Aws Practicioner

Front 1

-Run all parts of the application in the cloud

-Migrate existing applications to the cloud

-Design and build new applications in the cloud

Back 1

Cloud Based Deployment

Front 2

-Deploy resources by using virtualization and resource management tools

-Increase resource utilization by using application management and virtualization technologies.

Back 2

On-Premises Deployment (private cloud deployment)

Front 3

-Connect cloud-based resources to on-premises infrastructure

-Integrate cloud-based resources with legacy IT applications.

Back 3

Hybrid Deployment

Front 4

On-demand delivery of IT resources and applications through the internet with pay-as-you-go pricing

Back 4

cloud computing

Front 5

provides secure, resizable compute capacity in Amazon cloud

Back 5

Amazon Elastic Compute Cloud (Amazon EC2)

Front 6

-provision and launch an Amazon EC2 instance within minutes-stop using it when you have finished running a workload

-pay only for the compute time you use when an instance is running, not when it is stopped or terminated

-save costs by paying only for server capacity that you need or want

Back 6

Benefits of Amazon EC2 instance

Front 7

1. General purpose instances

2. Compute optimized instances

3. Memory optimized instances

4. Accelerated computing instances

5. Storage optimized instances

Back 7

Amazon EC2 instance types

Front 8

provide a balance of compute, memory, and networking resources. You can use them for a variety of workloads, such as application servers, gaming servers, back-end servers for enterprise applications and small to medium databases.

Back 8

General purpose instances

Front 9

Ideal for high-performance web servers, compute-intensive applications servers, and dedicated gaming servers. You can also use this instances for batch processing workloads that require processing many transactions in a single group.

Back 9

Compute optimized instances

Front 10

Designed to deliver fast performance for workloads that process large datasets in memory.This scenario might be a high-performance database or a workload that involves performing real-time processing of a large amount of unstructured data.

Back 10

Memory optimized instances

Front 11

To perform some functions more efficiently than is possible in software running on CPUs.Ideal for workloads such as graphics applications, game streaming, and application streaming.

Back 11

Accelerated computing instances

Front 12

For workloads that require high, sequential read and write access to large datasets on local storage.Examples of workloads suitable for this instances include distributed file systems, data warehousing applications, and high-frequency online transaction processing (OLTP) systems.

Back 12

Storage optimized instances

Front 13

1. On-Demand

2. Amazon EC2 Savings Plans

3. Reserved Instances

4. Spot Instances

5. Dedicated Hosts

Back 13

Amazon EC2 pricing

Front 14

Instances are ideal for short-term, irregular workloads that cannot be interrupted. No upfront costs or minimum contracts apply. The instances run continuously until you stop them, and you pay for only the compute time you use.

Back 14

On-Demand

Front 15

Enables you to reduce compute costs by committing of compute usage for a 1-year or 3-year term. This term commitment results in savings of up to 72% over On-Demand costs.

Back 15

EC2 Savings Plans

Front 16

-Discount applied to On-Demand Instances

-Standard Reserved and Convertible Reserved Instances for a 1-year or 3-year term.

-Scheduled Reserved Instances for a 1-year term.

*On-Demand rates charged until you terminate the instance or ourchase a new Reserved Instance

Back 16

Reserved Instances

Front 17

Ideal for workloads with flexible start and end times, or that can withstand interruptions. They use unused Amazon EC2 computing capacity and offer you cost savings at up to 90% off of On-Demand prices.

Back 17

Spot Instances

Front 18

Physical servers with Amazon EC2 instance capacity that is fully dedicated to your use

Back 18

Dedicated Hosts

Front 19

Involves beginning with only the resources you need and designing your architecture to automatically respond to changing demand

Back 19

Scalability

Front 20

Automatically add or remove Amazon EC2 instances in response to changing application demand with dynamic or predictive scaling

Back 20

Amazon EC2 Auto Scaling

Front 21

AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances

Back 21

Elastic Load Balancing

Front 22

publish/subscribe service that publishes messages to subscribers such as web servers, email addresses and AWS Lambda functions

Back 22

Amazon Simple Notification Service (Amazon SNS)

Front 23

Can send, store, and receive messages between software components, without losing messages or requiring other services to be available

Back 23

Amazon Simple Queue Service (Amazon SQS)

Front 24

Which AWS service is the best choice for publishing messages to subscribers?

