Aws Cloud Practicioner

Front 1

WHAT IS CLOUD COMPUTING

Back 1

Cloud computing is the on-demand delivery of compute power, database storage, applications and other IT resources through a cloud services platform via the Internet with pay-as-you-go pricing.

Front 2

WHAT DOES CLOUD COMPUTING PROVIDE

Back 2

Cloud computing provides a simple way to access servers, storage, databases and a broad set of application services over the Internet.

Front 3

WHAT ARE CLOUD BASICS

Back 3

COMPUTE

STORAGE

NETWORK

Front 4

WHAT ARE THE SIX ADVANTAGES OF CLOUD

Back 4

. Trade capital expense for variable expense.

.Benefit from massive economies of scale.

.Stop guessing about capacity.

.Increase speed and agility.

.Stop spending money running and maintaining .data centres.

.Go global in minutes.

Front 5

WHAT IS THE TRADE CAPITAL EXPENSE FOR AWS

Back 5

Instead of having to invest heavily in data centers and servers before you know how you’re going to use them, you can pay only when you consume computing resources, and pay only for how much you consume.

Front 6

WHAT ARE THE BENIFITS FOR ECONOMIES SCALE

Back 6

By using cloud computing, you can achieve a lower variable cost than you can get on your own.

Front 7

HOW DOES AWS Increase speed and agility

Back 7

In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes.

Front 8

HOW CAN YOU GO GLOBAL THROUGH AWS

Back 8

Easily deploy your application in multiple regions around the world with just a few clicks. This means you can provide lower latency and a better experience for your customers at minimal cost.

Front 9

WHAT ARE THE CLOUD COMPUTING MODELS

Back 9

. IAAS

.PAAS

. SAAS

Front 10

WHAT IS IAAS

Back 10

Infrastructure as a Service (IaaS) contains the basic building blocks for cloud IT and typically provide access to networking features.

Front 11

WHAT IS PAAS

Back 11

Platform as a Service (PaaS) removes the need for your organization to manage the underlying infrastructure (usually hardware and operating systems) and allows you to focus on the deployment and management of your applications.

Front 12

WHAT IS SAAS

Back 12

Software as a Service (SaaS) provides you with a completed product that is run and managed by the service provider.

Front 13

WHAT ARE THE TYPES OF CLOUD DEPLOYMENT

Back 13

PUBLIC CLOUD

HYBRID CLOUD

PRIVATE CLOUD

Front 14

WHAT IS PUBLIC CLOUD

Back 14

A cloud-based application is fully deployed in the cloud and all parts of the application run in the cloud.

Front 15

HYBRID

Back 15

A hybrid deployment is a way to connect infrastructure and applications between cloud-based resources and existing resources that are not located in the cloud.

Front 16

ON PREMISES

Back 16

The deployment of resources on-premises, using virtualization and resource management tools, is sometimes called the “private cloud.”

Front 17

WHAT IS A REGION

Back 17

A region is a geographical area.

Each region consists of 2 or more availability zones.

Each Amazon Region is designed to be completely isolated from the other Amazon Regions.

Front 18

WHAT ARE AVALIBLITY ZONES

Back 18

Availability Zones are physically separate and isolated from each other.

Front 19

WHAT IS IAM

Back 19

AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources.

Front 20

HOW CAN Identity Federation BE CONFIGURED

Back 20

Identity Federation (including AD, Facebook etc.) can be configured allowing secure access to resources in an AWS account without creating an IAM user account.

Front 21

WHAT IS MFA

Back 21

Multi-factor authentication (MFA) can be enabled/enforced for the AWS account and for individual users under the account.

Front 22

WHAT IS ROOT ACCOUNT

Back 22

The “root account” is the account created when you setup the AWS account. It has complete Admin access and is the only account that has this access by default.

Front 23

WHAT IS AN IAM USER

Back 23

An IAM user is an entity that represents a person or service.

