AWS Certified CloudOps Engineer - Associate (formerly SysOps): key terms

Flashcards for this exam AWS Certified CloudOps Engineer - Associate (formerly SysOps) guide

• Amazon AuroraAWS cloud-native relational database compatible with MySQL and PostgreSQL, with distributed, self-healing storage.Intermediate
• Amazon CloudFrontAWS content delivery network that caches and delivers content from edge locations worldwide with low latency.Foundational
• Amazon CloudWatchAWS monitoring and observability service for metrics, logs, alarms, dashboards and events.Foundational
• Amazon DynamoDBAWS fully managed serverless NoSQL key-value and document database delivering single-digit millisecond performance at any scale.Foundational
• Amazon EC2 Auto ScalingAWS service that automatically adjusts the number of EC2 instances in an Auto Scaling group to maintain availability and match demand.Foundational
• Amazon Elastic Block Store (EBS)AWS block storage volumes that attach to EC2 instances and persist independently of instance life.Foundational
• Amazon Elastic Compute Cloud (EC2)AWS IaaS service providing resizable virtual servers (instances) billed per second or hour.Foundational
• Amazon Elastic File System (EFS)AWS fully managed, elastic NFS file system for Linux workloads that can be mounted by many instances across AZs.Foundational
• Amazon ElastiCacheAWS managed in-memory caching service compatible with Valkey, Redis OSS and Memcached.Intermediate
• Amazon EventBridgeAWS serverless event bus that routes events from AWS services, SaaS apps and custom sources to targets using rules.Intermediate
• Amazon FSxAWS family of managed file systems: FSx for Windows File Server, Lustre, NetApp ONTAP and OpenZFS.Intermediate
• Amazon GuardDutyAWS intelligent threat detection service analyzing CloudTrail, VPC Flow Logs and DNS logs to find malicious activity.Intermediate
• Amazon InspectorAWS automated vulnerability management service that scans EC2 instances, container images and Lambda functions.Intermediate
• Amazon Machine Image (AMI)Template containing the OS, software and configuration used to launch EC2 instances.Foundational
• Amazon RDS ProxyManaged database proxy that pools and shares connections to RDS and Aurora, improving scalability and failover resilience.Advanced
• Amazon Relational Database Service (RDS)AWS managed relational database service for MySQL, PostgreSQL, MariaDB, Oracle, SQL Server and Db2.Foundational
• Amazon Route 53AWS highly available DNS service providing domain registration, DNS routing and health checking.Foundational
• Amazon S3 GlacierFamily of low-cost S3 archive storage classes: Glacier Instant Retrieval, Glacier Flexible Retrieval and Glacier Deep Archive.Foundational
• Amazon Simple Notification Service (SNS)AWS managed pub/sub messaging service that pushes messages from topics to many subscribers.Foundational
• Amazon Simple Queue Service (SQS)AWS fully managed message queue for decoupling application components; offered as Standard and FIFO queues.Foundational
• Amazon Simple Storage Service (S3)AWS object storage service offering virtually unlimited capacity with 99.999999999 percent (11 nines) durability.Foundational
• Application Load Balancer (ALB)AWS layer 7 load balancer that routes HTTP/HTTPS/gRPC traffic based on host, path, headers and query strings.Intermediate
• AWS BackupCentralized AWS service for policy-based backup of EC2, EBS, RDS, DynamoDB, EFS, FSx, S3 and more.Intermediate
• AWS BudgetsAWS service that sets custom cost, usage, reservation or Savings Plans budgets and alerts or acts when thresholds are exceeded.Foundational
• AWS Certificate Manager (ACM)AWS service that provisions, manages and automatically renews SSL/TLS certificates for AWS integrated services.Intermediate
• AWS CloudFormationAWS's native infrastructure as code service that provisions resources from JSON or YAML templates as stacks.Foundational
• AWS CloudShellBrowser-based shell in the AWS console, pre-authenticated with the signed-in user's credentials and preloaded with the AWS CLI.Foundational
• AWS CloudTrailAWS service that records API activity and account events for governance, auditing and security investigation.Foundational
• AWS CodeBuildA fully managed AWS build service that compiles code, runs tests, and produces artifacts using a buildspec.yml file.Foundational
• AWS CodeDeployAn AWS service that automates application deployments to EC2, on-premises servers, Lambda, and ECS using an appspec file.Intermediate
• AWS CodePipelineA fully managed AWS service that orchestrates release pipelines with source, build, test, approval, and deploy stages.Foundational
• AWS Command Line Interface (AWS CLI)Unified command-line tool for managing AWS services from a terminal or scripts.Foundational
• AWS Compute OptimizerAWS service that uses machine learning on utilization metrics to recommend optimal resource configurations.Intermediate
