Hey,

In this quick post, we will go through all important concepts & Services related to AWS Cloud. This post is prepared collectively with Concepts, Scenarios & required solutions, so it will help you to prepare for AWS Certifications (AWS Cloud Practitioner & AWS Certified Solutions Architect etc.) and Interviews.

Let's Start👇

Define Cloud Computing?

With the utilization of shared resources & infrastructure, the delivery of computing services over internet is called Cloud Computing.

Financial Benefit of Migrating Infra from On-Premises to AWS?

A key financial benefit of migrating systems hosted on your on-premises data center to AWS are below:

- Replaces upfront capital expenses (CAPEX) with low variable operational expenses (OPEX).

- Reduce the Total Cost of Ownership (TCO)

Important Cloud Architectures Principles?

4 cloud architectures design principle in AWS

1. Design for failure.

2. Decouple your components

3. Implement elasticity

4. Think parallel

Why to use multiple Availability Zones?

A cloud architecture for mission-critical workloads in AWS which must be highly-available.

What is Loose Coupling?

A change or a failure in one component should not cascade to other components.

Why we use Internet Gateway?

To enable your Amazon EC2 instances in the public subnet to connect to the public Internet.

Why we use NAT Gateway?

To enable your EC2 instances in the private subnet to connect to the public Internet.

What is AWS Firewall Manager?

A security management tool to configure your AWS WAF rules across your accounts.

When we use AWS Artifact?

Whenever we need to download the compliance-related documents in AWS such as Service Organization Controls (SOC) reports

How we can improve the security of IAM users?

- Enable Multi-Factor Authentication (MFA)

- Configure a strong password policy

What is IAM User in AWS?

An IAM identity that uses access keys to manage cloud resources via AWS CLI.

What is IAM Group in AWS?

Grant temporary access to your AWS resources. IAM Role Apply and easily manage the common access permissions to a large number of IAM users in AWS.

How we can Grant the required permissions to access your Amazon S3 resources.

We can define permissions through:

- Bucket Policy

- User Policy

When we use Amazon Cognito Identity Pool?

You must provide temporary AWS credentials for users who have authenticated via their social media logins as well as for guest users who do not require any authentication.

Why we use IAM Policy Simulator?

To evaluate the newly created IAM policies.

What is Amazon Macie?

A service that discovers, classifies, and protects sensitive data such as personally identifiable information (PII) or intellectual property.

What is Amazon GuardDuty?

A threat detection service that continuously monitors for malicious activity to protect your AWS account.

Why we use Network Access Control List (NACL)?

To control the traffic going in and out of their VPC subnets.

Why we use Multi-Factor Authentication (MFA)?

Prevent unauthorized deletion of Amazon S3 objects.

What is Security Group?

Acts as a virtual firewall in AWS that controls the traffic at the EC2 instance level?

What is Amazon Inspector?

An automated security assessment service to improve the security and compliance of your applications.

When we use AWS Global Accelerator?

When a company needs to use the AWS global network to improve availability of deployed applications on AWS using an anycast static IP address.

When we use AWS Snowball Edge?

You need to securely transfer hundreds of petabytes of data into and out of the AWS Cloud.

What is Dedicated Host?

A type of an EC2 instance that allows you to use your existing server-bound software licenses.

What is AWS CloudTrail?

A service that allows you to continuously monitor and log account activities such as the user actions made from the AWS Management Console and AWS SDKs.

What is Amazon Route 53?

A highly available and scalable cloud DNS web service in AWS.

What is Amazon ElastiCache?

Store the results of I/O-intensive SQL database queries to improve the application performance.

A combination of AWS services that allows you to serve the static files with lowest possible latency?

- Amazon S3

- Amazon CloudFront

What is AWS Auto Scaling?

Automatically scale the capacity of an AWS cloud resource based on the incoming traffic to improve availability and reduce failures

What is AWS Database Migration Service (AWS DMS)?

To migrate an on-premises MySQL database to Amazon RDS.

What S3 Lifecycle Policy do?

Automatically transfer your infrequently accessed data in your S3 bucket to a more cost-effective storage class.

Why we use Multipart Upload API?

To upload a single object as a set of parts to improve throughput and have a quicker recovery from any network issues.

What is AWS Direct Connect?

To establish a dedicated connection between their on-premises network and their AWS VPC.

What is Amazon Rekognition?

A Machine Learning service that allows you to add a visual analysis feature to your applications.

What is AWS CodeCommit?

A source control service that allows you to host Git-based repositories.

What is AWS X-Ray?

A service that can trace user requests in your application.

When we use Instance metadata?

A company needs to retrieve the instance ID, public keys, and public IP address of their EC2 instance.

When we use Amazon CloudFront?

When we need to speed up the content delivery of static assets to your customers around the globe

Why we use AWS CloudFormation?

To Create and deploy infrastructure-as-code templates

What is AWS Key Management Service (AWS KMS)?

When we have to encrypt the log data that is stored and managed by AWS CloudTrail.

What is Amazon DynamoDB?

A database service that can be used to store JSON documents.

Who is Technical Account Manager (TAM) in AWS?

A designated technical point of contact that will maintain an operationally healthy AWS environment.

What is AWS Trusted Advisor?

A tool that inspects your AWS environment and makes recommendations that follows AWS best practices.

What is AWS Pricing Calculator?

To estimate the costs of moving their application to AWS.

What is AWS Budgets?

Set coverage targets and receive alerts when your utilization drops.

What is Convertible RI?

A type of Reserved Instance that allows you to change its instance family, instance type, platform, scope, or tenancy.

What is Spot Instance?

Take advantage of unused EC2 capacity in the AWS Cloud and provides up to 90% discount.

What is AWS Organizations?

To centrally manage policies and consolidate billing across multiple AWS accounts.

What is Amazon Glacier?

The most cost-efficient storage option for retaining database backups that allows occasional data retrieval in minutes.

Why we use AWS Cost Explorer?

Forecast future costs and usage of your AWS resources based on your past consumption.

What is Cost allocation tags?

Categorize and track AWS costs on a detailed level.

What to do when, A company launched a new VPC which is way beyond the default service limit?

Request a service limit increase in AWS Support Center

What is All Upfront option in AWS?

The most cost-effective option when you purchase a Reserved Instance for a 1-year term.

AWS - Quick Cheat Sheet (Concepts, Scenarios & Solutions) - AWS Interview based guide