AWS Certified Cloud Practitioner CLF-C02 Flash Cards
Study online at https://quizlet.com/_bmn0tt
A change or a failure in one component should not cascade to other components. Loose coupling
A gateway that enables your Amazon EC2 instances in the public subnet to connect to the
Internet Gateway
public Internet.
A gateway that enables your EC2 instances in the private subnet to connect to the public
NAT Gateway
Internet.
A security management tool to configure your AWS WAF rules across your accounts. AWS Firewall Manager
Compliance-related documents in AWS such as Service Organization Controls (SOC) reports AWS Artifact
An IAM identity that uses access keys to manage cloud resources via AWS CLI. IAM User
A role that grants temporary access to your AWS resources. IAM Role
Manages the common access permissions to a large number of IAM users in AWS. IAM Group
A resource-based policy that you can use to grant access permissions to your bucket and the
Bucket Policy
objects in it.
Provides AWS credentials to grant your users access to other AWS services. Amazon Cognito Identity Pools
A service that discovers, classifies, and protects sensitive data such as personally identifiable
Amazon Macie
information (PII) or intellectual property.
A threat detection service that continuously monitors for malicious activity to protect your AWS
Amazon GuardDuty
account.
An authentication method that prevents unauthorized deletion of Amazon S3 objects. Multi-Factor Authentication (MFA)
It acts as a virtual firewall in AWS that controls the traffic at the EC2 instance level. Security Group
An automated security assessment service to improve the security and compliance of your
Amazon Inspector
applications.
An AWS global network that improves availability of deployed applications on AWS using an
AWS Global Accelerator
anycast static IP address.
A data transport service that securely moves petabyte-scale data into and out of the AWS
AWS Snowball
Cloud.
A service that allows you to continuously monitor and log account activities such as the user
AWS CloudTrail
actions made from the AWS Management Console and AWS SDKs.
A source control service that allows you to host Git-based repositories. AWS CodeCommit
A type of an EC2 instance that allows you to use your existing server-bound software licenses. Dedicated Host
A highly available and scalable cloud DNS web service in AWS. Amazon Route 53
Automatically scale the capacity of an AWS cloud resource based on the incoming traffic to
AWS Auto Scaling
improve availability and reduce failures.
Automatically transfer your infrequently accessed data in your S3 bucket to a more cost-ef-
S3 Lifecycle Policy
fective storage class.
A designated technical point of contact that will maintain an operationally healthy AWS
Technical Account Manager (TAM)
environment.
A tool that inspects your AWS environment and makes recommendations that follows AWS
AWS Trusted Advisor
best practices.
Set coverage targets and receive alerts when your utilization drops. AWS Budgets
A type of Reserved Instance that allows you to change its instance family, instance type,
Convertible RI
platform, scope, or tenancy.
1/5
, AWS Certified Cloud Practitioner CLF-C02 Flash Cards
Study online at https://quizlet.com/_bmn0tt
Forecast future costs and usage of your AWS resources based on your past consumption. AWS Cost Explorer
Categorize and track AWS costs on a detailed level. Cost allocation tags
The most cost-effective option when you purchase a Reserved Instance for a 1-year term. All Upfront
This service simplifies setting up, managing, and scaling distributed in-memory cache setups
in the AWS Cloud. It eliminates the complexity of deploying and operating a distributed cache Amazon ElastiCache
system and offers a high-performance, resizable, cost-effective, and in-memory cache.
A migration and replication service that is managed and designed to help you securely and
quickly move your database and analytics workloads to AWS with minimal downtime and no AWS Database Migration Service (AWS DMS)
data loss.
This network service has the ability to create a secure link between your on-premises data
center or office location and the AWS environment via a 1 gigabit or 10 gigabit Ethernet
AWS Direct Connect
fiber-optic connection. This dedicated connection offers high-speed performance with low
latency and avoids any involvement of internet service providers along the network path.
