Application Load Balancer → HTTP / HTTPS/Websockets (Layer 7). Redirect to different instances depending on The URL, hostname, or queryString & Headers.
Press enter or click to view image in full size
Application Load Balancer redirecting depending on the URL.
Scaling Cooldown period → To ensure that Auto Scaling groups don’t launch or terminate additional instances before the previous scaling activity takes effect.
S3 Websites → Used to host static websites in S3 and make them accessible on the Internet.
S3 Lifecycle Rules → To automatically move objects between different storage classes. We have Transition actions & Expiration actions.
S3 Event notifications → To receive notifications when certain events happen in your S3 bucket like an object has been created, deleted, or replicated.
S3 Athena → Serverless service to perform SQL queries directly against S3 files.
Other S3 concepts we need to know about → Versioning, CORS, S3 Access Logs, MFA-Delete.
CloudFront → Service to improve read performance as content is cached at the edge, with advanced security capabilities, like level encryption, HTTPS, and protection against multiple attacks like DDoS attacks.
CloudFront origins → S3 bucket or HTTP Custom Origin like Amazon EC2 instance, Load Balancers…
AWS Global Accelerator → Service to find an optimal pathway to the nearest regional endpoint allowing us to connect faster to our applications reducing the latency.
RDS Read Replicas → Database instance that allows only read-only connections used to scale “read” operations in the case of read-heavy database workloads.
RDS Multi-AZ → RDS synchronously replicates the data to a standby instance in a different Availability Zone (AZ) to provide high availability.
RDS Encryption → REST & In-Flight encryption using SSL.
AWS Database Migration Service → Service to migrate databases to AWS quickly and securely.
AWS Schema Conversion Tool → Service used by AWS Database Migration Service when two databases don’t have the same schema.
Aurora
AWS Aurora → AWS MySQL and PostgreSQL-compatible relational database 5x times faster than MySQL and x3 than PostgreSQL, with some advantages like 15 read replicas, point-in-time recovery, continuous backup to Amazon S3, and replication of 6 copies of your data across 3 AZs.
AWS Aurora Serverless → Aurora configuration used for variable and unpredictable workloads. It automatically starts up, shuts down, and scales capacity up or down based on your application’s needs.
AWS Aurora Global Database → Aurora configuration that allows us to have your Aurora instance spanned between multiple AWS regions.
ElastiCache→ Fully managed in-memory data store, compatible with Redis or Memcached engines. Some use cases are cache database & user session store.
Press enter or click to view image in full size
Memcache vs Redis (via fullcertified.com).
Elasticsearch → Database to search, visualize, and analyze up to petabytes of text and unstructured data in milliseconds.
Redshift → OLAP columnar cloud data warehouse used to analyze big tables of data to gain new insights, especially in Data Analytics, Business Intelligence, and Data Warehousing.
Redshift Spectrum → Feature of Redshift that lets you perform SQL queries on data stored in Amazon S3 buckets. Similar to AWS Athena, with the difference that the other one is serverless.
Fully managed message queuing service to decouple and scale microservices, distributed systems, and serverless applications. There are consumers and producers.
Types of Queues → Standard queues & FIFO queues.
Message Visibility Timeout → It makes the message invisible to other consumers when one consumer polls it.
Dead Letter Queue → Queue where other queues can target messages that can’t be processed successfully.
Delay Queue → It lets you postpone the delivery of new messages to a queue
SQS & Auto Scaling Groups → Typical approach where the Auto Scaling Group scales based on the SQS queue size.
SNS
Fully managed messaging service of the publisher/subscriber type.
Snowball → Petabyte-scale physical device data transport.
Snowball Edge → Snowball device with local processing and edge-computing workloads in addition to transferring data between your local environment and the AWS Cloud.
Snowmobile → Exabyte-scale data transfer service that is used to move huge amounts of data to AWS.
Amazon FSx for Lustre → Fast and scalable shared storage for high-performance computing (HPC). Lustre means Linux + Cluster.
Amazon FSx for Windows File Server → Fully managed file storage built on Windows Server.
AWS Storage Gateway → Bridge between on-premises data and cloud data in S3.
CloudWatch → AWS monitoring service. It includes CloudWatch Metrics, CloudWatch Logs (logs from your applications, you can even query them), CloudWatch Alarms (send notifications depending on some metrics) & CloudWatch Events.
CloudTrail → It monitors account activity across your AWS infrastructure. We have Data events and Management events.
AWS Config → Assess, audit, and evaluate the configurations of your AWS resources.
KMS (Key Management Service)→ We use this service to encrypt data by creating and managing cryptographic keys. We have AWS Managed keys, Customer Managed keys, and we can also import our keys.
ClooudHSM → Hardware security module to quickly generate and use your encryption keys on the AWS Cloud.
System Manager Parameter Store → Storage for configuration data management and secrets management.