Front 24

The account root user ____________ are the email address used to create the account and a password.

Back 24

CREDENTIALS

Front 25

You can have up to _________ users per AWS account.

Back 25

5000

Front 26

Each user account has a_________ and an _______ which uniquely identifies the user across AWS.

Back 26

friendly name,ARN

Front 27

The Access Key ID and ______________ can only be used once and must be regenerated if lost.

Back 27

Secret Access Key

Front 28

WHAT ARE GROUPS

Back 28

Groups are collections of users and have policies attached to them.

A group is not an identity and cannot be identified as a principal in an IAM policy.

Front 29

WHAT ARE ROLES

Back 29

Roles are created and then “assumed” by trusted entities and define a set of permissions for making AWS service requests.

Front 30

Policies are __________ that define permissions and can be applied to users, groups and roles.

Back 30

documents

Front 31

WHAT IS STS

Back 31

The AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for IAM users or for users that you authenticate (federated users).

Front 32

The region in which temporary __________ are requested must be enabled.

Back 32

credentials

Front 33

_________ will always work globally.

Back 33

Credentials

Front 34

WHAT IS Amazon EC2

Back 34

Amazon Elastic Compute Cloud (Amazon EC2) is a web service in the AWS Compute suite of products that provides secure, resizable compute capacity in the cloud.

Front 35

_________________________ is a web service in the AWS Compute suite of products that provides secure, resizable compute capacity in the cloud.

Back 35

Amazon Elastic Compute Cloud (Amazon EC2)

Front 36

WHAT IS AMI

Back 36

An Amazon Machine Image (AMI) is a special type of virtual appliance that is used to create a virtual machine within the Amazon Elastic Compute Cloud (“EC2”).

Front 37

WHAT IS On-demand INSTANCE

Back 37

Good for users that want the low cost and flexibility of EC2 without any up-front payment or long term commitment.

Front 38

WHAT IS Reserved INSTANCE

Back 38

Applications with steady state or predictable usage.

Front 39

what is AWS LAMBDA

Back 39

AWS Lambda is a serverless computing technology that allows you to run code without provisioning or managing servers.

Front 40

Amazon Lightsail

Back 40

Amazon Lightsail is one of the newest services in the AWS Compute suite of products. Amazon Lightsail is great for users who do not have deep AWS technical expertise as it make it very easy to provision compute services.

Front 41

Amazon Simple Storage Service

Back 41

Amazon S3 is object storage built to store and retrieve any amount of data from anywhere – web sites and mobile apps, corporate applications, and data from IoT sensors or devices.

Front 42

Backup and Storage

Back 42

Provide data backup and storage services for others.

Front 43

Application Hosting

Back 43

Provide services that deploy, install, and manage web applications.

Front 44

Media Hosting

Back 44

Build a redundant, scalable, and highly available infrastructure that hosts video, photo,

Front 45

Software Delivery

Back 45

Host your software applications that customers can download.

Front 46

Static Website

Back 46

you can configure a static website to run from an S3 bucket.

Front 47

AWS Snowball

Back 47

With AWS Snowball (Snowball), you can transfer hundreds of terabytes or petabytes of data between your on-premises data centers and Amazon Simple Storage Service (Amazon S3).

Front 48

Amazon Elastic Block Store (EBS)

Back 48

Amazon Elastic Block Store (EBS)

Front 49

INSTANCE STORES

Back 49

Instance store volumes are high performance local disks that are physically attached to the host computer on which an EC2 instance runs.

Front 50

Amazon Elastic File System (EFS)

Back 50

EFS is a fully-managed service that makes it easy to set up and scale file storage in the Amazon Cloud.

Front 51

The VPC of the connecting instance must have _______ hostnames enabled.

Back 51

DNS

Front 52

______________ is designed to burst to allow high throughput levels for periods of time.

Back 52

Amazon EFS

Front 53

Amazon Virtual Private Cloud (VPC)

Back 53

A virtual private cloud (VPC) is a virtual network dedicated to your AWS account.

