AWS Services Overview

AWS DataSync is a service specifically designed for moving data between different AWS storage services like S3, EFS, and FSx, as well as on-premises storage systems. It offers automation and optimization for efficient data migration.

The AWS Cloud offers cost-effectiveness by allowing users to move from fixed upfront hardware costs to paying only for the resources they use. This approach also leverages AWS's economies of scale, benefiting from their large infrastructure.

Operational Excellence is one of the pillars of the AWS Well-Architected Framework that focuses on running and managing systems to deliver business value. It emphasizes continuous improvement of processes and procedures for better efficiency and effectiveness.

AWS Organizations is a service that enables centralized management for multiple AWS accounts, including consolidated billing. With Organizations, one central account can handle billing for all other accounts within your organization.

AWS Budgets is a service that lets you set spending limits for your AWS usage. You can customize these limits and receive alerts when you're approaching or exceeding those limits, allowing you to better control your cloud spending.

The Enterprise Support Plan is the highest tier of AWS support and includes access to a dedicated Technical Account Manager (TAM). This provides you with direct access to an expert who can assist with your technical inquiries, account management, and best practices.

The AWS Architecture Center is a valuable resource that offers a collection of various AWS Cloud solution designs, including reference architectures, diagrams, and best practices. This resource provides examples and guidance for building solutions on AWS.

RDS users are responsible for managing user access and permissions, including creating IAM policies for administrative access.

Allows users to adjust resources as needed, eliminating the need to guess about infrastructure capacity requirements upfront.

Creates a primary database instance and a synchronous standby replica in different Availability Zones for high availability and data durability.

Trusted Advisor provides security recommendations, including checking for IAM access keys that haven't been rotated, to align with security best practices.

Security Groups act as a virtual firewall for EC2 instances, controlling inbound and outbound traffic at the instance level.

Internet Gateway provides a gateway to the public internet for instances in your VPC. Subnet represents a range of IP addresses within your VPC.

Loose Coupling minimizes dependencies between application components, allowing an application to function even if one component fails.

Amazon Macie uses machine learning to automatically discover and protect sensitive data, like PII, stored in S3.

Network ACLs control network traffic at the subnet level, acting as a firewall for the subnet.

CloudHSM is a cloud-based hardware security module (HSM) that allows for secure generation and management of encryption keys.

A service that automatically adjusts the number of EC2 instances based on demand, ensuring sufficient resources while minimizing costs.

IAM Groups enable managing permissions for multiple users as a unit, simplifying permission administration.

The company is responsible for writing business logic code and managing IAM access for the Lambda service.

AWS CloudTrail provides a detailed log of all API calls, including the user who made the request and the specific actions taken.

CloudHSM offers secure storage and management of encryption keys using dedicated hardware security modules.

Amazon S3 allows you to generate pre-signed URLs, enabling temporary public access to specific objects for direct download.

A service that securely stores, manages, rotates, and retrieves sensitive information like database credentials and API keys.

This framework offers design guidelines, not scaling capabilities.

Compute Optimizer recommends instance types but doesn't adjust capacity based on demand.

A web application firewall that can be deployed with the Application Load Balancer, enabling you to apply security rules for web traffic.

A content delivery network (CDN) that caches content globally for low latency and high transfer speeds, ensuring users across the world experience faster website access.

Cost Explorer visualizes and manages costs, but doesn't directly control scaling.

Resource Groups organize resources using tags, not for managing user permissions.

A design principle that aims to reduce dependencies between application components, making applications more resilient and easier to maintain.

A security principle that restricts user access to only the resources necessary for their job functions, minimizing the potential harm if credentials are compromised.

A billing model for EC2 instances where you pay only when the instances are running, making it ideal for infrequent usage.

A serverless data integration service that simplifies the process of discovering, preparing, moving, and integrating data from multiple sources for analytics and machine learning.

A cost-effective pricing model for EC2 instances where you bid on unused EC2 capacity. This allows you to run workloads at a significantly lower cost but also comes with the risk of occasional interruptions.

A type of load balancer that operates at the application layer (Layer 7) and can be configured to distribute user traffic across multiple EC2 instances. It also enables integration with AWS WAF for security.

A service that provides a cost-effective solution for running applications with occasional spikes in demand. It allows you to scale up and down quickly to handle fluctuating workloads, minimizing cost for inactive periods.