s

ue
ig
Domain - Technology -

r
od
Core Services - EC2

R
an
Al
Al
an
R
od
r ig
ue
s
Amazon EC2
About Amazon EC2

s
ue
01 This is scalable compute capacity provided on Amazon Web Services.

r ig
Here AWS takes care of the underlying physical infrastructure. You don’t need to invest
02

od
in hardware.

R
03 You can create an EC2 Instance and terminate the instance when it is not required.
an
Al
About VPC

s
ue
01 When you deploy an EC2 Instance it needs to be part of a virtual network on the cloud.

r ig
02 This virtual network in AWS is known as a Virtual private cloud.

od
R
03 Within a VPC, you also have subnets. This is a range of IP addresses in the VPC.
an
Al
 s
ue
Instance Connect

ig
r
EC2

od
R
an
Al
Instance Connect - Amazon EC2

s
ue
01 Provides a simple and secure way to connect to Linux instances.

r ig
02 You can also control the access to the connecting to the instance via IAM policies.

od
R
03 You need to install the EC2 Instance Connect on the instance.
an
Al
 s
ue
ig
Instance State

r
od
R
an
Al
 pending

s
This is the state when the instance is first being launched. You are not billed

ue
here.

running

ig
Here the instance is in the running state. You are billed for the instance.

r
od
stopped

R
Here the instance is shut down. You are not billed for the instance
an
terminated

Here the instance is completely deleted.

igr
od
Types
R
an
Al
 Instance Types

s
ue
General Purpose

These instances provide a balance of compute, memory and network resources.

ig
This is ideal for general purpose workloads like hosting web servers.

r
od
Compute Optimized

This is ideal for applications that need a lot of high performance when it comes to

R
CPU. Gaming servers, machine learning applications, high performance web
servers.
an
Memory Optimized

This is ideal for applications that process large amounts of data in memory.
Al

In-memory caches, Hadoop and Spark clusters.

s
ue
Accelerated Computing

Here the application could need to make use of hardware accelerators.

ig
Sometimes gaming applications require these capabilities.

r
od
Storage Optimized

This is ideal for hosting database servers that require high, sequential read and

R
write access to large data sets.
an
Al
 s
ue
Summary

igr
od
Points
R
an
Al
About VPC

s
ue
01 This is an isolated network on the AWS Cloud.

r ig
All VPC’s are isolated from one another.
02

od
R
03 A VPC is launched in a region. It also has a CIDR block configured.
an
Al
Default VPC

s
ue
01 This is created in each region.

r ig
02 A default subnet is created in the VPC. A subnet is created for each Availability Zone.

od
R
03 An Internet gateway is created and connected to the default VPC.
an
Al
Default VPC

s
ue
04 There is a main route table that points all Internet traffic to pass via the Internet

ig
gateway.

r
05 There is a default security group associated with the default VPC.

od
R
06 There is a default network access control list associated with the default VPC.
an
Al
 s
Other Aspects

ue
Key Pair
Amazon Machine Image
This is a combination of a public

ig
The image has the required
and private key. The public key is
information to launch the instance.

r
AMI stored on your Linux-based

od
instance. You use the private key to
securely SSH into the instance.
Type Keys

R
Instance type Public IP
IP
an
This is a combination of CPU, This allows your instance to be
Memory, Storage, Networking and reachable from the Internet.
other capabilities.
Al
 s
Other Aspects

ue
Instance state
Security Group
We can change the instance state at

ig
This controls the traffic that is
any point in time – We can stop and
inbound and outbound from a
Security

r
terminate the instance.
resource. Rules are present to

od
control the traffic.

ENI State

Elastic Network Interface

network card. instances.

s
ue
01 This is a physical location in the world where AWS has their data centers.

r ig
02 For certain services we need to choose a particular region.

od
R
03 AWS keeps on expanding the number of regions.
an
Al
AWS Availability Zones

s
ue
01 This is one or more discrete data centers with redundant power, networking and

ig
connectivity.

r
02 Each AWS region has a number of Availability Zones.

od
R
03 All Availability zones are interconnected with high-bandwidth, low-latency networking.
an
Al
AWS Dedicated Hosts

s
ue
01 This is a physical server that is fully dedicated to you.

r ig
02 You can create EC2 Instances on the dedicated host.

od
R
03 This is ideal to use when you have per-VM software licenses or per-core licenses.
an
Al
Amazon EC2 Pricing

s
ue
01 The pricing defers from region to region.

r ig
02 It also depends on the Instance type and operating system you use.

od
R
03 But you can only pay for how much you use – This is where you get so much flexibility
when it comes to the pricing.
an
Al
 s
ue
ig
Domain - Technology -

r
od
Core Services - Storage

R
an
Al
 s
ue
Amazon Elastic

igr
File System

od
R
an
Al
 s
ue
Summary

igr
od
Points
R
an
Al
Amazon EBS Volumes

s
ue
01 EBS – Elastic Block Storage.

r ig
02 This is durable, block-level storage devices that can be attached to instances.

od
R
03 The EBS volumes can be mounted as devices on the instances.
an
Al
Amazon EBS Volumes

s
ue
01 You can attach multiple volumes to an EC2 Instance.

r ig
02 The volume and instance must be in the same Availability Zone.

od
R
03 You can also attach one volume to multiple instances.
an
Al
 s
Volume Types

ue
Throughput Optimized HDD
General Purpose SSD(gp2, gp3)
Good for workloads that depends

ig
These are backed by solid-state
on getting good throughput ,
drives. Provide a balance when it

r
comes to price and performance.
GP frequently accessed data – Data

od
warehousing applications.

