Luyện AWS Cloud Practitioner

With pay-as-you-go pricing, customers pay only for the AWS services and resources they consume.

A hybrid cloud connects on-premises infrastructure with cloud resources such as AWS.

The Reliability pillar focuses on workload resilience, recovery, and handling change in demand.

Elasticity is the ability to automatically increase or decrease resources to match changing demand.

Deploying resources in a Region near users reduces network distance and typically improves latency.

Economies of scale allow AWS to distribute infrastructure and operating costs across a large customer base.

An AWS Region is a geographic area that contains multiple isolated Availability Zones.

Each Availability Zone contains one or more discrete data centers with independent power, cooling, and networking.

IAM is a global service. Most AWS services are Regional, but IAM resources are available globally.

Spreading a workload across multiple Availability Zones reduces the risk of a single location becoming unavailable.

Edge locations are used by CloudFront and other services to cache content near end users.

AWS does not automatically replicate data or resources across Regions unless the customer configures it.

Amazon EC2 provides resizable compute capacity in the form of virtual servers.

Amazon Simple Storage Service (S3) provides object storage with high durability.

AWS Lambda is a serverless compute service that runs code in response to events.

Amazon RDS supports several relational database engines, including MySQL, PostgreSQL, and SQL Server.

DynamoDB is a serverless NoSQL key-value and document database. It scales automatically and delivers single-digit millisecond latency for high-traffic applications. RDS is a relational database, Redshift is a data warehouse, and EBS is block storage, so none of them are fully managed NoSQL databases.

Amazon VPC lets customers launch AWS resources in a logically isolated virtual network.

AWS IAM controls who can access AWS resources and what actions they can perform.

Amazon CloudFront caches content at edge locations to deliver it with lower latency.

Route 53 is a highly available DNS service that routes traffic to AWS and external resources.

CloudWatch provides monitoring, metrics, alarms, and logs for AWS resources and applications.

CloudTrail records account activity and API calls for audit, security, and compliance.

Elastic Load Balancing automatically distributes traffic across multiple targets, such as EC2 instances.

EC2 Auto Scaling adds or removes EC2 instances according to defined policies.

Amazon EBS provides persistent block-level storage volumes for use with EC2 instances.

Amazon Simple Queue Service (SQS) provides a managed message queue for decoupling application components.

Amazon Simple Notification Service (SNS) sends messages from publishers to subscribers.

ElastiCache provides managed in-memory caching using Redis or Memcached. It stores frequently accessed data in memory to reduce database load and speed up reads. RDS and DynamoDB are persistent databases, and Redshift is a data warehouse, so they do not provide in-memory caching.

Fargate is a serverless compute engine for containers that removes server management.

Amazon Elastic Kubernetes Service (EKS) runs Kubernetes control planes and nodes for customers.

Amazon S3 can host static websites by serving HTML, CSS, JavaScript, and other static assets.

Amazon Redshift is a petabyte-scale, fully managed data warehouse service.

AWS Glue is a serverless data integration service used for discovery, preparation, and transformation.

API Gateway creates, publishes, and secures REST, HTTP, and WebSocket APIs.

Amazon EFS provides scalable, elastic file storage for Linux-based workloads.

S3 Glacier storage classes are designed for low-cost, long-term archival of rarely accessed data.

Amazon WorkSpaces is a managed desktop-as-a-service offering. It gives users cloud-based virtual desktops with centralized management and security. EC2 is general-purpose compute, App Runner runs containers, and Lightsail is simplified VPS hosting, none of which provide managed virtual desktops.

For EC2, AWS manages the underlying host, while the customer manages the guest OS, patches, and applications.

AWS Organizations centralizes management and governance across multiple AWS accounts.

AWS Shield provides managed DDoS protection for applications running on AWS.

AWS WAF is a web application firewall that filters malicious HTTP/HTTPS traffic.

AWS Key Management Service creates and controls cryptographic keys used to protect data.

AWS Artifact provides access to AWS compliance reports and agreements.

GuardDuty uses threat intelligence and anomaly detection to identify potentially malicious activity.

The root user has full account access, so enabling MFA and limiting root use are critical controls.

Least privilege limits each identity to the minimum permissions required for its tasks.

AWS Pricing Calculator estimates costs for planned AWS workloads before deployment.

Trusted Advisor inspects an AWS environment and recommends improvements across several categories.

Cost Explorer provides charts, filters, and forecasts for AWS cost and usage.