• AWS ConfigAWS service that records resource configurations and changes over time and evaluates them against rules for compliance.Intermediate
• AWS Control TowerAWS service that sets up and governs a secure multi-account landing zone using AWS Organizations and best-practice controls.Intermediate
• AWS Cost and Usage Report (CUR)The most comprehensive AWS billing dataset, delivered to S3 with line-item detail of usage, pricing and resource IDs.Intermediate
• AWS Cost Anomaly DetectionAWS Cost Management feature that uses machine learning to detect unusual spend and alert owners.Intermediate
• AWS Cost ExplorerAWS tool for visualizing, analyzing and forecasting cost and usage over time.Foundational
• AWS DataSyncOnline data transfer service that automates copying between on-premises storage, other clouds and AWS storage services.Intermediate
• AWS Directory ServiceAWS service offering managed Microsoft Active Directory, AD Connector and Simple AD.Intermediate
• AWS Elastic Disaster Recovery (DRS)AWS service that continuously replicates servers into a low-cost staging area for fast recovery in AWS.Intermediate
• AWS Health DashboardAWS view of service health and account-specific events, such as outages and scheduled maintenance affecting your resources.Foundational
• AWS IAM Identity CenterAWS service (formerly AWS Single Sign-On) that centrally manages workforce access to multiple AWS accounts and applications.Intermediate
• AWS Identity and Access Management (IAM)Global AWS service for controlling authentication and authorization to AWS resources through users, groups, roles and policies.Foundational
• AWS Key Management Service (AWS KMS)AWS managed service for creating and controlling cryptographic keys used to encrypt data across AWS services.Intermediate
• AWS LambdaAWS serverless compute service that runs code in response to events without provisioning servers, billed per request and duration.Foundational
• AWS Management ConsoleWeb-based graphical interface for accessing and managing AWS services.Foundational
• AWS OrganizationsAWS service for centrally managing multiple AWS accounts with organizational units, consolidated billing and policies.Foundational
• AWS Secrets ManagerAWS service for storing, retrieving and automatically rotating secrets such as database credentials and API keys.Intermediate
• AWS Security HubAWS service that aggregates and prioritizes security findings and checks posture against standards across accounts.Intermediate
• AWS Security Token Service (AWS STS)AWS web service that issues temporary, limited-privilege credentials for IAM roles and federated users.Intermediate
• AWS ShieldAWS managed DDoS protection: Shield Standard is automatic and free; Shield Advanced adds enhanced protection and response.Foundational
• AWS Snow FamilyRugged AWS physical devices used to transfer data offline to AWS and to run edge compute in disconnected locations.Foundational
• AWS Step FunctionsAWS serverless workflow service that orchestrates Lambda functions and AWS services as visual state machines.Intermediate
• AWS Storage GatewayHybrid storage service connecting on-premises applications to AWS storage through file, volume and tape interfaces.Intermediate
• AWS Systems Manager (SSM)AWS operations hub for managing EC2 and on-premises servers: patching, remote commands, sessions, inventory, parameters and automation.Intermediate
• AWS Systems Manager Parameter StoreSystems Manager capability for hierarchical storage of configuration data and secrets as plaintext or KMS-encrypted SecureString values.Intermediate
• AWS Transfer FamilyManaged service providing SFTP, FTPS, FTP and AS2 endpoints that store files directly in Amazon S3 or EFS.Intermediate
• AWS Transit Gateway (TGW)Regional AWS network transit hub that interconnects VPCs and on-premises networks through a single gateway with transitive routing.Intermediate
• AWS Trusted AdvisorAWS service that checks your account against best practices for cost, performance, security, fault tolerance, service limits and operations.Foundational
• AWS WAFAWS web application firewall that filters HTTP(S) requests to CloudFront, ALB, API Gateway and other services using rules.Intermediate
• AWS Well-Architected FrameworkAWS guidance for designing and operating reliable, secure, efficient, cost-effective and sustainable cloud workloads across six pillars.Foundational
• Bastion HostHardened server in a public subnet used as a controlled entry point for administrative access to private instances.Foundational
• Change SetA CloudFormation preview of the changes a stack update will make, which can be reviewed before execution.Intermediate
• Cloud Route TableSet of rules in a virtual network that determines where traffic from subnets or gateways is directed.Intermediate
• CloudFormation StackA collection of AWS resources created and managed as a single unit from a CloudFormation template.Intermediate
