├── .gitignore
├── LICENSE
├── README.md
├── cloudformation
├── 0-just-ec2.yaml
└── 1-ec2-with-sg-eip.yaml
├── ec2-fundamentals
├── ec2-user-data.sh
└── test
├── iam
└── demo.txt
├── icons
├── AMI.png
├── API-Gateway.png
├── AWS-Amplify.png
├── AWS-Application-Composer.png
├── AWS-Artifact.png
├── AWS-Certificate-Manager.png
├── AWS-Config.png
├── AWS-Firewall-Manager.png
├── AWS-Key-Management-Service.png
├── AWS-Network-Firewall.png
├── AWS-Secrets-Manager.png
├── Amazon-Detective.png
├── Amazon-GuardDuty.png
├── Amazon-Inspector.png
├── Amazon-MQ.png
├── AppStream-2.png
├── AppSync.png
├── Application-Discovery-Service.png
├── Application-Load-Balancer.png
├── Application-Migration-Service.png
├── Aurora.png
├── Auto-Scaling-Group.png
├── Backup.png
├── Batch.png
├── Budgets.png
├── Client-VPN.png
├── Cloud-Development-Kit.png
├── CloudFormation.png
├── CloudFront.png
├── CloudShell.png
├── CloudTrail.png
├── CloudWatch.png
├── CloudWatch_Alarms.png
├── CloudWatch_Logs.png
├── CloudWatch_Metrics.png
├── CodeArtifact.png
├── CodeBuild.png
├── CodeCommit.png
├── CodeDeploy.png
├── CodeGuru.png
├── CodePipeline.png
├── Cognito.png
├── Command-Line-Interface.png
├── Comprehend.png
├── Compute-Optimizer.png
├── Connect.png
├── Control-Tower.png
├── Cost-Explorer.png
├── DataSync.png
├── Database-Migration-Service.png
├── Device-Farm.png
├── Directory-Service.png
├── DocumentDB.png
├── DynamoDB.png
├── EC2.png
├── EC2_Spot-Instance.png
├── EFS.png
├── EMR.png
├── ElastiCache.png
├── Elastic-Beanstalk.png
├── Elastic-Block-Store.png
├── Elastic-Container-Service.png
├── Elastic-Disaster-Recovery.png
├── Elastic-Load-Balancing.png
├── Elastic-Transcoder.png
├── EventBridge.png
├── Fault-Injection-Service.png
├── Forecast.png
├── Gateway-Load-Balancer.png
├── Global-Accelerator.png
├── Glue.png
├── Ground-Station.png
├── Health-Dashboard.png
├── IAM-Access-Analyzer.png
├── Identity-Access-Management_MFA.png
├── Identity-Center.png
├── Identity-and-Access-Management.png
├── IoT-Core.png
├── Kendra.png
├── Kinesis.png
├── Lambda.png
├── Lex.png
├── Lightsail.png
├── Local-Zones.png
├── Macie.png
├── Managed-Blockchain.png
├── Managed-Services.png
├── Migration-Evaluator.png
├── Migration-Hub.png
├── Neptune.png
├── Network-Access-Control-List.png
├── Network-Load-Balancer.png
├── Organizations.png
├── Outposts-servers.png
├── Personalize.png
├── Pinpoint.png
├── Polly.png
├── PrivateLink.png
├── Professional-Services.png
├── Quantum-Ledger-Database.png
├── QuickSight.png
├── RDS.png
├── Redshift.png
├── Rekognition.png
├── Resource-Access-Manager.png
├── Route-53.png
├── S3.png
├── SDK.png
├── STS.png
├── SageMaker.png
├── Security-Hub.png
├── Service-Catalog.png
├── Shield.png
├── Simple-Notification-Service.png
├── Simple-Queue-Service.png
├── Snowball-Edge.png
├── Snowball.png
├── Snowcone.png
├── Step-Functions.png
├── Systems-Manager.png
├── Systems-Manager_Parameter-Store.png
├── Systems-Manager_Session-Manager.png
├── Textract.png
├── Timestream.png
├── Transcribe.png
├── Transit-Gateway.png
├── Translate.png
├── Trusted-Advisor.png
├── Virtual-Private-Cloud.png
├── WAF.png
├── Wavelength.png
├── Well-Architected-Tool.png
├── WorkSpaces.png
├── X-Ray.png
├── rePost.png
└── s3-transfer-acceleration.png
├── images
├── AWS-WAF-Six-Pillars.png
├── Shared_Responsibility_Model.jpg
├── aws-caf-perspectives.png
├── aws-compare-support-plans.png
└── aws-compute-pricing.png
├── notes.txt
└── s3
├── beach.jpg
├── coffee.jpg
└── index.html
/.gitignore:
--------------------------------------------------------------------------------
1 | # Compiled class file
2 | *.class
3 |
4 | # Log file
5 | *.log
6 |
7 | # BlueJ files
8 | *.ctxt
9 |
10 | # Mobile Tools for Java (J2ME)
11 | .mtj.tmp/
12 |
13 | # Package Files #
14 | *.jar
15 | *.war
16 | *.nar
17 | *.ear
18 | *.zip
19 | *.tar.gz
20 | *.rar
21 |
22 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
23 | hs_err_pid*
24 | replay_pid*
25 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | Apache License
2 | Version 2.0, January 2004
3 | http://www.apache.org/licenses/
4 |
5 | TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
6 |
7 | 1. Definitions.
