AWS Services CLF-C02

Frage	Antworten
Amazon Athena	Serverless SQL service for highly scalable analytics
Amazon Data Exchange	Service that allows subscribing and loading third party data from providers
Amazon EMR	Elastic MapReduce; Big data PaaS for data processing, facilitates the setup of and automates scaling, tuning clusters
AWS Glue	Fully managed extract, transform, load (ETL) service Provides pipeline to load data into data lakes in a centralized data catalog
Amazon Kinesis	Fully managed service for real-time streaming data processing 4 Available sub-services: Firehose (Hands-off pipeline to AWS services), Data Analytics (Processing), Data Streams & Video Streams (Storage)
Amazon MSK	Amazon Managed Streaming for Apache Kafka; Fully managed service integrating with open-source Apache Kafka (which processes streaming data) by managing Kafka infrastructure
Amazon OpenSearch Service	Open-source distributed search and analytics suite, derived from Elasticsearch, allowing for log analytics, real-time app processing, website search, etc.
Amazon Quicksight	Business Intelligence service for creating/publishing interactive insight dashboards for your customers or organization members
Amazon Redshift	Data warehouse service using SQL
Amazon EventBridge	Serverless event bus taking in real-time data from event sources to send to AWS services and SaaS apps; Customizable routing rules allow you to decouple event producer and consumer
Amazon SNS	Simple Notification Service; Publisher-Subscriber messaging allowing for microservice decoupling and parallel processing; Messages are NOT held if unable to be delivered
Amazon SQS	Simple Queue Service; Allows for sending, storing, and receiving messages between software components WITHOUT losing messages if recipients unavailable; Standard queue and FIFO queue available
AWS Step Functions	Serverless workflow orchestration; Use drag-and-drop visual workflows in Step Functions Studio to simplify application flow/components
Amazon Connect	AI and ML powered Contact Center as a service
Amazon SES	Simple Email Service; Mass email communication service
AWS Billing Conductor	Supports billing and reporting workflows; Allows you to configure, generate, and display rates to certain customers or to subgroups of your organization, as well as analyzing actual vs applied rates
AWS Budgets	Set custom budgets and be notified if your usage exceeds (or is forecasted to exceed) said budget, or is below required RI (reserved instance) utilization rates
AWS Cost and Usage Report	Lists AWS usage for each service category in hourly or daily line items, or by tag CURs can also be aggregated on a daily or monthly level
AWS Cost Explorer	Interface for visualizing, understanding, and managing AWS costs and usage over time
AWS Marketplace	Digital catalog for third-party software, data, and services that run with AWS services
AWS Batch	Service that dynamically provisions quantity and type of compute resource needed to complete large-scale batch computing jobs; Plans, schedules, and runs batch computing workloads
Amazon EC2	Elastic Compute Cloud; Provides secure, resizable compute resources in the cloud
Amazon EC2 Instance Types	On Demand Instances, Reserved Instances, Convertible Reserved Instances, Spot Instances, 1 or 3 year Savings Plans, Dedicated Hosts
Amazon EC2 Auto Scaling	Automatically adds or removes EC2 instances depending on current usage, as well as restarting unhealthy instances
Amazon EC2 Image Builder	Simplifies the building, testing, and deployment of Virtual Machines and images; Automates image management processes
AWS Elastic Beanstalk	From uploaded code, Elastic Beanstalk handles deployment of web applications, from capacity provisioning, load balancing, and auto scaling to application health monitoring; Still allows access/viewing of underlying resources
Amazon Lightsail	No-code-required web application service; offers easy-to-use virtual private server (VPS) instances, containers, storage, databases
AWS Local Zones	For single-digit millisecond latency or data residency, AWS local zones are located close to cities/business centers
AWS Outposts	Run some AWS services on premises and stay connected to others via cloud; On premises infrastructure fully managed by AWS for a hybrid experience
AWS Wavelength	Embeds AWS compute and storage services within 5G networks, providing mobile edge computing infrastructure for developing, deploying, and scaling ultra-low-latency applications
Amazon ECR	Elastic Container Registry; Fully managed Docker container registry for easy storage, management, and deployment of Docker containers, integrated with ECS
Amazon ECS	Elastic Container Service; Container orchestration service allowing running and scaling of Docker containers
Amazon EKS	Elastic Kubernetes Service; Container orchestration service compatible with open source Kubernetes to better integrate with pre-existing Kubernetes-backed containers
AWS Activate for Startups	Startup program providing guidance through ideation, building, networking, and investor access
AWS IQ	Connect to Amazon-vetted Freelancers and Consultants by posting your project on AWS IQ
AMS	Amazon Managed Services; Service for managing operations of your AWS infrastructure. Provides routine operations such as patch, continuity management, security management, and IT management processes
AWS Support	Comes in tiered plans: Basic, Developer, Business, Enterprise On-Ramp, and Enterprise
AWS Basic Support Plan	24/7 Customer Service, Documentations, Whitepapers, Forums, Trusted Advisor, and Personal Health Dashboard
AWS Developer Support Plan	Everything in AWS Basic plus: Customer Support email with 24hr response time, <12 if systems impaired
