AWS Services and Architecture Principles

Independent zones within AWS regions, engineered to be resilient against failures in other zones.

A core principle of cloud architecture that ensures applications can withstand failures in individual components or zones.

An AWS service that allows you to provision and manage various AWS services through a standardized catalog.

Professional services firms that help companies design, build, and manage AWS workloads.

A computing service that provides virtual servers on AWS.

A managed database service that simplifies running and scaling relational databases on AWS.

A fully managed MySQL and PostgreSQL-compatible database service.

A petabyte-scale data warehousing service.

Amazon S3 provides secure, durable, highly-scalable binary object storage for developers and IT teams.

Route 53 Resolver Endpoints enable inbound DNS queries from on-premises networks to resolve AWS hosted domains.

A Virtual Private Gateway serves as the anchor for VPN connections between AWS and on-premises networks.

When comparing AWS TCO with on-premises TCO, factors like data center security, software development costs, and antivirus software licensing play a crucial role.

Amazon Redshift is a petabyte-scale data warehousing service that can be used for self-hosted databases requiring nightly maintenance and cost-saving shutdowns.

Security and Compliance in AWS is a shared responsibility model where AWS operates and manages core infrastructure while customers are responsible for securing resources and data within their environment.

The AWS shared responsibility model relieves customers of the operational burden of managing core AWS components such as the host operating system and underlying infrastructure.

Amazon Glacier is a service for storing data that you don't access frequently, like backups or archives. It's designed for low cost and long-term storage.

Amazon S3 is for frequently accessed data, while Amazon Glacier is for infrequent access. S3 is optimized for speed, while Glacier is for low cost.

AWS IAM is a service that lets you manage user permissions and access to various AWS services.

Access Keys are a pair of security credentials (ID and secret) used for programmatic access to AWS services through the AWS Command Line Interface (CLI) or API.

API keys are used for accessing specific services through an application's API (Application Programming Interface). They provide a means to authenticate and identify the application.

AWS Command Line Interface (CLI) is a tool that lets you interact with AWS services through command-line commands. It's used for automation and scripting tasks.

AWS Software Development Kit (SDK) is a collection of libraries and tools for interacting with AWS services from different programming languages like Python, Java, and JavaScript.

AWS CLI (Command Line Interface) is a tool for interacting with AWS through commands, while AWS SDK (Software Development Kit) provides libraries and tools for developers to integrate AWS services into their code.

A design principle where system components are independent, minimizing impact from changes or failures in one component on others. This makes systems more manageable and resilient.

AWS Identity and Access Management (IAM) offers features to secure user access. Two primary methods involve using Multi-Factor Authentication (MFA) for stronger logins, and creating unique IAM users to assign specific permissions.

AWS recommends locking down your root account, creating individual IAM users, and using groups to manage permissions effectively.

When components are loosely coupled, a failure in one won't affect others, preventing cascading failures and ensuring data integrity. This makes systems more reliable and reduces downtime.

A security method that uses multiple authentication factors, such as a physical token or app code, alongside your password, for increased security.

Creating unique users helps enforce the principle of least privilege, granting only necessary permissions to each user, minimizing security risks.

Groups allow you to efficiently manage permissions for multiple users by assigning specific permissions to the group and then adding users to that group.

The main account used when setting up AWS. It has full access to all resources and should be locked down for maximum security.

A feature in AWS Organizations that allows central billing for multiple AWS accounts, simplifying cost management and potentially unlocking volume discounts.

Price reductions offered by AWS for using larger quantities of resources like EC2 instances or storage, saving you money on your overall AWS bill.

A commitment to pay for a specific EC2 instance type for a set period, usually one or three years, in exchange for significantly lower hourly rates.

A centralized management service for AWS accounts, allowing you to create, manage, and govern resources within your organization, even across different accounts.

A highly scalable and reliable DNS web service offered by AWS. It provides features for routing traffic, managing domains, and improving DNS performance.

A cloud computing model where customers rent computing resources like servers, storage, and networks from a service provider (AWS). Customers manage their own operating systems and applications.

The operating system installed on top of an EC2 instance, which you are responsible for managing and securing when using AWS IaaS.

A framework where AWS manages the core infrastructure while customers are responsible for securing their own applications and data within that environment.

AWS Regions are geographically distinct areas where AWS data centers and services are located. They are designed to provide low latency access to users and comply with data sovereignty regulations.

Data Sovereignty refers to laws and regulations that govern where data can be stored and processed. Some countries have strict rules about data leaving their borders.

Latency refers to the delay in data transmission between two points, often measured in milliseconds. In AWS, it's the time it takes for data to travel from a user's location to an AWS service and back.

AWS Account Groups allow you to organize multiple AWS accounts together into a single entity. This enables you to apply policies and manage access control across a collection of accounts.

The costs of AWS services can vary across different regions. This is influenced by factors such as local infrastructure costs (electricity, labor, etc.), taxes, and market demand.

Choosing the right AWS Region is crucial for performance and compliance. Key factors include: latency (distance to users), data sovereignty regulations, and cost differences across regions.

Factors like the costs of physical infrastructure (data centers), taxes, and the cost of labor can create differences in AWS service costs across regions.