driven compute service from Amazon Web Services (AWS). It allows you to run code without provisioning or managing servers. You upload your code as a function, and _________ automatically manages the resources required to execute it.
AWS Lambda
109
a fully managed service that simplifies and centralizes data protection across various AWS services, including hybrid workloads. It provides core data protection features, ransomware recovery capabilities, and compliance insights
AWS Backup
110
a high-performance block storage service for use with Amazon EC2 instances. It provides persistent storage, allowing you to create and attach volumes to your instances for data persistence, boot disks, databases, and other applications that require reliable, block-level storage
AWS Elastic Block Store (EBS)
111
a fully managed, shared file system in the cloud that allows Linux-based applications to share data across multiple AWS compute instances and on-premises servers
AWS Elastic File System (EFS)
112
a service that allows businesses to replicate and recover on-premises and cloud-based applications to AWS, minimizing downtime and data loss in the event of a disaster
AWS Elastic Disaster Recovery
113
a managed service that offers fully managed, third-party file systems within AWS. It provides high-performance file storage for various workloads, including Windows-based applications, high-performance computing (HPC), machine learning, and electronic design automation (EDA).
AWS FSx
114
a hybrid cloud storage service that bridges on-premises infrastructure with AWS cloud storage. It provides local access to AWS cloud storage, enabling applications to utilize services like S3, Glacier, and EBS. It allows you to connect your on-premises applications to AWS storage without requiring them to be moved to the cloud.
AWS Storage Gateway
115
Credits are applied in what order?
Credits are applied in the following order:
Soonest expiring
Least number of applicable products
Oldest credit
116
allow you to use your eligible software licenses from vendors such as Microsoft and Oracle on Amazon EC2
Dedicated host
117
Standard, Intelligent Tiering, Standard Infrequent Access, One Zone Infrequent Access, Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Dive
S3 storage classes
https://aws.amazon.com/s3/storage-classes/
118
Migration strategy: quick migration to AWS with minimal disruption
Rehost - lift 'n' shift - no changes
119
Migration strategy: reduce management effort without significant architectural change
Replatform - lift, tinker, and shift - small optimizations
120
Migration strategy: move from proprietary solutions to cloud-native SaaS products
Repurchase - drop and shop - replace existing with SaaS
121
Migration strategy: modernize apps for scalability, agility, or performance
Refactor - redesign app to leverage cloud features
122
What do EC2, ElastiCache, RDS, Redshift, and DynamoDB have in common?
All can be reserved
123
What do compute, storage, and outbound data transfer have in common?
The three big cost centers of AWS
124
Data transfers within a region (would/would not) be charged; data transfers between regions (would/would not) be charged.
would not; would
125
_____ is to RDS what ______ is to Aurora.
Multi-AZ; read replica
126
Simple, Failover, Geolocation, Geoproximity, Latency, Multivalue answer, and Weighted are all...
Route 53 routing policies
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html
127
CloudTrail logs are stored ______
in an S3 bucket of your choosing, and are therefore automatically encrypted
128
The four phases of Cloud Adoption Framework (CAF)
Envision
Align
Launch
Scale
129
What are the maximum discounts offered for:
Spot Instances
Reserved Dedicated Hosts
Reserved Instances
90%
70%
75%
130
_a service that enables secure, private connectivity between Amazon Virtual Private Clouds (VPCs) and other AWS services, services hosted by other AWS customers, and supported AWS Marketplace partner services, all without exposing data to the internet_
AWS PrivateLink
131
a network hub that simplifies and centralizes connectivity between different AWS resources, such as Virtual Private Clouds (VPCs), and on-premises networks. It acts as a cloud-based router, allowing you to connect multiple networks through a single gateway, reducing the complexity of managing point-to-point connections.
AWS Transit Gateway
132
a highly available, redundant, and horizontally scaled component that allows resources within your VPC (Virtual Private Cloud) to communicate with the public internet. It facilitates both inbound and outbound traffic, enabling instances in public subnets to connect to the internet and vice versa. Think of it as a digital modem, providing a path between your VPC and the broader internet
AWS Internet Gateway
133
a service that helps you optimize your AWS compute resources for better performance and reduced costs. It analyzes the configuration and utilization metrics of your resources, including EC2 instances, Auto Scaling groups, and EBS volumes, and provides actionable recommendations. These recommendations help you right-size your resources, improve performance, and reduce unnecessary spending (and Lambda!)
