AWS Exam A - Topic 1

A service that helps you identify potential security issues and infrastructure misconfigurations in Amazon EC2 instances.

AWS Storage Gateway provides a hybrid solution for extending your on-premises storage to AWS. It integrates with your existing file systems and databases, providing a seamless transition.

AssumeRole is a secure way of giving an EC2 instance access to an S3 bucket. By assuming a role, the instance gets temporary security credentials, limiting the risk of exposure.

By using the AssumeRole method, the EC2 instance obtains temporary credentials from an IAM role, allowing access to the S3 bucket without storing sensitive credentials directly on the instance.

Amazon S3 provides a versatile, scalable, and cost-effective storage solution for files

You should implement proper configuration of security settings (e.g., encryption, access control) to ensure your data is protected within DynamoDB.

AWS Trusted Advisor proactively monitors your AWS environment to detect and provide recommendations for best practices, security, cost, and performance optimization, effectively improving your AWS infrastructure's security and cost efficiency.

AWS Service Catalog enables you to manage and govern your infrastructure as code (IaC) templates by creating and managing catalogs of approved IT services for your organization. This helps streamline deployment and ensure compliance with IT policies.

AWS Glue discovers, transforms, and visualizes your data and helps prepare it for analytics, machine learning, and other tasks. It automatically extracts data from various sources, cleanses it, and transforms it into a format compatible with your analytics tools.

AWS Cost Explorer provides a comprehensive view of your AWS spending and costs, enabling you to identify areas for optimization and cost savings. It tracks your historical spending, analyzes your usage patterns, and offers actionable insights for making informed financial decisions.

AWS Lambda, a serverless computing platform, allows you to run code without managing servers. It scales automatically based on your application's needs, and you only pay for the compute time used. This offers a cost-effective and efficient way to run containerized applications and streamline management.

AWS Cost Explorer is used to identify rightsizing opportunities for Amazon EC2 instances. It analyzes your EC2 usage patterns, identifies underutilized resources, and recommends ways to optimize your EC2 instance size for better cost efficiency.

Maintaining high availability at the database layer is essential for a NoSQL database running on Amazon EC2 instances. This ensures continuous service availability even in the event of failures or maintenance events by implementing strategies like replication and failover mechanisms.

The AWS Cloud Adoption Framework (CAF) is a guide to help organizations adopt AWS effectively. Its foundational capabilities include performance efficiency, sustainability, and governance. Governance encompasses establishing policies and processes to ensure compliance and control over your AWS environment.

AWS Professional Services provides specialized support and expertise to help organizations efficiently and effectively migrate their applications and workloads to the AWS Cloud. They offer guidance, best practices, and tailored solutions to ensure successful migration and optimized utilization of AWS resources.

Reserved Instances (RIs) offer a cost-effective option for EC2 instances when you have predictable usage patterns. They provide a discounted rate for a specific instance type and region for a committed period (1 year or 3 years).

AWS CodeBuild is an automated build service that allows developers to build, test, and deploy their applications with ease. It eliminates the need for manual configuration and setup, streamlining the deployment process.

S3 Versioning creates and stores multiple versions of objects in an S3 bucket, providing a safety net against accidental deletion or overwriting of sensitive data. Every change to an object creates a new version, allowing you to restore data to a previous state.

AWS CodeDeploy is a service that automates the deployment process for applications across various environments. It simplifies the steps involved in releasing code updates, enabling consistent and reliable deployments.

Reserved Instances (RIs) are a cost-effective option for EC2 instances when you anticipate consistent usage. They provide discounted rates for specific instance types and regions for a committed time period, reducing operational costs.

AWS Direct Connect is a service that establishes a dedicated, private network connection between your on-premises data center and AWS. It offers high bandwidth and low latency compared to public internet connections.

AWS Regions are geographic locations where AWS data centers and infrastructure are physically located. Each region is a distinct environment with independent data centers, providing fault tolerance and redundancy for your applications.

AWS Artifact is a service that provides reports on AWS compliance, including details about password and access key rotation. It can be used for auditing compliance.

AWS Budgets allows you to set cost thresholds for your AWS account. When those thresholds are reached, you can receive notifications to help manage your AWS costs.

AWS Chatbot is a service designed to address common security-related questions that AWS customers might have. It provides answers and support for security concerns.

According to the AWS shared responsibility model, customers are responsible for configuring security groups, classifying assets, choosing Availability Zones for services like S3, and handling Amazon DynamoDB updates.

The AWS Well-Architected Framework provides guidelines for designing and operating reliable, scalable, secure, cost-effective, and performant cloud applications. Four key pillars within the framework are Availability, Reliability, Scalability, and Performance Efficiency.

Amazon Simple Notification Service (Amazon SNS) is a service used for sending notifications to various destinations, such as email or text messages, from distributed applications.

Access keys are long, unique strings used to identify and authenticate users or applications when using AWS CLI or the AWS API for programmatic access.

Spot Instances are EC2 instances that are available at a lower price than on-demand instances. However, Spot Instances are subject to interruption if AWS needs the capacity for other workloads. They're ideal for stateless, fault-tolerant workloads that can restart.

AWS CloudTrail is a service that records and logs API calls made to your AWS account. With this data, you can audit user activity, security events, and compliance efforts in your AWS environment.

AWS Wavelength brings AWS compute and storage services closer to users on mobile networks, enabling low-latency access to cloud applications for edge computing use cases. This helps companies improve performance by bringing their processing power closer to users geographically.

Reserved Instances offer a substantial discount on your Amazon EC2 instance usage. Making a commitment to use them for a specific duration saves you money in the long run. This is an attractive option for organizations who need consistent, predictable computing resources.

Elasticity in the AWS Cloud refers to the ability to scale your cloud resources up or down dynamically to match the changing needs of your application. This adaptability helps ensure optimal performance and cost efficiency by adjusting computing power based on demand.

The AWS Shared Responsibility Model outlines the division of security responsibilities between AWS and its customers. When working with AWS Lambda, you are responsible for managing the code within your Lambda functions, ensuring they maintain security and function correctly.