AWS Cloud Definitions
A hybrid deployment
Is a way to connect infrastructure and applications between cloud-based resources and existing resources that are not located in the cloud
Cloud based applications
Is fully deployed in the cloud and all parts of the application run in the cloud. Applications in the cloud have either been created in the cloud or have been migrated from an existing infrastructure to take advantage of the benefits of cloud computing.
Spot Instances
It allow you to bid on spare Amazon EC2 computing capacity. Since it are often available at a discount compared to On-Demand pricing, you can significantly reduce the cost of running your applications, grow your application's compute capacity and throughput for the same budget, and enable new types of cloud computing applications.
AWS Service Catalog
It allows organizations to create and manage catalogs of IT services that are approved for use on AWS. These IT services can include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures.
Elastic Load Balancing (ELB)
It automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses. It can handle the varying load of your application traffic in a single Availability Zone or across multiple Availability Zones. It offers three types of load balancers that all feature the high availability, automatic scaling, and robust security necessary to make your applications fault tolerant.
AWS Identity and Access Management (IAM)
It enables you to securely control access to AWS services and resources for your users. You can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources Allows you to do the following: Manage IAM users and their access: Manage IAM roles and their permissions Manage federated users and their permissions
AWS CloudFormation
It gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion. You can use sample templates or create your own templates to describe your AWS resources, and any associated dependencies or runtime parameters, required to run your application.
AWS Systems Manager
It gives you visibility and control of your infrastructure on AWS. It provides a unified user interface so you can view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources
Amazon EC2 Auto Scaling
It helps you maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define. You can use the fleet management features to maintain the health and availability of your fleet
The AWS Well-Architected Tool
It helps you review the state of your workloads and compares them to the latest AWS architectural best practices. The tool is based on the AWS Well-Architected Framework, developed to help cloud architects build secure, high-performing, resilient, and efficient application infrastructure.
Amazon Aurora
It is a MySQL and PostgreSQL compatible relational database engine that combines the speed and availability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases. It is up to five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases. It features a distributed, fault-tolerant, self-healing storage system that auto-scales up to 64TB per database instance. It delivers high performance and availability with up to 15 low-latency read replicas, point-intime recovery, continuous backup to Amazon S3, and replication across three Availability Zones (AZs).
AWS OpsWorks
It is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.
Amazon CloudFront
It is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment
AWS Config
It is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance. Its feature enables you to create rules that automatically check the configuration of AWS resources recorded by it.
Amazon Route 53
It is a highly available and scalable cloud Domain Name System (DNS) web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating human readable names, such as www.example.com, into the numeric IP addresses, such as 192.0.2.1, that computers use to connect to each other. Amazon Route 53 is fully compliant with IPv6 as well
Amazon DynamoDB
It is a key-value and document database that delivers singledigit millisecond performance at any scale. It's a fully managed, multiregion, multimaster database with built-in security, backup and restore, and in-memory caching for internet-scale applications. It can handle more than 10 trillion requests per day and support peaks of more than 20 million requests per second.
Amazon CloudWatch
It is a monitoring and management service built for developers, system operators, site reliability engineers (SRE), and IT managers. It provides you with data and actionable insights to monitor your applications, understand and respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health.
AWS Snowball
It is a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of AWS. The use of it addresses common challenges with large- scale data transfers including high network costs, long transfer times, and security concerns. Transferring data with it is simple, fast, secure, and can be as little as one-fifth the cost of high-speed Internet.
Amazon Rekognition
It is a service that makes it easy to add image analysis to your applications. With it, you can detect objects, scenes, and faces in images. You can also search and compare faces. The API enables you to quickly add sophisticated deep-learning-based visual search and image classification to your applications
AWS CloudTrail
It is a web service that records AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service
AWS Elastic Beanstalk
It is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet Information Services (IIS). You can simply upload your code, and it automatically handles the deployment, from capacity provisioning, load balancing, and auto scaling to application health monitoring.
AWS Trusted Advisor
It is an online resource to help you reduce cost, increase performance, and improve security by optimizing your AWS environment. It provides real-time guidance to help you provision your resources following AWS best practices.
