AWS Certified Cloud Practitioner (CLF-C02) Flashcards

400 vocabulary flashcards covering AWS Certified Cloud Practitioner concepts, services, and architecture based on Stéphane Maarek's course.

Client

A web browser or device with an IP address that requests resources from a server over a network.

Server

A computer network device with an IP address composed of compute power, memory, storage, databases, and network connectivity that serves requests.

Compute

The processing power of a server provided by the Central Processing Unit (CPU).

Memory

Temporary high-speed data storage in a server provided by Random Access Memory (RAM).

Storage

The persistent drive capacity used to retain data on a server.

Database

A system used to store and query data in a structured or specialized format.

Network

An interconnected system of cables, routers, switches, and servers that allow devices to communicate.

Router

A networking device that forwards data packets between different computer networks across the internet.

Switch

A networking device that receives data packets and routes them to the correct client or server on a local network.

Traditional IT Infrastructure

An infrastructure model where organizations build, own, and maintain physical data centers, offices, or garages to host servers.

Cloud Computing

The on-demand delivery of compute power, database storage, applications, and IT resources through a cloud platform with pay-as-you-go pricing.

Private Cloud

A cloud deployment model where cloud services are used exclusively by a single organization and not exposed to the public.

Public Cloud

A cloud deployment model where cloud resources are owned and operated by a third-party cloud provider and delivered over the internet.

Hybrid Cloud

A cloud deployment model that combines on-premises private infrastructure with public cloud capabilities for flexibility and asset control.

On-Demand Self-Service

A cloud characteristic allowing users to provision resources automatically without requiring human interaction from the service provider.

Broad Network Access

A cloud characteristic where resources are accessible over the network using diverse client platforms such as mobile phones, laptops, or workstations.

Multi-Tenancy

A resource pooling architecture where multiple customers share the same physical infrastructure while maintaining isolation, security, and privacy.

Rapid Elasticity

The ability to automatically and quickly acquire, scale out, scale in, and dispose of computing resources based on real-time demand.

Measured Service

A cloud characteristic where resource usage is monitored, measured, and billed precisely based on actual consumption.

Capital Expenditure (CAPEX)

Upfront capital spending on physical hardware and infrastructure before using it.

Operational Expenditure (OPEX)

Ongoing operational expenses where customers pay on-demand for services as they consume them.

Total Cost of Ownership (TCO)

The comprehensive direct and indirect costs associated with owning and operating infrastructure, which is reduced by shifting to the cloud.

Economies of Scale

Cost advantages achieved by AWS due to its massive scale, leading to lower pay-as-you-go prices for customers.

Scalability

The capacity of a system to accommodate larger workloads by increasing hardware strength or adding additional nodes.

High Availability

Designing systems across multiple data centers or availability zones so applications continue running despite localized hardware failures.

Agility

The ability to rapidly develop, test, and launch software applications by provisioning cloud resources in minutes.

Infrastructure as a Service (IaaS)

A cloud computing model providing basic building blocks for cloud IT, including networking, virtual computers, and data storage space with maximum flexibility.

Platform as a Service (PaaS)

A cloud computing model that removes the need to manage underlying infrastructure, allowing organizations to focus on application deployment and management.

Software as a Service (SaaS)

A completed product managed and operated completely by the service provider, accessed directly by end-users.

Pay-as-you-go Pricing

AWS pricing model based on three core fundamentals: paying for compute time, paying for data stored, and paying for data transfer OUT.

Data Transfer IN

Inbound data traffic sent into the AWS Cloud, which is always free of charge.

AWS Region

A geographical area around the world containing a cluster of isolated data centers.

Data Governance Compliance

The requirement that data stored in an AWS Region never leaves that region without explicit customer permission.

AWS Availability Zone (AZ)

One or more discrete, isolated data centers with redundant power, networking, and connectivity within an AWS Region.

AWS Points of Presence

A global network consisting of over 400 Edge Locations and 10+ Regional Caches located in over 90 cities to deliver content to end users with low latency.

