The Technology Domain makes up 33% of the AWS Certified Cloud Practitioner Exam, making it the largest domain in terms of content. This section covers the core AWS services (out of hundreds), deploying and operating in the AWS Cloud, and AWS’s global infrastructure.
Deploying and Operating in AWS Cloud
Deploying is the process of bringing the IT resources and infrastructure into action. Operating refers to the day to day operations of the deployed resources.
There are a few different ways you can deploy and operate resources in the AWS Cloud: programmatic access, APIs, software development kits (SDKs), AWS Management Console, AWS Command Line Interface (CLI), and Infrastructure as Code (IaC).
There are also a few ways you can connect to the AWS Cloud, which could be: Virtual Private Network (VPN), AWS Direct Connect, and the Public Internet.
We went over the 3 types of Cloud Computing Deployment Models in the Cloud Concepts section of this website (for Domain 1), which are:
- Cloud
- Hybrid
- On-premises
AWS’s Global Infrastructure
- Discrete data centers are called Availability Zones (AZs)
- Two or more Availability Zones make up a Region
- Amazon CloudFront helps websites load faster by utilizing Edge Locations to cache data
- Edge Locations are physical data centers that Amazon CloudFront utilizes to cache copies of data closest to their end users
AWS Core Services
AWS has a few dozen “Core Services” that come up over and over again because of their versatility and popularity. While new services are added every few months, these “Core Services” rarely change. If you want to bookmark the page with just a list of these services, check out “AWS Services by Service Groups.”
Compute
- Amazon EC2: Elastic Compute Cloud
- Amazon Elastic Container Service: Container Orchestration
- AWS Elastic Beanstalk: Easily Deploy/Scale Apps
- AWS Elastic Load Balancing: Distribute Traffic
- AWS Lambda: Write Serverless Code
Storage
- Amazon EBS: Elastic Block Store
- Amazon EFS: Elastic File System
- Amazon S3: Simple Storage Service
- AWS Snow Family: Data Storage, Migration, and Computation
- AWS Storage Gateway: Connect On-Prem with Cloud
Database
- Amazon RDS: Relational Database
- Amazon Redshift: Data Warehouse
- AWS Databases
- AWS DynamoDB: Non-Relational Database
Networking & Content Delivery
- Amazon CloudFront: Content Delivery Network (CDN)
- Amazon Direct Connect: Dedicated network connections
- Amazon Route 53: Cloud DNS
- Amazon VPC: Virtual Private Cloud
- AWS Global Accelerator: Improve access speed
Management Tools
- Amazon CloudFormation: Automated Provisioning
- AWS CloudTrail: Track Usage
- AWS CloudWatch: App & Infrastructure Monitoring
- AWS Config: Resource configuration auditor
- AWS Trusted Advisor: Optimize Infrastructure
Security, Identity & Compliance
- Amazon GuardDuty: Continuous Threat Detection
- Amazon Inspector: Automated Security Assessment
- AWS IAM: Identity Access Management
- AWS Shared Responsibility Model
- AWS Shield: Managed DDoS Protection
- AWS Trusted Advisor: Optimize Infrastructure
- AWS WAF: Web Application Firewall
- Security 101 for AWS Cloud Practitioner Exam