Amazon Virtual Private Cloud (Amazon VPC)
It lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways. You can use both IPv4 and IPv6 in your VPC for secure and easy access to resources and applications.
AWS Lambda
It lets you run code without provisioning or managing servers. You pay only for the compute time you consume—there is no charge when your code is not running. With Lambda, you can run code for virtually any type of application or backend service—all with zero administration.
AWS License Manager
It makes it easier to manage licenses in AWS and onpremises servers from software vendors such as Microsoft, SAP, Oracle, and IBM. It lets administrators create customized licensing rules that emulate the terms of their licensing agreements, and then enforces these rules when an instance of EC2 gets launched
AWS Direct Connect
It makes it easy to establish a dedicated network connection from your premises to AWS. You can establish private connectivity between AWS and your data center, office, or co-location environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.
Amazon Relational Database Service (Amazon RDS)
It makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.
AWS Auto Scaling
It monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. It's easy to setup application scaling for multiple resources across multiple services in minutes.
Reserved Instances
It provide you with a significant discount (up to 75%) compared to On-Demand instance pricing. You have the flexibility to change families, operating system types, and tenancies while benefiting from Reserved Instance pricing when you use Convertible Reserved Instances
Classic Load Balancer
It provides basic load balancing across multiple Amazon EC2 instances and operates at both the request level and connection level. It is intended for applications that were built within the EC2-Classic network.
AWS Identity and Access Management (IAM)
It provides resource-level control of each repository. With Amazon ECR, there are no upfront fees or commitments. You pay only for the amount of data you store in your repositories and data transferred to the Internet.
Benefits of AWS Security
Keep Your Data Safe: Meet Compliance Requirements: Save Money Scale Quickly
AWS Shield
This is a managed Distributed Denial of Service (DDoS) protection service that safeguards web applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection. There are two tiers: Standard and Advanced.
Amazon S3 Glacier
This is a secure, durable, and extremely low-cost storage service for data archiving and long-term backup. It is designed to deliver 99.999999999% durability, and provides comprehensive security and compliance capabilities that can help meet even the most stringent regulatory requirements. It provides query-in-place functionality, allowing you to run powerful analytics directly on your archive data at rest. You can store data for as little as $0.004 per gigabyte per month, a significant savings compared to on-premises solutions. To keep costs low yet suitable for varying retrieval needs, it provides three options for access to archives, from a few minutes to several hours.
AWS Certificate Manager
This is a service that lets you easily provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.
Amazon GuardDuty
This is a threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. It monitors for activity such as unusual API calls or potentially unauthorized deployments that indicate a possible account compromise. It also detects potentially compromised instances or reconnaissance by attackers.
Amazon Inspector
This is an automated security assessment service that helps improve the security and compliance of applications deployed. It automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. After performing an assessment, it produces a detailed list of security findings prioritized by level of severity.
Amazon Simple Storage Service (Amazon S3
This is an object storage service that offers industry-leading scalability, data availability, security, and performance. This means customers of all sizes and industries can use it to store and protect any amount of data for a range of use cases, such as websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics. It is designed for 99.999999999% (11 9's) of durability, and stores data for millions of applications for companies all around the world
Application Load Balancer
This is best suited for load balancing of HTTP and HTTPS traffic and provides advanced request routing targeted at the delivery of modern application architectures, including microservices and containers. Operating at the individual request level (Layer 7), it routes traffic to targets within Amazon Virtual Private Cloud (Amazon VPC) based on the content of the request
Network Load Balancer
This is best suited for load balancing of TCP traffic where extreme performance is required. Operating at the connection level (Layer 4), It routes traffic to targets within Amazon Virtual Private Cloud (Amazon VPC) and is capable of handling millions of requests per second while maintaining ultra-low latencies. It is also optimized to handle sudden and volatile traffic patterns.
