AWS Certified Cloud Practitioner: key terms

Flashcards for this exam AWS Certified Cloud Practitioner guide

• 7 Rs of Cloud MigrationSeven migration strategies: retire, retain, rehost, relocate, repurchase, replatform and refactor.Foundational
• Amazon API GatewayAWS fully managed service to create, publish, secure and monitor REST, HTTP and WebSocket APIs.Intermediate
• Amazon AthenaServerless interactive query service that runs SQL directly on data in Amazon S3, billed per data scanned.Foundational
• Amazon AuroraAWS cloud-native relational database compatible with MySQL and PostgreSQL, with distributed, self-healing storage.Intermediate
• Amazon CloudFrontAWS content delivery network that caches and delivers content from edge locations worldwide with low latency.Foundational
• Amazon CloudWatchAWS monitoring and observability service for metrics, logs, alarms, dashboards and events.Foundational
• Amazon DetectiveAWS service that builds behavior graphs from logs to help investigate the root cause of security findings.Advanced
• Amazon DocumentDBAWS managed document database with MongoDB API compatibility.Intermediate
• Amazon DynamoDBAWS fully managed serverless NoSQL key-value and document database delivering single-digit millisecond performance at any scale.Foundational
• Amazon EC2 Auto ScalingAWS service that automatically adjusts the number of EC2 instances in an Auto Scaling group to maintain availability and match demand.Foundational
• Amazon Elastic Block Store (EBS)AWS block storage volumes that attach to EC2 instances and persist independently of instance life.Foundational
• Amazon Elastic Compute Cloud (EC2)AWS IaaS service providing resizable virtual servers (instances) billed per second or hour.Foundational
• Amazon Elastic File System (EFS)AWS fully managed, elastic NFS file system for Linux workloads that can be mounted by many instances across AZs.Foundational
• Amazon GuardDutyAWS intelligent threat detection service analyzing CloudTrail, VPC Flow Logs and DNS logs to find malicious activity.Intermediate
• Amazon InspectorAWS automated vulnerability management service that scans EC2 instances, container images and Lambda functions.Intermediate
• Amazon LightsailSimplified AWS service offering virtual private servers, databases and load balancers at a predictable monthly price.Foundational
• Amazon Machine Image (AMI)Template containing the OS, software and configuration used to launch EC2 instances.Foundational
• Amazon MacieAWS data security service that uses machine learning and pattern matching to discover sensitive data such as PII in Amazon S3.Intermediate
• Amazon NeptuneAWS fully managed graph database supporting property graph (Gremlin, openCypher) and RDF (SPARQL) models.Intermediate
• Amazon RedshiftAWS fully managed, petabyte-scale columnar data warehouse for analytics using SQL.Foundational
• Amazon Relational Database Service (RDS)AWS managed relational database service for MySQL, PostgreSQL, MariaDB, Oracle, SQL Server and Db2.Foundational
• Amazon Route 53AWS highly available DNS service providing domain registration, DNS routing and health checking.Foundational
• Amazon S3 GlacierFamily of low-cost S3 archive storage classes: Glacier Instant Retrieval, Glacier Flexible Retrieval and Glacier Deep Archive.Foundational
• Amazon Simple Notification Service (SNS)AWS managed pub/sub messaging service that pushes messages from topics to many subscribers.Foundational
• Amazon Simple Queue Service (SQS)AWS fully managed message queue for decoupling application components; offered as Standard and FIFO queues.Foundational
• Amazon Simple Storage Service (S3)AWS object storage service offering virtually unlimited capacity with 99.999999999 percent (11 nines) durability.Foundational
• Amazon WorkSpacesAWS managed Desktop as a Service providing persistent Windows or Linux virtual desktops.Foundational
• Availability Zone (AZ)One or more physically separate data centers within a region with independent power, cooling and networking.Foundational
• AWS Application Migration Service (AWS MGN)AWS's primary rehost (lift-and-shift) service that continuously replicates servers to AWS and launches them with minimal cutover downtime.Intermediate
• AWS ArtifactAWS self-service portal for on-demand access to compliance reports and agreements such as SOC, PCI and ISO reports and the BAA.Foundational
• AWS Audit ManagerAWS service that continuously collects evidence from your AWS usage to simplify audit preparation against frameworks.Advanced