8 |
9 | "License" shall mean the terms and conditions for use, reproduction,
10 | and distribution as defined by Sections 1 through 9 of this document.
11 |
12 | "Licensor" shall mean the copyright owner or entity authorized by
13 | the copyright owner that is granting the License.
14 |
15 | "Legal Entity" shall mean the union of the acting entity and all
16 | other entities that control, are controlled by, or are under common
17 | control with that entity. For the purposes of this definition,
18 | "control" means (i) the power, direct or indirect, to cause the
19 | direction or management of such entity, whether by contract or
20 | otherwise, or (ii) ownership of fifty percent (50%) or more of the
21 | outstanding shares, or (iii) beneficial ownership of such entity.
22 |
23 | "You" (or "Your") shall mean an individual or Legal Entity
24 | exercising permissions granted by this License.
25 |
26 | "Source" form shall mean the preferred form for making modifications,
27 | including but not limited to software source code, documentation
28 | source, and configuration files.
29 |
30 | "Object" form shall mean any form resulting from mechanical
31 | transformation or translation of a Source form, including but
32 | not limited to compiled object code, generated documentation,
33 | and conversions to other media types.
34 |
35 | "Work" shall mean the work of authorship, whether in Source or
36 | Object form, made available under the License, as indicated by a
37 | copyright notice that is included in or attached to the work
38 | (an example is provided in the Appendix below).
39 |
40 | "Derivative Works" shall mean any work, whether in Source or Object
41 | form, that is based on (or derived from) the Work and for which the
42 | editorial revisions, annotations, elaborations, or other modifications
43 | represent, as a whole, an original work of authorship. For the purposes
44 | of this License, Derivative Works shall not include works that remain
45 | separable from, or merely link (or bind by name) to the interfaces of,
46 | the Work and Derivative Works thereof.
47 |
48 | "Contribution" shall mean any work of authorship, including
49 | the original version of the Work and any modifications or additions
50 | to that Work or Derivative Works thereof, that is intentionally
51 | submitted to Licensor for inclusion in the Work by the copyright owner
52 | or by an individual or Legal Entity authorized to submit on behalf of
53 | the copyright owner. For the purposes of this definition, "submitted"
54 | means any form of electronic, verbal, or written communication sent
55 | to the Licensor or its representatives, including but not limited to
56 | communication on electronic mailing lists, source code control systems,
57 | and issue tracking systems that are managed by, or on behalf of, the
58 | Licensor for the purpose of discussing and improving the Work, but
59 | excluding communication that is conspicuously marked or otherwise
60 | designated in writing by the copyright owner as "Not a Contribution."
61 |
62 | "Contributor" shall mean Licensor and any individual or Legal Entity
63 | on behalf of whom a Contribution has been received by Licensor and
64 | subsequently incorporated within the Work.
65 |
66 | 2. Grant of Copyright License. Subject to the terms and conditions of
67 | this License, each Contributor hereby grants to You a perpetual,
68 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable
69 | copyright license to reproduce, prepare Derivative Works of,
70 | publicly display, publicly perform, sublicense, and distribute the
71 | Work and such Derivative Works in Source or Object form.
72 |
73 | 3. Grant of Patent License. Subject to the terms and conditions of
74 | this License, each Contributor hereby grants to You a perpetual,
75 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable
76 | (except as stated in this section) patent license to make, have made,
77 | use, offer to sell, sell, import, and otherwise transfer the Work,
78 | where such license applies only to those patent claims licensable
79 | by such Contributor that are necessarily infringed by their
80 | Contribution(s) alone or by combination of their Contribution(s)
81 | with the Work to which such Contribution(s) was submitted. If You
82 | institute patent litigation against any entity (including a
83 | cross-claim or counterclaim in a lawsuit) alleging that the Work
84 | or a Contribution incorporated within the Work constitutes direct
85 | or contributory patent infringement, then any patent licenses
86 | granted to You under this License for that Work shall terminate
87 | as of the date such litigation is filed.
88 |
89 | 4. Redistribution. You may reproduce and distribute copies of the
90 | Work or Derivative Works thereof in any medium, with or without
91 | modifications, and in Source or Object form, provided that You
92 | meet the following conditions:
93 |
94 | (a) You must give any other recipients of the Work or
95 | Derivative Works a copy of this License; and
96 |
97 | (b) You must cause any modified files to carry prominent notices
98 | stating that You changed the files; and
99 |
100 | (c) You must retain, in the Source form of any Derivative Works
101 | that You distribute, all copyright, patent, trademark, and
102 | attribution notices from the Source form of the Work,
103 | excluding those notices that do not pertain to any part of
104 | the Derivative Works; and
105 |
106 | (d) If the Work includes a "NOTICE" text file as part of its
107 | distribution, then any Derivative Works that You distribute must
108 | include a readable copy of the attribution notices contained
109 | within such NOTICE file, excluding those notices that do not
110 | pertain to any part of the Derivative Works, in at least one
111 | of the following places: within a NOTICE text file distributed
112 | as part of the Derivative Works; within the Source form or
113 | documentation, if provided along with the Derivative Works; or,
114 | within a display generated by the Derivative Works, if and
115 | wherever such third-party notices normally appear. The contents
116 | of the NOTICE file are for informational purposes only and
117 | do not modify the License. You may add Your own attribution
118 | notices within Derivative Works that You distribute, alongside
119 | or as an addendum to the NOTICE text from the Work, provided
120 | that such additional attribution notices cannot be construed
121 | as modifying the License.
