D282 Exam Guide: In-Scope Technologies

Comprehensive vocabulary flashcards covering the in-scope AWS technologies, frameworks, and architecture patterns from the D282 Exam Guide review.

The 6 Advantages of Cloud Computing (Cloud Value Proposition)

1) Trade fixed expense for variable expense; 2) Benefit from massive economies of scale; 3) Stop guessing capacity; 4) Increase speed and agility; 5) Stop spending money running and maintaining data centers; 6) Go global in minutes.

AWS Cloud Adoption Framework (CAF)

A framework that leverages experience to accelerate business outcomes by identifying organizational capabilities for cloud readiness across six perspectives: Business, People, Governance, Platform, Security, and Operations.

API (Application Programming Interface)

A set of rules and protocols that allow different software applications to communicate with each other by defining request and response structures.

AWS Well-Architected Framework

A framework designed to help understand the pros and cons of decisions and learn best practices for secure, reliable, efficient, cost-effective, and sustainable workloads; conceived as a constructive conversation rather than an audit mechanism.

Shared Responsibility Model

A cloud security model establishing that the customer is responsible for Security IN the cloud (Guest OS, patches, application software, firewall configuration) and AWS is responsible for Security OF the cloud (Host OS, virtualization, physical facilities).

AWS Solutions Architects

Role responsible for managing cloud architecture, providing migration guidance, and handling high-risk issue resolution.

AWS Region

A physical location clustering data centers around the world, typically composed of 3 Availability Zones and interconnected with 9+ million kilometers of fiber optic cabling.

Availability Zone (AZ)

An isolated location within an AWS Region.

AWS Local Zones

An edge infrastructure service that places compute, storage, and database services close to large populations to deliver low latency.

AWS Wavelength

An edge computing service optimized for 5G edge devices to deliver ultra-low latency.

AWS Outposts

A hybrid service extending AWS infrastructure, native services, APIs, and tools to on-premises environments.

Amazon VPC (Virtual Private Cloud)

A logically isolated virtual network where the user maintains complete control over IP address ranges, subnets, and network gateways.

AWS Direct Connect

A dedicated, private physical network connection from on-premises facilities directly to AWS.

AWS VPN

An encrypted network connection offering Client VPN and Site-to-Site VPN options to connect users and remote networks to AWS.

Amazon Route 53

A highly available and scalable cloud Domain Name System (DNS) web service.

Amazon CloudFront

A global Content Delivery Network (CDN) service that securely delivers data, videos, applications, and APIs.

AWS Global Accelerator

A networking service that directs user traffic through AWS's global network infrastructure to optimal endpoints.

Amazon EC2 (Elastic Compute Cloud)

A web service that provides resizable compute capacity for launching Linux/UNIX and Windows Server virtual instances.

On-Demand Instances

An EC2 pricing model where you pay only for compute capacity used by the hour or second, with no long-term contractual commitment.

Reserved Instances

An EC2 pricing model offering significant discounts in exchange for a contractual commitment of 1 or 3 years.

Spot Instances

An EC2 pricing model enabling users to bid on spare, unused EC2 capacity for steep discounts.

AWS Auto Scaling

A management tool that automatically monitors and adjusts resource capacity to maintain steady, predictable performance with dynamic scaling.

AWS Compute Optimizer

A machine learning-based optimization service that analyzes vCPUs, memory, and storage using a 14-day lookback period (or 93-day enhanced lookback) to recommend optimal AWS resources.

AWS Batch

A fully managed service that runs batch computing workloads of any scale while removing infrastructure configuration heavy lifting.

Amazon Lightsail

An easy-to-use virtual private server (VPS) provider offering pre-configured bundled plans at a low, predictable monthly rate.

Amazon ECS (Elastic Container Service)

A highly scalable, fast container management service designed to run Docker containers across managed EC2 instances.

Amazon EKS (Elastic Kubernetes Service)

A fully managed Kubernetes service to run Kubernetes workloads on AWS without having to operate the control plane.

Amazon ECR (Elastic Container Registry)

A fully managed Docker container registry that makes it easy for developers to store, manage, and deploy container images.

AWS Lambda

A serverless compute service that runs code in response to events and automatically manages the underlying compute resources with zero administration.

AWS Fargate

A serverless compute engine for containers that works with Amazon ECS and EKS, allowing you to run containers without managing servers.

Amazon S3 (Simple Storage Service)

An object storage service built to store and retrieve any amount of data from anywhere on the internet.