• AWS BatchFully managed AWS service for running batch computing jobs at any scale on EC2, Spot or Fargate.Intermediate
• AWS BudgetsAWS service that sets custom cost, usage, reservation or Savings Plans budgets and alerts or acts when thresholds are exceeded.Foundational
• AWS Cloud Adoption Framework (AWS CAF)AWS guidance that helps organizations plan and execute cloud transformation through six perspectives and four phases.Foundational
• AWS CloudShellBrowser-based shell in the AWS console, pre-authenticated with the signed-in user's credentials and preloaded with the AWS CLI.Foundational
• AWS CloudTrailAWS service that records API activity and account events for governance, auditing and security investigation.Foundational
• AWS Command Line Interface (AWS CLI)Unified command-line tool for managing AWS services from a terminal or scripts.Foundational
• AWS Compute OptimizerAWS service that uses machine learning on utilization metrics to recommend optimal resource configurations.Intermediate
• AWS ConfigAWS service that records resource configurations and changes over time and evaluates them against rules for compliance.Intermediate
• AWS Cost and Usage Report (CUR)The most comprehensive AWS billing dataset, delivered to S3 with line-item detail of usage, pricing and resource IDs.Intermediate
• AWS Cost Anomaly DetectionAWS Cost Management feature that uses machine learning to detect unusual spend and alert owners.Intermediate
• AWS Cost ExplorerAWS tool for visualizing, analyzing and forecasting cost and usage over time.Foundational
• AWS Database Migration Service (AWS DMS)AWS service that migrates databases to AWS with minimal downtime using full load and ongoing change data capture.Intermediate
• AWS Direct Connect (DX)AWS service providing a dedicated private network connection from on-premises to AWS that bypasses the public internet.Intermediate
• AWS Elastic BeanstalkAWS PaaS that deploys and manages web applications on EC2, load balancers and Auto Scaling from uploaded code.Intermediate
• AWS Free TierAWS program giving new and existing customers limited free usage of services and, for new accounts, promotional credits.Foundational
• AWS Global AcceleratorAWS networking service providing two static anycast IPs that route users over the AWS backbone to optimal regional endpoints.Intermediate
• AWS Health DashboardAWS view of service health and account-specific events, such as outages and scheduled maintenance affecting your resources.Foundational
• AWS IAM Identity CenterAWS service (formerly AWS Single Sign-On) that centrally manages workforce access to multiple AWS accounts and applications.Intermediate
• AWS Identity and Access Management (IAM)Global AWS service for controlling authentication and authorization to AWS resources through users, groups, roles and policies.Foundational
• AWS Key Management Service (AWS KMS)AWS managed service for creating and controlling cryptographic keys used to encrypt data across AWS services.Intermediate
• AWS LambdaAWS serverless compute service that runs code in response to events without provisioning servers, billed per request and duration.Foundational
• AWS Local ZonesAWS infrastructure extension placing compute, storage and database services in metro areas close to large user populations.Intermediate
• AWS Management ConsoleWeb-based graphical interface for accessing and managing AWS services.Foundational
• AWS MarketplaceCurated digital catalog for finding, buying and deploying third-party software, data and services that run on AWS.Foundational
• AWS Migration EvaluatorAWS service that analyzes on-premises inventory and utilization to build a data-driven migration business case and TCO.Intermediate
• AWS OrganizationsAWS service for centrally managing multiple AWS accounts with organizational units, consolidated billing and policies.Foundational
• AWS OutpostsFully managed AWS hardware racks or servers installed in a customer's data center to run AWS services on premises.Intermediate
• AWS Pricing CalculatorFree AWS web tool for estimating the monthly cost of planned AWS architectures.Foundational
• AWS SDKLanguage-specific software development kits for calling AWS service APIs from application code.Foundational
• AWS Security HubAWS service that aggregates and prioritizes security findings and checks posture against standards across accounts.Intermediate