122 |
123 | You may add Your own copyright statement to Your modifications and
124 | may provide additional or different license terms and conditions
125 | for use, reproduction, or distribution of Your modifications, or
126 | for any such Derivative Works as a whole, provided Your use,
127 | reproduction, and distribution of the Work otherwise complies with
128 | the conditions stated in this License.
129 |
130 | 5. Submission of Contributions. Unless You explicitly state otherwise,
131 | any Contribution intentionally submitted for inclusion in the Work
132 | by You to the Licensor shall be under the terms and conditions of
133 | this License, without any additional terms or conditions.
134 | Notwithstanding the above, nothing herein shall supersede or modify
135 | the terms of any separate license agreement you may have executed
136 | with Licensor regarding such Contributions.
137 |
138 | 6. Trademarks. This License does not grant permission to use the trade
139 | names, trademarks, service marks, or product names of the Licensor,
140 | except as required for reasonable and customary use in describing the
141 | origin of the Work and reproducing the content of the NOTICE file.
142 |
143 | 7. Disclaimer of Warranty. Unless required by applicable law or
144 | agreed to in writing, Licensor provides the Work (and each
145 | Contributor provides its Contributions) on an "AS IS" BASIS,
146 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
147 | implied, including, without limitation, any warranties or conditions
148 | of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
149 | PARTICULAR PURPOSE. You are solely responsible for determining the
150 | appropriateness of using or redistributing the Work and assume any
151 | risks associated with Your exercise of permissions under this License.
152 |
153 | 8. Limitation of Liability. In no event and under no legal theory,
154 | whether in tort (including negligence), contract, or otherwise,
155 | unless required by applicable law (such as deliberate and grossly
156 | negligent acts) or agreed to in writing, shall any Contributor be
157 | liable to You for damages, including any direct, indirect, special,
158 | incidental, or consequential damages of any character arising as a
159 | result of this License or out of the use or inability to use the
160 | Work (including but not limited to damages for loss of goodwill,
161 | work stoppage, computer failure or malfunction, or any and all
162 | other commercial damages or losses), even if such Contributor
163 | has been advised of the possibility of such damages.
164 |
165 | 9. Accepting Warranty or Additional Liability. While redistributing
166 | the Work or Derivative Works thereof, You may choose to offer,
167 | and charge a fee for, acceptance of support, warranty, indemnity,
168 | or other liability obligations and/or rights consistent with this
169 | License. However, in accepting such obligations, You may act only
170 | on Your own behalf and on Your sole responsibility, not on behalf
171 | of any other Contributor, and only if You agree to indemnify,
172 | defend, and hold each Contributor harmless for any liability
173 | incurred by, or claims asserted against, such Contributor by reason
174 | of your accepting any such warranty or additional liability.
175 |
176 | END OF TERMS AND CONDITIONS
177 |
178 | APPENDIX: How to apply the Apache License to your work.
179 |
180 | To apply the Apache License to your work, attach the following
181 | boilerplate notice, with the fields enclosed by brackets "[]"
182 | replaced with your own identifying information. (Don't include
183 | the brackets!) The text should be enclosed in the appropriate
184 | comment syntax for the file format. We also recommend that a
185 | file or class name and description of purpose be included on the
186 | same "printed page" as the copyright notice for easier
187 | identification within third-party archives.
188 |
189 | Copyright [yyyy] [name of copyright owner]
190 |
191 | Licensed under the Apache License, Version 2.0 (the "License");
192 | you may not use this file except in compliance with the License.
193 | You may obtain a copy of the License at
194 |
195 | http://www.apache.org/licenses/LICENSE-2.0
196 |
197 | Unless required by applicable law or agreed to in writing, software
198 | distributed under the License is distributed on an "AS IS" BASIS,
199 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
200 | See the License for the specific language governing permissions and
201 | limitations under the License.
202 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # AWS Certified Cloud Practitioner
2 |
3 |
4 | Learning materials for the AWS Certified Cloud Practitioner Certification (AWS-CLF-C02).
5 |
6 | Information on the exam can be found [here](https://aws.amazon.com/certification/certified-cloud-practitioner/).