Global Services

AWS services that operate globally across all regions, including Identity and Access Management (IAM), Route 53, CloudFront, and WAF.

Region-Scoped Services

AWS services that are bound to a specific AWS Region upon creation, such as Amazon EC2, Elastic Beanstalk, and AWS Lambda.

Shared Responsibility Model

A security model where AWS is responsible for security OF the cloud, while the customer is responsible for security IN the cloud.

AWS Acceptable Use Policy

A policy stipulating that users may not use AWS for illegal, harmful, or offensive content, security violations, network abuse, or email abuse.

AWS Identity & Access Management (IAM)

A global service used to securely manage users, groups, permissions, and access to AWS resources.

AWS Root Account

The initial account owner identity created when an AWS account is opened, having complete access to all resources and administrative functions.

IAM User

An entity created within AWS to represent a physical person or application requiring interaction with AWS resources.

IAM Group

A collection of IAM users used to attach permissions to multiple users at once.

IAM Policy

A JSON document defining allowed or denied permissions and actions assigned to users, groups, or roles.

Least Privilege Principle

A security best practice of granting users only the minimum permissions required to perform their specific duties.

Policy Version Identifier

A element in an IAM policy structure that specifies the policy language version, typically set to '2012-10-17'.

Statement Effect

An IAM policy element that defines whether access is explicitly granted or denied using 'Allow' or 'Deny'.

Statement Action

An IAM policy element specifying the list of service API calls or actions allowed or denied.

Statement Resource

An IAM policy element specifying the exact AWS resources to which the policy actions apply.

IAM Password Policy

A set of configuration rules enforcing minimum password length, required character types, password expiration, and prevention of password reuse.

Multi-Factor Authentication (MFA)

A security enhancement requiring users to present a password plus a physical or virtual security device upon login.

Virtual MFA Device

A software application installed on a phone or device (such as Google Authenticator or Authy) generating timed authenticator codes.

U2F Security Key

A physical third-party hardware security key (such as YubiKey) supporting multiple users and root accounts over USB or wireless interfaces.

Hardware Key Fob MFA

A standalone physical token device (provided by Gemalto or SurePassID) that displays an authentication code for MFA.

AWS Management Console

A web-based user interface used to access and manage AWS services, protected by a password and MFA.

AWS Command Line Interface (CLI)

An open-source command-line tool allowing users to manage AWS services using shell commands and scripts.

AWS Software Development Kit (SDK)

A set of language-specific libraries enabling developers to access and manage AWS services programmatically within applications.

Access Key ID

A publicly visible string generated in the AWS Console that acts as the username for programmatic CLI and SDK access.

Secret Access Key

A confidential string generated alongside an Access Key ID that acts as the password for programmatic CLI and SDK access.

IAM Role

An IAM identity with specific permissions that AWS services or authorized entities can assume to perform actions on your behalf.

IAM Credentials Report

An account-level security report listing all AWS account users and the detailed status of their passwords, access keys, and MFA devices.

IAM Access Advisor

A user-level security tool displaying service permissions granted to an IAM user and when those services were last accessed.

Amazon EC2

Amazon Elastic Compute Cloud, an IaaS service providing scalable virtual servers in the cloud.

EC2 User Data

A bootstrap script executed automatically with root privileges only once during the initial boot of an EC2 instance.

Bootstrapping

The process of executing startup commands, installing updates, or configuring software when a machine starts.

EC2 Naming Convention

The structure used to identify EC2 instance types, such as 'm5.2xlarge', where 'm' is the instance class, '5' is the generation, and '2xlarge' is the size.

General Purpose Instance

An EC2 instance type (such as t2.micro) providing a balanced mix of compute, memory, and networking for diverse workloads.

Compute Optimized Instance

An EC2 instance type engineered for high-performance processors required by compute-intensive workloads like batch processing or scientific modeling.

