Flashcards
CCP
Flashcards do conjunto (112)
- 1operational excellenceWell-Architected Framework; deliver business value, continually improve supporting processes
- 2securityWell-Architected Framework; protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies
- 3reliabilityWell-Architected Framework; test recovery procedures, scale horizontally to increase aggregate system availability, and automatically recover from failure
- 4performance efficiencyWell-Architected Framework; use computing resources efficiently to meet system requirements and maintain that efficiency as demand changes and technologies evolve
- 5cost optimizationWell-Architected Framework; run systems to deliver business value at lowest price point
- 6sustainabilityWell-Architected Framework; minimize the environmental impacts of running cloud workloads
- 7Amazon Qgenerative AI-powered assistant, can customize with own data, developer and business versions
- 8Snowball Edge Storage Optimized:large-scale data migrations and recurring transfer workflows, local computing with higher capacity needs; 80 TB usable storage capacity
- 9Snowball Edge Compute Optimizedpowerful computing resources
- 10Relocatefactors of cloud migration strategy; transfer servers comprising 1+ apps at a given time from on-premises platform to cloud version
- 11Rehostfactors of cloud migration strategy; moving apps w/o changes
- 12Replatformfactors of cloud migration strategy; make few cloud optimizations to realize tangible benefit
- 13Refactorfactors of cloud migration strategy; reimagining how app architected and developed by using cloud-native features
- 14Repurchasefactors of cloud migration strategy; moving from traditional license to software as a service model
- 15Retainfactors of cloud migration strategy; NOT MOVING APPLICATIONS TO CLOUD; keeping apps critical for business in source environment
- 16Retirefactors of cloud migration strategy; NOT MOVING APPLICATIONS TO CLOUD; removing apps no longer needed
- 17BusinessAWS Cloud Adoption Framework CAF; IT aligns with business needs
- 18PeopleAWS Cloud Adoption Framework CAF; development of organization-wisde change management strategy
- 19GovernanceAWS Cloud Adoption Framework CAF; skills and processes to align IT and business strategies
- 20PlatformAWS Cloud Adoption Framework CAF; principles and patterns for implementing new solutions in the cloud and migrating on-premises workloads to the cloud
- 21SecurityAWS Cloud Adoption Framework CAF; organization meets security objectives for visibility, auditability, control, agility
- 22OperationsAWS Cloud Adoption Framework CAF; enable, run, use, recover IT workloads to level agreed on with business stakeholders
- 23S3 Pricingbased on storage, requests and data retrievals, data transfer, management and replication; for each region, itemized charges based on num requests to add/copy objects into bucket, num requests to retrieve objects from bucket, amt storage space used
- 24EC2 PricingPay only for the time that your On-Demand Instances run
Reduce costs by using Spot Instances for recommended use cases
Save by signing up for Compute Savings Plan
service charges include each EC2 instance type in use, amount of EBS storage provisioned, length of time ELB used - 25Lambda PricingPay only for the compute time you use
Pay for the number of requests for your functions
Save by signing up for Compute Savings Plans
itemized charges by region, separate charges for num requests for functions and duration - 26Marketplacedigital catalog of software listings; pricing options, available support, reviews
- 27BasicSupport Plan; free to all AWS customers; access to technical papers/documentation/support communities, AWS Personal Health Dashboard, limited selection of AWS Trusted Advisor checks
- 28DeveloperSupport Plan; best-practice guidance, client-side diagnostic tools, building-block architecture support
- 29BusinessSupport Plan; Use-case guidance, All AWS Trusted Advisor checks, Limited support for third-party software
- 30Enterprise On-RampSupport Plan; Application architecture guidance, Infrastructure event management, A pool of Technical Account Managers (TAM)
- 31EnterpriseSupport Plan; Application architecture guidance, Infrastructure event management, A designated TAM
- 32AWS Cost Explorertool that you can use to visualize, understand, and manage your AWS costs and usage over time
- 33AWS Budgetstool to set thresholds for AWS service usage and costs; budgets to plan service usage, service costs, instance reservations
- 34AWS Organizations > Consolidated Billingfeature of AWS Organizations allows you to receive a single bill for all AWS accounts in your organization. By consolidating, you can track the combined costs of all the linked accounts in your organization.
ability to share bulk discount pricing, Savings Plans, and Reserved Instances across the accounts in your organization - 35AWS Free TierALWAYS FREE
AWS Lambda allows 1 million free requests and up to 3.2 million seconds of compute time per month. Amazon DynamoDB allows 25 GB of free storage per month.