Infrastructure as a Service (IaaS)
This service contains the basic building blocks for cloud IT and typically provide access to networking features, computers (virtual or on dedicated hardware), and data storage space. IaaS provides you with the highest level of flexibility and management control over your IT resources and is most similar to existing IT resources that many IT departments and developers are familiar with today
AWS Budgets
This service gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use it to set RI utilization or coverage targets and receive alerts when your utilization drops below the threshold you define. RI alerts support Amazon EC2, Amazon RDS, Amazon Redshift, and Amazon ElastiCache reservations
AWS Cost Explorer
This service has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time
AWS WAF
This service helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. It gives you control over which traffic to allow or block to your web application by defining customizable web security rules. You can use it to create custom rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that are designed for your specific application
Amazon Redshift
This service is a fast, scalable data warehouse that makes it simple and cost-effective to analyze all your data across your data warehouse and data lake. It delivers ten times faster performance than other data warehouses by using machine learning, massively parallel query execution, and columnar storage on high-performance disk.
AWS Storage Gateway
This service is a hybrid storage service that enables your onpremises applications to seamlessly use AWS cloud storage. You can use the service for backup and archiving, disaster recovery, cloud data processing, storage tiering, and migration.
Amazon CloudSearch
This service is a managed service in the AWS Cloud that makes it simple and cost-effective to set up, manage, and scale a search solution for your website or application
The AWS Cost & Usage Report
This service is a single location for accessing comprehensive information about your AWS costs and usage. It lists AWS usage for each service category used by an account and its IAM users in hourly or daily line items, as well as any tags that you have activated for cost allocation purposes. You can also customize the it to aggregate your usage data to the daily or monthly level.
AWS Data Pipeline
This service is a web service that helps you reliably process and move data between different AWS compute and storage services, as well as on premises data sources, at specified intervals.
Amazon Elastic Compute Cloud (Amazon EC2)
This service is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make webscale computing easier for developers. It has a simple web service interface allows you to obtain and configure capacity with minimal friction. It provides you with complete control of your computing resources and lets you run on Amazon's proven computing environment.
Amazon Athena
This service is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL
Amazon Kinesis
This service makes it easy to collect, process, and analyze real-time, streaming data so you can get timely insights and react quickly to new information. You can ingest real-time data such as video, audio, application logs, website clickstreams, and IoT telemetry data for machine learning, analytics, and other applications.
Amazon Elasticsearch
This service makes it easy to deploy, secure, operate, and scale to search, analyze, and visualize data in real-time. With this service, you get easy-to-use APIs and real-time analytics capabilities to power use-cases such as log analytics, full-text search, application monitoring, and clickstream analytics, with enterprise-grade availability, scalability, and security
AWS Lake Formation
This service makes it easy to set up a secure data lake in days. A data lake is a centralized, curated, and secured repository that stores all your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better business decisions
Amazon Elastic File System (Amazon EFS)
This service provides a simple, scalable, elastic file system for Linux-based workloads for use with AWS Cloud services and onpremises resources. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, so your applications have the storage they need - when they need it.
Amazon Elastic Block Store (Amazon EBS)
This service provides persistent block storage volumes for use with Amazon EC2 instances in it. The volume is automatically replicated within its Availability Zone to protect you from component failure, offering high availability and durability.
Software as a Service (SaaS)
This service provides you with a completed product that is run and managed by the service provider. In most cases, people referring to Software as a Service are referring to end-user applications.
Platform as a Service (PaaS)
This service removes the need for your organization to manage the underlying infrastructure (usually hardware and operating systems) and allows you to focus on the deployment and management of your applications. This helps you be more efficient as you don't need to worry about resource procurement, capacity planning, software maintenance, patching, or any of the other undifferentiated heavy lifting involved in running your application
On-premises
Using virtualization and resource management tools, is sometimes called the "private cloud." This deployment doesn't provide many of the benefits of cloud computing but is sometimes sought for its ability to provide dedicated resources.
On-Demand Instances
You pay for compute capacity by the hour with no long-term commitments. It frees you from the costs and complexities of planning, purchasing, and maintaining hardware and transforms what are commonly large fixed costs into much smaller variable costs. It also removes the need to buy "safety net" capacity to handle periodic traffic spikes
Amazon Simple Notification Service (Amazon SNS)
is a highly available, durable, secure, fully managed pub/sub messaging service that enables you to decouple microservices, distributed systems, and serverless applications. It provides topics for high-throughput, push-based, many-to-many messaging