7 |
8 | Domains of material covered in the exam:
9 | * Cloud Concepts
10 | * Security and Compliance
11 | * Cloud Technology & Services
12 | * Billing, Pricing, & Support
13 |
14 |
Icon | 18 |Name | 19 |Description | 20 |
---|---|---|
Cloud Concepts |
25 | ||
Deployments and Managing Infrastucture at Scale |
28 | ||
![]() |
31 | Cloud Formation |
32 | a service that enables users to model and manage infrastructure resources in an automated and secure manner, developers can define and provision AWS infrastructure resources using a JSON- or YAML-formatted infrastructure as code template | 33 |
![]() |
36 | CDK (Cloud Development Kit) |
37 | open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation | 38 |
![]() |
41 | Elastic Beanstalk |
42 | PaaS, runs application code and handles deployment and serving to users | 43 |
![]() |
46 | CodeDeploy |
47 | automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises | 48 |
![]() |
51 | CodeCommit |
52 | a scalable versioning control system for developers, similar to git (obsoleted 2024) | 53 |
![]() |
56 | CodeBuild |
57 | a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy | 58 |
![]() |
61 | CodePipeline |
62 | a continuous delivery service that enables you to model, visualize, and automate the steps required to release your software | 63 |
![]() |
66 | CodeArtifact |
67 | a secure, highly scalable, managed artifact repository service that helps organizations to store and share software packages for application development | 68 |
![]() |
71 | SSM (Systems Manager) |
72 | manage servers running on AWS and in your on-premises data center through a single interface | 73 |
![]() |
76 | SSM Session Manager |
77 | manage your Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, on-premises servers, and virtual machines (VMs) | 78 |
![]() |
81 | SSM Parameter Store |
82 | provides secure, hierarchical storage for configuration data management and secrets management | 83 |
Global Infrastructure |
86 | ||
![]() |
89 | Route 53 |
90 | a highly available and scalable cloud Domain Name System (DNS) web service | 91 |
![]() |
94 | CloudFront |
95 | web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users | 96 |
![]() |
99 | S3 Transfer Acceleration |
100 | shortens the distance between client applications and AWS servers that acknowledge PUTS and GETS to Amazon S3 using our global network of hundreds of CloudFront Edge Locations | 101 |
![]() |
104 | AWS Global Accelerator |
105 | terminates TCP connections from clients at AWS edge locations and, almost concurrently, establishes a new TCP connection with the endpoints, maximizing the time that traffic is on the AWS network and ensureing that traffic is always routed over the optimum network path. | 106 |
![]() |
109 | AWS Outposts |
110 | a pool of AWS compute and storage capacity deployed at a customer site | 111 |
![]() |
114 | AWS WaveLength |
115 | a type of AWS infrastructure designed to run workloads that require low latency or edge resiliency | 116 |
![]() |
119 | AWS Local Zones |
120 | allow for the placement of resources near end users | 121 |
Cloud Integrations |
124 | ||
![]() |
127 | SQS (Simple Queue Service) |
128 | a service to send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available | 129 |
![]() |
132 | Kinesis |
133 | process real-time data, such as video, audio, application logs, website clickstreams, and IoT telemetry data, for machine learning (ML), analytics, and other applications | 134 |
![]() |
137 | SNS (Simple Notification Service) |
138 | a service that makes it easy to set up, operate, and send notifications from the cloud | 139 |
![]() |
142 | Amazon MQ |
143 | a managed message broker service for Apache ActiveMQ Classic and RabbitMQ that streamlines setup, operation, and management of message brokers on AWS | 144 |
Cloud Monitoring |
147 | ||
![]() |
150 | CloudWatch |
151 | a repository for metrics and logs | 152 |
![]() |
155 | CloudWatch Metrics |
156 | essential for ensuring optimal performance and efficient resource utilization, provides insights to AWS Services allowing for real time tracking of health/performance/usage patterns | 157 |
![]() |
160 | CloudWatch Alarms |
161 | a monitoring tool that helps you create alarms on your AWS Resouces and AWS Services | 162 |
![]() |
165 | Cloudwatch Logs |
166 | centralizes the logs from all of your systems, applications, and AWS services that you use, in a single, highly scalable service | 167 |
![]() |
170 | EventBridge |
171 | a service that provides real-time access to changes in data in AWS services, your own applications, and software as a service (SaaS) applications without writing code | 172 |
![]() |
175 | CloudTrail |
176 | a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account | 177 |
![]() |
180 | X-Ray |
181 | helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture | 182 |
![]() |
185 | CodeGuru |
186 | analyzes the application runtime performance and using machine learning, provides recommendations on ways that could speed up the application | 187 |
![]() |
190 | AWS Health Dashboard |
191 | can be used to learn about AWS Health events that affect AWS services or the AWS account | 192 |
Networking |
195 | ||
![]() |
198 | Amazon VPC (Virtual Private Cloud) |
199 | a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define | 200 |
203 | | 204 | | usecase: manage components of VPC (Subnet, Internet Gateway, NAT Gateways, Elastic IPs, Flow Logs, Peering); control the security of your VPC by configuring the Network ACLs and Security Groups | 205 |