• CloudWatch AlarmCloudWatch feature that watches a metric or expression and changes state (OK, ALARM, INSUFFICIENT_DATA) to trigger actions.Intermediate
• CloudWatch LogsCloudWatch capability for collecting, storing, searching and analyzing log data from AWS services, applications and hosts.Intermediate
• Consolidated BillingAWS Organizations feature that combines all member accounts' charges into one bill paid by the management account.Foundational
• Cost Optimization PillarWell-architected pillar focused on delivering business value at the lowest price point by avoiding unnecessary costs.Foundational
• Cross-Account RoleIAM role in one AWS account that principals in another account are trusted to assume, enabling access without sharing credentials.Intermediate
• Dead Letter Queue (DLQ)Queue receiving messages that could not be processed after a maximum number of delivery attempts.Intermediate
• Dedicated InstanceAWS EC2 instance that runs on hardware dedicated to a single customer but without host-level placement control.Intermediate
• Detective GuardrailGovernance control that identifies noncompliant resources after creation and reports or remediates them.Intermediate
• DynamoDB Capacity ModesDynamoDB billing options: on-demand (pay per request) or provisioned (set read and write capacity units, optionally auto scaled).Advanced
• EBS SnapshotPoint-in-time, incremental backup of an EBS volume stored durably by AWS and usable to create new volumes in any AZ.Intermediate
• EBS Volume TypesEBS options: SSD-backed gp3/gp2 and io2/io1, and HDD-backed st1 and sc1, each with different performance and price.Intermediate
• EC2 Instance TypesNamed EC2 configurations of vCPU, memory, storage and networking grouped into families such as general purpose, compute and memory optimized.Intermediate
• EC2 Placement GroupsEC2 feature controlling how instances are placed on underlying hardware: cluster, spread or partition.Advanced
• EC2 User DataScript or cloud-init data passed to an EC2 instance that runs at first boot to bootstrap configuration.Intermediate
• Elastic IP Address (EIP)Static public IPv4 address allocated to an AWS account that can be remapped between instances or network interfaces.Foundational
• Elastic Load Balancing (ELB)AWS managed service that distributes incoming traffic across targets in multiple AZs, including ALB, NLB and GWLB.Foundational
• Elastic Network Interface (ENI)Virtual network card in a VPC that can have private and public IPs, security groups and a MAC address, and can move between instances.Intermediate
• Health CheckPeriodic probe a load balancer, DNS service or orchestrator uses to determine whether a target is healthy and should receive traffic.Foundational
• IAM Access AnalyzerAWS feature that identifies resources shared externally, unused access and policy issues using automated reasoning.Advanced
• IAM GroupCollection of IAM users that share attached permission policies.Foundational
• IAM PolicyJSON document defining permissions with Effect, Action, Resource and optional Condition elements.Foundational
• IAM Policy Evaluation LogicRules AWS uses to decide a request: explicit deny wins, then an allow is required from all applicable policy types; otherwise implicit deny.Advanced
• IAM RoleAWS identity with permission policies that trusted principals assume to obtain temporary security credentials.Foundational
• IAM UserAWS identity representing a person or application with long-term credentials such as a password or access keys.Foundational
• Instance Metadata Service (IMDS)Link-local endpoint (169.254.169.254) from which an EC2 instance reads its metadata, user data and role credentials.Advanced
• Instance StoreTemporary block storage physically attached to the EC2 host, offering very high I/O but losing data when the instance stops or terminates.Intermediate
• Internet Gateway (IGW)Horizontally scaled, highly available VPC component that enables communication between a VPC and the internet.Foundational
• Launch TemplateVersioned AWS configuration specifying AMI, instance type, key pair, security groups and other settings used to launch EC2 instances.Intermediate
• NAT GatewayManaged network address translation service that lets private-subnet resources initiate outbound internet connections while blocking inbound ones.Foundational
• Network ACL (NACL)Stateless, subnet-level firewall in AWS VPCs with numbered allow and deny rules evaluated in order.Intermediate
• Network Load Balancer (NLB)AWS layer 4 load balancer for TCP, UDP and TLS traffic offering ultra-low latency and static IP addresses per AZ.Intermediate
• On-Demand Capacity Reservation (ODCR)AWS feature that reserves EC2 capacity in a specific AZ for any duration, without a term commitment.Advanced
• On-Demand InstancesEC2 pricing model paying per second or hour for compute with no long-term commitment.Foundational