IOPS HDD

R
Provisioned IOPS (io1, io2) Cold HDD
IP
an
These are also backed by solid- This is good for workloads that are
state drives. But they provide high not accessed that frequently.
performance. Great for critical
Al

workloads.
Amazon EBS Snapshots

s
ue
01 These are point-in-time snapshots of the Amazon EBS Volumes.

r ig
02 The snaphots taken are incremental in nature.

od
R
03 You can restore the snapshot to an EBS volume.
an
Al
EC2 Instance Store

s
ue
01 This is temporary block-level storage for the instance.

r ig
02 The storage is located on the disks that are physically attached to the host computer.

od
R
03 This is great when you want to store a lot of local data like buffer data.
an
Al
Amazon Elastic File System

s
ue
01 This allows you to create a file system in AWS.

r ig
02 Here the underlying storage is completely managed for you.

od
R
03 Multiple resources like Amazon EC2, AWS Lambda can then connect to the file system.
an
Al
Amazon Elastic File System

s
ue
01 If you want locally assigned storage for just an EC2 Instance – Make use of EBS volumes.

r ig
02 If you want a file system that needs to be shared across multiple EC2 Instances – Elastic

od
File System.

R
03
an
Al
 s
ue
Summary

igr
od
Points
R
an
Al
Amazon EBS Volumes

s
ue
01 EBS – Elastic Block Storage.

r ig
02 This is durable, block-level storage devices that can be attached to instances.

od
R
03 The EBS volumes can be mounted as devices on the instances.
an
Al
Amazon EBS Volumes

s
ue
01 You can attach multiple volumes to an EC2 Instance.

r ig
02 The volume and instance must be in the same Availability Zone.

od
R
03 You can also attach one volume to multiple instances.
an
Al
 s
Volume Types

ue
Throughput Optimized HDD
General Purpose SSD(gp2, gp3)
Good for workloads that depends

ig
These are backed by solid-state
on getting good throughput ,
drives. Provide a balance when it

r
comes to price and performance.
GP frequently accessed data – Data

od
warehousing applications.

IOPS HDD

R
Provisioned IOPS (io1, io2) Cold HDD
IP
an
These are also backed by solid- This is good for workloads that are
state drives. But they provide high not accessed that frequently.
performance. Great for critical
Al

workloads.
Amazon EBS Snapshots

s
ue
01 These are point-in-time snapshots of the Amazon EBS Volumes.

r ig
02 The snaphots taken are incremental in nature.

od
R
03 You can restore the snapshot to an EBS volume.
an
Al
EC2 Instance Store

s
ue
01 This is temporary block-level storage for the instance.

r ig
02 The storage is located on the disks that are physically attached to the host computer.

od
R
03 This is great when you want to store a lot of local data like buffer data.
an
Al
 s
ue
Storage

igr
od
Classes
R
an
Al
 s
S3 Standard

ue
Availability
Performance
Designed for 99.99% availability.

ig
Provides low latency and high
throughput performance.

r
P

od
D A

R
Durability Purpose
P
an
Designed for 99.999999999% Can be used for common use cases
durability of objects across multiple when it comes to storage of data.
Availability Zones.
Al
 s
S3 Standard-IA

ue
Availability
Access
Designed for 99.9% availability.

ig
This is for data that is accessed less
frequently. You get a lower price

r
when it comes to per GB storage
A

od
and per GB retrieval.

D A

R
Durability Purpose
P
an
Designed for 99.999999999% Ideal for backup of data.
durability of objects across multiple
Availability Zones.
Al
 s
S3 One Zone-IA

ue
Availability
Access
Designed for 99.5% availability.

ig
This is for data that is accessed less
frequently. But when you want to

r
access the data, you need it
A

od
immediately.

D A

R
Durability Purpose
P
an
Designed for 99.999999999% You want a low-cost option for
durability of objects in a single storing data and don’t mind the less
Availability Zone. resiliency when it comes to data
Al

storage.
 s
S3 Glacier Instant Retrieval

ue
Availability
Access
Designed for 99.9% availability.

ig
This is an archive solution that gives
low-cost storage. This can be

r
chosen if you want retrieval of data
A

od
in milliseconds.

D A

R
Durability Purpose
P
an
Designed for 99.999999999% Archive data that requires
durability of objects across multiple immediate access.
Availability Zone.
Al
 s
S3 Glacier Flexible Retrieval

ue
Availability
Access
Designed for 99.99% availability.

ig
This is an archive solution that gives
low-cost storage. Here the data

r
retrieval can range from minutes to
A

od
hours.

D A

R
Durability Purpose
P
an
Designed for 99.999999999% Archive data that needs to be
durability of objects across multiple accessed very rarely.
Availability Zone.
Al
 s
S3 Glacier Deep Dive

ue
Retrieval
Access
Here the retrieval time can be

ig
This is an archive solution that gives
within 12 hours.
low-cost storage. This is used when

r
organizations want to store their
A

od
data for long periods of time – 7 –
10 years.
D R

R
Durability Purpose
P
an
Designed for 99.999999999% Could be used as an alternative
durability of objects across multiple when organizations use magnetic
Availability Zone. tapes for backup purposes.
Al
 s
S3 Intelligent-Tiering

ue
Durability
Access
Designed for 99.999999999%

ig
This feature moves data to most
durability across multiple
cost-effective access tier based on

r
the access of data.
A Availability zones.

od
D D

R
Charge Availability
A
an
Here there is a small charge when it Designed for 99.9% availability.
comes to monitoring data to
understand the tier to set for the
Al

object.
 s
ue
S3

igr
Transfer

od
Acceleration
R
an
Al
S3 Transfer Acceleration

s
ue
01 This is a bucket-level feature available with Amazon S3.

r ig
02 This enables fast and secure transfer of files over long distances.

od
R
03 These are the file transfers that occur between the client and the S3 bucket.
an
Al
S3 Transfer Acceleration

s
ue
01 The transfer acceleration feature makes use of the distributed edge locations when it

ig
comes to Amazon CloudFront.

r
02 You must enable this feature for a bucket.

od
R
03 There is a different bucket URL that can be used when making use of the transfer
acceleration feature.
an
Al
Al
an
R
od
r ig
ue
s
Amazon RDS
Amazon RDS

s
ue
01 This is the Amazon Relational Database service.

r ig
02 This service makes it easier to setup a database on the AWS Cloud.

od
R
The supported database engines – MySQL, Oracle , Microsoft SQL Server, PostgreSQL
03
and MariaDB.
an
Al
Amazon RDS

s
ue
01 There is high availability built into the service.

r ig
02 It manages backups, software patching , failure detection etc.

od
R
The entire infrastructure is managed by AWS.
03
an
Al
Al
an
R
od
r
Aurora

ig
Amazon

ue
s
Amazon Aurora

s
ue
01 This is a fully managed relational database engine that is compatible

ig
with MySQL and PostgreSQL

r
02 Amazon Aurora can deliver more throughput when compared with MySQL and

od
PostgreSQL.