Secret Manager → Protect secrets needed to access your applications, services, and IT resources, rotating keys easily.
AWS WAF (Web Application Firewall) → Protects your web applications or APIs against common web exploits and bots.
VPC→ Virtual Private Cloud. A virtual network dedicated to your AWS account, logically isolated from other virtual networks in the AWS Cloud. Here is where we will launch our instances.
Subnet → Range of IP addresses in your VPC to launch AWS resources. There are public and private subnets. In the public subnets, instances are accessible through the Internet.
Internet Gateway → It enables communication between the VPC and the Internet.
Egress-only Internet Gateway → Outbound communication over IPv6 from instances in your VPC to the Internet.
Route tables → It determines where to redirect the network traffic from your subnet.
NAT Gateway → It allows instances from Private Subnets to connect to services outside our VPC using the Internet. Still, external services cannot connect with our instances in the private network.
NAT Instance → Old method to allow instances from Private Subnets to connect to services outside our VPC. The NAT Gateway has replaced it.
Network ACLs → Firewall for controlling traffic in and out of one or more subnets. They are similar to the Security Groups but at a network level.
Press enter or click to view image in full size
Security Group vs. Network ACL (via docs.aws.amazon.com).
VPC Peering → Used to connect two VPCs acting as if they were just a VPC. The CIDR of the subnets cannot overlap. No transitive.
VPC Endpoints → To connect instances to AWS services from our private networks. We have interface endpoints, which we have to use ENIs as entry points; and gateway endpoints (S3 / DynamoDB).
Flow Logs → Capture information about the IP traffic in our VPC.
AWS Managed VPN → To establish a connection between remote networks and our Amazon VPC. We need a Site to Site VPN Connection, Virtual Private Gateway, and a Customer Gateway.
Direct Connect → Link on-premise network directly to AWS VPC in a private way.
Direct Connect Gateway → Link on-premise network to many different AWS VPCs. We need a Transit Gateway for different VPCs, or a Virtual Private Gateway if the VPCs are in different regions.
AWS PrivateLink → Expose a service to the VPCs/on-premise networks that you want in a private way. We need a Network Load Balancer to expose services.
VPN CloudHub → Establish secure communications between multiple on-premise networks.
AWS Transit Gateway → Connects VPCs and on-premises networks through a central hub, acting as a cloud router.
AWS Organizations→ Create new AWS accounts and allocate resources, create group accounts, apply policies to accounts or groups, and simplify billing by using a single payment method for all of your accounts. You group accounts using Organizational Units (OUs).
AWS Resources Access Manager → Share your resources across AWS accounts, your organization, or organizational units (OUs) in AWS Organizations.
AWS Security Token Service→ It requests temporary credentials for AWS IAM users.
Identity Federation → With Identity Federation, you can manage your users from a different place (a third-party tool, as your company login service), and they’ll be able to access our AWS Resources.
Backup & Restore→ Back up your data frequently and restore it in the case of a disaster.
Pilot Light→ Replicate your data from one Region to another and provide a copy of the critical parts of your core workload infrastructure.
Warm Standby→ Scaled-down but a functional copy of your production environment in another Region. It extends the pilot light concept.
Multi-Site Active/Active→ Run your workload simultaneously in multiple Regions as part of a multi-site active/active strategy. In a disaster, we point to a different region using Route 53.
AWS CodeCommit → Managed source control service (like GitHub).
AWS CodeBuild → Continuous integration service that compiles source code, runs tests, and produces software packages ready to deploy (like Circle CI or Jenkins).
AWS CodeDeploy → A fully managed deployment service.
AWS CodePipeline → Continuous delivery service to automate your release pipelines. It’s in charge of orchestrating all the previous services.
AWS CloudFormation → Infrastructure as Code service that lets you model, provision, and manage AWS and third-party resources as code.
AWS Elastic BeanStalk → Service for deploying and scaling web applications creating all the necessary resources directly for us.
AWS Step Functions → Visual workflow service used to orchestrate AWS services like AWS Lambdas.
AWS Glue → ETL serverless managed service.
AWS Elastic Map Reduce (EMR) → Platform to process, analyze, and apply machine learning to big data.
Amazon Elastic Container Service (ECS) → Fully managed container orchestration service to deploy, manage, and scale containerized applications.
Amazon Elastic Container Registry (ECR) → Fully managed container registry to host your containers.
Amazon Elastic Kubernetes Service (EKS) → Managed container service to run and scale Kubernetes applications.
AWS OpsWorks → Configuration as code management service providing managed Chef and Puppet instances.
Amazon Elastic Transcoder → Media transcoding in the cloud.
AWS WorkSpaces → Fully managed desktop virtualization service for Windows and Linux.
AWS AppSync → Fully managed service that makes it easy to develop GraphQL APIs.
Want to practice what you just learned? Create your own AWS practice exam in minutes using AI on FullCertified, just pick your topics and let the AI generate the questions for you.