• Operational Excellence PillarWell-architected pillar focused on running and monitoring systems and continually improving processes and procedures.Foundational
• Organizational Unit (OU)Container for AWS accounts within AWS Organizations used to group accounts and apply policies hierarchically.Intermediate
• Preventive GuardrailGovernance control that blocks noncompliant actions before they happen, typically implemented with policies.Intermediate
• Provisioned IOPS (PIOPS)Storage performance option where a specific number of I/O operations per second is purchased and guaranteed for a volume.Intermediate
• RDS Multi-AZRDS deployment option that maintains a synchronously replicated standby in another AZ with automatic failover.Intermediate
• Read ReplicaAsynchronously replicated, read-only copy of a database used to offload read traffic and support disaster recovery.Intermediate
• Reserved Instances (RI)AWS billing discount (up to about 72 percent) for committing to a specific instance configuration for 1 or 3 years.Foundational
• Resource TaggingAttaching key-value metadata labels to cloud resources for cost allocation, automation, access control and organization.Foundational
• Resource-Based PolicyPolicy attached directly to a resource, such as an S3 bucket or KMS key, specifying which principals can access it.Intermediate
• RightsizingMatching resource types and sizes to actual workload requirements to eliminate waste while maintaining performance.Foundational
• Root UserThe AWS account's original identity, created with the sign-up email, that has unrestricted access to all resources and billing.Foundational
• Route 53 Routing PoliciesRoute 53 options determining how DNS queries are answered: simple, weighted, latency, failover, geolocation, geoproximity, multivalue and IP-based.Intermediate
• RunbookA documented procedure describing how to perform a routine operational task or respond to a specific alert.Foundational
• S3 Block Public AccessAccount- and bucket-level S3 settings that override policies and ACLs to prevent public access to buckets and objects.Foundational
• S3 Bucket PolicyResource-based JSON policy attached to an S3 bucket controlling which principals can perform which actions on it.Intermediate
• S3 Intelligent-TieringS3 storage class that automatically moves objects between access tiers based on usage, with no retrieval fees.Intermediate
• S3 Lifecycle ConfigurationRules that automatically transition S3 objects to cheaper storage classes or expire them after set periods.Intermediate
• S3 Object LockS3 feature providing write-once-read-many (WORM) protection with retention periods and legal holds.Intermediate
• S3 ReplicationAutomatic asynchronous copying of S3 objects to another bucket in the same region (SRR) or a different region (CRR).Intermediate
• S3 Storage ClassesAmazon S3 tiers priced by access frequency and availability, from S3 Standard to Glacier Deep Archive.Foundational
• S3 Transfer AccelerationS3 feature that speeds long-distance uploads by routing data through CloudFront edge locations over the AWS backbone.Intermediate
• S3 VersioningBucket setting that keeps multiple versions of each object to protect against accidental overwrites and deletions.Foundational
• Savings PlansAWS flexible pricing model offering discounts in exchange for a commitment to a consistent dollar amount of compute usage per hour for 1 or 3 years.Foundational
• Security Group (SG)Stateful virtual firewall attached to instances or network interfaces that allows specified inbound and outbound traffic.Foundational
• Service Control Policy (SCP)AWS Organizations policy that sets the maximum available permissions for IAM principals in member accounts.Intermediate
• Session ManagerAWS Systems Manager capability providing browser or CLI shell access to instances without open inbound ports, bastions or SSH keys.Intermediate
• Spot InstancesSpare EC2 capacity offered at up to 90 percent discount that AWS can reclaim with a two-minute interruption notice.Foundational
• StackSetsA CloudFormation feature for deploying stacks across multiple AWS accounts and Regions from a single operation.Advanced
• Synthetic MonitoringProactively testing an application by running scripted transactions or probes from external locations at regular intervals.Intermediate
• Virtual Private Cloud (VPC)Logically isolated virtual network in a public cloud where customers define IP ranges, subnets, routing and security controls.Foundational
• VPC EndpointAWS construct for privately connecting a VPC to supported services without an internet gateway, NAT or public IPs.Intermediate
• VPC Flow LogsFeature that captures metadata about IP traffic going to and from network interfaces in a virtual network.Intermediate
• VPC PeeringPrivate networking connection between two virtual networks that routes traffic using private IP addresses.Intermediate