AWS Solutions Architect Associate SAA-C03 FlashCards

A DynamoDB feature that improves the performance of the application by reducing the response times from milliseconds to microseconds.

Amazon DynamoDB Accelerator (DAX)

A type of ELB that should you use to handle Layer 4 traffic

Network Load Balancer

A type of ELB should you use to handle Layer 7 traffic

Application Load Balancer

A security service that blocks XSS, SQL injection, and application requests from certain geographical locations, like embargoed countries

AWS WAF

An asynchronous data replication to another RDS DB instance hosted in the same or another AWS Region

Read Replica

A parallel file system for "hot" (frequently accessed) data

Amazon FSx For Lustre

Synchronous data replication across Availability Zones with automatic failover in Amazon RDS.

Multi-AZ deployment

A storage service for hosting "cold" (infrequently accessed) data in the most cost-effective way.

Amazon S3 Glacier Deep Archive

A relational database with a Recovery Point Objective (RPO) of 1 second and Recovery Time Objective (RTO) of less than 1 minute.

Amazon Aurora Global Database

A service that automates the creation of Amazon EBS snapshots on a regular basis

Amazon Data Lifecycle Manager

An agent/program that monitors the available swap space of your Amazon EC2 instances.

CloudWatch Agent

A service that can implement a 90-day backup retention policy on Amazon Aurora.

AWS Backup

Provide short-lived access tokens that act as temporary security credentials to allow access to AWS resources.

AWS Security Token Service

A policy that routes the internet traffic to the resources based on the location of the user.

Route 53 Geolocation Routing policy

It secures the sensitive data stored in EBS volumes.

EBS Encryption

A service that can generate a certificate that allows multiple domains to serve SSL traffic over the same IP address

AWS Certificate Manager

A type of policy that controls which AWS principals (AWS accounts, IAM users, and IAM roles) can use the VPC endpoint to access the endpoint service.

Endpoint Policy

Encrypts and rotates all the database credentials, API keys, and other secrets on a regular basis.

AWS Secrets Manager

A service that you can store an application data in a tape backup solution and preserved for up to 10 years.

AWS Storage Gateway - Tape Gateway

A service that accelerates the transfer of data from an on-premises data center to AWS over the Internet in a cost-effective manner.

AWS DataSync

A cost-effective Amazon S3 storage class for objects that are accessed less frequently but allow rapid access when necessary

Amazon S3 Infrequent Access

A rule in AWS WAF that limits the maximum number of requests from a single IP address.

Rate-based Rule

An S3 feature that allows you to retrieve a subset of data from a large CSV file stored in the S3 bucket.

S3 Select

Prevent S3 objects from being deleted or overwritten for a fixed amount of time or indefinitely

Amazon S3 Object Lock

A CDN service that can be used to globally deliver the static contents and media files from an Amazon S3 bucket to customers around the world with low latency.

Amazon CloudFront

A service that can be integrated with Amazon CloudWatch Alarms to send email notifications once a specific threshold has been breached

Amazon SNS

A cost-effective solution for over-provisioning of resources.

Target Tracking Scaling

Protect objects in the S3 bucket from accidental deletion or overwrite.

MFA Delete

A type of CMK that uses a single key for both encryption and decryption. The shared key must be sent together with the encrypted data in order for other parties to read it

Symmetric CMK

A fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.

AWS Config

A container orchestration solution that allows the company to execute containerized apps without handling the underlying infrastructure.

AWS Fargate

It is a service that utilizes a combination of machine learning, anomaly detection, and threat intelligence to detect malicious behavior in your server.

Amazon GuardDuty

It allows you to grant temporary AWS credentials to both unauthenticated guests and authenticated users with tokens.

Amazon Cognito Identity Pool

A fully managed ETL (extract, transform, and load) service provided by Amazon Web Services.

AWS Glue

It is a service that allows you to manage multiple AWS accounts easily.

AWS Organization

A distributed data store optimized for ingesting and processing streaming data in real-time.

Apache Kafka

It securely unlocks real-time search, monitoring, and analysis of business and operational data for use cases like application monitoring, log analytics, observability, and website search.