![]() |
208 | NACL (Network Access Control List) |
209 | an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets | 210 |
![]() |
213 | PrivateLink |
214 | provides private connectivity between VPCs, supported AWS services, and your on-premises networks without exposing your traffic to the public internet | 215 |
![]() |
218 | Client VPN |
219 | a fully-managed remote access VPN solution used by your remote workforce to securely access resources within both AWS and your on-premises network | 220 |
![]() |
223 | Transit Gateway |
224 | connects your Amazon VPCs and on-premises networks through a central hub, simplifies the network and prevents complex peering relationships, Transit Gateway acts as a highly scalable cloud router—each new connection is made only once | 225 |
Security and Compliance |
228 | ||
Shared Responcibility Model |
231 | ||
![]() |
234 | ||
Identity Access Management |
237 | ||
![]() |
240 | IAM (Identity and Access Management) |
241 | manage users access, controls, and permissions for users within the organization | 242 |
![]() |
245 | IAM MFA (Multi-Factor Authorization) |
246 | makes a user have multiple devices to prove their identity | 247 |
250 | | AWS Access Keys |
251 | Long-term credentials for individual IAM accounts | 252 |
![]() |
255 | CLI (Command Line Interface) |
256 | tool to manage AWS tools, provides a command line interface to configure and control multiple services | 257 |
260 | | 261 | | usecase: requires Access keys for users to access | 262 |
![]() |
265 | SDK (Software Development Kit) |
266 | contains tools to develop applications with AWS with different programming languages (eg JS, Java, React, Python, etc.) | 267 |
![]() |
270 | CloudShell |
271 | online command line shell environment, preloaded with tools and automatically updated | 272 |
Security Tools |
275 | ||
![]() |
278 | WAF (web access firewall) |
279 | protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define | 280 |
![]() |
283 | AWS Shield |
284 | a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS | 285 |
![]() |
288 | AWS Network Firewall |
289 | a stateful, managed, network firewall and intrusion detection and prevention service for an Amazon VPC | 290 |
![]() |
293 | AWS Firewall Manager |
294 | a security management service which allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organization | 295 |
![]() |
298 | KMS (Key Management Service) |
299 | gives you centralized control over the cryptographic keys used to protect your data | 300 |
303 | | AWS CloudHSM (Cloud Hardware Security Module) |
304 | a cryptographic service for creating and maintaining hardware security modules | 305 |
![]() |
308 | ACM (AWS Certificate Manager) |
309 | a service that allows developers to provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and internal connected resources | 310 |
![]() |
313 | Secrets Manager |
314 | encrypts at rest using encryption keys owned and stored in AWS KMS | 315 |
![]() |
318 | Artifact |
319 | contains compliance-related documents in AWS such as ISO certifications, Payment Card Industry (PCI), and Service Organization Control (SOC) reports | 320 |
![]() |
323 | AWS GuardDuty |
324 | automatically manage resource utilization based on the overall activity levels within AWS accounts, workloads, and data | 325 |
![]() |
328 | AWS Inspector |
329 | continually scans AWS workloads for software vulnerabilities and unintended network exposure | 330 |
![]() |
333 | AWS Config |
334 | helps user record configuration changes to software within EC2 instances in the AWS account and also virtual machines (VMs) or servers in the on-premises environment | 335 |
![]() |
338 | AWS Macie |
339 | a data security service that discovers sensitive data using machine learning and pattern matching, provides visibility into data security risks, and enables automated protection against those risks | 340 |
343 | | AWS SecurityHub |
344 | allows organizations to create custom insights and compliance checks specific to their environment | 345 |
![]() |
348 | Amazon Detective |
349 | helps analyze, investigate, and quickly identify the root cause of security findings or suspicious activities | 350 |
353 | | AWS Abuse |
354 | addresses many different types of potentially abusive activity such as phishing, malware, spam, and denial of service (DoS)/ distributed denial of service (DDoS) incidents | 355 |
358 | | Root User Privileges |
359 | complete access to all AWS services and resources in your AWS account | 360 |
363 | | 364 | | usecase: should only be used when absolutely necessary | 365 |
![]() |
368 | IAM Access Analyzer |
369 | gives visibility into unused access across your AWS organization and recommendations to help you remediate unused access | 370 |
Advanced Identity |
373 | ||
![]() |
376 | STS (Security Token Service) |
377 | a tool that provides temporary access to IAM roles with their own permissions | 378 |
![]() |
381 | AWS Cognito |
382 | support federated authentication, profile data sync store and AWS access token distribution without writing any backend code | 383 |
![]() |
386 | AWS Directory Services |
387 | provides multiple directory choices for customers who want to use existing Microsoft AD or Lightweight Directory Access Protocol (LDAP)–aware applications in the cloud | 388 |
![]() |
391 | IAM Identity Center |
392 | streamlines and simplifies workforce user access to applications or AWS accounts | 393 |
Cloud Technology & Services |
396 | ||
EC2 |