Back 24

Amazon SNS

Front 25

Service that lets you run code without needing to provision or manage servers.

Back 25

AWS Lambda

Front 26

Standard way to package your application's code and dependencies into a single object

Back 26

AWS Containers

Front 27

Highly scalable, high-performance container management system that enables you to run and scale containerized applications on AWS. Supports Docker software.

Back 27

Amazon Elastic Container Service (Amazon ECS)

Front 28

-Software platform that enables you to build, test, and deploy applications quickly

-Supports the use of open-source Community Edition and subscription-based Enterprise Edition.

-Supports API calls to launch and stop supportedapplications.

Back 28

Docker (Software)

Front 29

open-source software that enables you to deploy and manage containerized applications at scale.

Back 29

Amazon Elastic Kubernetes Service (Amazon EKS)

Front 30

Server-less compute engine for containers. It works with both Amazon ECS and Amazon EKS.

Back 30

AWS Fargate

Front 31

1. Compliance with data governance and legal requirements

2. Proximity to your customers

3. Available services within a Region

4. Pricing

Back 31

Business factors to select region for AWS Services

Front 32

Single data center or a group of data centers within a Region and are located tens of miles apart from each other

Back 32

Availability Zone

Front 33

Site that Amazon CloudFront uses to store cached copies of your content closer to your customers for faster delivery.

Back 33

Edge location

Front 34

1. AWS Management Console

2. AWS Command Line Interface (AWS CLI)

3. Software Development Kits (SDKs)

Back 34

How to provision AWS resource

Front 35

Web-based interface for accessing and managing AWS services

Back 35

AWS Management Console

Front 36

-Allows control multiple AWS services directly

-Is available for users on Windows, macOS, and Linux

Back 36

AWS Command Line Interface

Front 37

Access AWS services through an API designed for your programming language or platform. Allows you to use AWS services with your existing applications or create entirely new applications that will run on AWS

Back 37

Software Development Kits (SDKs)

Front 38

Deploys the resources necessary to perform the following tasks:

-Adjust capacity

-Load balancing

-Automatic scaling

-Application health monitoring

Back 38

AWS Elastic Beanstalk

Front 39

-treats your infrastructure as code

-build an environment by writing lines of code instead of using the AWS Management Console to individually provision resources.

-provisions your resources in a safe, repeatable manner, enabling you to frequently build your infrastructure and applications without having to perform manual actions or write custom scripts.

Back 39

AWS CloudFormation

Front 40

You attach this to allow public traffic from the internet to access your VPC

Back 40

Internet Gateway

Front 41

Service that lets you launch AWS resources in a logically isolated virtual network that you define.

Back 41

Amazon Virtual Private Cloud (Amazon VPC)

Front 42

Used to access private resources in a Virtual Private Cloud (VPC)

Back 42

Virtual Private Gateway

Front 43

service that enables you to establish a dedicated private connection between your data center and a VPC

Back 43

AWS Direct Connect

Front 44

-Network ACLs perform this

-Remember nothing and check packets that cross the subnet border each way: inbound and outbound

Back 44

Stateless packet filtering

Front 45

Virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance

Back 45

AWS security group

Front 46

virtual firewall that controls inbound and outbound traffic at the subnet level

Back 46

AWS Network Access Control list (ACL)

Front 47

Security groups perform these. They remember previous decisions made for incoming packets.

Back 47

Stateful packet filtering

Front 48

AWS DNS web service. It gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.

Back 48

Amazon Route 53

Front 49

-Block-level storage volumes that behave like physical hard drives.

-An instance store provides temporary block-level storage for an Amazon EC2 instance.