AWS Compute Optimizer
134
a flexible and scalable multichannel customer engagement service offered by AWS. It allows businesses to send targeted messages to their customers across various channels, including email, SMS, push notifications, voice, and in-app messages. ________ also provides tools for segmenting audiences, managing campaigns, and analyzing engagement metrics
AWS Pinpoint
135
a managed message broker service offered by AWS that simplifies the process of setting up and operating message brokers in the cloud
AWS MQ
136
Storage Gateway offers three volume types:
Tape, File, and Volume
137
provides best practice recommendations in five categories: Cost Optimization, Performance, Security, Fault Tolerance, Service Limits.
AWS Trusted Advisor
138
This kind of database can be used for online-transaction processing (OLTP) workload
RDS
139
Database which supports both key-value and document data models, flexible schema, and cannot be used for online analytical processing
DynamoDB
140
Database which is a popular choice for real-time use cases like Caching, Session Stores, Gaming, Geospatial Services, Real-Time Analytics, and Queuing, but cannot be used for online analytical processing
ElastiCache
141
Two services which have encryption enabled by default.
S3 and AWS Storage Gateway
142
enables developers to build applications with the same machine learning (ML) technology used by Amazon.com for real-time personalized recommendations. ________ makes it easy for developers to build applications capable of delivering a wide array of personalization experiences, including specific product recommendations, personalized product re-ranking, and customized direct marketing
AWS Personalize
143
provides temporary block-level storage for your Amazon EC2 instance. This storage is located on disks that are physically attached to the host computer. _______ is ideal for the temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content, or for data that is replicated across a fleet of instances, such as a load-balanced pool of web servers. ___________ is temporary, data is lost if instance experiences failure or is terminated
Instance Store
144
contains the most frequent & common questions and requests and AWS provided solutions for the same. This should be the starting point of checking for a solution or troubleshooting an issue with AWS services
AWS Knowledge Center
145
Although S3 stores your data across multiple geographically distant Availability Zones by default, you can also invoke _____ to replicate data between distant AWS Regions
Cross-Region Replication
146
a networking connection between two Amazon Virtual Private Clouds (Amazon VPC) that enables you to route traffic between them privately. _______ connection is not transitive, a separate VPC peering connection has to be made between two VPCs that need to talk to each other. With growing VPCs, this gets difficult to manage. What is a better alternative?
VPC peering; AWS Transit Gateway
147
enables you to privately connect your VPC to supported AWS services
VPC Endpoint
148
True or false: the AMI used for a new EC2 instance can come from any region.
False - the AMI must come from the same region where the EC2 instance will reside. However, you can copy an AMI from one region to another if necessary.
149
All CloudWatch billing metric data is stored in which region?
US East (N. Virginia) - us-east-1
150
True or false: AWS Auto Scaling scales in and out, not up and down.
True
151
Elastic Beanstalk is (PaaS/SaaS/IaaS).
PaaS
152
AWS Identity and Access Management (AWS IAM), Amazon CloudFront, Amazon Route 53 and AWS Web Application Firewall (AWS WAF), and DynamoDB are all (global/regional) services.
Global
153
Lambda, Rekognition, EFS, and S3 are all (global/regional) services.
regional
154
a service that provides a secure and simple way to connect to EC2 instances using SSH via web browser. It eliminates the need to manage and distribute SSH keys by utilizing AWS IAM policies for controlling access and AWS CloudTrail for auditing connection requests.
AWS EC2 Instance Connect
155
a feature of Amazon S3 that speeds up long-distance file transfers by routing data through Amazon CloudFront's globally distributed edge locations. This can improve transfer speeds by up to 50-500% for large objects, especially when transferring between distant regions.