A Machine Learning service that allows you to add image and video analysis features to your
Amazon Rekognition
applications.
This service simplifies the analysis of distributed application behavior for developers by
AWS X-Ray
equipping them with profiling capabilities, exception collection, and request tracing.
This feature refers to data associated with an Amazon Elastic Compute Cloud (Amazon EC2)
instance that can be utilized by applications for the configuration or management of the Instance metadata
instance while it is running.
It is a web service that accelerates the delivery of your dynamic and static web content,
Amazon CloudFront
including image files, .js, .css, and .html files, to users.
A service that allows you to define and deploy AWS resources using infrastructure-as-a-code
AWS CloudFormation
(IaC).
This service enables you to manage, create, and control cryptographic keys for AWS services
AWS Key Management Service (AWS KMS)
and your applications.
It's a serverless, fully managed NoSQL database for key-value data that can handle high-per-
Amazon DynamoDB
formance applications at any scale.
It is a tool that assists customers in estimating the overall expenses associated with operating
AWS Total Cost of Ownership (TCO) Calculator
their applications in the AWS Cloud.
A purchasing option that allows you to utilize unused EC2 capacity in the AWS cloud with up
Spot Instance
to a 90% discount compared to On-Demand prices.
It is an account management service that lets you consolidate multiple AWS accounts into an
organization that you create and centrally manage. Accounts are grouped into logical groups AWS Organizations
called organizational units (OUs).
This service is capable of providing a cost-effective solution for storing your data over
extended periods ranging from months to decades. It offers a three-tier retrieval system that
allows you to retrieve your data in as little as a few minutes for urgent needs (expedited Amazon Glacier
retrieval), a few hours for non-urgent needs (standard retrieval), or several hours for large
data archives (bulk retrieval).
A platform where you can sell your catalog of custom AMIs in AWS. AWS Marketplace
This Amazon S3 feature enables you to upload a single object as a set of parts, where each
part represents a contiguous portion of the object's data. These parts can be uploaded Multipart Upload
independently and in any order.
2/5
Study online at https://quizlet.com/_bmn0tt
A change or a failure in one component should not cascade to other components. Loose coupling
A gateway that enables your Amazon EC2 instances in the public subnet to connect to the
Internet Gateway
public Internet.
A gateway that enables your EC2 instances in the private subnet to connect to the public
NAT Gateway
Internet.
A security management tool to configure your AWS WAF rules across your accounts. AWS Firewall Manager
Compliance-related documents in AWS such as Service Organization Controls (SOC) reports AWS Artifact
An IAM identity that uses access keys to manage cloud resources via AWS CLI. IAM User
A role that grants temporary access to your AWS resources. IAM Role
Manages the common access permissions to a large number of IAM users in AWS. IAM Group
A resource-based policy that you can use to grant access permissions to your bucket and the
Bucket Policy
objects in it.
Provides AWS credentials to grant your users access to other AWS services. Amazon Cognito Identity Pools
A service that discovers, classifies, and protects sensitive data such as personally identifiable
Amazon Macie
information (PII) or intellectual property.
A threat detection service that continuously monitors for malicious activity to protect your AWS
Amazon GuardDuty
account.
An authentication method that prevents unauthorized deletion of Amazon S3 objects. Multi-Factor Authentication (MFA)
It acts as a virtual firewall in AWS that controls the traffic at the EC2 instance level. Security Group
An automated security assessment service to improve the security and compliance of your
Amazon Inspector
applications.
An AWS global network that improves availability of deployed applications on AWS using an
AWS Global Accelerator
anycast static IP address.
A data transport service that securely moves petabyte-scale data into and out of the AWS
AWS Snowball
Cloud.
A service that allows you to continuously monitor and log account activities such as the user
AWS CloudTrail
actions made from the AWS Management Console and AWS SDKs.