R
03 Here again the underlying infrastructure is completely managed for you.
an
Al
 s
ue
Amazon

igr
od
DocumentDB
R
an
Al
Amazon DocumentDB

s
ue
01 This is a fully-managed database service.

r ig
02 This is used when you want to setup MongoDB-compatible databases on the cloud.

od
R
This is a document-based database.
03
an
Al
Amazon DocumentDB

s
ue
01 Here the data can be stored as JSON documents.

r ig
02 With Amazon DocumentDB, the storage grows as the need to store data grows.

od
R
You can also scale compute and memory resources as required.
03
an
Al
Al
an
R
od
r ig
ue
s
Amazon EMR
Amazon EMR

s
ue
01 This service is known as Amazon Elastic MapReduce.

r ig
02 Here you can run your big data workloads using Apache Hadoop and Apache Spark.

od
R
This service can be used to process and analyze large amounts of data.
03
an
Al
Amazon EMR

s
ue
01 Via the use of this service, you provision a cluster of nodes.

r ig
02 You can then submit jobs that need to process data to the cluster.

od
R
an
Al
 s
ue
Amazon

igr
od
Neptune
R
an
Al
Amazon Neptune

s
ue
01 This is a fully-managed graph database service.

r ig
02 This is a highly available service and all of the data is backed-up to Amazon S3.

od
R
Graph databases - Data items and relationships between data items.
03
an
Al
Amazon Neptune

s
ue
01 For example, if you want to store the company employee hierarchy, you

ig
can make use of a graph database.

r
02 The data items are stored as vertices of a graph.

od
R
The relationships are stored as edges.
03
an
Al
 s
ue
Amazon

igr
od
QuickSight
R
an
Al
Amazon QuickSight

s
ue
01 This is a cloud-based business intelligence service.

r ig
02 You can use this service to connect to various data sources on the cloud.

od
R
You can then visualize the data from the various sources.
03
an
Al
 s
ue
Amazon

igr
od
Redshift
R
an
Al
Amazon Redshift

s
ue
01 This is a fully managed, petabyte-scale data warehouse service in AWS.

r ig
02 This is normally used for hosting your data warehouses.

od
R
03 You can get a cluster of nodes for hosting your data.
an
Al
Al
an
R
od
rig
Athena
Amazon

ue
s
Amazon Athena

s
ue
01 This is an interactive query service.

r ig
02 It allows you to analyze data that is stored in Amazon S3 via the use of Standard SQL

od
queries.

R
Here you don’t pay for any infrastructure. You only pay for the queries run.
03
an
Al
 s
ue
AWS

igr
Global

od
Accelerator
R
an
Al
AWS Global Accelerator

s
ue
01 This is used to create accelerators that can be used to improve the performance of

ig
your applications for local and global users.

r
02 Standard Accelerators – These can direct traffic via the use of the AWS Global network

od
to the endpoints in the region that is closest to the user.

R
03 With the Global accelerator , you get static IP addresses that need to be associated with
the accelerator.
an
Al
AWS Global Accelerator

s
ue
01 Standard accelerators – Here the endpoints are Network Load Balancers, Application

ig
Load Balancers , Amazon EC2 Instances, Elastic IP addresses.

r
02 Custom routing accelerators – Here the endpoints are virtual private cloud subnets

od
which has EC2 Instances.

R
03
an
Al
 s
ue
AWS

ig
r
Storage Gateway

od
R
an
Al
AWS Storage Gateway

s
ue
01 This service can be used to extend the on-premises storage requirement to the cloud.

r ig
02 This can help reduce costs for the company, since they don’t need to invest on capital

od
costs for buying new storage devices.

R
03 Amazon S3 File Gateway – Here the data is stored on S3. The objects stored in S3 are
made available as files to the on-premises client.
an
Al
AWS Storage Gateway

s
ue
01 Amazon FSx File Gateway – Here the file data is stored in Amazon FSx and has

ig
Windows native compatibility for Access Control Lists and Shadow copies.

r
02 Tape Gateway – Here you can store your virtual tapes in Amazon S3.

od
R
03 Volume Gateway – Here block storage volumes are available using the iSCSI protocol.
an
Al
 s
ue
ig
Domain - Technology -

r
od
Services

R
an
Al
 s
ue
AWS Trusted

igr
od
Advisor
R
an
Al
AWS Trusted Advisor

s
ue
01 This provides recommendations based on which you can follow AWS best practices.

r ig
02 The basic checks are only available as part of AWS Basic and AWS Developer Support.

od
R
03 For all checks, you need to upgrade to AWS Business or Enterprise Support.
an
Al
 AWS Trusted Advisor

s
ue
The tool can help identify ways to save

ig
Cost Optimization on costs – underutilized EBS volumes,

r
unassociated Elastic IP addresses

od
You get recommendations on how to improve
Performance the performance of your environment –

R
Compute usage of EC2 Instances.
an
You get recommendations on how to improve
Security
the security of your environment – Security
Group risks.
Al
 AWS Trusted Advisor

s
ue
The tool can help identify ways to

ig
Fault tolerance improve the reliability of your

r
environment.

od
You can see how the resources you are creating
Service quotas are compared against the account quotas.

