AWS Certified Cloud Practitioner CLF-C02 Flash Cards

A change or a failure in one component should not cascade to other components.

Loose coupling

A gateway that enables your Amazon EC2 instances in the public subnet to connect to the public Internet.

Internet Gateway

A gateway that enables your EC2 instances in the private subnet to connect to the public Internet.

NAT Gateway

A security management tool to configure your AWS WAF rules across your accounts.

AWS Firewall Manager

Compliance-related documents in AWS such as Service Organization Controls (SOC) reports

AWS Artifact

An IAM identity that uses access keys to manage cloud resources via AWS CLI.

IAM User

A role that grants temporary access to your AWS resources.

IAM Role

Manages the common access permissions to a large number of IAM users in AWS.

IAM Group

A resource-based policy that you can use to grant access permissions to your bucket and the objects in it.

Bucket Policy

Provides AWS credentials to grant your users access to other AWS services.

Amazon Cognito Identity Pools

A service that discovers, classifies, and protects sensitive data such as personally identifiable information (PII) or intellectual property.

Amazon Macie

A threat detection service that continuously monitors for malicious activity to protect your AWS account.

Amazon GuardDuty

An authentication method that prevents unauthorized deletion of Amazon S3 objects.

Multi-Factor Authentication (MFA)

It acts as a virtual firewall in AWS that controls the traffic at the EC2 instance level.

Security Group

An automated security assessment service to improve the security and compliance of your applications.

Amazon Inspector

An AWS global network that improves availability of deployed applications on AWS using an anycast static IP address.

AWS Global Accelerator

A data transport service that securely moves petabyte-scale data into and out of the AWS Cloud.

AWS Snowball

A service that allows you to continuously monitor and log account activities such as the user actions made from the AWS Management Console and AWS SDKs.

AWS CloudTrail

A source control service that allows you to host Git-based repositories.

AWS CodeCommit

A type of an EC2 instance that allows you to use your existing server-bound software licenses.

Dedicated Host

A highly available and scalable cloud DNS web service in AWS.

Amazon Route 53

Automatically scale the capacity of an AWS cloud resource based on the incoming traffic to improve availability and reduce failures.

AWS Auto Scaling

Automatically transfer your infrequently accessed data in your S3 bucket to a more cost-effective storage class.

S3 Lifecycle Policy

A designated technical point of contact that will maintain an operationally healthy AWS environment.

Technical Account Manager (TAM)

A tool that inspects your AWS environment and makes recommendations that follows AWS best practices.

AWS Trusted Advisor

Set coverage targets and receive alerts when your utilization drops.

AWS Budgets

A type of Reserved Instance that allows you to change its instance family, instance type, platform, scope, or tenancy.

Convertible RI

Forecast future costs and usage of your AWS resources based on your past consumption.

AWS Cost Explorer

Categorize and track AWS costs on a detailed level.

Cost allocation tags

The most cost-effective option when you purchase a Reserved Instance for a 1-year term.

All Upfront

This service simplifies setting up, managing, and scaling distributed in-memory cache setups in the AWS Cloud. It eliminates the complexity of deploying and operating a distributed cache system and offers a high-performance, resizable, cost-effective, and in-memory cache.

Amazon ElastiCache

A migration and replication service that is managed and designed to help you securely and quickly move your database and analytics workloads to AWS with minimal downtime and no data loss.

AWS Database Migration Service (AWS DMS)

This network service has the ability to create a secure link between your on-premises data center or office location and the AWS environment via a 1 gigabit or 10 gigabit Ethernet fiber-optic connection. This dedicated connection offers high-speed performance with low latency and avoids any involvement of internet service providers along the network path.

AWS Direct Connect

A Machine Learning service that allows you to add image and video analysis features to your applications.

Amazon Rekognition

This service simplifies the analysis of distributed application behavior for developers by equipping them with profiling capabilities, exception collection, and request tracing.

AWS X-Ray

This feature refers to data associated with an Amazon Elastic Compute Cloud (Amazon EC2) instance that can be utilized by applications for the configuration or management of the instance while it is running.

Instance metadata

It is a web service that accelerates the delivery of your dynamic and static web content, including image files, .js, .css, and .html files, to users.