Amazon S3 Glacier

A secure, durable, and low-cost cloud storage class for data archiving and long-term backup, optimized for infrequent access with hours retrieval times.

Amazon EBS (Elastic Block Store)

High-performance block-level storage volumes designed for persistent use with Amazon EC2 instances.

Amazon EFS (Elastic File System)

A simple, serverless, set-and-forget elastic file storage service for use with Linux-based EC2 instances that grows and shrinks automatically.

Amazon FSx

A service that makes it easy and cost-effective to launch and run high-performance, feature-rich file systems (including NetApp ONTAP, OpenZFS, Windows, and Lustre).

AWS Storage Gateway

A hybrid cloud storage service that gives on-premises environments seamless access to virtually unlimited cloud storage.

AWS Snow Family

A collection of physical hardware devices used to securely migrate large volumes of data and run operations in disconnected edge environments.

AWS Transfer Family

A fully managed service enabling secure file transfers directly into Amazon S3 or EFS using SFTP, FTPS, and FTP protocols.

AWS Backup

A centralized, policy-driven service that automates and manages backups across AWS services in the cloud and on premises.

AWS Elastic Disaster Recovery

A disaster recovery service that minimizes downtime and data loss through fast, reliable recovery of on-premises and cloud-based applications.

Amazon RDS (Relational Database Service)

A managed relational database service that simplifies the setup, operation, and scaling of relational databases with cost-efficient, resizable capacity.

Amazon Aurora

A fully managed relational database engine compatible with MySQL and PostgreSQL that offers the speed and reliability of high-end commercial databases with the cost-effectiveness of open-source.

Amazon DynamoDB

A fully managed NoSQL key-value and document database that delivers single-digit millisecond performance at any scale.

Amazon MemoryDB for Redis

A Redis-compatible, durable, in-memory database service designed for ultra-fast performance and multi-AZ durability.

Amazon Neptune

A fast, reliable, fully managed graph database service optimized for frameworks such as Apache TinkerPop and W3C SPARQL.

AWS DMS (Database Migration Service)

A managed service that helps migrate relational databases, data warehouses, and NoSQL databases into AWS with minimal downtime.

AWS SCT (Schema Conversion Tool)

A tool that converts source database schemas and code to make heterogeneous database migrations predictable and manageable.

AWS IAM (Identity and Access Management)

A foundational service to securely control access to AWS services and resources by managing users, access keys, groups, and permissions.

AWS IAM Identity Center

A service (formerly AWS SSO) that simplifies single sign-on access to manage multiple AWS accounts and business applications centrally.

Amazon Cognito

A service that provides customer identity and access management along with data synchronization across devices for mobile and web applications.

AWS Directory Service

A managed service that enables AWS resources to connect to and use an on-premises Microsoft Active Directory.

AWS RAM (Resource Access Manager)

A service that enables users to securely share AWS resources with any AWS account or within an AWS Organization.

AWS Organizations

An account management service that enables central governance, billing consolidation, and management across multiple AWS accounts.

AWS Audit Manager

A service that continually and automatically audits AWS usage to evaluate risk and compliance with industry standards.

AWS Artifact

A central self-service compliance portal providing on-demand access to AWS security and compliance reports (e.g., PCI-DSS, HIPAA, GDPR) and agreements.

AWS WAF (Web Application Firewall)

A web application firewall that helps protect web applications and APIs from common web exploits and vulnerabilities.

AWS Shield

A managed Distributed Denial of Service (DDoS) protection service available in Standard (automatic, free) and Advanced (paid, comprehensive) tiers.

AWS Network Firewall

A stateful, managed network firewall and intrusion detection and prevention service for securing Amazon VPCs.

AWS Firewall Manager

A central management tool that allows administrators to centrally configure and manage firewall rules (including AWS WAF and Shield) across multiple accounts.

Amazon GuardDuty

An intelligent threat detection service that provides continuous monitoring and analysis of AWS accounts and workloads for malicious activity.

Amazon Inspector

An automated vulnerability management service that continually scans workloads for software vulnerabilities and unintended network exposure.

Amazon Macie

A fully managed data security service that uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3.

AWS Security Hub

A cloud security posture management service that provides a comprehensive view of security alerts by aggregating findings across AWS accounts.

AWS KMS (Key Management Service)

A managed service that makes it easy to create, manage, and control cryptographic encryption keys used to encrypt data.