Front 54

You can launch your AWS resources, such as _____________, into your VPC.

Back 54

Amazon EC2 instances

Front 55

A ____________ spans all the Availability Zones in the region.

Back 55

VPC

Front 56

A Virtual Private Cloud

Back 56

A logically isolated virtual network in the AWS cloud. You define a VPC’s IP

Front 57

Subnet

Back 57

A segment of a VPC’s IP address range where you can place groups of isolated resources

Front 58

Internet Gateway

Back 58

The Amazon VPC side of a connection to the public Internet.

Front 59

NAT Gateway

Back 59

A highly available, managed Network Address Translation (NAT) service for your resources in a private subnet to access the Internet.

Front 60

Hardware VPN Connection

Back 60

A hardware-based VPN connection between your Amazon VPC and your datacenter, home network, or co-location facility.

Front 61

Virtual Private Gateway

Back 61

The Amazon VPC side of a VPN connection.

Front 62

Customer Gateway:

Back 62

Your side of a VPN connection.

Front 63

Router

Back 63

Routers interconnect subnets and direct traffic between Internet gateways, virtual private gateways, NAT gateways, and subnets.

Front 64

Peering Connection:

Back 64

A peering connection enables you to route traffic via private IP addresses between two peered VPCs.

Front 65

VPC Endpoints

Back 65

Enables private connectivity to services hosted in AWS, from within your VPC without using an Internet Gateway, VPN, Network Address Translation (NAT) devices, or firewall proxies.

Front 66

Egress-only Internet Gateway

Back 66

: A stateful gateway to provide egress only access for IPv6 traffic from the VPC to the Internet.

Front 67

Direct Connect

Back 67

AWS Direct Connect is a network service that provides an alternative to using the Internet to connect a customer’s on premise sites to AWS.

Front 68

Amazon Relational Database Services (RDS)

Back 68

Amazon Relational Database Service (Amazon RDS) is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud.

Front 69

Amazon DynamoDB

Back 69

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability.

Front 70

Amazon RedShift

Back 70

Amazon Redshift is a fast, fully managed data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL and existing Business Intelligence (BI) tools.

Front 71

ElastiCache

Back 71

ElastiCache is a web service that makes it easy to deploy and run Memcached or Redis protocol-compliant server nodes in the cloud.

Front 72

Amazon Elastic Load Balancing (ELB)

Back 72

ELB automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses.

Front 73

Application Load Balancer (ALB)

Back 73

ALB is best suited for load balancing of HTTP and HTTPS traffic and provides advanced request routing targeted at the delivery of modern application architectures, including microservices and containers.

Front 74

Network Load Balancer (NLB)

Back 74

LB is best suited for load balancing of TCP traffic where extreme performance is required.

Front 75

Classic Load Balancer (CLB)

Back 75

CLB provides basic load balancing across multiple Amazon EC2 instances and operates at both the request level and connection level.

Front 76

AWS Auto Scaling

Back 76

AWS Auto Scaling automates the process of adding (scaling up) OR removing (scaling down) EC2 instances based on the traffic demand for your application.

Front 77

Amazon Route 53

Back 77

Route 53 is the AWS Domain Name Service.

Front 78

Amazon CloudFront

Back 78

CloudFront is a content delivery network (CDN) that allows you to store (cache) your content at “edge locations” located around the world.

Front 79

Amazon CloudWatch

Back 79

Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS.

Front 80

__________________ Logs keeps logs indefinitely by default.

Back 80

CloudWatch

Front 81

AWS CloudTrail

Back 81

AWS CloudTrail is a web service that records activity made on your account and delivers log files to an Amazon S3 bucket.

Front 82

Amazon Simple Notification Service

Back 82

Amazon Simple Notification Service (Amazon SNS) is a web service that makes it easy to set up, operate, and send notifications from the cloud.

Front 83

Offered under an inexpensive, ___________________model with no up-front costs.