Amazon CloudFront

A service that allows you to define and deploy AWS resources using infrastructure-as-a-code (IaC).

AWS CloudFormation

This service enables you to manage, create, and control cryptographic keys for AWS services and your applications.

AWS Key Management Service (AWS KMS)

It's a serverless, fully managed NoSQL database for key-value data that can handle high-performance applications at any scale.

Amazon DynamoDB

It is a tool that assists customers in estimating the overall expenses associated with operating their applications in the AWS Cloud.

AWS Total Cost of Ownership (TCO) Calculator

A purchasing option that allows you to utilize unused EC2 capacity in the AWS cloud with up to a 90% discount compared to On-Demand prices.

Spot Instance

It is an account management service that lets you consolidate multiple AWS accounts into an organization that you create and centrally manage. Accounts are grouped into logical groups called organizational units (OUs).

AWS Organizations

This service is capable of providing a cost-effective solution for storing your data over extended periods ranging from months to decades. It offers a three-tier retrieval system that allows you to retrieve your data in as little as a few minutes for urgent needs (expedited retrieval), a few hours for non-urgent needs (standard retrieval), or several hours for large data archives (bulk retrieval).

Amazon Glacier

A platform where you can sell your catalog of custom AMIs in AWS.

AWS Marketplace

This Amazon S3 feature enables you to upload a single object as a set of parts, where each part represents a contiguous portion of the object's data. These parts can be uploaded independently and in any order.

Multipart Upload

AWS Organizations feature that enables customers to combine payment for multiple accounts into a single payment method. It summarizes usage and costs for all accounts.

Consolidated Billing

This service provides detailed information about your AWS resource usage and estimated charges associated with your AWS account.

AWS Cost and Usage Reports

It distributes incoming traffic across multiple targets and automatically scales its capacity based on changes in traffic. It also ensures high availability by monitoring target health and routing traffic only to healthy targets.

Elastic Load Balancer (ELB)

A physical location where AWS data centers allow customers to deploy their applications and data closer to end-users to achieve lower latency and compliance requirements.

AWS Regions

These comprise one or more discrete data centers, each with redundant power, networking, and connectivity, and located in separate facilities.

Availability Zones

It is tied to the region where its files are located within S3. You also can copy this from one region to another.

Amazon Machine Images (AMIs)

An interactive query service that makes it easy to analyze data directly in Amazon S3 and other data sources using SQL.

Amazon Athena

This pillar supports development, runs workload effectively, and continuously improves supporting processes and procedures to deliver business value.

Operational Excellence

An object storage service that stores data as objects within buckets.

Amazon Simple Storage Service (Amazon S3)

It displays metrics and creates alarms that watch them and send notifications or automatically make changes to the resources you monitor when a threshold is breached.

Amazon CloudWatch

A service that extends the capabilities of CloudWatch Events by enabling customers to connect data from their apps and third-party SaaS apps, making it easier to connect applications.

Amazon EventBridge

It simplifies the process of investigating security findings and identifying the root cause.

Amazon Detective

A managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

AWS Shield

It is a service that lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers, and body or custom URLs.

AWS WAF

This failover configuration can be used when you want a primary resource or group of resources to be available most of the time, and you want a secondary resource or group of resources to be on standby in case all the primary resources become unavailable.

Active-Passive Failover

A database service that lets you access and analyze data without all the configurations of a provisioned data warehouse. Its data warehouse capacity is intelligently scaled to deliver fast performance for unpredictable workloads.

Amazon Redshift

A fully managed relational database engine compatible with MySQL and PostgreSQL.

Amazon Aurora

A technology that you can use with Amazon ECS to run containers without managing servers or clusters of Amazon EC2 instances.

AWS Fargate

It is a fully managed message queuing service that lets you send, store, and receive messages between software components at any volume without the need for other services to be available.

Amazon Simple Queue Service (Amazon SQS)

It connects to the same storage volume as the primary DB instance and supports only read operations.

Aurora Replica

An AWS Cloud Adoption Framework perspective that facilitates the alignment of technology and business, accelerating the cloud journey to help organizations more rapidly evolve to a culture of continuous growth and learning.