12 MONTHS FREE
specific amounts of Amazon S3 Standard Storage, thresholds for monthly hours of Amazon Elastic Compute Cloud (Amazon EC2) compute time, and amounts of Amazon CloudFront data transfer out
TRIALS
specific amounts of Amazon S3 Standard Storage, thresholds for monthly hours of Amazon Elastic Compute Cloud (Amazon EC2) compute time, and amounts of Amazon CloudFront data transfer out - 36AWS Trusted Advisorinspects AWS environment
provides real-time recommendations in accordance with AWS best practices in cost optimization, performance, security, fault tolerance, and service limits
evaluate and implement guidance at all stages of deployment
dashboard: num no problems, num recommended investigations, num recommended actions - 37AWS CloudTrailtrack user activities and API requests throughout AWS infrastructure
filter logs generated by API calls to assist with operational analysis and troubleshooting
CloudTrail Insights: automatically detect unusual account activity
event: what happened, who made request, when occur, how request made - 38Amazon CloudWatchmonitor, manage metrics
configure alarm actions based on data from metrics - 39Amazon GuardDutyintelligent threat detection; continuously analyzes network and account activity; review detailed findings and take action
- 40AWS Key Management Service (KMS)helps customers perform encryption operations thru use of cryptographic keys; choose specific levels of access control needed for keys
- 41Amazon InspectorAPPLICATION SECURITY
automatically conduct application security assessments; identify security vulnerabilities and deviations from best practices; receive recommendations for how to fix security issues - 42AWS ShieldAPPLICATION SECURITY provides protection against DDoS attacks (distributed denial of service)
integrate AWS Shield Advanced with other AWS services, write custom web ACL rules with AWS WAF to mitigate complex DDoS attacks - 43AWS Web Application Firewall WAFAPPLICATION SECURITY
helps protect web applications/APIs against common web exploits
gives you control over how traffic reaches your application; security rules that block common attack patterns or filter out specific traffic patterns defined by you
custom rules, managed rules - 44ComplianceAWS Artifact: service that provides on-demand access to AWS security and compliance reports and select online agreements
Customer Compliance Center: resources - 45AWS Organizationshelps customers consolidate and manage AWS accounts in a central location
use service control policies SCPs to centrally control permissions for accounts in organization - 46AWS Identity and Access Management IAM LevelsIAM: allows you to manage access to AWS services and resources
root user: complete access to all AWS services and resources within account
user: identity that represents person or application that interacts with AWS services and resources
policies: document that grants/denies permissions to AWS services and resources
group: collection of IAM users
role: identity that you can assume to gain temporary access to permissions - 47Multi-Factor Authentication MFAextra layer of security for AWS account
- 48Shared Responsibility ModelSECURITY IN THE CLOUD -> CUSTOMER
The customer's responsibility of the shared responsibility model includes; customer data, platform, applications, identity and access management, operating systems, network and firewall configuration, client-side data encryption, server-side encryption, and network traffic protection.
SECURITY OF THE CLOUD -> AWS
AWS's responsibility of the shared responsibility model includes; software, compute, storage, database, networking, hardware/AWS global infrastructure, Regions, Availability Zones, and Edge Locations. - 49AWS Database Migration Service DMSmigrate relational databases, nonrelational databases, and other types of datastores
- 50S3 StandardS3 Storage Class; frequently accessed data; store data in minimum of 3 availability zones
- 51S3 Standard IAS3 Storage Class; infrequently accessed data, lower storage price and higher retrieval price than S3 Standard
- 52S3 One Zone-IAS3 Storage Class; stores data in 1 availability zone, lower storage price than S3 Standard-IA
- 53S3 Intelligent-TieringS3 Storage Class; unknown/changing access patterns, monthly monitoring and automation fee per object
- 54S3 Glacier Instant RetrievalS3 Storage Class; low-cost storage for data archiving, able to retrieve objects in milliseconds
- 55S3 Glacier Flexible RetrievalS3 Storage Class; lowest-cost, configure retrieval minutes to hours
- 56S3 Glacier Deep ArchiveS3 Storage Class; lowest cost, able to retrieve within 12 hours
- 57Amazon Redshiftquery and analyze data across a data warehouse
- 58Amazon DocumentDBrun MongoDB workloads in a document database service
- 59Amazon Neptunerun applications that use highly connected datasets
- 60Amazon QLDBreview a complete history of changes to application data
- 61Amazon Managed Blockchainrun decentralized ledger database
- 62Amazon ElastiCacheAdd caching layers to improve database read times; engines memcached and redis
- 63Amazon DynamoDB Acceleratorimprove DynamoDB response times from single-digit milliseconds to microseconds
- 64Amazon DynamoDBserverless key-value database; automatically scales to adjust for capacity changes and maintain consistent performance; designed to handle over 10 trillion requests per day
- 65Amazon Relational Database Service RDSoperate and scale a relational database in the AWS Cloud, automate time-consuming administrative tasks, store and transmit data securely
- 66Amazon Auroraenterprise-class relational database; reduce costs by eliminating unnecessary IO operations, replicate 6 copies of data across 3 availability zones
- 67Amazon Elastic File System EFSstore data in scalable file system, provide data to thousands of EC2 instances concurrently, store data in and across multiple availability zones by default