Memory Optimized Instance

An EC2 instance type engineered to deliver fast performance for workloads processing large datasets in RAM, such as in-memory databases.

Storage Optimized Instance

An EC2 instance type designed for tasks requiring sequential read/write access to large local datasets, such as OLTP systems or data warehousing.

Security Group

A virtual firewall operating at the EC2 instance level that controls incoming and outgoing network traffic.

Security Group Inbound Filter

Rules within a Security Group evaluating and regulating traffic attempting to enter an EC2 instance.

Security Group Outbound Filter

Rules within a Security Group regulating traffic leaving an EC2 instance.

Security Group Default State

The default configuration of a newly created Security Group where all inbound traffic is blocked and all outbound traffic is allowed.

Port 22

The network port used for SSH (Secure Shell) and SFTP to log into and transfer files securely to Linux instances.

Port 21

The standard network port used for FTP (File Transfer Protocol).

Port 80

The standard network port used for unsecured HTTP web traffic.

Port 443

The standard network port used for secure HTTPS web traffic.

Port 3389

The network port used for RDP (Remote Desktop Protocol) to log into Windows instances.

EC2 Instance Connect

A browser-based tool allowing users to connect to Amazon Linux 2 instances over SSH using short-lived temporary keys without downloading key files.

On-Demand Instances

An EC2 purchasing option where users pay short-term workloads by the second or hour with no upfront payment or long-term commitment.

Reserved Instances (RI)

An EC2 purchasing option providing up to a 72% discount in exchange for a 1-year or 3-year commitment to specific instance attributes.

Convertible Reserved Instances

An EC2 purchasing option offering up to a 66% discount that allows changing the instance type, family, OS, scope, or tenancy over time.

EC2 Savings Plans

A discount commitment model based on hourly spend ($/hour for 1 or 3 years) flexible across instance size, OS, and tenancy.

Spot Instances

An EC2 purchasing option offering up to a 90% discount on unused capacity, suitable for fault-tolerant workloads that can be interrupted with 2-minute notice.

Dedicated Hosts

A physical server dedicated entirely to a single customer's use, enabling compliance and Bring Your Own License (BYOL) software requirements.

Dedicated Instances

EC2 instances running on hardware dedicated to a single customer account, without precise control over physical placement.

Capacity Reservations

An EC2 option reserving compute capacity in a specific Availability Zone for any duration charged at On-Demand rates without time commitments.

Amazon EBS

Elastic Block Store, a managed network storage volume attached to EC2 instances to persist data past instance termination.

EBS Availability Zone Lock

The constraint that an EBS volume is bound to a single Availability Zone and can only be mounted to instances within that same zone.

Delete on Termination Attribute

An EBS volume setting controlling whether the volume is deleted automatically when its associated EC2 instance terminates.

EBS Snapshot

A point-in-time point backup copy of an EBS volume stored redundantly in S3.

EBS Snapshot Archive

A storage tier for EBS Snapshots that is 75% cheaper, with restore times ranging between 24 and 72 hours.

Recycle Bin for EBS Snapshots

A security feature allowing rules to retain accidentally deleted EBS snapshots for recovery between 1 day and 1 year.

Amazon Machine Image (AMI)

A customized EC2 template containing an operating system, software packages, configurations, and monitoring software.

EC2 Image Builder

A free service used to automate the creation, maintenance, validation, testing, and distribution of EC2 AMIs and container images.

EC2 Instance Store

Ephemeral high-performance physical disk storage directly attached to the host server executing the EC2 instance.

Ephemeral Storage

Temporary disk storage where data is permanently deleted if the host EC2 instance is stopped or terminated.

Amazon EFS

Elastic File System, a managed POSIX network file system that can be mounted simultaneously across hundreds of Linux EC2 instances across multiple AZs.

EFS Infrequent Access (EFS-IA)

A cost-optimized EFS storage class up to 92% cheaper for files accessed infrequently, managed via lifecycle policies.