• AWS ShieldAWS managed DDoS protection: Shield Standard is automatic and free; Shield Advanced adds enhanced protection and response.Foundational
• AWS Snow FamilyRugged AWS physical devices used to transfer data offline to AWS and to run edge compute in disconnected locations.Foundational
• AWS Storage GatewayHybrid storage service connecting on-premises applications to AWS storage through file, volume and tape interfaces.Intermediate
• AWS Support PlansTiered AWS support offerings ranging from free Basic support to Enterprise levels with designated technical account managers.Foundational
• AWS Systems Manager (SSM)AWS operations hub for managing EC2 and on-premises servers: patching, remote commands, sessions, inventory, parameters and automation.Intermediate
• AWS Trusted AdvisorAWS service that checks your account against best practices for cost, performance, security, fault tolerance, service limits and operations.Foundational
• AWS WAFAWS web application firewall that filters HTTP(S) requests to CloudFront, ALB, API Gateway and other services using rules.Intermediate
• AWS WavelengthAWS infrastructure embedded in telecommunications providers' 5G networks for ultra-low-latency mobile applications.Intermediate
• AWS Well-Architected FrameworkAWS guidance for designing and operating reliable, secure, efficient, cost-effective and sustainable cloud workloads across six pillars.Foundational
• AWS Well-Architected ToolFree AWS console tool for reviewing workloads against the Well-Architected Framework pillars and tracking improvement plans.Foundational
• Block StorageStorage that presents raw volumes divided into fixed-size blocks to an operating system, which formats them with a file system.Foundational
• Capital Expenditure (CapEx)Up-front spending on physical assets such as servers and data centers, depreciated over their useful life.Foundational
• Cloud ComputingDelivery of on-demand computing resources such as servers, storage, databases and software over a network with pay-as-you-go pricing.Foundational
• Commitment-Based DiscountLower cloud pricing in exchange for committing to a level of usage or spend over a term, typically 1 or 3 years.Intermediate
• Consolidated BillingAWS Organizations feature that combines all member accounts' charges into one bill paid by the management account.Foundational
• Consumption-Based PricingPricing model where customers pay only for the cloud resources they actually use, also called pay-as-you-go.Foundational
• Cost Optimization PillarWell-architected pillar focused on delivering business value at the lowest price point by avoiding unnecessary costs.Foundational
• Database as a Service (DBaaS)Managed cloud database offering where the provider handles provisioning, patching, backups and high availability.Foundational
• Dedicated HostPhysical server fully allocated to one customer, giving visibility of sockets and cores for license compliance.Intermediate
• Dedicated InstanceAWS EC2 instance that runs on hardware dedicated to a single customer but without host-level placement control.Intermediate
• Desktop as a Service (DaaS)Cloud-hosted virtual desktops delivered to users over the network, managed by a provider on a subscription basis.Foundational
• Disaster Recovery (DR)Policies, tools and procedures for restoring IT systems and data after a disruptive event such as a regional outage or ransomware.Foundational
• EC2 Instance TypesNamed EC2 configurations of vCPU, memory, storage and networking grouped into families such as general purpose, compute and memory optimized.Intermediate
• Economies of ScaleCost advantage cloud providers gain from enormous purchasing and operating scale, passed to customers as lower prices.Foundational
• Edge ComputingProcessing data near where it is generated, such as on devices or local sites, instead of in a centralized cloud region.Foundational
• Edge LocationProvider point of presence near end users used to cache content and terminate connections for CDN and DNS services.Foundational
• Egress ChargesFees cloud providers charge for data transferred out of their network to the internet or across regions and zones.Foundational
• Elastic IP Address (EIP)Static public IPv4 address allocated to an AWS account that can be remapped between instances or network interfaces.Foundational
• Elastic Load Balancing (ELB)AWS managed service that distributes incoming traffic across targets in multiple AZs, including ALB, NLB and GWLB.Foundational
• ElasticityAbility of a system to automatically add and remove resources in near real time to match fluctuating demand.Foundational