399 | ||
![]() |
402 | EC2 (Elastic Compute Cloud) |
403 | cloud-based cloud computation service, regional service | 404 |
407 | | 408 | | usecase: can launch a new database in AWS where the customer assumes the responsibility and management of the guest operating system, including updates and security patches | 409 |
412 | | EC2 Instance Connect |
413 | tool to connect to an EC2 instance | 414 |
417 | | EC2 Dedicated Host |
418 | a physical server with EC2 instance capacity fully dedicated to your use | 419 |
![]() |
422 | EC2 Spot Instances |
423 | instances from unused EC2 capacity in the AWS cloud | 424 |
427 | | 428 | | usecase: 90% cheaper with less performance than On-Demand Instances | 429 |
![]() |
432 | ||
435 | | EC2 Instance Storage |
436 | storage options to optimize performance vs. cost | 437 |
![]() |
440 | EBS (Elastic Block Store) |
441 | block level storage volumes to EC2 instances, multiple EBS volumes can be attached to each EC2 instance | 442 |
445 | | 446 | | usecase: rapidly changing data | 447 |
![]() |
450 | AMI (Amazon Machine Image) |
451 | creates images (templates) of AWS EC2 instances to be used as masters for instance pools | 452 |
![]() |
455 | EFS (Elastic File System) |
456 | auto-scaling file system that grows/shrinks as files are added/removed, regional service | 457 |
Load Balancing |
460 | ||
![]() |
463 | ELB (Elastic Load Balancing) |
464 | automatically balances application traffic to a different targets and appliances across multiple availabiliy zones | 465 |
![]() |
468 | Application Load Balancer |
469 | best suited for load balancing of HTTP and HTTPS traffic and provides advanced request routing targeted at the delivery of modern application architectures, including microservices and containers | 470 |
![]() |
473 | Network Load Balancer |
474 | best suited for load balancing of Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and Transport Layer Security (TLS) traffic where extreme performance is required | 475 |
![]() |
478 | Gateway Load Balancer |
479 | provides both Layer 3 gateway and Layer 4 load balancing capabilities. It is a transparent bump-in-the-wire device that does not change any part of the packet | 480 |
![]() |
483 | ASG (Auto Scaling Groups) |
484 | each group contains multiple EC2 instances and provides autoscaling based on needs, only horizontal (number of instances, not performance of instances) | 485 |
Object Storage |
488 | ||
![]() |
491 | Amazon S3 (Simple Storage Service) |
492 | object storage service, designed for 99.999999999% (11 9's) of durability and stores millions of customers data | 493 |
496 | | 497 | | usecase: Bucket Policy allows specific users access to bucket | 498 |
501 | | AWS Snow |
502 | provides computation at the edge or migration from edge devices to the cloud | 503 |
![]() |
506 | AWS Snowcone |
507 | small, portable device for local transfer and physical shipment an AWS facility | 508 |
![]() |
511 | AWS Snowball |
512 | larger, portable device can be optimized for storage or compute | 513 |
![]() |
516 | AWS Snowball Edge |
517 | an edge computing and data transfer device provided by the AWS Snowball service | 518 |
521 | | AWS Snowmobile |
522 | an exabyte-scale data transfer service that is used to move large volumes of data to Amazon Web Services | 523 |
Databases |
526 | ||
![]() |
529 | RDS (Relational Database Services) |
530 | managed relational database service for MySQL, PostgreSQL, MariaDB, Oracle BYOL, or SQL server | 531 |
534 | | 535 | | usecase: simplifies the management of time-consuming database administration tasks; Makes it easy to set up, operate, and scale a relational database | 536 |
539 | | 540 | | usecase: rapidly changing data | 541 |
![]() |
544 | ElastiCache |
545 | fast, in-memory data store for use as a database, cache, message broker | 546 |
549 | | 550 | | usecase: store the results of I/O-intensive SQL database queries to improve application performance | 551 |
554 | | 555 | | usecase: lets you deploy and run Memcached or Redis cache server nodes in the cloud | 556 |
![]() |
559 | DynamoDB |
560 | fully managed proprietary NoSQL database | 561 |
564 | | 565 | | usecase: highly scalable, used for nonrelational data | 566 |
![]() |
569 | Redshift |
570 | petabyte-scale data warehouse and exabyte-scale data lake analytics | 571 |
574 | | 575 | | usecase: best used for OLAP (online analytical processing) workloads | 576 |
![]() |
579 | EMR (Elastic MapReduce) |
580 | petabyte data processing, interactive analytics and machine learning, uses open source frameworks including Apache Spark, Apache Hive, and Presto | 581 |
![]() |
584 | Quicksight |
585 | business analytics tool | 586 |
![]() |
589 | DocumentDB |
590 | JSON document database | 591 |
![]() |
594 | Neptune |
595 | graph database for billions of relationships | 596 |
![]() |
599 | Timestream |
600 | time series database | 601 |
![]() |
604 | QLDB (Quantum Ledger Database) |
605 | ledger database that provides transparent, immutable, and cryptographically verifiable transaction log | 606 |
![]() |
609 | Managed Blockchain |
610 | allows user to build resilient Web3 application on both public and private blockchains | 611 |
![]() |
614 | Glue |
615 | serverless data integration service, allows users to discover, prepare, move, and integrate data from multiple sources | 616 |
619 | | 620 | | usecase: create workflows in ETL | 621 |
![]() |
624 | DMS (Database Migration Service) |
625 | assists in moving databases and workloads into AWS | 626 |