Back 83

pay-as-you-go

Front 84

WHAT IS SNA

Back 84

SNS supports a wide variety of needs including event notification, monitoring applications, workflow systems, time-sensitive information updates, mobile applications, and any other application that generates or consumes notifications.

Front 85

HTTP/HTTPS

Back 85

subscribers specify a URL as part of the subscription registration.

Front 86

Email/Email-JSON

Back 86

messages are sent to registered addresses as email (text-based or JSON-object).

Front 87

General Pricing Information

Back 87

AWS works on a pay as you go model in which you only pay for what you use, when you are using it.

Front 88

In most cases, there is no charge for inbound data transfer or for data transfer between other _____________ within the same region

Back 88

AWS services

Front 89

On Demand:

Back 89

Means you pay for compute or database capacity with no long-term commitments of upfront payments.

Front 90

Dedicated Hosts:

Back 90

A dedicated host is an EC2 servers dedicated to a single customer.

Front 91

Dedicated Instances:

Back 91

Dedicated Instances are Amazon EC2 instances that run in a VPC on hardware that’s dedicated to a single customer.

Front 92

Spot Instances:

Back 92

Purchase spare computing capacity with no upfront commitment at discounted hourly rates.

Front 93

Reservations:

Back 93

Reserved instances provide significant discounts, up to 75% compared to On-Demand pricing, by paying for capacity ahead of time.

Front 94

Amazon Simple Storage Service (S3) Pricing

Back 94

Storage class – e.g. Standard or IA.

Front 95

Amazon Glacier pricing

Back 95

Extremely low cost and you pay only for what you need with no commitments of upfront fees.

Front 96

AWS Snowball Pricing

Back 96

Pay a service fee per data transfer job and the cost of shipping the appliance.

Front 97

Amazon Relational Database Service (RDS) Pricing

Back 97

Clock hours of server uptime – amount of time the DB instance is running.

Front 98

Amazon CloudFront Pricing

Back 98

Traffic distribution – data transfer and request pricing, varies across regions, and is based on the edge location from which the content is served.

Front 99

AWS Lambda Pricing

Back 99

Pay only for what you use and charged based on the number of requests for functions and the time it takes to execute the code.

Front 100

Amazon Elastic Block Store (EBS) Pricing

Back 100

Volumes – volume storage for all EBS volumes type is charged by the amount of GB provisioned per month.

Front 101

Amazon DynamoDB Pricing

Back 101

Provisioned throughput (write).

Front 102

AWS Support Plans

Back 102

Basic – billing and account support only (access to forums only).

Front 103

Resource Groups and Tagging

Back 103

Tags are key / value pairs that can be attached to AWS resources.

Front 104

AWS Organizations and Consolidated Billing

Back 104

AWS organizations allows you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

Front 105

One bill

Back 105

You get one bill for multiple accounts.

Front 106

Easy tracking

Back 106

You can track the charges across multiple accounts and download the combined cost and usage data.

Front 107

Combined usage

Back 107

You can combine the usage across all accounts in the organization to share the volume pricing discounts and Reserved Instance discounts. This can result in a lower charge for your project, department, or company than with individual standalone accounts.

Front 108

No extra fee

Back 108

Consolidated billing is offered at no additional cost.

Front 109

AWS Quick Starts

Back 109

Quick Starts are built by AWS architects and partners to help you deploy popular solutions on AWS, based on AWS best practices for security and high availability.

Front 110

AWS Cost Explorer

Back 110

enables you to visualize your usage patterns over time and to identify your underlying cost drivers.

Front 111

AWS Simple Monthly calculator

Back 111

shows you how much you would pay in AWS if you move your resources.

Front 112

Total Cost of Ownership (TCO) calculator

Back 112

use to compare the cost of running your applications in an on-premise or colocation environment against AWS.

Front 113

How much does EC2 cost?