• Fault ToleranceAbility of a system to continue operating without interruption when one or more components fail.Intermediate
• Federal Risk and Authorization Management Program (FedRAMP)U.S. government program that standardizes security assessment and authorization of cloud products used by federal agencies.Intermediate
• FinOpsOperational framework and cultural practice that maximizes the business value of cloud through collaboration between engineering, finance and business teams.Foundational
• Function as a Service (FaaS)Serverless compute model that runs individual functions in response to events, billed per invocation and execution time.Foundational
• Government Cloud (GovCloud)Isolated cloud regions built for government agencies and contractors with stringent compliance such as FedRAMP High and ITAR.Intermediate
• High Availability (HA)Design goal of keeping a system operational and accessible for a high percentage of time by eliminating single points of failure.Foundational
• Horizontal ScalingIncreasing or decreasing capacity by adding or removing instances or nodes; also called scaling out/in.Foundational
• Hybrid CloudDeployment model combining two or more distinct clouds, typically private and public, connected to allow data and app portability.Foundational
• IAM GroupCollection of IAM users that share attached permission policies.Foundational
• IAM PolicyJSON document defining permissions with Effect, Action, Resource and optional Condition elements.Foundational
• IAM RoleAWS identity with permission policies that trusted principals assume to obtain temporary security credentials.Foundational
• IAM UserAWS identity representing a person or application with long-term credentials such as a password or access keys.Foundational
• Infrastructure as a Service (IaaS)Cloud service model providing virtualized compute, storage and networking; the customer manages the OS, runtime, apps and data.Foundational
• Internet Gateway (IGW)Horizontally scaled, highly available VPC component that enables communication between a VPC and the internet.Foundational
• Loose CouplingDesign principle where components interact through well-defined interfaces or queues so failure or change in one does not break others.Foundational
• Network ACL (NACL)Stateless, subnet-level firewall in AWS VPCs with numbered allow and deny rules evaluated in order.Intermediate
• Object StorageStorage architecture that manages data as objects with metadata and unique keys in a flat namespace, accessed via HTTP APIs.Foundational
• On-Demand InstancesEC2 pricing model paying per second or hour for compute with no long-term commitment.Foundational
• Operational Excellence PillarWell-architected pillar focused on running and monitoring systems and continually improving processes and procedures.Foundational
• Operational Expenditure (OpEx)Ongoing spending on services and operations, such as monthly cloud bills, expensed in the period incurred.Foundational
• Performance Efficiency PillarWell-architected pillar focused on using computing resources efficiently to meet requirements as demand and technology evolve.Foundational
• Platform as a Service (PaaS)Cloud service model where the provider manages infrastructure and runtime; the customer deploys and manages applications and data.Foundational
• Private CloudDeployment model where cloud infrastructure is provisioned for exclusive use by a single organization, on or off premises.Foundational
• Public CloudDeployment model where infrastructure is owned by a provider and shared among the general public on a pay-per-use basis.Foundational
• Rapid ElasticityNIST cloud characteristic: capabilities can be provisioned and released quickly, often automatically, to scale with demand.Foundational
• RDS Multi-AZRDS deployment option that maintains a synchronously replicated standby in another AZ with automatic failover.Intermediate
• Recovery Point Objective (RPO)Maximum acceptable amount of data loss measured in time before a disruption.Foundational
• Recovery Time Objective (RTO)Maximum acceptable time to restore a service after a disruption.Foundational
• RefactorMigration strategy that re-architects an application to use cloud-native features, also called re-architect.Foundational
• RegionSeparate geographic area where a cloud provider operates one or more data centers, usually grouped into availability zones.Foundational