A source control service that allows you to host Git-based repositories. AWS CodeCommit
A type of an EC2 instance that allows you to use your existing server-bound software licenses. Dedicated Host
A highly available and scalable cloud DNS web service in AWS. Amazon Route 53
Automatically scale the capacity of an AWS cloud resource based on the incoming traffic to
AWS Auto Scaling
improve availability and reduce failures.
Automatically transfer your infrequently accessed data in your S3 bucket to a more cost-ef-
S3 Lifecycle Policy
fective storage class.
A designated technical point of contact that will maintain an operationally healthy AWS
Technical Account Manager (TAM)
environment.
A tool that inspects your AWS environment and makes recommendations that follows AWS
AWS Trusted Advisor
best practices.
Set coverage targets and receive alerts when your utilization drops. AWS Budgets
A type of Reserved Instance that allows you to change its instance family, instance type,
Convertible RI
platform, scope, or tenancy.
1/5
, AWS Certified Cloud Practitioner CLF-C02 Flash Cards
Study online at https://quizlet.com/_bmn0tt
Forecast future costs and usage of your AWS resources based on your past consumption. AWS Cost Explorer
Categorize and track AWS costs on a detailed level. Cost allocation tags
The most cost-effective option when you purchase a Reserved Instance for a 1-year term. All Upfront
This service simplifies setting up, managing, and scaling distributed in-memory cache setups
in the AWS Cloud. It eliminates the complexity of deploying and operating a distributed cache Amazon ElastiCache
system and offers a high-performance, resizable, cost-effective, and in-memory cache.
A migration and replication service that is managed and designed to help you securely and
quickly move your database and analytics workloads to AWS with minimal downtime and no AWS Database Migration Service (AWS DMS)
data loss.
This network service has the ability to create a secure link between your on-premises data
center or office location and the AWS environment via a 1 gigabit or 10 gigabit Ethernet
AWS Direct Connect
fiber-optic connection. This dedicated connection offers high-speed performance with low
latency and avoids any involvement of internet service providers along the network path.
A Machine Learning service that allows you to add image and video analysis features to your
Amazon Rekognition
applications.
This service simplifies the analysis of distributed application behavior for developers by
AWS X-Ray
equipping them with profiling capabilities, exception collection, and request tracing.
This feature refers to data associated with an Amazon Elastic Compute Cloud (Amazon EC2)
instance that can be utilized by applications for the configuration or management of the Instance metadata
instance while it is running.
It is a web service that accelerates the delivery of your dynamic and static web content,
Amazon CloudFront
including image files, .js, .css, and .html files, to users.
A service that allows you to define and deploy AWS resources using infrastructure-as-a-code
AWS CloudFormation
(IaC).
This service enables you to manage, create, and control cryptographic keys for AWS services
AWS Key Management Service (AWS KMS)
and your applications.
It's a serverless, fully managed NoSQL database for key-value data that can handle high-per-
Amazon DynamoDB
formance applications at any scale.
It is a tool that assists customers in estimating the overall expenses associated with operating
AWS Total Cost of Ownership (TCO) Calculator
their applications in the AWS Cloud.
A purchasing option that allows you to utilize unused EC2 capacity in the AWS cloud with up
Spot Instance
to a 90% discount compared to On-Demand prices.
It is an account management service that lets you consolidate multiple AWS accounts into an
organization that you create and centrally manage. Accounts are grouped into logical groups AWS Organizations
called organizational units (OUs).
This service is capable of providing a cost-effective solution for storing your data over
extended periods ranging from months to decades. It offers a three-tier retrieval system that
allows you to retrieve your data in as little as a few minutes for urgent needs (expedited Amazon Glacier
retrieval), a few hours for non-urgent needs (standard retrieval), or several hours for large
data archives (bulk retrieval).
A platform where you can sell your catalog of custom AMIs in AWS. AWS Marketplace
This Amazon S3 feature enables you to upload a single object as a set of parts, where each
part represents a contiguous portion of the object's data. These parts can be uploaded Multipart Upload
independently and in any order.
2/5