R
an
Al
 s
ue
AWS

igr
od
Connectivity
R
an
Al
AWS VPN

s
ue
01 This can be used to setup a connection between your on-premises network and an AWS

ig
VPC.

r
02 Here the connection is encrypted and secure.

od
R
03 This service is highly available.
an
Al
AWS Direct Connect

s
ue
01 This provides a direct link between the on-premises network and AWS.

r ig
02 Here there is a connection to an AWS Direct Connection Location over the standard

od
Ethernet fibre-optic cable.

R
03 You can create connections to your AWS VPC and AWS Public services as well.
an
Al
Al
an
R
od
r ig
ue
s
AWS Lambda
AWS Lambda

s
ue
01 This a compute service that allows you to run code on the cloud without the need of

ig
provisioning servers.

r
02 AWS Lambda manages the entire infrastructure for you.

od
R
03 You only pay for the amount of compute you use.
an
Al
 s
ue
Amazon

igr
od
Lightsail
R
an
Al
AWS Lightsail

s
ue
01 This is a virtual private server provider.

r ig
02 This is another compute option that allows you to host applications on the cloud.

od
R
03 Lightsail has everything included to jumpstart your solution – EC2 Instances, databases ,
DNS Management etc.
an
Al
Al
an
R
od
SQS

rig
Amazon

ue
s
Amazon SQS

s
ue
01 This is the Simple Queue service.

r ig
02 This provides a secure, durable and fully managed queue service.

od
R
03 It can be used to decouple distributed software systems and application components.
an
Al
Al
an
R
od
SNS

rig
Amazon

ue
s
Amazon SNS

s
ue
01 This is the Simple Notification service.

r ig
02 This service provides message delivery from publishers to subscribers.

od
R
03 The publishers can send messages to a topic.
an
Al
Amazon SNS

s
ue
01 Subscribers can subscribe to a topic and receive the messages.

r ig
02 Consumers be mobile devices for mobile push notifications or text messages.

od
R
03 Consumers can also be AWS services like Amazon SQS, AWS Lambda etc.
an
Al
Amazon MQ

s
ue
01 This is a managed message broker.

r ig
02 If a company is already using a messaging broker system like Apache ActiveMQ or

od
RabbitMQ, they can consider migrating to the Amazon MQ service.

R
03 It has support for a variety of protocols such AMQP 0-9-1, AMQP 1.0, MQTT, OpenWire,
and STOMP.
an
Al
 s
ue
Amazon

ig
r
EC2 Auto Scaling

od
R
an
Al
Amazon EC2 Auto Scaling

s
ue
01 This services ensures you have the right number of EC2 Instances running at a time.

r ig
02 Your EC2 Instances are created as part of Auto Scaling groups.

od
R
03 You can define the minimum number of instances that need to run as part of the group.
an
Al
Amazon EC2 Auto Scaling

s
ue
01 You can also define the maximum number of instances that need to run as part of the

ig
group.

r
02 You can define scaling policies that determine when the instances should be created or

od
terminated.

R
03 Benefits of using this service – Better fault tolerance, Better availability and Better
cost management.
an
Al
 s
ue
AWS

igr
CloudFormation

od
R
an
Al
AWS CloudFormation

s
ue
01 This is a service that can deploy your AWS resources based on a template definition.

r ig
02 The template can be in JSON or YAML format.

od
R
03 CloudFormation creates a stack of resources based on the template definition.
an
Al
Al
an
R
od
AWS

rig
Beanstalk

ue
s
AWS Beanstalk

s
ue
01 You can use this service to quickly deploy applications to the AWS Cloud without the

ig
need of understanding the infrastructure aspects.

r
02 This service will create the environment for you.

od
R
03 You can then upload your application to the environment.
an
Al
AWS Beanstalk

s
ue
01 This service has support for applications developed in Go, Java, .NET,. [Link], PHP,

ig
Python and Ruby.

r
02 This service will create the EC2 Instances that can be used for hosting the environment.

od
R
This service also manages aspects such as capacity provisioning, load balancing,
03
scaling and application health monitoring.
an
Al
Al
an
R
od
AWS

rig
OpsWorks

ue
s
AWS OpsWorks

s
ue
01 This is a configuration management service.

r ig
02 You can manage the configuration of your applications by using tools such as Puppet or

od
Chef.

R
03 OpsWorks can manage the different aspects of your application deployment via the use
of stacks.
an
Al
AWS OpsWorks

s
ue
01 Stack – This is a container of resources such as Amazon EC2 Instances, Amazon RDS

ig
databases etc.

r
02 Layers – You can split the different application components running as part of your

od
stack in different layers.

R
03 Chef – You can use the Chef tool to manage the different layers of the stack.
an
Al
Al
an
R
od
AWS

r
Batch

ig
ue
s
AWS Batch

s
ue
01 This service allows you to run batch computing workloads in AWS.

r ig
02 Here AWS will automatically manage the compute resources and optimize the workload

od
distribution.

R
03 Jobs are created based on job definitions. And the jobs are submitted to the compute
instances.
an
Al
 s
ue
Amazon

igr
od
Kinesis
R
an
Al
Amazon Kinesis

s
ue
01 This service is used to ingest data at scale.

r ig
02 This is the fully managed service, you don’t need to worry about the infrastructure.

od
R
03 Used to collect , process and analyze real-time and streaming data.
an
Al
 s
Amazon Kinesis

ue
Kinesis Data Firehose
Kinesis Video Streams
This service can be used to capture,

ig
This service allows to securely
transform and load data streams
stream video from connected

r
Video into AWS data stores for real-time
devices to AWS.

od
analytics.