• RehostMigration strategy that moves applications to the cloud without modification, commonly called lift and shift.Foundational
• Reliability PillarWell-architected pillar focused on workloads performing their intended function correctly and recovering quickly from failure.Foundational
• RelocateMigration strategy that moves workloads to the cloud at the hypervisor level without purchasing new hardware, rewriting or converting VMs.Intermediate
• ReplatformMigration strategy that makes a few cloud optimizations without changing core architecture, sometimes called lift, tinker and shift.Foundational
• RepurchaseMigration strategy that replaces an existing application with a different product, typically a SaaS offering; also called drop and shop.Foundational
• Reserved Instances (RI)AWS billing discount (up to about 72 percent) for committing to a specific instance configuration for 1 or 3 years.Foundational
• Resource TaggingAttaching key-value metadata labels to cloud resources for cost allocation, automation, access control and organization.Foundational
• RetainMigration strategy of keeping an application in its current environment for now, also called revisit.Foundational
• RetireMigration strategy of decommissioning applications that are no longer needed rather than moving them.Foundational
• RightsizingMatching resource types and sizes to actual workload requirements to eliminate waste while maintaining performance.Foundational
• Root UserThe AWS account's original identity, created with the sign-up email, that has unrestricted access to all resources and billing.Foundational
• S3 Block Public AccessAccount- and bucket-level S3 settings that override policies and ACLs to prevent public access to buckets and objects.Foundational
• S3 Intelligent-TieringS3 storage class that automatically moves objects between access tiers based on usage, with no retrieval fees.Intermediate
• S3 Storage ClassesAmazon S3 tiers priced by access frequency and availability, from S3 Standard to Glacier Deep Archive.Foundational
• S3 VersioningBucket setting that keeps multiple versions of each object to protect against accidental overwrites and deletions.Foundational
• Savings PlansAWS flexible pricing model offering discounts in exchange for a commitment to a consistent dollar amount of compute usage per hour for 1 or 3 years.Foundational
• ScalabilityAbility of a system to handle increased load by adding resources, either vertically or horizontally.Foundational
• Security Group (SG)Stateful virtual firewall attached to instances or network interfaces that allows specified inbound and outbound traffic.Foundational
• Security PillarWell-architected pillar focused on protecting data, systems and assets through identity, detection, infrastructure and data protection, and incident response.Foundational
• Serverless ComputingCloud execution model where the provider manages servers and scaling, and customers pay only for actual usage.Foundational
• Service Level Agreement (SLA)Contractual commitment from a provider defining service availability or performance targets and remedies if they are missed.Foundational
• Shared Responsibility ModelFramework dividing security and operational duties between the cloud provider (of the cloud) and customer (in the cloud).Foundational
• Single Point of Failure (SPOF)Component whose failure stops the entire system because no redundant alternative exists.Foundational
• Site-to-Site VPNEncrypted IPsec tunnel over the internet connecting an on-premises network to a cloud virtual network.Foundational
• Software as a Service (SaaS)Cloud service model delivering complete applications over the internet; the provider manages everything except user data and access.Foundational
• Spot InstancesSpare EC2 capacity offered at up to 90 percent discount that AWS can reclaim with a two-minute interruption notice.Foundational
• Sustainability PillarAWS Well-Architected pillar, added in 2021, focused on minimizing the environmental impact of cloud workloads.Foundational
• Total Cost of Ownership (TCO)Full cost of owning and operating an IT system over its life, including hardware, facilities, power, staff and licensing.Foundational
• Vertical ScalingIncreasing or decreasing capacity by changing the size of an existing resource, such as more CPU or RAM; also called scaling up/down.Foundational
• Virtual Private Cloud (VPC)Logically isolated virtual network in a public cloud where customers define IP ranges, subnets, routing and security controls.Foundational