AWS Pricing and cost/ Security and Compliance

"What are the 3 AWS pricing models?"

"On-Demand, Spot Instance, Reserved Instance”

"What is On-Demand pricing?"

"Pay for compute capacity by the hour/second with no long-term commitment"

"What are Reserved Instances (RIs)?"

"Commitment-based pricing (1 or 3 years) offering significant discounts vs On-Demand"

"What are Spot Instances?"

"Spare AWS capacity at discounted rates

"What is a Savings Plan?"

"Flexible pricing model offering lower prices in exchange for consistent usage commitment ($/hour)"

"Which service helps estimate AWS costs before deployment?"

"AWS Pricing Calculator"

"What is AWS Free Tier?"

"Limited free usage of AWS services for 12 months or always-free services"

"What tool tracks AWS costs and usage over time?"

"AWS Cost Explorer"

"What tool sends alerts when costs exceed thresholds?"

"AWS Budgets"

"What is AWS Cost and Usage Report (CUR)?"

"Detailed report of AWS usage and costs for analysis"

"What does Pay-as-you-go mean in AWS?"

"Pay only for the resources you use without upfront costs"

"What is TCO (Total Cost of Ownership)?"

"The total cost of running infrastructure over time including hardware and maintenance"

"What is AWS Trusted Advisor (cost category)?"

"Provides recommendations to reduce costs such as identifying idle resources"

"How can you reduce data transfer costs?"

"Use CloudFront

"Which storage class is cheapest for infrequent access?"

"Amazon S3 Glacier or Glacier Deep Archive"

"What is cost allocation tagging?"

"Tags used to track AWS costs by department or project"

"What is the AWS Shared Responsibility Model?"

"AWS secures the cloud while customers secure what they put in the cloud"

"What does AWS manage in the Shared Responsibility Model?"

"Physical data centers

"What is the customer responsible for in AWS?"

"Data

"What is IAM?"

"Identity and Access Management service used to control access to AWS resources"

"What is an IAM user?"

"An individual identity with specific permissions"

"What is an IAM role?"

"Temporary access granted to users or services without long-term credentials"

"What is the principle of least privilege?"

"Grant only the permissions required to perform a task"

"What is MFA (Multi-Factor Authentication)?"

"Adds an extra layer of security requiring a second verification method"

"What is AWS Organizations?"

"Service used to manage multiple AWS accounts centrally"

"What is AWS Shield?"

"Managed Distributed Denial of Service protection service"

"What is AWS WAF?"

"Web Application Firewall that protects applications from common web exploits"

"What is Amazon GuardDuty?"

"Threat detection service using machine learning"

"What is AWS Inspector?"

"Automated security assessment service for vulnerabilities"

"What is AWS Artifact?"

"Provides access to compliance reports and certifications"

"What is AWS KMS?"

"Key Management Service used to create and manage encryption keys"

"What is encryption at rest?"

"Data is encrypted when stored such as in S3 or EBS"

"What is encryption in transit?"

"Data is encrypted while being transmitted using HTTPS or TLS"

"What is Amazon CloudTrail?"

"Service that logs API calls and user activity in AWS"

"What is Amazon CloudWatch?"

"Monitoring service for logs

"What is AWS Config?"

"Tracks resource configurations and evaluates compliance over time"

"What is a security group?"

"Stateful virtual firewall controlling inbound and outbound traffic at instance level"

"What is a Network ACL?"

"Stateless firewall controlling traffic at the subnet level"

"What is the difference between Security Groups and NACLs?"

"Security Groups are stateful and instance-level while NACLs are stateless and subnet-level"

"What compliance programs does AWS support?"

"HIPAA