Back 49

Instance Stores

Front 50

Service that provides block-level storage volumes that you can use with Amazon EC2 instances. If you stop or terminate an Amazon EC2 instance, all the data on these volumes remains available. Stores data in a single Availability Zone.

Back 50

Amazon Elastic Block Store (Amazon EBS)

Front 51

AWS incremental backup

Back 51

AWS EBS snapshot

Front 52

consists of data, metadata, and a key.

Back 52

object storage

Front 53

provides object-level storage. Stores data as objects in buckets. Unlimited storage space. The maximum file size for an object is 5 TB

Back 53

Amazon Simple Storage Service (Amazon S3)

Front 54

S3 Standard

S3 Standard-Infrequent Access (S3 Standard-IA)

S3 One Zone-Infrequent Access (S3 One Zone-IA)

S3 Intelligent-Tiering

S3 Glacier

S3 Glacier Deep Archive

Back 54

AWS S3 Storage Classes

Front 55

-Designed for frequently accessed data

-Stores data in a minimum of three Availability Zones

-Provides high availability for objects

-Higher cost

Back 55

S3 Standard

Front 56

-Ideal for infrequently accessed data

-Similar to S3 Standard but has a lower storage price and higher retrieval price

-Ideal for data infrequently accessed but requires high availability when needed

-minimum of three Availability Zones

Back 56

S3 Standard-Infrequent Access (S3 Standard-IA)

Front 57

-Stores data in a single Availability Zone

-Has a lower storage price than S3 Standard-IA

-Single Availability Zone

-You want to save costs on storage

-You can easily reproduce your data in the event of an Availability Zone failure.

Back 57

S3 One Zone-Infrequent Access (S3 One Zone-IA)

Front 58

-Ideal for data with unknown or changing access patterns

-Requires a small monthly monitoring and automation fee per object

-Monitors objects’ access patterns

Back 58

S3 Intelligent-Tiering

Front 59

-Low-cost storage designed for data archiving

-Able to retrieve objects within a few minutes to hours

Back 59

S3 Glacier

Front 60

-Lowest-cost object storage class ideal for archiving

-Able to retrieve objects within 12 hours

Back 60

S3 Glacier Deep Archive

Front 61

-Scalable file system used with AWS Cloud services and on-premises resources.

-Regional service

-stores data in and across multiple Availability Zones.

Back 61

Amazon Elastic File System (Amazon EFS)

Front 62

data is stored in a way that relates it to other pieces of data

Back 62

relational database

Front 63

Relational databases use this to store and query data.

Back 63

structured query language (SQL)

Front 64

service that enables you to run relational databases in the AWS Cloud. It automates tasks such as hardware provisioning, database setup, patching, and backups.

Back 64

Amazon Relational Database Service (Amazon RDS)

Front 65

Amazon Aurora

PostgreSQL

MySQL

MariaDB

Oracle Database

Microsoft SQL Server

Back 65

Amazon RDS database engines

Front 66

Enterprise-class relational database. Compatible with MySQL and PostgreSQL relational databases. Five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases.reduce your database costs by reducing unnecessary input/output (I/O) operations. When you require high availability and continuous backs ups.

Back 66

Amazon Aurora

Front 67

-Uses Tables

-“NoSQL databases"

-key-value pairs

Back 67

nonrelational database

Front 68

-key-value database service

-single-digit millisecond performance at any scale

-Serverless database

-Automatic Scaling

Back 68

Amazon DynamoDB

Front 69

Data warehousing service that you can use for big data analytics. Ability to collect data from many sources and helps you to understand relationships and trends across your data

Back 69

Amazon Redshift

Front 70

Used to migrate relational databases, nonrelational databases, and other types of data store.

Also used if you need Development and test database migrations, Database consolidation and/or Continuous replication

Back 70

AWS Database Migration Service (AWS DMS)

Front 71

document database service that supports MongoDB workloads. (MongoDB is a document database program.)

