AWS Solutions Architect Associate SAA-C03 FlashCards

Amazon DynamoDB Accelerator (DAX)

A DynamoDB feature that improves the performance of the application by reducing the response times from milliseconds to microseconds.

Network Load Balancer

A type of ELB that should you use to handle Layer 4 traffic

Application Load Balancer

A type of ELB should you use to handle Layer 7 traffic

AWS WAF

A security service that blocks XSS, SQL injection, and application requests from certain geographical locations, like embargoed countries

Read Replica

An asynchronous data replication to another RDS DB instance hosted in the same or another AWS Region

Amazon FSx For Lustre

A parallel file system for "hot" (frequently accessed) data

Multi-AZ deployment

Synchronous data replication across Availability Zones with automatic failover in Amazon RDS.

Amazon S3 Glacier Deep Archive

A storage service for hosting "cold" (infrequently accessed) data in the most cost-effective way.

Amazon Aurora Global Database

A relational database with a Recovery Point Objective (RPO) of 1 second and Recovery Time Objective (RTO) of less than 1 minute.

Amazon Data Lifecycle Manager

A service that automates the creation of Amazon EBS snapshots on a regular basis

CloudWatch Agent

An agent/program that monitors the available swap space of your Amazon EC2 instances.

AWS Backup

A service that can implement a 90-day backup retention policy on Amazon Aurora.

AWS Security Token Service

Provide short-lived access tokens that act as temporary security credentials to allow access to AWS resources.

Route 53 Geolocation Routing policy

A policy that routes the internet traffic to the resources based on the location of the user.

EBS Encryption

It secures the sensitive data stored in EBS volumes.

AWS Certificate Manager

A service that can generate a certificate that allows multiple domains to serve SSL traffic over the same IP address

Endpoint Policy

A type of policy that controls which AWS principals (AWS accounts, IAM users, and IAM roles) can use the VPC endpoint to access the endpoint service.

AWS Secrets Manager

Encrypts and rotates all the database credentials, API keys, and other secrets on a regular basis.

AWS Storage Gateway - Tape Gateway

A service that you can store an application data in a tape backup solution and preserved for up to 10 years.

AWS DataSync

A service that accelerates the transfer of data from an on-premises data center to AWS over the Internet in a cost-effective manner.

Amazon S3 Infrequent Access

A cost-effective Amazon S3 storage class for objects that are accessed less frequently but allow rapid access when necessary

Rate-based Rule

A rule in AWS WAF that limits the maximum number of requests from a single IP address.

S3 Select

An S3 feature that allows you to retrieve a subset of data from a large CSV file stored in the S3 bucket.

Amazon S3 Object Lock

Prevent S3 objects from being deleted or overwritten for a fixed amount of time or indefinitely

Amazon CloudFront

A CDN service that can be used to globally deliver the static contents and media files from an Amazon S3 bucket to customers around the world with low latency.

Amazon SNS

A service that can be integrated with Amazon CloudWatch Alarms to send email notifications once a specific threshold has been breached

Target Tracking Scaling

A cost-effective solution for over-provisioning of resources.

MFA Delete

Protect objects in the S3 bucket from accidental deletion or overwrite.

Symmetric CMK

A type of CMK that uses a single key for both encryption and decryption. The shared key must be sent together with the encrypted data in order for other parties to read it

AWS Config

A fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.

AWS Fargate

A container orchestration solution that allows the company to execute containerized apps without handling the underlying infrastructure.

Amazon GuardDuty

It is a service that utilizes a combination of machine learning, anomaly detection, and threat intelligence to detect malicious behavior in your server.

Amazon Cognito Identity Pool

It allows you to grant temporary AWS credentials to both unauthenticated guests and authenticated users with tokens.

AWS Glue

A fully managed ETL (extract, transform, and load) service provided by Amazon Web Services.

AWS Organization

It is a service that allows you to manage multiple AWS accounts easily.

Apache Kafka

A distributed data store optimized for ingesting and processing streaming data in real-time.

Amazon OpenSearch Service

It securely unlocks real-time search, monitoring, and analysis of business and operational data for use cases like application monitoring, log analytics, observability, and website search.

