IT certification glossary

A content delivery network that caches content at edge locations close to users, so repeated requests do not travel back to the origin Region.

Block storage volume attached to a single EC2 instance, like a virtual hard disk.

Ingests and processes continuous streams of records at scale, making them available for processing within seconds.

Pub/sub notification service. One published message fans out to every subscriber.

Fully managed message queue. One consumer takes each message off the queue and processes it.

Records API activity in an account, including which identity made each call, when, and from which IP address.

Visualizes and analyzes historical cost and usage, broken down by service, account, or tag, and forecasts future spend.

A serverless compute engine for containers: ECS or EKS place the work, and Fargate runs it without the customer managing instances.

Controls who is authenticated in an AWS account and what they are authorized to do. Permissions are granted through policies attached to users, groups, and roles.

Requires a second piece of evidence in addition to a password, so a stolen password alone cannot sign in.

AWS commitment on availability for a service, with credits owed if it is not met.

A logically isolated virtual network inside AWS where the customer defines subnets, route tables, and gateways.