AWS S3 Transfer Acceleration (S3TA)
156
a comprehensive monitoring service for AWS applications and infrastructure, providing insights into performance and health. It collects and tracks metrics, logs, and events, allowing users to monitor system health, optimize resource utilization, and respond to performance changes. _________ offers various features like alarms, dashboards, and event triggers, enabling proactive management and troubleshooting. Can also send billing alarms.
AWS CloudWatch
157
Which two services can be used in RI format?
EC2 and RDS
158
a CSV file that provides a detailed overview of the status of all IAM users' credentials in your AWS account. This report helps you monitor the security of your AWS environment and identify potential vulnerabilities.
Credentials Report
159
a fully managed service that helps you test the resilience and reliability of your AWS workloads by injecting faults and observing how they respond. It's a tool for chaos engineering on AWS, allowing you to systematically introduce failures and identify potential issues before they impact users.
AWS Fault Injection Simulator
160
a physical or software appliance on AWS side of a Site-to-Site VPN connection
virtual private gateway
161
an open-source software development framework that lets you define your cloud application infrastructure using familiar programming languages. It simplifies the process of deploying and managing AWS resources by treating your infrastructure as code. Instead of using configuration files like YAML or JSON (like in AWS CloudFormation), _______ allows you to use languages like TypeScript, JavaScript, Python, Java, C#, and Go
AWS Cloud Development Kit (CDK) - which then converts the code into CloudFormation templates.
162
automated reference deployments built by Amazon Web Services (AWS) solutions architects and AWS Partners. ______ help you deploy popular technologies to AWS according to AWS best practices. You can reduce hundreds of manual procedures to a few steps and start using your environment within minutes
AWS Partner Solutions
163
a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (AWS IAM) users or for users that you authenticate (federated users)
AWS Security Token Service
164
a developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code. Integrate _______ into your existing software development workflow to automate code reviews during application development, continuously monitor application performance in production, provide recommendations and visual clues for improving code quality and application performance, and reduce overall cost
AWS CodeGuru
165
a physical or software appliance on customer side of a Site-to-Site VPN connection
customer gateway
166
continuously replicates server-hosted applications and server-hosted databases from any source into AWS using block-level replication of the underlying server. _________ enables you to use AWS Cloud as a disaster recovery Region for an on-premises workload and its environment. It can also be used for disaster recovery of AWS hosted workloads if they consist only of applications and databases hosted on EC2 (i.e. not RDS).
CloudEndure Disaster Recovery
167
What do Neptune, DynamoDB, and DocumentDB have in common?
They are all NoSQL databases
168
a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a central trusted authority. ________ can be used to track each and every application data change and maintains a complete and verifiable history of changes over time
Quantum Ledger Database (Amazon QLDB)
169
provides reference architecture diagrams, vetted architecture solutions, Well-Architected best practices, patterns, icons, etc.
AWS Architecture Center
170
simplifies the building, testing, and deployment of Virtual Machine and container images for use on AWS or on-premises
AWS EC2 Image Builder
171
a graphical user interface you can use to manage your AWS Snowball devices, enabling you to rapidly deploy edge computing workloads and simplify data migration to the cloud
AWS OpsHub
172
lets you convert media files that you have stored in Amazon Simple Storage Service (Amazon S3) into media files in the formats required by consumer playback devices. For example, you can convert large, high-quality digital media files into formats that users can playback on mobile devices, tablets, web browsers, and connected televisions
AWS Elastic Transcoder
173
uses machine learning to predict capacity requirements based on historical data from CloudWatch. The machine learning algorithm consumes the available historical data and calculates capacity that best fits the historical load pattern, and then continuously learns based on new data to make future forecasts more accurate
predictive scaling
174
On what four services can WAF be deployed?
Amazon CloudFront,
Application Load Balancer,
Amazon API Gateway,
AWS AppSync
175
the only cloud storage class that delivers automatic cost savings by moving objects between four access tiers when access patterns change. The ___________ storage class is designed to optimize costs by automatically moving data to the most cost-effective access tier, without operational overhead. It works by storing objects in four access tiers: two low latency access tiers optimized for frequent and infrequent access, and two optional archive access tiers designed for asynchronous access that are optimized for rare access.
S3 Intelligent-Tiering
