AWS Services
S/no | SERVICE | DESCRIPTION |
1 | Application Load Balancer | It supports advanced routing approaches (Headers, Query Params, Path and Host Based) |
2 | Vertical scaling | Deploying application/database to a bigger instance |
3 | EC2 Dedicated Host | it recommended for server-bound software licenses like Windows Server, SQL Server |
4 | Spot Instances | A customer has a fault-tolerant (restartable) batch program that can be run anytime during the next month. He would want the least expensive solution. |
5 | Reserved Instances | A customer needs a few EC2 instances for a period of 1 year. |
6 | On-Demand Instances | A customer has an immediate high priority mission-critical batch program to run. |
7 | Amazon CloudWatch | this service plays an important role in implementing Auto Scaling in AWS and it connects monitoring and operational data in the form of logs, metrics and events |
8 | AWS Lambda | It is Serverless Service in AWS |
9 | Serverless services | You focus on code, don’t worry about infrastructure and pay for use. |
10 | S3 | It can be auto scale upto Unlimited Storage |
11 | Intelligent-Tiering | This is used when you are not sure about access patterns of your data but you want to keep your costs at a minimum. |
12 | Glacier Deep Archieve | It is a storage service and it is recommend for archive data that is rarely accessed and needs to be retrieved within 24 hours |
13 | S3- with Intelligent tieirng | Amount of storage in GB, monthly tiering fee and Data transfer fee. |
14 | Instance Store | It is an Ephemeral (Temporary) Storage. |
15 | Hard Disk Drive | Large Streaming or Big Data workloads |
16 | Amazon EBS | It is not a file storage Service in AWS |
17 | Amazon EFS | It is a File Storage Service in AWS |
18 | Amazon FSx windows File Servers | It is a File Storage Service in AWS |
19 | Amazon FSx for Lustre | It is recommonded for high-performance shared file storage |
20 | AWS Storage Gateway | It is hybrid Storage (cloud + on-premise) solution |
21 | AWS Storage Tape Gateway | It is recommonded for moving tape backups to the cloud |
22 | AWS Storage File Gateway | It is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. |
23 | AWS Storage Volume Gateway | It stores and manages on-premises data in Amazon S3 on your behalf and operates in either cache mode or stored mode. |
24 | Amazon RedShift | It is a petabyte-scale distributed Data ware house solution in AWS |
25 | Amazon RDS | It is a managed Relational database Service for OLTP use cases |
26 | Amazon DynamoDB | It is recommonded for scaling to terabytes of data with millisecond responses for millions of transactions per second |
27 | Custom Installation of Database on EC2 Instances | It is recommonded to SSH into database EC2 instances and setup custom software |
28 | Amazon RDS Supports | Amazon Aurora, Oracle Database and MicroSoft SQL Server |
29 | ElastiCache MemCached | It is recommonded to speed up dynamic database-driven websites by caching data and objects in the memory |
30 | Elasticache Redis | It makes it easy to set up, manage, and scale a distributed in-memory data store or cache environment in the cloud. |
31 | NAT Gateway | It allow instances in a private subnet to download software updates and security patches while denying inbound traffic from internet |
32 | Interner Gateway | It enables Internet Connection for Subnets |
33 | Direct Connect | It enables you to establish a dedicated network connection between your network and one of the AWS Direct Connect locations. |
34 | Virtual Private Cloud (VPC) | It is used to create your own private network in AWS |
35 | Virtual Gateway | It provides edge routing for AWS managed VPN connections and AWS Direct Connect connections. |
36 | VPC Peering Connection | It helps to connect a VPC in one AWS account to privately communicate with a VPC in another AWS account |
37 | VPC Flow Log Connection | It is useful to Debug network connection problems within a VPC |
38 | Separate VPC Subnets | It is used to separate public resources from private resources inside a VPC |
39 | Direct Connect Connection | It enables you to establish a dedicated network connection between your network and one of the AWS Direct Connect locations. |
40 | VPN Connection | It enables you to securely access your AWS resources or your on-premises network. |
41 | NAT Instance | It allows instances in a private subnet to connect to the internet or other AWS services. |
42 | AWS VPN | It is a fully-managed remote access VPN solution used by your remote workforce to securely access resources within both AWS and your on-premises network. |
43 | IAM roles | It is a temporary identity that automatically expires after a set time period and these donot have credentials attached with it. |
44 | AWS Direct Connect | It is a private dedicated connection from AWS to a customer corporate data centre. |
45 | IAM Users | It is a resource in IAM that has associated credentials and permissions. |
46 | IAM Groups | It is an identity that specifies a collection of IAM users. |