People perspective

It is one of the advantages of cloud computing that you can quickly deploy your application in multiple regions worldwide with just a few clicks.

Go global in minutes

This service offers serverless and fully elastic file storage, allowing users to share file data without worrying about storage capacity and performance management.

Amazon Elastic File System (Amazon EFS)

This service offers storage volumes that can be used with EC2 instances on a block level.

Amazon Elastic Block Store (Amazon EBS)

It is a service that offers durable and safe devices that allow you to use AWS computing and storage solutions in your edge environments and transfer data to and from AWS.

AWS Snowball

An AWS service that links your on-premises software device to cloud-based storage, creating a smooth and secure integration between your on-premises and the AWS storage infrastructure in the AWS Cloud.

AWS Storage Gateway

A cloud best practice that reinforces using the Service-Oriented Architecture (SOA) design principle.

Decouple your components

This AWS service allows users to evaluate the newly created IAM policies.

IAM Policy Simulator

Its responsibility is to patch the host operating system of an Amazon EC2 instance.

AWS

It allows users to securely transfer hundreds of petabytes of data and exabyte-scale datasets into and out of the AWS Cloud.

AWS Snowmobile

A company needs to upload a single object as a set of parts to improve throughput and recover quicker from network issues.

Use Multipart Upload API

It is the lowest support plan that allows an unlimited number of technical support cases to be opened.

Developer Support Plan

This is a single place to learn about the availability and operations of your AWS resources, and you can view the overall status of AWS services.

AWS Health Dashboard

It is an AWS web service that makes it easy to set up, operate, and send notifications from the cloud.

Amazon Simple Notification Service (Amazon SNS)

A series of programs, commonly known as "jobs," can be executed on one or more computers without any manual intervention.

Batch computing

An AWS service that simplifies the deployment and management of applications in the AWS Cloud.

AWS Elastic Beanstalk

It simplifies your desktop delivery strategy by eliminating the complexity of managing inventory, operating system versions and patches, and virtual desktop infrastructure.

Amazon WorkSpaces

It is an open-source container orchestration system allowing you to deploy and manage containerized applications at scale.

Kubernetes

This helps decrease your DynamoDB expenses for tables that hold data that is not frequently accessed.

DynamoDB Standard-IA

It is an AWS Auto Scaling capability that analyzes past traffic patterns and predicts future ones to schedule adjustments in the number of EC2 instances when necessary.

Predictive Scaling

A cryptographic service for creating and maintaining hardware security modules in your AWS environment.

AWS CloudHSM

It is an authorization strategy in AWS that defines permissions based on attributes.

Attribute-based access control (ABAC)

An AWS service that performs ongoing assessments, audits, and evaluations of your resource configurations and relationships across AWS, on-premises, and other cloud platforms.

AWS Config

It refers to permitting users only the minimum level of access necessary to perform their required tasks.

Least-privilege permissions

A container management service runs, stops, and manages Docker containers on a cluster.

Amazon Elastic Container Service (Amazon ECS)

This service managed by AWS simplifies establishing, managing, and expanding a cloud-based relational database.

Amazon Relational Database Service (Amazon RDS)

It automatically scales storage capacity in response to growing database workloads with zero downtime.

RDS Storage Auto Scaling

This AWS service is a fast, user-friendly cloud-powered business analytics tool that allows all employees to create visualizations quickly, conduct ad-hoc analysis, and obtain business insights from their data at any time and on any device.

Amazon QuickSight

An estimation tool that estimates the cost of using AWS services based on your specific usage parameters.

AWS Pricing Calculator

This service executes large volumes of batch computing jobs on AWS quickly and efficiently.

AWS Batch

It is a simplified, user-friendly AWS service designed to help individuals and small businesses quickly launch and manage virtual private servers (VPS) with ease.

Amazon Lightsail

It is a managed service that simplifies the deployment, management, and scaling of Kubernetes clusters.

Amazon Elastic Kubernetes Service (Amazon EKS)

An AWS service that compiles source code, runs tests and produces software packages ready to deploy.

AWS CodeBuild

A cloud-based contact center service that enables businesses to provide exceptional customer service at a lower cost than traditional contact centers.

Amazon Connect