Amazon OpenSearch Service

It is a fully managed integration service that helps you securely transfer data between software as a service (SaaS) applications such as Salesforce, SAP, Google Analytics, Facebook Ads, and ServiceNow, and AWS services such as Amazon Simple Storage Service (S3) and Amazon Redshift in just a few clicks.

Amazon AppFlow

It is a visual workflow service that helps developers use AWS services to build distributed applications, automate processes, orchestrate microservices, and create data and machine learning (ML) pipelines.

AWS Step Functions

It embeds AWS compute and storage services within 5G networks, providing mobile edge computing infrastructure for developing, deploying, and scaling ultra-low-latency applications.

AWS Wavelength

A managed repository for serverless applications. It enables teams, organizations, and individual developers to store and share reusable applications, and quickly assemble and deploy serverless architectures in powerful new ways.

AWS Serverless Application Repository

Empower developers to build and deploy applications with enhanced security features in a fast, standardized, compliant, and cost-efficient manner.

Amazon Elastic Container Service (ECS)

It helps you manually run clusters using a Kubernetes distribution of compatible versions of the latest release and its dependencies, tested for reliability and security.

EKS Distro

A managed service that makes it easy to run Kubernetes on AWS without installing and operating your own Kubernetes control plane or worker nodes.

Amazon EKS

It helps developers analyze and debug production distributed applications, such as those built using a microservices architecture.

AWS X-Ray

A set of purpose-built tools and features that enables frontend web and mobile developers to quickly and easily build full-stack applications on AWS.

AWS Amplify

It provides ML-powered search capabilities for all unstructured data you store in AWS, and it offers easy-to-use native connectors to popular AWS repository types such as Amazon S3 and Amazon RDS databases.

Amazon Kendra

A fully managed service to prepare data and build, train, and deploy machine learning (ML) models for any use case with fully managed infrastructure, tools, and workflows.

Amazon SageMaker

It's an AWS WA tool that identifies components that deliver business value.

Workloads

Simplifies and expedites your migration to AWS by automatically converting your source servers from physical, virtual, or cloud infrastructure to run natively on AWS.

AWS Application Migration Service

To protect the confidential data of your customers, you have to ensure that your RDS database can only be accessed using the profile credentials specific to your EC2 instances via an authentication token

Enable the IAM DB Authentication.

It will protect the S3 objects in your bucket from both accidental deletion and overwriting.

Enable Versioning , Enable Multi-Factor Authentication Delete

Prevent losing access to your database in case there is an outages in the Availability Zone of your RDS database instance.

Enable Multi-AZ failover

A combination of AWS services that will allow user to monitor database metrics and then afterward, send email notifications in case there is an issue.

Amazon CloudWatch , Amazon Simple Notification Service (SNS)

Allows you to issue short-lived access tokens that act as temporary security credentials to allow access to your AWS resources.

Use AWS Security Token Service

Minimizes time-intensive, error-prone manual processes by automating the conversion of your source servers to run natively on AWS.

AWS Application Migration Service

A cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL databases, and other types of data stores.

AWS Database Migration Service

A managed cluster platform that simplifies running big data frameworks, such as Apache Hadoop and Apache Spark, on AWS to process and analyze vast amounts of data.

Amazon EMR

It is a service for delivering real-time streaming data to destinations such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon OpenSearch Service, Splunk, and any custom HTTP endpoint.

Amazon Kinesis Data Firehose

One of the feature of AWS Lake Formation that ensure only authorized users can access sensitive data.

Tag-based Access Control

A centralized repository that allows you to store all your structured and unstructured data at any scale.

Data Lake

An interactive query service that makes it easy to analyze data directly from Amazon S3 using standard SQL.

Amazon Athena

A service that makes it easy for AWS customers to find, subscribe to, and use third-party data in the AWS Cloud.

AWS Data Exchange

It is a series of processing steps to prepare enterprise data for analysis

Data Pipeline

It is an analytics service that you can use to create datasets, perform one-time analyses, and build visualizations and dashboards.