47 | AWS KMS | It is used to create and manage cryptographic keys in AWS |
48 | AWS KMS, AWS CloudHSM | These two services are aws encryption key management services. |
49 | AWS CloudTrail | AWS service track changes(API Calls) made to your AWS Services/Resources. |
50 | AWS Cryptographic Service | It provides visibility into user activity by recording actions taken on your account. |
51 | AWS CloudHSM | It is a dedicated single-tenant Hardware Security Module (HSM) for regulatory Compliance |
52 | AWS Shield | It can protect you from Distributed Denial of Service (DDoS) attacks |
53 | AWS WAF | It can protect your web applications from OWASP Top 10 exploits |
54 | Amazon Macie | It can automatically classify, and protect sensitive data in Amazon S3 |
55 | Amazon GaurdDuty | It can continuously monitor your AWS environment for suspicious activity (Intelligent Threat Detection) |
56 | Amazon Detective | It can investigate and quickly identify the root cause of potential security issues in AWS |
57 | AWS Config | This service enables you to assess, audit and evaluate the configuration of your AWS resources |
58 | Ordering of messages | In SQS FIFO queue scenario we use the ordering of messages |
59 | AWS SNS | It is used to setup push notifications to Apple, Android and Windows devices |
60 | AWS SQS | Amazon SQS is a message queue service used by distributed applications to exchange messages through a polling model, and can be used to decouple sending and receiving components. |
61 | AWS Kinesis | It is a service that gives businesses and web application developers an easy and cost effective way to distribute content with low latency and high data transfer speeds. |
62 | Amazon CloudFront | this service enables you to deliver content directly from AWS Edge Locations. |
63 | AWS Web Application Firewall | The AWS Service integrates with Amazon CloudFront to protect from SQL injection and Cross-Site Scripting attacks |
64 | Domain Registrar | It is a functionality that Amazon Route 53 offers |
65 | DNS | It is a functionality that Amazon Route 53 offers |
66 | Content Caching | It is NOT a functionality that Amazon Route 53 offers |
67 | Geoproximity | This routing policy will route to the nearest resource by geographic distance to your user |
68 | GeoLocation | that serve your traffic based on the geographic location of your users, meaning the location that DNS queries originate from. |
69 | Characteristics of Streaming Data | Continuously generated, small pieces of data |
70 | Kinesis FireHose | This kinesis service helps with a data injestion |
71 | Kinesis Data Streams | It is a serverless streaming data service that makes it easy to capture, process, and store data streams at any scale. |
72 | Kinesis Analytics | It enables you to quickly author SQL code that continuously reads, processes, and stores data in near real time. |
73 | AWS Code Commit | This Service provides source version control |
74 | AWS Code Build | It is a fully managed continuous integration service that compiles source code, runs tests, and produces ready-to-deploy software packages. |
75 | AWS Code Deploy | It is a service that automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises. |
76 | AWS CloudFormation | It is the Infrastructure provisioning (Infrastructure as Code- IAAC) tool provided by AWS In AWS CloudFormation – 1) Resource configuration is defined in a JSON or YAML template 2) The only mandatory element in a template is resources 3) You pay for the resources created by CloudFormation |
77 | AWS WeLL Architected Framework | There are 5 pillars in AWS Well-Architected Framework 1) Security 2)Operational Excellence 3) Cost Optimization 4)Reliability 5) Performance efficiency |
78 | AWS VPC Flow Logs | It can be used to troubleshoot network connectivity and security issues |
79 | AWS IAM | This service is not an encryption key management service |
80 | Security and Compliance in AWS | Shared responsibility between AWS and Customer |
81 | AWS Cloud (Overall Security) | It manages the security in the cloud and you are the responsible for security in the cloud. |
82 | Amazon SQS Amazon Kinesis Amazon SNS |
All of the AWS Services help in creating loosely coupled architechture |
83 | Infrastructure Layer | It is responsible for the Shared Responsibility Model, for Amazon EC2. |
84 | Patch Management Configuration Management Awareness & Training |
All of these are Shared Controls in the Shared Responsibility Model. |
85 | AWS SDKs (Software Development Kits) | This can be used to write code and Integrate AWS services into Existing Applications |
86 | AWS management Console | It is a web application that comprises and refers to a broad collection of service consoles for managing AWS resources. |
87 | AWS CLI (Command Line Interface) | It is a unified tool to manage your AWS services. |
88 | Enterprise | This support plans gives you access to the Concierge Support Team and a Designated Technical Account Manager (TAM) |