Data Firehose

R
Kinesis Data Streams Kinesis Data Analytics
an
This can be used to capture large Analytics This service can be used to process
amounts of data from a variety of data streams in real time with SQL
data sources. or Apache Flink.
Al
 s
ue
Amazon

ig
r
Connect

od
R
an
Al
Amazon Connect

s
ue
01 This is a cloud-based contact center.

r ig
02 You can actually create personalized experiences for customers.

od
R
03 Agents also have an easy way to deal with customers.
an
Al
Amazon Connect

s
ue
01 Getting started – Create an instance of Amazon Connect.

r ig
02 Set up the required phone numbers for the contact center.

od
R
03 You can then create queues, create a flow on how the customer experience would be
implemented.
an
Al
 s
ue
Amazon

igr
API Gateway

od
R
an
Al
Amazon API Gateway

s
ue
01 This is used for creating, publishing, maintaining, monitoring and securing REST, HTTP

ig
and WebSocket APIs at scale.

r
02 You can implement the standard HTTP methods of GET, POST, PUT, PATCH and DELETE.

od
R
03 You make the API Gateway as the entry point for requests for your users.
an
Al
Amazon API Gateway

s
ue
01 You could have your workloads running on backend services such as Amazon EC2

ig
Instances or AWS Lambda.

r
02 You can combine this service with AWS IAM for authentication.

od
R
03 If you are making use of HTTP API’s, you can also make use of Open ID Connect and
OAuth 2.0 for authorization.
an
Al
 s
ue
Amazon

igr
Workspaces

od
R
an
Al
Amazon Workspaces

s
ue
01 This service allows you to provision cloud-based Microsoft Windows or Amazon Linux

ig
desktops for users.

r
02 Here you create something known as Workspaces.

od
R
03 With the workspace you can start provisioning the machines.
an
Al
Amazon Workspaces

s
ue
01 You can deploy applications via the use of Amazon Workspaces Application Manager.

r ig
02 For Windows-based desktops you can bring your own licenses and applications.

od
R
03 Remember that you are still responsible for patching the machines in the workspace.
an
Al
 s
ue
Amazon

igr
AppStream

od
R
an
Al
Amazon AppStream

s
ue
01 This is a fully managed application streaming service.

r ig
02 You can provide users with instant access to applications from anywhere.

od
R
03 AppStream will manage the resources that are needed to run the applications.
an
Al
Amazon AppStream

s
ue
01 The user can run the application on the device of their choice.

r ig
02 You can use the AppStream client to access the application.

od
R
03
an
Al
 s
ue
AWS

ig
r
Transit Gateway

od
R
an
Al
AWS Transit Gateway

s
ue
01 This is a network transit hub that can be used to interconnect virtual private clouds

ig
and on-premises networks.

r
02 You can attach one or more VPC’s in different regions.

od
R
03 If you have an AWS Direct Connect gateway, this can also be used with the transit
gateway.
an
Al
 s
ue
AWS

ig
r
Load Balancer

od
R
an
Al
Network Load Balancer

s
ue
01 This load balancer works at the Network Layer.

r ig
02 You can use this Load Balancer to distribute requests to targets such as Amazon EC2

od
Instances.

R
03 The Load Balancer automatically scales based on demand.
an
Al
Application Load Balancer

s
ue
01 This load balancer works at the Application Layer.

r ig
02 You can route requests based on the URL in the request.

od
R
03 You can route requests based on the HTTP headers values in the request.
an
Al
Gateway Load Balancer

s
ue
01 This service enables you to deploy and manage virtual appliances such as firewalls,

ig
intrusion detection systems.

r
02 This load balancer works at the network layer.

od
R
03 It listens for the IP packets and then forwards the traffic to the appropriate target group.
an
Al
 s
ue
Amazon

ig
r
Route 53

od
R
an
Al
Amazon Route 53

s
ue
01 This is a highly available and scalable Domain Name System.

r ig
02 Here you can register your domain names.

od
R
03 You can route internet traffic to your domain.
an
Al
Amazon Route 53

s
ue
01 You can create a hosted zone. This zone contains records.

r ig
02 Public hosted zone – This specifies how to route traffic on the internet.

od
R
03 The records has information on how traffic needs to be routed.
an
Al
Amazon Route 53

s
ue
01 Simple routing policy – This can be used to direct traffic to a single resource.

r ig
Failover routing policy – This can be used to direct traffic to a secondary site if the
02

od
primary one goes down.

R
03 Latency routing policy – This can direct the users request to the closest region, the
response that would give the least latency.
an
Al
 s
ue
Amazon

igr
CloudFront

od
R
an
Al
AWS CloudFront

s
ue
01 This service can be used to speed up the distribution of static and dynamic content.

r ig
02 Here requests are routed via edge locations that provide the least latency.

od
R
03 Here the content is routed via the AWS backbone network to the edge location to route
the request faster to the user.
an
Al
 s
ue
Amazon

igr
od
Rekognition
R
an
Al
Amazon Rekognition

s
ue
01 This is a recognition service.

r ig
02 You can submit videos and images to the service for analysis.

od
R
03 It can then detect objects such as people, text, scenes.
an
Al
Amazon Rekognition

s
ue
01 It can also detect inappropriate content.

r ig
02 You can detect , analyze and compare faces.

od
R
an
Al
 s
ue
Amazon

igr
od
Transcribe
R
an
Al
Amazon Transcribe

s
ue
01 This is an automatic speech recognition service.

r ig
02 It is used to covert audio to text.

od
R
03 It uses machine learning models to achieve this.
an
Al
Al
an
R
od
Polly

rig
Amazon

ue
s
Amazon Polly

s
ue
01 This service is used to convert text to speech.

r ig
02 There are different voices available in different languages.

od
R
03 You can build applications that can embed the use of this service.
an
Al
 s
ue
Amazon

igr
od
Translate
R
an
Al
Amazon Translate

s
ue
01 This service is used to translate text from one language to another.

r ig
02 Here it can automatically detect the language in the source text.

od
R
03 It uses machine learning to translate the text.
an
Al
 s
ue
Amazon

igr
od
Comprehend
R
an
Al
Amazon Comprehend

s
ue
01 This service is used to Extract insights from documents.

r ig
02 It can detect entities , key phrases based on the context in the documents.

od
R
03 It makes use of a pre-trained model to gain insights about the content stored in the
document.
an
Al
 s
ue
AWS

ig
r
Application

od
Discovery Service
R
an
Al
AWS Application Discovery service

s
ue
01 This service can help in the migration process of your on-premises environment to the

ig
cloud.

r
02 It collects the usage and configuration data about the on-premises servers.