Amazon AppFlow

It is a fully managed integration service that helps you securely transfer data between software as a service (SaaS) applications such as Salesforce, SAP, Google Analytics, Facebook Ads, and ServiceNow, and AWS services such as Amazon Simple Storage Service (S3) and Amazon Redshift in just a few clicks.

AWS Step Functions

It is a visual workflow service that helps developers use AWS services to build distributed applications, automate processes, orchestrate microservices, and create data and machine learning (ML) pipelines.

AWS Wavelength

It embeds AWS compute and storage services within 5G networks, providing mobile edge computing infrastructure for developing, deploying, and scaling ultra-low-latency applications.

AWS Serverless Application Repository

A managed repository for serverless applications. It enables teams, organizations, and individual developers to store and share reusable applications, and quickly assemble and deploy serverless architectures in powerful new ways.

Amazon Elastic Container Service (ECS)

Empower developers to build and deploy applications with enhanced security features in a fast, standardized, compliant, and cost-efficient manner.

EKS Distro

It helps you manually run clusters using a Kubernetes distribution of compatible versions of the latest release and its dependencies, tested for reliability and security.

Amazon EKS

A managed service that makes it easy to run Kubernetes on AWS without installing and operating your own Kubernetes control plane or worker nodes.

AWS X-Ray

It helps developers analyze and debug production distributed applications, such as those built using a microservices architecture.

AWS Amplify

A set of purpose-built tools and features that enables frontend web and mobile developers to quickly and easily build full-stack applications on AWS.

Amazon Kendra

It provides ML-powered search capabilities for all unstructured data you store in AWS, and it offers easy-to-use native connectors to popular AWS repository types such as Amazon S3 and Amazon RDS databases.

Amazon SageMaker

A fully managed service to prepare data and build, train, and deploy machine learning (ML) models for any use case with fully managed infrastructure, tools, and workflows.

Workloads

It's an AWS WA tool that identifies components that deliver business value.

AWS Application Migration Service

Simplifies and expedites your migration to AWS by automatically converting your source servers from physical, virtual, or cloud infrastructure to run natively on AWS.

Enable the IAM DB Authentication.

To protect the confidential data of your customers, you have to ensure that your RDS database can only be accessed using the profile credentials specific to your EC2 instances via an authentication token

Enable Versioning , Enable Multi-Factor Authentication Delete

It will protect the S3 objects in your bucket from both accidental deletion and overwriting.

Enable Multi-AZ failover

Prevent losing access to your database in case there is an outages in the Availability Zone of your RDS database instance.

Amazon CloudWatch , Amazon Simple Notification Service (SNS)

A combination of AWS services that will allow user to monitor database metrics and then afterward, send email notifications in case there is an issue.

Use AWS Security Token Service

Allows you to issue short-lived access tokens that act as temporary security credentials to allow access to your AWS resources.

AWS Application Migration Service

Minimizes time-intensive, error-prone manual processes by automating the conversion of your source servers to run natively on AWS.

AWS Database Migration Service

A cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL databases, and other types of data stores.

Amazon EMR

A managed cluster platform that simplifies running big data frameworks, such as Apache Hadoop and Apache Spark, on AWS to process and analyze vast amounts of data.

Amazon Kinesis Data Firehose

It is a service for delivering real-time streaming data to destinations such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon OpenSearch Service, Splunk, and any custom HTTP endpoint.

Tag-based Access Control

One of the feature of AWS Lake Formation that ensure only authorized users can access sensitive data.

Data Lake

A centralized repository that allows you to store all your structured and unstructured data at any scale.

Amazon Athena

An interactive query service that makes it easy to analyze data directly from Amazon S3 using standard SQL.

AWS Data Exchange

A service that makes it easy for AWS customers to find, subscribe to, and use third-party data in the AWS Cloud.

Data Pipeline

It is a series of processing steps to prepare enterprise data for analysis

Amazon QuickSight

It is an analytics service that you can use to create datasets, perform one-time analyses, and build visualizations and dashboards.

AppSync pipeline resolvers

Offer an elegant server-side solution to address the common challenge faced in web applications—aggregating data from multiple database tables.

Amazon EventBridge (Amazon CloudWatch Events)

A serverless event bus that makes it easy to connect applications together. It uses data from your own applications, integrated software as a service (SaaS) applications, and AWS services.

Amazon Simple Workflow Service

A web service that makes it easy to coordinate work across distributed application components.

Amazon SQS

Move data between distributed application components and helps you decouple these components.

AWS Cost Explorer

It helps in visualizing, understanding, and analyzing your AWS costs and usage.

Cost Explorer API

A company can programmatically access the usage cost-related data they need on specific services.

AWS Budget

Allows you to set custom cost and usage budgets that alert you when your budget thresholds are exceeded.

Savings Plan

A pricing model that offers low prices on EC2 and Fargate usage, in exchange for a commitment to a consistent amount of usage for a 1 or 3-year term.

AWS Batch

It handles job execution and compute resource management, allowing you to focus on developing applications or analyzing results instead of setting up and managing infrastructure.

Auto Scaling Group

It contains a collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management.

AWS Elastic Beanstalk

It allows developers to quickly deploy and manage applications in the AWS Cloud.

AWS Outposts

It enables customers to build and run applications on premises using the same programming interfaces as in AWS Regions, while using local compute and storage resources for lower latency and local data processing needs.

Outpost

A pool of AWS compute and storage capacity deployed at a customer site.

Local Gateway

Enables connectivity between your Outpost subnets and your on-premises network.

Kubernetes Horizontal Pod Autoscaler

It automatically scales the number of Pods in a deployment, replication controller, or replica set based on that resource's CPU utilization.

Amazon Elastic Kubernetes Service (EKS)

A managed service that allows you to run Kubernetes on AWS without installing, operating, or maintaining your own Kubernetes control plane or nodes.

Amazon DocumentDB

It records Data Definition Language (DDL), authentication, authorization, and user management events to Amazon CloudWatch Logs.

Redis AUTH

A command can improve data security by requiring the user to enter a password before they are granted permission to execute Redis commands on a password-protected Redis server.

Amazon Neptune

A fully managed database service built for the cloud that makes it easier to build and run graph applications.

Amazon API Gateway

It provides developers with a simple, flexible, fully managed, pay-as-you-go service that handles all aspects of creating and operating robust APIs for application back ends.

AWS Device Farm

An application testing that service that lets you improve the quality of your web and mobile by testing them on a vast range of desktop browser and real mobile devices without needing to manage any testing infrastructure.

Predictive Scaling

It uses machine learning to predict capacity requirements based on historical data from CloudWatch.

Amazon Fraud Detector

A fully managed service for identifying and preventing online fraud.

Amazon Lex

Enables any developer to build conversational chatbots quickly.

Amazon Comprehend

A natural language processing (NLP) service that uses machine learning to find meaning and insights in text.

AWS Compute Optimizer

A service that analyzes the configuration and utilization metrics of your AWS resources.

AWS Control Tower

It simplifies the process of setting up and governing multi-account AWS environments with security, operations, and compliance rules.

Amazon Managed Grafana

A secure and fully managed data visualization service that allows you to instantly query, correlate, and visualize operational metrics, logs, and traces from multiple sources.

AWS Proton

It is a tool that streamlines application deployment workflows to improve organizational agility for DevOps and platform engineers.

Amazon Kinesis Video Streams

It automatically provisions and elastically scales all the infrastructure needed to ingest streaming video data from millions of devices.

Amazon Rekognition Video

It can detect objects, scenes, faces, celebrities, text, and inappropriate content in videos.

AWS Artifact

It provides on-demand access to AWS' security and compliance reports and select online agreements.

Amazon Macie

A data security service that uses machine learning and pattern matching to discover and protect sensitive data, while providing visibility into data security risks.

AWS Lambda

A compute service that runs code without servers and is event-driven, making it suitable for various applications.

Throttling

It ensures that API traffic is controlled to help your backend services maintain performance and availability.