![]() |
629 | Aurora |
630 | A fully managed relational database engine that’s compatible with MySQL and PostgreSQL | 631 |
634 | | 635 | | usecase: 5x faster than standard MySQL and 3x faster than PostgreSQL, highly scalable | 636 |
Machine Learning |
639 | ||
![]() |
642 | Rekognition |
643 | an image recognition service that detects objects, scenes, activities, landmarks, faces, dominant colors, and image quality | 644 |
![]() |
647 | Transcribe |
648 | an automatic speech recognition service that uses machine learning models to convert audio to text | 649 |
![]() |
652 | Polly |
653 | a service that converts text into lifelike speech | 654 |
![]() |
657 | Translate |
658 | a service that translates text between languages | 659 |
![]() |
662 | Lex |
663 | a voice based virtual assitant or chat bot | 664 |
![]() |
667 | Connect |
668 | acts as a link between different Machine Learning services to to provide infrastructure | 669 |
![]() |
672 | Comprehend |
673 | sort or collect text documents by subjects or tags | 674 |
![]() |
677 | SageMaker |
678 | build, train and deploy ML models at scale using tools like notebooks, debuggers, profilers, pipelines, MLOps, and more – all in one integrated development environment (IDE) | 679 |
![]() |
682 | Forecast |
683 | a service that handles time series data and predicts future trends | 684 |
![]() |
687 | Kendra |
688 | a search service that uses Natural Language Processing and machine learning to return more complex queries | 689 |
![]() |
692 | Personalize |
693 | uses your data to generate item recommendations for your users | 694 |
![]() |
697 | Textract |
698 | extracts content and context from text data | 699 |
Other Compute Services |
702 | ||
![]() |
705 | ECS (Elastic Container Service) |
706 | allows for managed container orchestration to easliy deploy, manage, and scale containerized applications | 707 |
![]() |
710 | Lambda |
711 | serveless computing, runs code in many different languages (Node.js, Python, Go, Java, etc) and manages resources, scaling to deploy the functions | 712 |
![]() |
715 | API Gateway |
716 | fully managed service to allow developers to create, publish, maintain, monitor, and secure API's at any scale | 717 |
![]() |
720 | Batch |
721 | plans, schedules, and runs containerized batch ML, simulation, and analytics workloads across the full range of AWS compute offerings | 722 |
![]() |
725 | Lightsail |
726 | a virtual private server used to store data, run code, build web-based applications | 727 |
Other Services |
730 | ||
![]() |
733 | AWS WorkSpaces |
734 | a cloud-based virtual desktop that can act as a replacement for a traditional desktop | 735 |
![]() |
738 | AppStream 2.0 |
739 | a fully managed application streaming service that provides users instant access to their desktop applications from anywhere | 740 |
![]() |
743 | AWS IoT Core |
744 | a fully integrated feature that enables IoT developers to easily provision, onboard, and monitor Amazon Sidewalk devices through AWS IoT Core | 745 |
![]() |
748 | Elastic Transcoder |
749 | media transcoding in the cloud and designed to be a highly scalable, easy to use and a cost effective way for developers and businesses to convert (or “transcode”) media files from their source format into versions that will playback on devices like smartphones, tablets and PCs | 750 |
![]() |
753 | AppSync |
754 | allows applications to access exactly the data needed | 755 |
758 | | 759 | | usecase: create a flexible API to securely access, manipulate, and combine data from multiple sources and pay only for requests to your API and for real-time messages delivered to connected clients | 760 |
![]() |
763 | AWS Amplify |
764 | a unified development platform that provides a seamless bridge between front-end and back-end development | 765 |
![]() |
768 | AWS Application Composer |
769 | streamline and accelerate the architecture, development, and iteration of modern applications | 770 |
![]() |
773 | AWS Device Farm |
774 | an application testing service that lets you improve the quality of your web and mobile apps by testing them across an extensive range of desktop browsers and real mobile devices | 775 |
![]() |
778 | AWS Backup |
779 | a fully-managed service that makes it easy to centralize and automate data protection across AWS services, in the cloud, and on premises | 780 |
![]() |
783 | AWS DRS (Elastic Disaster Recovery) |
784 | automatically converts your servers to boot and run natively on AWS when you launch instances for drills or recovery | 785 |
![]() |
788 | AWS DataSync |
789 | a secure, online service that automates and accelerates moving data between on premises and AWS Storage services | 790 |
793 | | Cloud Migration Strategies (7R's) |
794 | refactor, replatform, repurchase, rehost, relocate, retain, and retire | 795 |
![]() |
798 | Application Discovery Service |
799 | helps plan application migration projects by automatically identifying servers, virtual machines (VMs), and network dependencies in on-premises data centers | 800 |
![]() |
803 | Application Migration Service |
804 | allows you to migrate physical, virtual, and cloud source servers to AWS for a variety of supported operating systems (OS) | 805 |
![]() |
808 | AWS Migration Evaluator |
809 | gives a clear baseline of what an organization is running at present and what its projected AWS costs will be, measured on-premises provisioning and utilization | 810 |
![]() |
813 | AWS Migration Hub |