od
R
03 You can see the servers , see their utilization.
an
Al
Al
an
R
od
AWS

rig
Backup

ue
s
AWS Backup

s
ue
01 This is a fully managed service that provides data protection.

r ig
02 Here you can create backup policies, automate backup schedules.

od
R
03 You can specify how often the backups should be taken and for how long to retain the
backups.
an
Al
AWS Backup

s
ue
01 You can use this service for Amazon EC2.

r ig
02 Here AWS Backup will protect the Amazon EBS volumes attached to the instance.

od
R
an
Al
Al
an
R
od
AWS

rig
Migration

ue
s
AWS Server Migration Service

s
ue
01 This helps to automate the migration of on-premises VMware vSphere, Microsoft

ig
Hyper-V machines to the AWS Cloud.

r
02 Here the server VM’s are replicated to Amazon Machine Images.

od
R
03 Whenever the images are ready, they can be deployed as EC2 Instances.
an
Al
AWS Database Migration Service

s
ue
01 This services makes it easier to migrate relational databases, data warehouses and

ig
other types of data stores to the cloud.

r
02 You can perform a one-time migration or even replicate on-going changes from the

od
source to the target.

R
03 You can also migrate to a different database engine with the help of the AWS Schema
Conversion tool.
an
Al
 s
ue
ig
Domain – Security and

r
od
Compliance

R
an
Al
 s
ue
ig
Identity and Access

r
od
Management

R
an
Al
AWS IAM

s
ue
01 This is AWS Identity and Access Management.

r ig
02 This is a web service that allows you to securely control access to AWS Resources.

od
R
03 You can define identities and then give permissions to those identities.
an
Al
 AWS IAM Key Terms

s
ue
This is a person or application that makes a

ig
Principal request for an action or an operation that needs

r
to be performed on an AWS resource.

od
Normally a user needs to be authenticated first
Authentication
to AWS before they can make resource

R
requests.
an
Once authenticate, AWS will check to see if you
Authorized
are authorized, basically have the required
permissions to access a resource.
Al
AWS IAM root user

s
ue
01 By default, when you create an AWS account, a user gets created which is the root user.

r ig
02 This root user has access to all resources in the AWS account.

od
R
03 Never use the root user to perform day-to-day operations.
an
Al
AWS IAM Users

s
ue
01 You can create an IAM user. This user is part of your account.

r ig
02 The user can be allocated a password that can be used to log into the AWS account.

od
R
03 The user can also get access keys that can be used for programmatic access to the AWS
account.
an
Al
AWS IAM Policies

s
ue
01 IAM policies are used to grant permissions to users.

r ig
02 A policy is just an object that can associated with an identity or a resource.

od
R
03 Based on the policy a user could be granted or denied access to a resource.
an
Al
 s
ue
ig
IAM Security

r
od
Best practices

R
an
Al
AWS IAM Best practices

s
ue
01 Require the use of Multi-Factor Authentication.

r ig
02 Rotate access keys for long-term access credentials.

od
R
03 Protect your root user credentials.
an
Al
AWS IAM Best practices

s
ue
01 Apply least-privilege permissions wherever possible.

r ig
02 Perform a regular review of users, roles, permissions, policies etc.

od
R
03 Verify the public access you might have provided in the AWS account.
an
Al
Al
an
R
od
Macie

r
Amazon

ig
ue
s
Amazon Macie

s
ue
01 This is a fully managed data security and data privacy service.

r ig
02 It uses machine learning to help discover, monitor and protect sensitive data in your

od
AWS environment.

R
03 It Analyses the data in your S3 buckets.
an
Al
Amazon Macie

s
ue
01 It provides an inventory for your S3 bucket.

r ig
02 It creates detailed findings that you can remediate as required.

od
R
an
Al
 s
ue
ig
IAM User

r
od
Access keys

R
an
Al
IAM User Access keys

s
ue
01 These are long-term credentials for an IAM user.

r ig
02 You can use the access keys when it comes to programmatic requests made to AWS.

od
R
03 Access keys consists of two parts.
an
Al
IAM User Access keys

s
ue
01 Access key ID and the secret access key.

r ig
02 Both must be specified when making the programmatic request.

od
R
03
an
Al
 s
ue
ig
Secrets

r
od
Manager

R
an
Al
AWS Secrets Manager

s
ue
01 This service allows you to store secrets. Applications can then make a secure

ig
call to the AWS Secrets Manager to get the value of the secret.

r
02 You can also make AWS Secrets Manager rotate the value of a secret.

od
R
03 This is a completely managed service.
an
Al
AWS Secrets Manager

s
ue
01 A secret consists of secret information, the secret value and metadata about

ig
the secret.

r
02 The secret value can be a string or binary.

od
R
An encryption key from the AWS Key Management service is used to encrypt and
03 decrypt the secret value.
an
Al
 s
ue
ig
AWS

r
od
Security Groups

R
an
Al
 AWS Security Groups

s
ue
Rules
Control traffic
In the Security Group, you define

ig
This is used to control traffic that is
rules that control traffic based on
allowed to reach and leave
Traffic

r
protocols and port numbers.
resources that they are associated

od
with.

Type Rules

R
Traffic type Default
Default
an
Here you can control the Inbound The default VPC and any VPC you
and Outbound traffic. create comes with a default security
group.
Al
Al
an
R
ACL

od
r
Network

ig
ue
s
 Network ACL

s
ue
Rules
List
Here again you can define Inbound

ig
These are Network Access Control
and Outbound rules.
Lists. A network access control list
List

r
is used to allow or deny traffic at the

od
subnet level.