Back 113

Amazon EC2 is free when using a free tier account. There are five ways to pay for Amazon EC2 instances: on-demand, savings plans, reserved instances, and spot instances.

Front 114

How does AWS charge for EC2?

Back 114

EC2 instances are charged per hour or per second.

Front 115

How is EC2 billed?

Back 115

Amazon EC2 usage is calculated by either the hour or the second based on the size of the instance, operating system, and the AWS Region where the instances are launched.

Front 116

AWS Security

Back 116

As an AWS customer you inherit all the best practices of AWS policies, architecture, and operational processes.

Front 117

Compliance

Back 117

AWS Cloud Compliance enables you to understand the robust controls in place at AWS to maintain security and data protection in the cloud.

Front 118

AWS Config

Back 118

AWS Config is a fully-managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and regulatory compliance.

Front 119

AWS Service Catalog

Back 119

You can use AWS Service Catalog to create and manage catalogs of IT services that you have approved for use on AWS, including virtual machine images, servers, software, and databases to complete multi-tier application architectures.

Front 120

Amazon GuardDuty

Back 120

Amazon GuardDuty offers threat detection and continuous security monitoring for malicious or unauthorized behavior to help you protect your AWS accounts and workloads.

Front 121

WAF

Back 121

Protects against common exploits that could compromise application availability, compromise security or consume excessive resources.

Front 122

Shield:

Back 122

Safeguards web application running on AWS with always-on detection and automatic inline mitigations.

Front 123

AWS Key Management Service

Back 123

AWS Key Management Service gives you centralized control over the encryption keys used to protect your data.

Front 124

AWS CloudHSM

Back 124

AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud.

Front 125

AWS Artifact

Back 125

AWS Artifact is your go-to, central resource for compliance-related information that matters to you.

Front 126

AWS Inspector:

Back 126

Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

Front 127

AWS Trusted Advisor:

Back 127

Trusted Advisor is an online resource that helps to reduce cost, increase performance and improve security by optimizing your AWS environment.

Front 128

AWS Personal Health Dashboard

Back 128

AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you.

Front 129

Penetration Testing

Back 129

Penetration testing is the practice of testing one’s own application’s security for vulnerabilities by simulating an attack.

Front 130

Patch Management

Back 130

AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.

Front 131

Configuration Management

Back 131

AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applicati

Front 132

Awareness & Training

Back 132

AWS trains AWS employees, but a customer must train their own employees.

Front 133

On AWS,_______________________________________________ application components can be instantiated within seconds.

Back 133

servers, databases, storage, and higher-level

Front 134

Using the _____________________________ of AWS, you can deploy your application to the AWS Region that best meets your requirements.

Back 134

global infrastructure

Front 135

AWS customers also have access to a broad set of compute ,___________________________________n, and deployment services.

Back 135

storage, database, analytics, application

Front 136

The AWS cloud provides ______________that enable continuous monitoring of configuration changes to your IT resources

Back 136

governance capabilities

Front 137

Scalability

Back 137

Systems that are expected to grow over time need to be built on top of a scalable architecture.

Front 138

Scaling Vertically

Back 138

Scaling vertically takes place through an increase in the specifications of an individual resource

Front 139

Scaling Horizontally

Back 139

Scaling horizontally takes place through an increase in the number of resource.

Front 140

Stateless applications:

Back 140

A stateless application is an application that needs no knowledge of previous interactions and stores no session information

Front 141

Bootstrapping:

Back 141

This includes scripts that install software or copy data to bring that resource to a particular state.

Front 142

Golden Images:

Back 142

A golden image is a snapshot of a particular state for that resource.

Front 143

Automation

Back 143

In a traditional IT infrastructure, you often have to manually react to a variety of events.

Front 144

AWS Elastic Beanstalk

Back 144

the fastest and simplest way to get an application up and running on AWS.

Front 145

Amazon EC2 Auto Recovery

Back 145

You can create an Amazon CloudWatch alarm that monitors an Amazon EC2 instance and automatically recovers it if it becomes impaired.