AWS Business Support Plan	Everything in AWS Developer plus: Full set of AWS Trusted Advisor best practice checks Direct phone access to cloud support engineers, 4 hr response time if impaired, 1 hr if down Infrastructure event management
AWS Enterprise On-Ramp Support	Everything in Business plus: 30 min response time for business critical workloads Access to Technical Account Managers (TAMS)
AWS Enterprise Support	Everything in On-Ramp plus: 15 min response time for business critical workloads Designated Technical Account Manager (TAM) who proactively monitors environment and assists with optimization
Amazon Aurora	Relational (SQL) database compatible with MySQL, PostgreSQL; has more AWS integration than its SQL competitor databases
Amazon DynamoDB	Key-value NoSQL database with single-digit millisecond latency
Amazon MemoryDB for Redis	NoSQL database running on Redis (open-source) engine
Amazon Neptune	NoSQL graph database
Amazon RDS	Relational Database Service; Automates/Simplifies the setup of a relational database, running on your choice of engine (Aurora, MySQL, PostgreSQL, etc)
AWS App Config	A capability of AWS Systems Manager, to create, manage, and quickly deploy application configurations
AWS CLI	AWS Command Line Interface; Allows control of AWS services through the command line and automated scripts
AWS Cloud9	Cloud-based IDE available in the browser with real-time pair programming and prepackaged tools for common languages
AWS CloudShell	Cloud-based Shell available in the browser allowing for use of CLI and scripts
AWS CodeArtifact	Artifact repository service automating updates to dependencies; Works with commonly used package managers such as Maven and Gradle
AWS CodeBuild	Automatically compiles and tests your code, automating the provision and scaling of build servers
AWS CodeCommit	Seamlessly integrates with Git tools to fully manage secure and highly scalable Git repositories
AWS CodeDeploy	Automates code-deployment to any cloud or on-premises instance, and scales with your infrastructure
AWS CodePipeline	Continuous delivery service, automates release pipelines (build, test, process) based on defined release model; integrates with third-party services such as GitHub or custom plugins
AWS CodeStar	Cloud‑based development service with tools to develop, build, and deploy applications on AWS with role-based access; Unified project dashboard and integration with JIRA; Track SDLC, from a backlog work item to production code deployment.
AWS X-Ray	End-to-end view of requests through application with a map of underlying components; Allows for improved analysis and debugging
Amazon AppStream 2.0	Highly scalable service to centrally manage desktop applications and securely deliver them to any computer; Applications run on optimized virtual machines (VMs) and streaming sessions automatically adjusts to network conditions
Amazon WorkSpaces	Provision Windows or Linux desktops and scale to provide thousands of desktops globally; Helps eliminate the complexity in managing hardware and simplifies desktop delivery
Amazon WorkSpaces Web	Linux-based service, facilitates secure browser access to internal websites and SaaS applications from existing web browsers
AWS Amplify	Backend-as-a-Service, simplifies backend web development for mobile apps; Can connect pre-existing frontend UI or choose Figma/preexisting components to create frontend UI
AWS App-Sync	Serverless backend for mobile, web, and enterprise apps; Handles data management, sync, and and manipulation using GraphQL
AWS Device-Farm	App testing service for Android, iOS, and web, testing/interacting on many devices at once, or reproduce issues on a device in real time. View video, screenshots, logs, and performance data to pinpoint issues
AWS IoT Core	Facilitates connection between billions of IoT devices and AWS service endpoints
AWS IoT Greengrass	Extends AWS to IoT devices to allow for local data manipulation
Amazon Comprehend	Natural Language Processing tool that finds insights and relationships in text
Amazon Kendra	ML Intelligent search service, finds content in unstructured data across multiple locations in your repositories
Amazon Lex	Underlying model that powers Amazon Alexa, available for use as base for building conversational text or speech interfaces (chatbots)
Amazon Polly	Amazon text-to-speech ML model with variety of voices and languages
Amazon Rekognition	ML image and video analysis, identify object, people, etc. in image/video content
Amazon Sagemaker	Provides modules to build, train, and deploy machine learning models
Amazon Textract	Extracts text and data from scanned documents
Amazon Transcribe	Automatic speech recognition service from audio files or live audio stream
Amazon Translate	Neural machine translation service
AWS Auto Scaling	Available for a variety of AWS products; Provisions, deletes, or upgrades/downgrades resources based on current usage and monitors resource usage/health
AWS CloudFormation	Create templates or use provided templates to simplify provision of new resources and manage infrastructure
AWS CloudTrail	Records API calls and delivers log files, including information such as IP address, parameters, and response elements
Amazon CloudWatch	Provides insights on performance changes, resource utilization, and operational health; Allows you to take automated action, troubleshoot issues, and discover insights
AWS Compute Optimizer	Uses ML to analyze historical use trends and recommend optimal resources from Compute Optimizer Console
AWS Config	AWS resource inventory (existing and deleted), configuration history, and configuration change notifications to enable security and governance; Create Config rules that automatically check the configuration of AWS resources
AWS Control Tower	Set up and govern a secure, multi-account AWS environment based on best practices; Controls implemented governance rules for security, compliance, and operations.