Amazon QuickSight

Offer an elegant server-side solution to address the common challenge faced in web applications—aggregating data from multiple database tables.

AppSync pipeline resolvers

A serverless event bus that makes it easy to connect applications together. It uses data from your own applications, integrated software as a service (SaaS) applications, and AWS services.

Amazon EventBridge (Amazon CloudWatch Events)

A web service that makes it easy to coordinate work across distributed application components.

Amazon Simple Workflow Service

Move data between distributed application components and helps you decouple these components.

Amazon SQS

It helps in visualizing, understanding, and analyzing your AWS costs and usage.

AWS Cost Explorer

A company can programmatically access the usage cost-related data they need on specific services.

Cost Explorer API

Allows you to set custom cost and usage budgets that alert you when your budget thresholds are exceeded.

AWS Budget

A pricing model that offers low prices on EC2 and Fargate usage, in exchange for a commitment to a consistent amount of usage for a 1 or 3-year term.

Savings Plan

It handles job execution and compute resource management, allowing you to focus on developing applications or analyzing results instead of setting up and managing infrastructure.

AWS Batch

It contains a collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management.

Auto Scaling Group

It allows developers to quickly deploy and manage applications in the AWS Cloud.

AWS Elastic Beanstalk

It enables customers to build and run applications on premises using the same programming interfaces as in AWS Regions, while using local compute and storage resources for lower latency and local data processing needs.

AWS Outposts

A pool of AWS compute and storage capacity deployed at a customer site.

Outpost

Enables connectivity between your Outpost subnets and your on-premises network.

Local Gateway

It automatically scales the number of Pods in a deployment, replication controller, or replica set based on that resource's CPU utilization.

Kubernetes Horizontal Pod Autoscaler

A managed service that allows you to run Kubernetes on AWS without installing, operating, or maintaining your own Kubernetes control plane or nodes.

Amazon Elastic Kubernetes Service (EKS)

It records Data Definition Language (DDL), authentication, authorization, and user management events to Amazon CloudWatch Logs.

Amazon DocumentDB

A command can improve data security by requiring the user to enter a password before they are granted permission to execute Redis commands on a password-protected Redis server.

Redis AUTH

A fully managed database service built for the cloud that makes it easier to build and run graph applications.

Amazon Neptune

It provides developers with a simple, flexible, fully managed, pay-as-you-go service that handles all aspects of creating and operating robust APIs for application back ends.

Amazon API Gateway

An application testing that service that lets you improve the quality of your web and mobile by testing them on a vast range of desktop browser and real mobile devices without needing to manage any testing infrastructure.

AWS Device Farm

It uses machine learning to predict capacity requirements based on historical data from CloudWatch.

Predictive Scaling

A fully managed service for identifying and preventing online fraud.

Amazon Fraud Detector

Enables any developer to build conversational chatbots quickly.

Amazon Lex

A natural language processing (NLP) service that uses machine learning to find meaning and insights in text.

Amazon Comprehend

A service that analyzes the configuration and utilization metrics of your AWS resources.

AWS Compute Optimizer

It simplifies the process of setting up and governing multi-account AWS environments with security, operations, and compliance rules.

AWS Control Tower

A secure and fully managed data visualization service that allows you to instantly query, correlate, and visualize operational metrics, logs, and traces from multiple sources.

Amazon Managed Grafana

It is a tool that streamlines application deployment workflows to improve organizational agility for DevOps and platform engineers.

AWS Proton

It automatically provisions and elastically scales all the infrastructure needed to ingest streaming video data from millions of devices.

Amazon Kinesis Video Streams

It can detect objects, scenes, faces, celebrities, text, and inappropriate content in videos.

Amazon Rekognition Video

It provides on-demand access to AWS' security and compliance reports and select online agreements.

AWS Artifact

A data security service that uses machine learning and pattern matching to discover and protect sensitive data, while providing visibility into data security risks.

Amazon Macie

A compute service that runs code without servers and is event-driven, making it suitable for various applications.

AWS Lambda

It ensures that API traffic is controlled to help your backend services maintain performance and availability.

Throttling