- 68Amazon Simple Storage Service S3service that provides object-level storage
stores data as objects within buckets
Selecting S3 Storage Class: how often retrieve data, how available data - 69Amazon Elastic Block Store EBSservice that provides block-level storage volumes that you can use with EC2 instances; stop/terminate instance, all data on attached EBS volume remains available; an EBS volume stores data within a single availability zone
snapshot: incremental backup - 70Object Storageeach object consists of data, metadata, key; S3
- 71Block Storagefiles separated into equal-sized blocks of data; used for applications that run on EC2 instances
behave like physical hard drives; Instance Store and EBS - 72Instance Storetemporary block-level storage for EC2 instance
- 73File Storagemultiple clients can access data stored in shared file folders
- 74Amazon Virtual Private Cloud VPCprovision isolated section of AWS Cloud where you can launch resources in a virtual network you define
- 75subnetsection of a VPC that can contain resources such as EC2 instances
- 76Amazon Route 53route users to internet applications, connect user requests to infrastructure in/outside of AWS, manage DNS records for domain names
- 77Network Access Control List ACLvirtual firewall, controls inbound/outbound traffic (stateless) at subnet level (default: allows all inbound/outbound traffic; custom: deny all inbound/outbound traffic)
- 78Security Groupsvirtual firewall for EC2 instance (default: deny inbound, allow outbound); stateful
- 79AWS Direct Connectdedicated private connection b/t data center and VPC
- 80Virtual Private Network VPNencrypts/protects internet traffic from all other requests around it
- 81Virtual Private Gatewaycomponent that allows protected internet traffic to enter into the VPC
e.g. create VPN connection between VPC and internal corporate network - 82Publicaccessible by public; internet gateway
- 83Privateaccessible through private network; virtual private gateway
- 84AWS Outpostsservice you can use to run AWS infrastructure, services, tools within your own on-premises locations
- 853 Ways to Provision AWS ServicesAWS Management Console: interface for accessing, managing AWS services
AWS Command Line Interface (CLI)
Software Development Kits (SDK): API desgined for programming language or platform - 86Amazon CloudFrontglobal content delivery service
- 87Edge Locationssite that CloudFront uses to store cached copies of content for faster delivery to customers (travels shorter distance)
- 88Availability Zonessingle data center or group of data centers within a region; if disaster occurs in one part of region, not all availability zones affected; close enough to have low latency
a region consists of 3+ availability zones - 89AWS Global Infrastructure1. Compliance with data governance and legal requirements
2. Proximity to customers
3. Available services within a region
4. Pricing; taxes - 90Elastic Compute Cloud EC2on-demand, scalable computing capacity in the AWS Cloud
- 91AWS Lambdarun code without provisioning or managing servers (serverless), pay only for compute time while code is running, use other AWS services to automatically trigger code
- 92Containers > Elastic Container Service (ECS)run and scale containerized applications, use simple API calls to control Docker-enabled applications
- 93Containers > Elastic Kubernetes Service (EKS)run and scale Kubernetes applications, readily update applications with new features
- 94AWS Fargatecontainer hosting platform, run serverless containers with ECS or EKS, pay only for resources you use
- 95Amazon Simple Notification Service Amazon SNSmessages published to topics, subscribers immediately receive messages for topics
- 96Amazon Simple Queue Service SQSsend, store, and receive messages b/t sw components, queue messages without requiring other services to be available
- 97Elastic Load Balancingautomatically distributes incoming application traffic across multiple resources such as EC2 instances; single point of contact for auto scaling group
- 98EC2 Auto Scalingautomatically add or remove EC2 instances in response to changing application demand; dynamic = changing demand; predictive = schedules on predicted demand
- 99On-demandEC2 Billing Option; short-term, irregular workload that cannot be interrupted
- 100SpotEC2 Billing Option; flexible start and end times or can withstand interruptions
- 101ReservedEC2 Billing Option; billing discount over on-demand pricing; 1 or 3 year
- 102Compute Savings PlanEC2 Billing Option; commit to consistent amount of compute usage for 1/3 year term
- 103Dedicated InstanceEC2 Billing Option; run in virtual private cloud on hardware dedicated to customer
- 104Dedicated HostEC2 Billing Option; physical servers with EC2 instance capacity fully dedicated to your use
- 105EC2 BenefitsLaunch an instance within minutes. Stop using it when you finish running a workload. Pay for compute time used when instance is running not stopped or shut down. Save costs by paying for server capacity needed.
- 106General PurposeAmazon EC2 instance type; does not require optimization in any single resource area
- 107Compute OptimizedAmazon EC2 instance type; high-performance processors
- 108Memory OptimizedAmazon EC2 instance type; process large datasets in memory
- 109Accelerated ComputingAmazon EC2 instance type; use hardware accelerators/coprocessors to perform functions more efficiently
- 110Storage OptimizedAmazon EC2 instance type; high, sequential read/write access to large datasets on local storage; data warehousing
- 111Benefits of Cloud Computing1. Variable Expenses
2. Cost Optimization
3. Scalability
4. Benefit from customers' aggregated usage (economies of scale)
5. Speed and Agility
6. Global in Minutes - 112Cloud Deployment ModelsCloud
On-premises, Private Cloud Deployment
Hybrid
Informações
- Descrição
- FlashCards sobre CCP, criado por sam l em 22-12-2025.
- Criado por
- sam l
- Visualizações
- 18
- Avaliação