Front 146

Auto Scaling

Back 146

With Auto Scaling, you can maintain application availability and scale your Amazon EC2 capacity up or down automatically according to conditions you define.

Front 147

Amazon CloudWatch Alarms

Back 147

You can create a CloudWatch alarm that sends an Amazon Simple Notification Service (Amazon SNS) message when a particular metric goes beyond a specified threshold for a specified number of periods.

Front 148

Amazon CloudWatch Events

Back 148

The CloudWatch service delivers a near real-time stream of system events that describe changes in AWS resources

Front 149

AWS OpsWorks Lifecycle events

Back 149

AWS OpsWorks supports continuous configuration through lifecycle events that automatically update your instances’ configuration to adapt to environment changes.

Front 150

AWS Lambda Scheduled events

Back 150

These events allow you to create a Lambda function and direct AWS Lambda to execute it on a regular schedule.

Front 151

Loose Coupling

Back 151

As application complexity increases, a desirable attribute of an IT system is that it can be broken into smaller, loosely coupled components.

Front 152

Well-defined interfaces

Back 152

reduce interdependencies in a system by enabling interaction only through specific, technology-agnostic interfaces

Front 153

Service discovery

Back 153

disparate resources must have a way of discovering each other without prior knowledge of the network topology.

Front 154

Asynchronous integration

Back 154

this is another form of loose coupling where an interaction does not need an immediate response

Front 155

Graceful failure

Back 155

build applications such that they handle failure in a graceful manner

Front 156

Relational Databases

Back 156

Relational databases normalize data into well-defined tabular structures known as tables, which consist of rows and columns.

Front 157

Scalability:

Back 157

For scaling write capacity beyond a single instance data partitioning or sharding is required.

Front 158

High Availability:

Back 158

For production DBs, Amazon recommend the use of RDS Multi-AZ which creates a synchronously replicated standby in another AZ.

Front 159

Anti-Patterns:

Back 159

If your application primarily indexes and queries data with no need for joins or complex transactions consider a NoSQL database instead.

Front 160

NoSQL Databases

Back 160

NoSQL is a term used to describe databases that trade some of the query and transaction capabilities of relational databases for a more flexible data model that seamlessly scales horizontally.

Front 161

Scalability:

Back 161

NoSQL database engines will typically perform data partitioning and replication to scale both the reads and the writes in a horizontal fashion.

Front 162

High Availability:

Back 162

DynamoDB synchronously replicates data across three facilities in an AWS region for fault tolerance.

Front 163

Anti-Patterns:

Back 163

If your schema cannot be denormalized and your application requires joins or complex transactions, consider a relational database instead.

Front 164

Data Warehouse

Back 164

A data warehouse is a specialized type of relational database, optimized for analysis and reporting of large amounts of data.

Front 165

Search

Back 165

A search service can be used to index and search both structured and free text format and can support functionality that is not available in other databases, such as customizable result ranking, faceting for filtering, synonyms, stemming, etc..

Front 166

Introducing Redundancy

Back 166

In standby redundancy when a resource fails, functionality is recovered on a secondary resource using a process called failover, which typically take some time to complete.

Front 167

Detect Failure

Back 167

Build as much automation as possible in both detecting and reacting to failure.

Front 168

Durable Data Storage

Back 168

Design your architecture to protect both data availability and integrity.

Front 169

Each_____ is engineered to be isolated from failures in other AZs.

Back 169

AZ

Front 170

Plan to implement Auto Scaling for as many ___________ as possible, so that you horizontally scale up when needed and scale down automatically to reduce cost.

Back 170

EC2 workloads

Front 171

Reserved Capacity

Back 171

EC2 Reserved Instances allow you to reserve Amazon EC2 computing capacity in exchange for a significantly discounted hourly rate compared to On- Demand instance pricing.

Front 172

Spot Instances

Back 172

EC2 Spot Instances allow you to bid on spareEC2 computing capacity.