Subnet Rules

R
Subnet Default
Default
an
The Network Access Control list is The default VPC comes with a
attached to a subnet. default NACL.
Al
 s
ue
ig
Amazon

r
od
Detective

R
an
Al
Amazon Detective

s
ue
01 This service can be used to analyze and investigate the root cause of any

ig
security findings or suspicious activities.

r
02 This service collects log data from your AWS resources.

od
R
03 It then uses machine learning to analyze the data and come up with its own security
findings.
an
Al
 s
ue
ig
AWS

r
od
Key Management Service

R
an
Al
AWS Key Management Service

s
ue
01 This service is used to manage your cryptographic keys.

r ig
02 This service uses hardware security modules to protect and validate the keys.

od
R
03 It also integrates with other services on AWS.
an
Al
AWS Key Management Service

s
ue
01 You can create both symmetric and asymmetric keys.

r ig
02 You can control access to the keys via the use of key policies, IAM policies.

od
R
03 You can also enable the rotation of keys.
an
Al
 s
ue
ig
Amazon

r
od
Inspector

R
an
Al
Amazon Inspector

s
ue
01 This is a vulnerability management service.

r ig
02 You can use this service to scan for vulnerabilities in your Amazon EC2 Instances and

od
container images that reside in Amazon Elastic Container Registry.

R
03 The service then creates findings based on the vulnerabilities that are discovered.
an
Al
Amazon Inspector

s
ue
01 It can identify software packages that are exposed to common vulnerabilities.

r ig
02 It also analyses the network paths to your EC2 Instances.

od
R
03
an
Al
 s
ue
ig
Amazon

r
od
CloudWatch

R
an
Al
Amazon CloudWatch

s
ue
01 This is used to monitor your AWS resources in real-time.

r ig
02 You can also create dashboards to display the graphs for various metrics.

od
R
03 You can also define alarms that can be used to perform an action if a particular
threshold has been reached.
an
Al
 s
ue
ig
Amazon

r
od
CloudWatch Logs

R
an
Al
Amazon CloudWatch Logs

s
ue
01 This is a central repository for storage of logs.

r ig
02 You can stream your logs from sources like your EC2 Instances.

od
R
03 You can then analyze the logs collected via the use of executing queries against the
collected data.
an
Al
 s
ue
ig
AWS

r
od
CloudTrail

R
an
Al
AWS CloudTrail

s
ue
01 This service is used from an auditing and governance perspective.

r ig
02 Here all of the actions taken by a user, role or an AWS service are recorded as events in

od
AWS CloudTrail.

R
03 With the help of CloudTrail logs you can identify any sort of suspicious or unusual
activity in your AWS account.
an
Al
AWS CloudTrail

s
ue
01 By default, AWS CloudTrail is already enabled for an account.

r ig
02 You can view the events from the last 90 days for your account.

od
R
03 If you want to maintain your logs for a longer time, you can deliver the events to an
Amazon S3 bucket.
an
Al
 s
ue
ig
AWS

r
od
Health Dashboard

R
an
Al
AWS Health Dashboard

s
ue
01 Here you can see any sort of events that could have an impact on your account.

r ig
02 You can see also see any scheduled maintenance activities that would be performed by

od
AWS that could affect your account.

R
03 You can use the Event log to view all of the AWS Health events.
an
Al
 s
ue
ig
Amazon

r
od
EventBridge

R
an
Al
Amazon EventBridge

s
ue
This service can be used to deliver a stream of real-time data from
01 applications or AWS services to targets such as AWS Lambda.

r ig
02 EventBridge has the capability to receive an event, apply a rule and then route the event

od
to a target.

R
03 You can archive events and replay them at a later point in time.
an
Al
Al
an
R
od
AWS
Config

r ig
ue
s
AWS Config

s
ue
This service can first be used to discover supported resources in an AWS
01 account.

r ig
02 It can also detect configuration changes for a resource.

od
R
03 It maintains historical records of the configuration items of resources.
an
Al
AWS Config

s
ue
AWS Config can be used to send the updated configuration changes to an
01 Amazon S3 bucket.

r ig
02 You can have rules that trigger AWS Lambda functions when configuration changes

od
occur.

R
an
Al
 s
ue
ig
AWS

r
od
Systems Manager

R
an
Al
AWS Systems Manager

s
ue
This service allows you to manage the applications and infrastructure running
01 in AWS.

r ig
02 Application Manager – This allows teams to investigate issues with their AWS

od
resources in the context of applications that are running on them.

R
03 App Config – This can be used to store common application configurations.
an
Al
AWS Systems Manager

s
ue
Change Manager – You can manage the changes within your organization
01 when it comes to application and infrastructure changes.

r ig
02 Automation– You can automate common maintenance and deployment tasks.

od
R
03 Inventory – This service creates a software inventory of the softwares running on your
managed nodes.
an
Al
AWS Systems Manager

s
ue
Patch Manager – This allows you to automate the release of patches on your
01 nodes such as your EC2 Instances.

r ig
02 State Manager – This ensures that your nodes are in a defined state.

od
R
03 Incident Manager – This can be used to manage incidents that affect AWS resources.
an
Al
 s
ue
ig
AWS

r
od
Systems Manager

R
an
Al
AWS Systems Manager – Parameter Store

s
ue
01 Here you can store your configuration data and secrets.

r ig
02 You can store information such as database passwords, license code. All of these are

od
stored as parameter values.

R
03 You can then reference these parameters in your scripts , commands etc.
an
Al
 s
ue
AWS

ig
r
Credential report

od
R
an
Al
AWS Credential report

s
ue
01 You can use this feature to generate and download a credential report.

r ig
02 This report contains the list of users and their status.

od
R
03 You can use this when it comes to compliance.
an
Al
Al
an
R
od
r ig
AWS MFA

ue
s
MFA in AWS

s
ue
01 The use of MFA - Multi-Factor Authentication to provide an extra layer of security when it

ig
comes to authentication.

r
02 It’s a good practice to enable MFA for your privileged users.

od
R
03 There are different authentication mechanisms available.
an
Al
MFA in AWS

s
ue
01 Virtual MFA devices - This is a software that runs on a phone or another device.

r ig
02 Hardware MFA device - This generates a numeric code that the user can use to log into the

od
account.