814 | provides a single place to discover existing servers, plan migrations, and track the status of each application migration | 815 |
![]() |
818 | AWS Fault Injection Service (FIS) |
819 | a systematic and controlled process of introducing faults or errors into a system to observe its behavior under adverse conditions | 820 |
![]() |
823 | Step Functions |
824 | a visual workflow service that helps developers use AWS services to build distributed applications, automate processes, orchestrate microservices, and create data and machine learning (ML) pipelines | 825 |
![]() |
828 | AWS Ground Station |
829 | control satellite communications, process data, and scale your operations without having to worry about building or managing your own ground station infrastructure | 830 |
![]() |
833 | AWS Pinpoint |
834 | an AWS service that you can use to engage with your customers across multiple messaging channels | 835 |
838 | | AWS Partner Network (APN) |
839 | network focused on helping partners build successful AWS-based businesses to drive superb customer experiences | 840 |
843 | | APN Consulting Partners |
844 | professional services firms that help customers of all sizes design, architect, migrate, or build new applications on AWS | 845 |
848 | | APN Technology Partners |
849 | provide software solutions that are either hosted on or integrated with the AWS platform | 850 |
Billing, Pricing, & Support |
853 | ||
![]() |
856 | ||
Account Management |
859 | ||
![]() |
862 | AWS Organizations |
863 | centrally manages and governs the environment as it grows and scales AWS resources | 864 |
867 | | Consolodated Billing |
868 | one bill for multiple accounts, share the volume pricing and Reserved Instance discounts by combining the usage across all accounts in the organization | 869 |
![]() |
872 | AWS Control Tower |
873 | tool to create or manage multi-account AWS environments with best practices 874 | usecase: an easy way to establish a landing zone that implements an AWS well-architected, multi-account environment and applies the AWS best practices | 875 |
![]() |
878 | AWS RAM (Resource Access Manager) |
879 | helps securely share resources across AWS accounts, within an organization or organizational units (OUs) in AWS Organizations, and with IAM roles and IAM users for supported resource types | 880 |
![]() |
883 | AWS Service Catalog API |
884 | provides programmatic control over all end-user actions as an alternative to using the AWS Management Console | 885 |
![]() |
888 | Compute Optimizer |
889 | a service that analyzes your AWS resources' configuration and utilization metrics to provide you with rightsizing recommendations | 890 |
893 | | Pricing Calculator |
894 | estimate a bill by entering planned usages by service | 895 |
898 | | AWS Billing Dashboard |
899 | allows you to view all previous payments, access AWS credits, and consolidate bills | 900 |
903 | | Cost Allocation Tags |
904 | organizes resources, cost allocation tags to track AWS costs on a detailed level | 905 |
908 | | Cost and Usage Reports |
909 | tracks your AWS usage and provides estimated charges associated with your account | 910 |
![]() |
913 | AWS Budgets |
914 | a tool to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount | 915 |
![]() |
918 | AWS Cost Explorer |
919 | lets you visualize, understand, and manage your AWS costs and usage over time | 920 |
923 | | AWS Cost Anomaly Detection |
924 | monitors spending patterns to detect anomalous spend and provide root cause analysis | 925 |
928 | | AWS Service Quotas |
929 | enables the view and manage your quotas from a central location | 930 |
![]() |
933 | AWS Trusted Advisor |
934 | an online tool that provides you with real-time guidance to help you provision your resources following AWS best practices | 935 |
938 | | 5 categories: |
939 | Cost Optimization, Performance, Security, Fault Tolerance, Service Limits | 940 |
943 | | 944 | | usecase: capable of inspecting your AWS environment and making recommendations to lower expenditures, improve system performance and reliability, and close security gaps | 945 |
Architecting |
948 | ||
Well-Architected Framework |
951 | ||
![]() |
954 | ||
![]() |
957 | AWS Well-Architected Tool |
958 | provides a trusted framework for you to evaluate your cloud architecture and implement designs that will scale over time | 959 |
962 | | AWS Customer Carbon Footprint Tool |
963 | tool to analyze an organizations carbon footprint from its AWS service usage | 964 |
967 | | AWS CAF (Cloud Adoption Framework) |
968 | a comprehensive guide designed to help organizations effectively plan and implement their cloud adoption strategies | 969 |
972 | | Business Perspective Capabilities: |
973 | Strategy Management, Product Management, Business Insights, Portfolio Management, Strategic Partnership, Data Science, Innovation Management, Data Monetization | 974 |
![]() |
977 | ||
![]() |
980 | AWS Professional Services |
981 | shares a collection of offerings to help you achieve specific outcomes related to enterprise cloud adoption | 982 |
985 | | AWS Ecosystem |
986 | the collection of all AWS services | 987 |
![]() |
990 | AWS re:Post |
991 | a cloud knowledge service that helps builders remove technical roadblocks, accelerate innovation, and operate efficiently | 992 |
995 | | AWS Knowledge Center |
996 | FAQ for AWS users | 997 |
![]() |
1000 | AWS Managed Services |
1001 | services containing third party tools as part of the AWS Managed Services Advanced operating plan | 1002 |
Hello world!
8 | 9 | 10 |