AWS Solutions Architect

AWS Cloud

On demand, remote access, pay as you go

AZ

Avalability Zone

Region

geographical area for AWS infrastructure

EC2

virtual machine in cloud to run tasks online

AMI

AWS Machine Image, defines the OS and software

RDP

Remote desktop protocol for windows

SSH

Secure sheel protocol for linux

AWS Systems Manager

directly on AWS for instances

VM

virtual machines that do tasks

CLI

Command line interface, uses terminal to invoke API or VMs

AWS Management Console

point n click dashboard for testing and setting up VMs

SDK

software developer kit, using VMs and API calls directly in code

AMI

preconfiged OS and software and permissions, can be used for multiple instance launches

AWS Scaling

add more/less power or VM

Scale Out

add more machines

Scale Up

add more power to machiens

ELB

elastic load balancing, distributes network traffic by linking EC2s and directing commands

SQS

simple queue service, softwares send and recieve commands as messages in queue

SNS

simple notification service, message instantly notifies when called

EventBridge

decides who does what, and sends messages to specific machines/ people

Root User

to create a new AWS acc u need a root user w/ unrestricted unchangable perms

IAM User

1 person user w/ long term credentials, can be in multiple groups, can be without a group, starts with 0 permissions that must be granted

IAM Group

collections of IAM users w/ perms, cant put a group in a group

IAM Role

temporary permissions for people/ apps

Principle of Least Privilege

assign least amount of roles as required

AWS STS

service that provides temp creds when a role is recieved using federation and moderation

Identity Policy

attached to IAM and defines abilities

Resource Policy

attached to resources and defines accesibility

Policy Contains

Conditions: restrictions

Resource: resources covered

Effect: allow/deny

Action: API operations covered

Principal: who can access

AWS Organization

used to organize 1 or more AWS accounts

SCP

service control policy sets max permissions for an account, cant grant perms, only limit

AWS Control Tower

governs secure multi account environments

Evaluating Policy

denied by default, allow grants acces, deny overrides allows