Back 71

Amazon DocumentDB

Front 72

A graph database service. Can be used to build and run applications that work with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.

Back 72

Amazon Neptune

Front 73

Ledger database service. Can be used to review a complete history of all the changes that have been made to your application data

Back 73

Amazon Quantum Ledger Database (Amazon QLDB)

Front 74

Have open-source frameworks. Is a distributed ledger system that lets multiple parties run transactions and share data without a central authority.

Back 74

Amazon Managed Blockchain

Front 75

Service that adds caching layers on top of your databases to help improve the read times of common requests. It supports two types of data stores: Redis and Memcached

Back 75

Amazon ElastiCache

Front 76

In-memory cache for DynamoDB. It helps improve response times from single-digit milliseconds to microseconds.

Back 76

Amazon DynamoDB Accelerator (DAX)

Front 77

“Security of the Cloud”

Back 77

AWS Security responsibility

Front 78

“Security in the Cloud”

Back 78

AWS Customer Security responsibility

Front 79

Enables you to manage access to AWS services and resources securely.

Back 79

AWS Identity and Access Management (IAM)

Front 80

-First user identity when you first create an AWS account

-Should not use this user for everyday tasks

-Should only be used when you need to perform a limited number of tasks that are only available to this user

Back 80

Root User

Front 81

-Identity that you create in AWS.

-Represents the person or application that interacts with AWS services and resources.

-Consists of a name and credentials.

-By default t has no permissions associated with it.

-You must grant the this user the necessary permissions

Back 81

IAM user

Front 82

-Document that allows or denies permissions to AWS services and resources

-Enable you to customize users’ levels of access to resources

-Security principle of least privilege when granting permissions should be followed

Back 82

IAM policy

Front 83

-Is a collection of IAM users.

-All users in this are granted permissions specified by the policy

Back 83

IAM group

Front 84

-Identity that you can assume to gain temporary access to permissions.

-IAM user, application, or service must be assigned permissions to be granted this.

-Ideal for situations in which access to services or resources needs to be granted temporarily, instead of long-term.

Back 84

IAM role

Front 85

-Used consolidate and manage multiple AWS accounts within a central location

-Root is created when you create one of these, which will be the parent container for all the accounts

Back 85

AWS Organizations

Front 86

-Used to centrally control permissions for the accounts in your organization

-Applied to Individual Member Accounts and OUs

Back 86

service control policies (SCPs)

Front 87

-Group accounts into these to make it easier to manage accounts with similar business or security requirements.

-Applying policies here, all the accounts automatically inherit the permissions specified in the policy

Back 87

organizational units (OUs)

Front 88

Service that provides on-demand access to AWS security and compliance reports and select online agreements.

Consists of two main sections: AWS Artifact Agreements and AWS Artifact Reports

Back 88

AWS Artifact

Front 89

With this you can review, accept, and manage agreements for an individual account and for all your accounts in AWS Organizations.

Back 89

AWS Artifact Agreements

Front 90

Provide compliance reports from third-party auditors. These auditors have tested and verified that AWS is compliant with a variety of global, regional, and industry-specific security standards and regulations with these reports.

Back 90

AWS Artifact Reports

Front 91

Here you can read customer compliance stories to discover how companies in regulated industries have solved various compliance, governance, and audit challenges

Back 91

Customer Compliance Center

Front 92

Service that protects applications against DDoS attacks.

Provides two levels of protection: Standard and Advanced

Back 92

AWS Shield

Front 93

Automatically protects all AWS customers at no cost.

Protects AWS resources from the most common, frequently occurring types of DDoS attacks

Back 93

AWS Shield Standard

Front 94

A paid service that provides detailed attack diagnostics and the ability to detect and mitigate sophisticated DDoS attacks.

Also integrates with other services such as Amazon CloudFront, Amazon Route 53, and Elastic Load Balancing.

Back 94

AWS Shield Advanced

Front 95

Enables you to perform encryption operations through the use of cryptographic keys

Back 95

AWS Key Management Service (AWS KMS)

Front 96

Web application firewall that lets you monitor network requests that come into your web applications.