AWS Health Dashboard	Personalized view of performance and availability of used services, with alerts for upcoming or current events that impact AWS service health
AWS Launch Wizard	Guided way to size, configure, deploy AWS resources for third party applications
AWS License Manager	Prevents licensing breaches through customized licensing rules, which can physically stop instances from launching or notifying administrators of breach
AWS Management Console	Intuitive user interface for accessing and managing AWS services
AWS Organizations	Group accounts and allocate resources, policies to accounts or groups; Simplifies billing through single payment for all accounts
AWS Resource Groups and Tag Editor	Resources that contain a common tag form a Resource Group. Tags can be edited in bulk, and Tag Editor lets you manage tags across services and regions
AWS Service Catalog	Allows organizations to create a list of approved IT services and enable users only to deploy approved services
AWS Systems Manager	Unified user interface to view operational data and automate operational tasks; Resource groups, insights, scripts, state manager, inventory, maintenance window, patch manager, automation, parameter store, distributor, session manager
AWS Trusted Advisor	Reduce cost, increase performance, and improve security by optimizing AWS environment; Provides real-time guidance to provision your resources following AWS best practices
AWS Well-Architected Tool	Compares state of your workloads to latest AWS architectural best practices, based on AWS Framework 6 Pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability
AWS Application Discovery Service	Helps customers plan migration projects by gathering info about their onprem data centers
AWS Application Migration Service	Minimizes manual processes of migration by auto converting source servers from physical, virtual, or cloud infrastructure to run on AWS, minimizing error and time required
AWS DMS	Database Migration Service; Migrates data from most commercial and open-source databases, keeping source database fully operational; Can also be used for continuous data replication with high availability
AWS Migration Hug	Single location for tracking progress of app[ migrations, provides key metrics and migration tools
AWS SCT	Schema Conversion Tool; Converts existing DB schema from one format to another to be compatible with target RDS instance
AWS Snow Family	Snowcone (8TB), Snowball (Storage or Compute Optimized), Snowmobile (100PB) For large data transfers or for running in non-data center environments, hardware is provided, owned and managed by AWS
AWS Transfer Family	Support for file transfers into/out of S3 or EFS; Supports Secure File Transfer Protocol (SFTP), File Transfer Protocol over SSL (FTPS), and File Transfer Protocol (FTP)
Amazon API Gateway	Simplifies creation and maintenance of secure APIs to your AWS applications by accepting/processing API calls, managing versions, authorization, etc.
Amazon CloudFront	Content delivery network (CDN) that reduces latency by caching content in nearest AWS edge location
AWS Direct Connect	Provides a dedicated network connection from premises to AWS, for a more secure and consistent connection than via internet
AWS Global Accelerator	Utilizes global AWS infrastructure to route user requests to nearest regional endpoint, speeding up applications
Amazon Route 53	Domain Name System (DNS) which routes users from readable domain names to IP addresses
Amazon VPC	Virtual Private Cloud; Isolated section of AWS clouds with AWS resources, customizable to add security and configurations
AWS VPN	Virtual Private Network; Establish secure connections between on-premises networks and remote offices, client devices, AWS global network; Site-to-Site VPN and AWS Client VPN available
AWS Artifact	Central resource for AWS compliance information; Compliance reports, NDAs, etc.