AWS CloudHSM

A cloud-based Hardware Security Module (HSM) that enables dedicated cryptographic hardware key storage under direct customer control.

AWS Secrets Manager

A service that helps users protect, manage, retrieve, and automatically rotate credentials, database passwords, and API keys throughout their lifecycle.

Amazon CloudWatch

A monitoring and observability service that collects operational data in the form of logs, metrics, and events, allowing users to configure alarms.

AWS CloudTrail

A governance and compliance service that records and logs AWS API activity, tracking caller identity, event time, and source IP.

AWS Health Dashboard

A tool that provides real-time information and visibility into AWS service availability and personalized notifications about resource health.

AWS Service Catalog

A service that enables organizations to create, manage, and govern centrally approved catalogs of IT services and architectures for end users.

AWS Resource Groups

A management feature that lets users organize and manage collections of AWS resources in bulk using tags or query criteria.

AWS Config

A service that continually assesses, audits, and evaluates resource inventory, configuration history, and compliance against predetermined rules.

AWS Systems Manager

An operational hub that allows administrators to gain operational insights, automate tasks, and manage cloud and hybrid infrastructure securely at scale.

AWS Trusted Advisor

An automated advisory service that provides real-time best practice recommendations across cost optimization, performance, security, fault tolerance, and service limits.

AWS Control Tower

A service that provides the easiest way to set up and govern a secure, multi-account AWS environment following automated best practices.

Amazon SQS (Simple Queue Service)

A fully managed message queuing service that decouples microservices, distributed systems, and serverless applications.

Amazon SNS (Simple Notification Service)

A fully managed publish/subscribe messaging service that facilitates application-to-application (A2A) and application-to-person (A2P) notifications.

Amazon EventBridge

A serverless event bus service that ingests and routes events from AWS services, custom apps, and third-party SaaS sources.

AWS Step Functions

A visual workflow orchestration service that allows developers to coordinate distributed components and microservices using state machines.

Amazon API Gateway

A fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure REST and WebSocket APIs at any scale.

AWS CodeCommit

A secure, highly scalable, managed source control service that hosts private Git repositories.

AWS CodeBuild

A fully managed continuous integration service that compiles source code, runs automated tests, and produces software packages ready for deployment.

AWS CodeDeploy

A deployment service that automates application deployments across various compute services including Amazon EC2, Fargate, Lambda, and on-premises servers.

AWS CodePipeline

A fully managed continuous delivery (CI/CD) service that models, visualizes, and automates software release workflows.

AWS Cloud9

A cloud-based integrated development environment (IDE) that lets you write, run, and debug code with just a browser.

AWS CloudShell

A browser-based, pre-authenticated command line interface (CLI) configured with tools to manage and interact with AWS resources.

AWS X-Ray

A developer tool that collects data about requests that applications serve to trace and debug distributed microservice architectures.

AWS Amplify

A set of purpose-built tools and services enabling mobile and frontend web developers to build, ship, and host full-stack applications.

Amazon Kinesis

A managed platform designed to easily collect, process, and analyze real-time streaming data at any scale.

Amazon MSK (Managed Streaming for Apache Kafka)

A fully managed service that allows you to build and run applications that use Apache Kafka to process streaming data.

Amazon EMR

A cloud big data platform that simplifies running big data frameworks such as Apache Hadoop and Apache Spark for large-scale data processing.

AWS Glue

A serverless data integration service that makes it easy to discover, prepare, move, and integrate data using ETL pipelines and a central Data Catalog.

Amazon Redshift

A fully managed, petabyte-scale cloud data warehouse service optimized for high-performance business intelligence and SQL analytics.

Amazon Athena

An interactive serverless query service that makes it easy to analyze data directly in Amazon S3 using standard SQL syntax.

Amazon OpenSearch Service

A managed service that makes it easy to deploy, operate, and scale OpenSearch clusters for application search and operational log analytics.

Amazon QuickSight

A cloud-powered, serverless business intelligence and visualization service used to deliver interactive dashboards and insights.

AWS IoT Core

A managed cloud platform that lets connected devices easily and securely interact with cloud applications and other devices.

AWS IoT Greengrass

An IoT edge runtime and cloud service that enables local compute, messaging, data management, and ML inference on edge devices.

AWS Data Exchange

A cloud service that makes it easy to find, subscribe to, and use third-party data from hundreds of commercial data providers.

Amazon SageMaker AI

A comprehensive cloud machine learning platform providing purpose-built infrastructure and tools to build, train, and deploy ML models.