Uses a web access control list (ACL) to block or allow traffic

Back 96

AWS WAF

Front 97

Helps to improve the security and compliance of applications by running automated security assessments.

Checks applications for security vulnerabilities and deviations from security best practices, such as open access to Amazon EC2 instances and installations of vulnerable software versions.

Back 97

Amazon Inspector

Front 98

Service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment.

Back 98

Amazon GuardDuty

Front 99

Web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.

Back 99

Amazon CloudWatch

Front 100

Alarms that automatically perform actions if the value of your metric has gone above or below a predefined threshold

Back 100

CloudWatch alarms

Front 101

Enables you to access all the metrics for your resources from a single location.

Back 101

CloudWatch dashboard

Front 102

Records API calls for your account.

Back 102

AWS CloudTrail

Front 103

Allows CloudTrail to automatically detect unusual API activities in your AWS account.

Back 103

CloudTrail Insights

Front 104

Web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.

Back 104

AWS Trusted Advisor

Front 105

Always Free

12 Months Free

Trials

Back 105

AWS Free Tier

Front 106

Pay for what you use

Pay less when you reserve

Pay less with volume-based discounts when you use more.

Back 106

AWS Price As You Go

Front 107

Lets you explore AWS services and create an estimate for the cost of your use cases on AWS

Back 107

AWS Pricing Calculator

Front 108

Used to pay your AWS bill, monitor your usage, and analyze and control your costs

Back 108

AWS Billing & Cost Management dashboard

Front 109

Enables you to receive a single bill for all AWS accounts in your organization

Back 109

Consolidated billing feature of AWS Organizations

Front 110

-Create budgets to plan your service usage, service costs, and instance reservations with this.

-Information updates three times a day.

-Set custom alerts when your usage exceeds (or is forecasted to exceed) the budgeted amount

Back 110

AWS Budgets

Front 111

Tool that enables you to visualize, understand, and manage your AWS costs and usage over time

Back 111

AWS Cost Explorer

Front 112

Basic

Developer

Business

Enterprise

Back 112

AWS Support Plans

Front 113

-Is free for all AWS customers.

-Includes access to whitepapers, documentation, and support communities.

-You can also contact AWS for billing questions and service limit increases

Back 113

AWSBasic Support

Front 114

-Best practice guidance

-Client-side diagnostic tools

-Building-block architecture support, which consists of guidance for how to use AWS offerings, features, and services together

Back 114

AWS Developer Support

Front 115

-Use-case guidance to identify AWS offerings, features, and services that can best support your specific needs

-All AWS Trusted Advisor checks

-Limited support for third-party software, such as common operating systems and application stack components

Back 115

AWS Business Support plan

Front 116

-Application architecture guidance, which is a consultative relationship to support your company’s specific use cases and applications

-Infrastructure event management: A short-term engagement with AWS Support that helps your company gain a better understanding of your use cases. This also provides your company with architectural and scaling guidance.

-Technical Account Manager

Back 116

AWS Enterprise Support Plan

Front 117

Digital catalog that includes thousands of software listings from independent software vendors. Used to find, test, and buy software that runs on AWS

Back 117

AWS Marketplace

Front 118

Organizes guidance into six areas of focus, called Perspectives

Back 118

AWS Cloud Adoption Framework (AWS CAF)

Front 119

Ensures that IT aligns with business needs and that IT investments link to key business result

Back 119

Business Perspective

Front 120

Supports development of an organization-wide change management strategy for successful cloud adoption

Back 120

People Perspective

Front 121

Focuses on the skills and processes to align IT strategy with business strategy.

Back 121

Governance Perspective

Front 122

Includes principles and patterns for implementing new solutions on the cloud, and migrating on-premises workloads to the cloud

Back 122

Platform Perspective

Front 123

Ensures that the organization meets security objectives for visibility, auditability, control, and agility

Back 123

Security Perspective

Front 124

Helps you to enable, run, use, operate, and recover IT workloads to the level agreed upon with your business stakeholders

Back 124

Operations Perspective

Front 125

1. Rehosting

2. Replatforming

3. Refactoring/re-architecting

4. Repurchasing

5. Retaining

6. Retiring

Back 125

AWS Cloud Migration Strategies

Front 126

“lift-and-shift” involves moving applications without changes

Back 126

AWS Rehosting Migration

Front 127

“lift, tinker, and shift,” involves making a few cloud optimizations to realize a tangible benefit

Back 127

AWS Replatforming Migration

Front 128

Reimagining how an application is architected and developed by using cloud-native features

Back 128

AWS Refactoring/re-architecting Migration

Front 129

Moving from a traditional license to a software-as-a-service model

Back 129

AWS Repurchasing Migration

Front 130

Keeping applications that are critical for the business in the source environment

Back 130

AWS Retaining Migration

Front 131

Process of removing applications that are no longer needed

Back 131

AWS Retiring Migration

Front 132

Collection of physical devices that help to physically transport up to exabytes of data into and out of AWS

Composed of AWS Snowcone, AWS Snowball, and AWS Snowmobile

Back 132

AWS Snow Family

Front 133

Small, rugged, and secure edge computing and data transfer device. It features 2 CPUs, 4 GB of memory, and 8 TB of usable storage

Back 133

AWS Snowcone

Front 134

Composed of Snowball Edge Storage Optimized and Snowball Edge Compute Optimized

Back 134

AWS Snowball

Front 135

Well suited for large-scale data migrations and recurring transfer workflows

Storage: 80 TB of hard disk drive (HDD) capacity for block volumes and Amazon S3 compatible object storage, and 1 TB of SATA solid state drive (SSD) for block volumes.

Compute: 40 vCPUs, and 80 GiB of memory to support Amazon EC2 sbe1 instances (equivalent to C5).

Back 135

Snowball Edge Storage Optimized

Front 136

Powerful computing resources for use cases such as machine learning, full motion video analysis, analytics, and local computing stacks.

Storage: 42-TB usable HDD capacity for Amazon S3 compatible object storage or Amazon EBS compatible block volumes and 7.68 TB of usable NVMe SSD capacity for Amazon EBS compatible block volumes.

Compute: 52 vCPUs, 208 GiB of memory, and an optional NVIDIA Tesla V100 GPU. Devices run Amazon EC2 sbe-c and sbe-g instances, which are equivalent to C5, M5a, G3, and P3 instances.

Back 136

Snowball Edge Compute Optimized

Front 137

Exabyte-scale data transfer service used to move large amounts of data to AWS.

Can transfer up to 100 petabytes of data per Instance

45-foot long ruggedized shipping container, pulled by a semi trailer truck.

Back 137

AWS Snowmobile

Front 138

Helps you understand how to design and operate reliable, secure, efficient, and cost-effective systems in the AWS Cloud

Back 138

AWS Well-Architected Framework

Front 139

1. Operational excellence

2. Security

3. Reliability

4. Performance efficiency

5. Cost optimization

Back 139

5 Pillars of AWS Well-Architected Framework

Front 140

Ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures

Back 140

Operational excellence pillar

Front 141

Ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies

Back 141

Security pillar

Front 142

Ability of a system to do the following:

Recover from infrastructure or service disruptions

Dynamically acquire computing resources to meet demand

Mitigate disruptions such as misconfigurations or transient network issues

Back 142

Reliability pillar

Front 143

Ability to use computing resources efficiently to meet system requirements and to maintain that efficiency as demand changes and technologies evolve

Back 143

Performance efficiency pillar

Front 144

Ability to run systems to deliver business value at the lowest price point

Back 144

Cost optimization pillar

Front 145

-Trade upfront expense for variable expense

-Benefit from massive economies of scale

-Stop guessing capacity

-Increase speed and agility

-Stop spending money running and maintaining data centers

-Go global in minutes.

Back 145

Advantages of cloud computing