AWS Audit Manager	Audits AWS usage to assess risk and compliance; Translates cloud service information to auditor friendly reports by mapping to industry standards/regulations
ACM	AWS Certificate Manager; Manages Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS
AWS CloudHSM	Hardware Security Module that enables easy generation and use of encryption keys and integrate with applications using industry-standard API
Amazon Cognito	Add user access control to web and mobile apps, through own user system or common SSO
Amazon Detective	Investigates root cause of potential security issues or suspicious activities, using machine learning with log data from AWS resources
AWS Directory Service	AKA AWS Managed Microsoft AD (Active Directory); Allows directory-aware workloads and AWS resources to use managed Active Directory in AWS cloud
AWS Firewall Manager	Central service to control and manage AWS WAF rules across accounts and applications in AWS Organizations
AWS RAM	Resource Access Manager; Securely share resources within organization or organizational units, and with IAM users/roles;
Amazon GuardDuty	Threat detection service, monitoring for malicious/unauthorized behavior such as unusual API calls or dangerous deployments
AWS IAM	Identity and Access Management; Create and manage AWS users, roles, and groups, and control their access/permissions;
AWS IAM Identity Center	Formerly AWS Single Sign-On; Central point to manage access on all accounts in the Organization
Amazon Inspector	Security assessment tool for exposure, vulnerabilities, and deviations from best practices; Inspector Console lists these findings by level of severity
AWS KMS	Key Management Service; Create and manage keys, control use of encryption across AWS services; Integrated with CloudTrail to provide logs of key usage
Amazon Macie	Uses ML to discover, classify, and protect sensitive data in AWS such as personally identifiable information (PII) or intellectual property
AWS Network Firewall	Set up network protection for all your VPCs, and define firewall rules; Works with AWS Firewall Manager so you can apply Network Firewall rules across accounts and VPCs
AWS Secrets Manager	Rotate, manage, and retrieve credentials, API keys, etc. throughout their lifecycle; Prevents hardcoding sensitive info into plain text
AWS Security Hub	Comprehensive dashboard view of security alerts and compliance status across AWS accounts; Compiles from sources such as GuardDuty, Inspector, and Macie; Available in the Management Console
AWS Shield	DDoS protection service, minimizing downtime and latency; Standard plan is available across services for free, and AWS Shield Advanced is available at a fee
AWS WAF	Web Application Firewall; Allows control over which traffic to allow or block to web application; with a full-featured API to automate creation, deployment, maintenance of web security rules
AWS Fargate	Serverless compute engine for running containers; Removes need to consider servers or clusters when running your containers
AWS Lambda	Serverless code computing; Run code without provisioning or managing servers, charges by runtime
AWS Backup	Centralize and automate data protection across AWS services; Deploy policies to configure, manage, and govern backup activity across Organization
Amazon EBS	Elastic Block Store; Persistent block storage that attaches to EC2 instances; Replicated within AZ to protect from component failure
Amazon EFS	Elastic File System; File system for Linux based workloads that can scale to petabytes, and grow/shrink automatically; Stored within and across AZs for high availability
AWS DRS	Elastic Disaster Recovery Service; replicates data to minimize downtime and data loss in recovery
Amazon FSx	Shared file storage like EFS but for windows
Amazon S3	Cloud object storage with 11 9s of data durability (99.999999999%), can host static website through public access, or private access for internal storage; Storage classes are Standard, Standard-IA, One Zone-IA, Outposts, and Intelligent Tiering, as well as the Glacier classes
Amazon S3 Glaciers	Additional S3 Storage classes for archived data are Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Archive
AWS Storage Gateway	Hybrid Storage service that allows on-premises applications to use AWS cloud storage
Cloud Migration Strategies	The Seven "R"s; Retire, Retain, Re-host, Relocate, Repurchase, Re-platform, Refactor (Re-architect)
CAF Perspectives	Cloud Adoption Framework Perspectives: Business, Governance, Operations, Security, People, Platform;
CAF Benefits	Reduce business risk, grow revenue, increase operational efficiency, improve environmental, social, and governance performance
CAF Path	Envision -> Align -> Launch -> Scale -> Repeat
Root User Actions	Change acct settings, Restore admin user perms, activate IAM access to Billing and Cost Management, view some tax invoices, close acct, register as seller in Reserved Instance market, configure S3 bucket to enable MFA, edit SQS resource/S3 bucket policy that denies all principals, sign up for AWS GovCloud, request GovCloud acct root user access keys from AWS Support, recover unmanageable KMS service through Support

Nächster

Beschreibung

Zusammenfassung der Ressource

ähnlicher Inhalt

	Erstellt von Jo Mccormack vor etwa ein Jahr