R
03 FIDO security key - This isa device that can plug into your computer that can be used in
the authentication process.
an
Al
 s
ue
ig
Amazon

r
od
GuardDuty

R
an
Al
Amazon GuardDuty

s
ue
01 This is a service that can be used to detect any sort of malicious activity

ig
occurring from within your AWS account.

r
02 It can do this by analyzing the data within various data sources such as AWS CloudTrail,

od
Amazon S3 logs, DNS logs etc.

R
03 It uses threat intelligence feeds, known IP addresses, machine learning to understand
these different sort of threats.
an
Al
Amazon GuardDuty

s
ue
01 You can also enable a separate Malware Protection feature when it comes to

ig
Amazon EBS volumes.

r
02 This service is a regional service.

od
R
03
If any potential security issue is discovered , it comes up as a finding.
an
Al
 s
ue
ig
Amazon

r
od
Cognito

R
an
Al
Amazon Cognito

s
ue
01 This service is used to provide authentication,authorization and user

ig
management for web and mobile applications.

r
02 Here you can define users. Users can sign in via a password.

od
R
03 Or they can sign in using third party credentials like Facebook or Google.
an
Al
Amazon Cognito

s
ue
01 User pools – These are user directories that provide the sign-up and sign-in

ig
option for users.

r
02 Identity pools – These helps to grant access to users to AWS services.

od
R
an
Al
 s
ue
ig
Domain – Cloud Concepts

r
od
R
an
Al
 s
ue
AWS Well-

igr
Architected

od
Framework
R
an
Al
 s
ue
Operational

ig
Excellence

r
od
Includes the ability to support development and run workloads effectively, gain
insight into their operations, and to continuously improve supporting processes
and procedures to deliver business value.

R
an
Al
 s
ue
Security

r ig
od
Encompasses the ability to protect data, systems, and assets to take advantage of
cloud technologies to improve your security.

R
an
Al
 s
ue
Reliability

r ig
od
Encompasses the ability of a workload to perform its intended function correctly
and consistently when it’s expected to. This includes the ability to operate and
test the workload through its total lifecycle.

R
an
Al
 s
ue
Performance

ig
Efficiency

r
od
Includes the ability to use computing resources efficiently to meet system
requirements, and to maintain that efficiency as demand changes and
technologies evolve.

R
an
Al
 s
ue
Cost

ig
Optimization

r
od
Includes the ability to run systems to deliver business value at the lowest price
point.

R
an
Al
 s
ue
Sustainability

r ig
od
Focuses on environmental impacts, especially energy consumption and efficiency,
since they are important levers for architects to inform direct action to reduce
resource usage.

R
an
Al
 s
ue
ig
Domain – Billing and

r
od
Pricing

R
an
Al
 s
ue
ig
Domain – Cloud Concepts

r
od
R
an
Al
 s
ue
Consolidated

igr
od
Billing
R
an
Al
Consolidated Billing

s
ue
01 You can use this feature to consolidate the bill from multiple AWS accounts.

r ig
02 The management account can pay the bills for the member accounts.

od
R
03 Here you need to setup an AWS Organization.
an
Al
Consolidated Billing

s
ue
01 Benefit – You get one consolidated bill.

r ig
02 There is no additional cost to use this feature.

od
R
03 When you have combined usage across accounts, there are volume discount pricings
that you can avail.
an
Al
 s
ue
AWS

igr
Expenditure

od
R
an
Al
AWS Expenditure

s
ue
01 Capital Expenditure , Capital Expense or CAPEX.

r ig
02 Here the organization spends money to buy an asset.

od
R
03 Or it just spends money to improve a fixed asset.
an
Al
AWS Expenditure

s
ue
01 For example – Buying server racks and servers for a data center.

r ig
02 The company is making an investment.

od
R
03 When it comes to the AWS Cloud, you don’t have to make this investment.
an
Al
AWS Expenditure

s
ue
01 Operational Expenditure , OPEX

r ig
02 Here the organization spends money on an on-going basis.

od
R
03 Personnel to maintain a data center.
an
Al
AWS Expenditure

s
ue
01 With AWS , most of the expenses can come under the aspect of

ig
operational expenses.

r
02 The on-going cost of running an EC2 Instance.

od
R
03 The on-going cost of storing objects in an S3 bucket.
an
Al
Al
an
R
od
AWS

r
Budgets

ig
ue
s
AWS Budgets

s
ue
01 This can be used to track your AWS cost and usage.

r ig
02 You can also take appropriate action based on the cost and usage.

od
R
03 You can setup a monthly cost budget.
an
Al
AWS Budgets

s
ue
01 You can create cost budgets, usage budgets, RI utilization and Saving

ig
plans budgets.

r
02 You can setup AWS Budget actions.

od
R
03 You can setup AWS Budget notifications.
an
Al
 s
ue
AWS

ig
r
Cost Explorer

od
R
an
Al
AWS Cost Explorer

s
ue
01 Here you can view and analyze your costs.

r ig
02 Via the Cost Explorer Interface you can view the costs for free.

od
R
03 Programmatic calls to the Cost Explorer have a charge.
an
Al
AWS Cost Explorer

s
ue
01 You can view data for the last 12 months.

r ig
02 It also helps you to forecast how much you are likely to spend for the next 12 months.

od
R
03 You can also get recommendations on what Reserved Instances to purchase.
an
Al
 s
ue
AWS

igr
Cost and Usage

od
Reports
R
an
Al
AWS Cost and Usage Reports

s
ue
01 Here you can get your complete cost and usage reports.

r ig
02 You can also publish the billing reports to an Amazon S3 bucket.

od
R
03 You can receive the costs per hour, day or by month.
an
Al
 s
ue
Resource

igr
od
Tagging
R
an
Al
Resource Tagging

s
ue
01 You can actually assign metadata to your AWS resources.

r ig
02 This is done in the form of tags.

od
R
03 A tag is nothing but a key-value pair.
an
Al
Resource Tagging

s
ue
01 Use case – Organize resources department-wise

r ig
02 Use case – Cost allocation department-wise. You can actually use AWS Cost Explorer to

od
see the cost of resources tag wise.

R
03 Use case – IAM Policies also support tag-based conditions
an
Al