Front 173

Caching

Back 173

Caching is a technique that stores previously calculated data for future use.

Front 174

Application Data Caching

Back 174

Applications can be designed so that they store and retrieve information from fast, managed, in-memory caches.

Front 175

Edge Caching

Back 175

Copies of static content and dynamic content can be cached at Amazon CloudFront, which is a content delivery network (CDN) consisting of multiple edge locations around the world.

Front 176

WHAT SECURITY TOOLS CAN BE USED IN CLOUD

Back 176

Most of the security tools and techniques that you might already be familiar with in a traditional IT infrastructure can be used in the cloud.

Front 177

Network level security includes building a VPC topology that isolates parts of the infrastructure through the use of _________________

Back 177

subnets, security groups, and routing controls.

Front 178

Services like_____-________, a web application firewall, can help protect web applications from SQL injection and other vulnerabilities in application code.

Back 178

AWS WAF

Front 179

Offload Security Responsibility to AWS

Back 179

AWS operates under a shared security responsibility model, where AWS is responsible for the security of the underlying cloud infrastructure and you are responsible for securing the workloads you deploy in AWS.

Front 180

Reduce Privileged Access

Back 180

When you treat servers as programmable resources, you can capitalize on that for benefits in the security space as well.

Front 181

______________ your environment is key to moving fast while staying safe.

Back 181

Testing and auditing

Front 182

Services like__________________ continually monitor for compliance or vulnerabilities.

Back 182

AWS Config, Amazon Inspector, and AWS Trusted Advisor

Front 183

With ____________ rules you will also know if some component was out of compliance even for a brief period of time

Back 183

AWS Config

Front 184

AWS Batch:

Back 184

With AWS Batch, you simply package the code for your batch jobs, specify their dependencies, and submit your batch job using the AWS Management Console, CLIs, or SDKs.

Front 185

AWS Elastic Beanstalk:

Back 185

AWS Elastic Beanstalk is the fastest and simplest way to get web applications up and running on AWS.

Front 186

AWS Storage Gateway:

Back 186

AWS Storage Gateway is a hybrid cloud storage service that connects your existing on-premises environments with the AWS Cloud.

Front 187

Amazon Elasticache:

Back 187

Seamlessly deploy, run, and scale popular open source compatible in-memory data stores.

Front 188

Amazon ElastiCache offers fully managed ________AND __________

Back 188

Redis and Memcached.

Front 189

Amazon Neptune:

Back 189

Amazon Neptune is a fast, reliable, fully-managed graph database service that makes it easy to build and run applications that work with highly connected datasets.

Front 190

AWS Migration Hub:

Back 190

AWS Migration Hub provides a single location to track the progress of application migrations across multiple AWS and partner solutions.

Front 191

AWS Database Migration Service:

Back 191

AWS Database Migration Service helps you migrate databases to AWS quickly and securely.

Front 192

AWS Server Migration Service:

Back 192

AWS Server Migration Service (SMS) is an agentless service which makes it easier and faster for you to migrate thousands of on-premises workloads to AWS

Front 193

Amazon API Gateway:

Back 193

Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale.

Front 194

AWS Direct Connect:

Back 194

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS.

Front 195

AWS CodeStar:

Back 195

AWS CodeStar enables you to quickly develop, build, and deploy applications on AWS.

Front 196

AWS CodeCommit:

Back 196

AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositiories.

Front 197

AWS CodeBuild:

Back 197

With CodeBuild, you don’t need to provision, manage, and scale your own build servers.

Front 198

AWS CodeDeploy:

Back 198

AWS CodeDeploy makes it easier for you to rapidly release new features, helps you avoid downtime during application deployment, and handles the complexity of updating your applications.

Front 199

AWS CodePipeline:

Back 199

This enables you to rapidly and reliably deliver features and updates.

Front 200

AWS X-Ray:

Back 200

AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture.