AWS Certified Cloud Practitioner Flashcards

Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.

AWS is responsible for security 'of' the cloud (physical infrastructure, hardware, global network, and managed service internals), while the customer is responsible for security 'in' the cloud (data, identity and access management, guest OS patching, and network configuration), with the exact split depending on which services are used.

The Enterprise Support plan includes a designated Technical Account Manager who provides proactive guidance and operational support.

A Region is a physical geographic location containing multiple isolated, redundant data centers called Availability Zones; each AZ has independent power, cooling, and networking, and AZs within a Region are connected by high-speed, low-latency links so applications can be made highly available across them.

A globally distributed site used by Amazon CloudFront (and other services) to cache content close to end users, reducing latency for content delivery.

The ability of a system to automatically scale compute resources up or down to match demand, so you provision only what you need at any given moment.

CapEx (capital expenditure) is upfront spending on physical infrastructure that depreciates over time, while OpEx (operating expenditure) is pay-as-you-go spending on resources as they are consumed; the cloud shifts IT spending from CapEx to OpEx.

The practice of matching instance types and sizes to actual workload performance and capacity needs, avoiding over-provisioning (wasted cost) and under-provisioning (poor performance).

A framework that provides guidance for organizations to develop an efficient cloud adoption plan, organized around perspectives (such as business, people, governance, platform, security, and operations) that help align business and technology strategies.

Elastic Compute Cloud, an AWS service that provides resizable virtual server instances (compute capacity) in the cloud, billed based on the pricing model chosen (On-Demand, Reserved, Spot, or Savings Plans).

Simple Storage Service, an object storage service that stores data as objects within buckets, offering high durability, scalability, and multiple storage classes for different access patterns and cost needs.

EBS (Elastic Block Store) provides block-level storage volumes attached to a single EC2 instance for low-latency, persistent disk-like storage, while S3 provides object storage accessible over the network from anywhere, designed for durability and scale rather than being tied to one instance.

Relational Database Service, a managed service that automates provisioning, patching, backup, and scaling of relational databases (such as MySQL, PostgreSQL, and others) so customers don't manage the underlying database server infrastructure.

A fully managed, serverless NoSQL key-value and document database designed for single-digit-millisecond performance at any scale.

A serverless compute service that runs code in response to events without requiring the customer to provision or manage servers; billing is based on the number of requests and compute time consumed.

Virtual Private Cloud, a logically isolated section of the AWS Cloud where customers can launch resources in a virtual network they define, including subnets, route tables, and gateways.

A public subnet has a route to an internet gateway, allowing resources within it to communicate directly with the internet, while a private subnet lacks that route, so its resources cannot be reached directly from the internet.

Identity and Access Management, a service for securely controlling access to AWS resources by managing users, groups, roles, and policies that define permissions.

A security best practice of granting only the minimum permissions necessary for a user, group, or role to perform its required tasks, reducing the risk of unintended access.

An additional layer of security requiring users to provide a second form of verification (such as a one-time code from a device or app) in addition to their password when signing in.

The root user is the account owner identity created when an AWS account is opened, with unrestricted access to all resources and billing; best practice is to avoid using it for everyday tasks, enable MFA on it, and instead create IAM users or roles with appropriate permissions for daily work.

A service for centrally managing and governing multiple AWS accounts, allowing consolidated billing and the application of policies (such as Service Control Policies) across accounts grouped into organizational units.

A policy used in AWS Organizations to set the maximum available permissions for accounts within an organization, restricting what actions member accounts (even their administrators) can perform.

A service that records and logs account activity, including API calls made across AWS services, providing an audit trail for governance, compliance, and operational and security troubleshooting.

A monitoring and observability service that collects metrics, logs, and events from AWS resources and applications, and can trigger alarms or automated actions based on defined thresholds.

A service that inspects an AWS account and provides real-time recommendations across categories such as cost optimization, performance, security, fault tolerance, and service limits, following best practices.

The Free Tier offers limited free usage of certain AWS services for new accounts to try the platform, while AWS Marketplace is a digital catalog where customers can find, buy, and deploy third-party software that runs on AWS.

Savings Plans offer lower prices in exchange for a commitment to a consistent amount of compute usage (measured in dollars per hour) over a one- or three-year term, in contrast to On-Demand pricing, which has no long-term commitment but costs more per unit of usage.

A tool that allows customers to estimate the monthly and upfront costs of AWS services before deploying them, helping with budgeting and cost planning.