AWS思维导图

AWS
- IAM
  - What?
  - IAM
    - Identity-based
    - Resource-based
  - IAM Users and Groups
  - IAM Roles
  - Restricting
    - Permission Boundary
    - Session
  - AWS Organization
  - Policy Evaluation
  - IAM Identity
  - Amazon Cognito
  - Access Analyzer
- Computer Services
  - EC2
    - Instance types
    - Amazon Machine Image
    - Instance
    - Storage
  - ECS
    - What is containerzation
    - ECS workflow
  - Lambda
    - What is serverless computing
    - AWS Lambda in action
- EC2
  - EC2 Core Concepts
    - Amazon Image Machine
      - AMI lifecycle
      - AMI billing
    - Instaces
      - Instance types
      - Instance lifecycle
  - Security groups
  - Connecting to an EC2 Instance
  - Elastic Network Interface
  - Placement groups
    - Cluster
    - Partition
    - Spread
  - Purchase options
    - On Demand
    - Reserved instances
    - Spot instances
    - Saving plans
    - Delicated hosts
    - Delicated instances
    - Capacity Reservations
  - Storage options
    - Elastic Block Storage
    - Instance Store
    - Amazon S3
    - Amazon FSx
    - Amazon Elastic File System
  - User Data
- Virtual Private Cloud
  - VPC Components
    - Route tables
    - Subnets
    - Internet Gateway
    - NAT Gateway
    - Elastic IPs
  - VPC Security
    - Security Group
    - Network Access Control List
  - VPC Connectivity
    - VPC peering
    - AWS Transit Gateway
    - AWS PrivateLink
    - EC2 Instance Connect Endpoint
    - AWS Site-to-site VPN
    - AWS Direct Connect(DX)
    - AWS Direct Connect Gateway
  - VPC Monitoring
    - VPC Flow Logs
    - VPC Traffic Mirroring
- Route 53
  - Domain Name System
    - DNS zone
    - Domain resolution
  - Domain registration
    - Hosted zones
      - Public hosted zones
      - Private hosted zones
      - Split-View zones
    - Interoperability
  - Health Checks
    - Health check criteria
    - Calculated health checks
    - Health check using CloudWatch alarms
    - Benefits of health checks
  - Routing policies
    - Simple routing
    - Failover routing
    - Weighted routing
    - Latency routing
    - Geolocation routing
    - Geoproximity routing
    - IP based routing
    - Multi-Value routing
- Serverless computing
  - Serverless Architectures
  - AWS Lambda
    - Lambda Layers and extensions
    - Lambda functions deep dive
      - Execution environment
      - Cold starts
  - AWS Fargate
  - SAM and SAR
    - Templates
    - CLI
  - API Gateway
    - - Throtting
      - Caching
    - REST API
    - WebSocket API
    - Service integration
  - AWS Appsync
    - GraphQL APIs
- Application Integration
  - Simple Queue Service(SQS)
    - Standard Queues
    - FIFO Queues
  - Polling,Visibility Timeout,and Dead-Letter Queues
    - Visibility Timeout
    - Polling
      - Short polling
      - Long polling
    - Dead-letter queues
      - Redrive polices
  - Simple Notification Service(SNS)
    - Standard topics
    - FIFO topics
    - Subcriber endpoints
  - Publishing,Monitoring and Filtering SNS
    - Publishing messages
    - Delivering raw messages
    - Filtering messages
    - Monitoring messages
  - Fan-out Architecture using Amazon SNS and SQS
  - AWS MQ
    - Brokers in Amazon MQ
    - Cross-region data replication
  - Amazon AppFlow
    - Triggering flows
    - Private AppFlow flows
  - Event-Driver Architectures and AWS EventBridge
    - Routing events
    - EventBridge rules
  - Step-Functions
    - Workflows
    - States
    - Workflow Studio
- Containers
  - Containers and Registry
    - Virtulazation
    - Containerization
    - Container Registry
    - ECR
  - Elstic Container Service
    - How ECS works
    - Application lifecycle
  - Kubernetes and Amazon EKS
    - K8 and its components
    - EKS
    - EKS Distro
  - EKS on-Premises
    - AWS Outposts
    - EKS – Anywhere
- High Availability and Scalability
  - AWS Infrastructure and Service Availability
    - AWS Global Infrastructure
    - AWS Services
      - Global services
      - Regional services
      - Zonal services
  - Application Load Balancer
    - Target groups in ALB
      - Routing algorithms in ALB
    - Listeners in ALB
  - Network Load Balancer
    - Internet vs internal facing load balancers
    - Target groups in NLB
    - Security groups for NLBs
    - Client IP preservation
  - Gateway Load Balancer
    - Listeners and target groups
    - Gateway Load Balancer endpoint
  - Cross-Zone Load Balancing
    - ELB Availability Zones
    - Cross-zone balancing
  - ELB – Sticky Sessions
    - Sticky sessions
    - How sticky sessions work?
    - Benefits of using sticky sessions
    - Considerations for using sticky sessions
  - SSL Certificates and SSL Offload
  - Horizontal vs Vertical Scalability
    - Horizontal scalability
    - Vertical scalability
    - Choosing between horizontal and vertical scaling#
    - Scaling options and triggers
  - Launch Configuration and Templates
  - Auto-Scaling Groups
  - Scaling Policies
  - Lifecycle Hooks
    - The essence of lifecycle hooks
    - Operational dynamics of lifecycle hooks
    - Lifecycle hooks guide
    - Advantage of lifecycle hooks
- Storage
  - Types of Storage
  - S3 Bucket
  - Elastic Block Store (EBS)
    - Types of volumes
    - EBS Snapshots
  - Elastic File System (EFS)
    - File system types
    - Storage classes
- Simple Storage Service (S3)
  - Secure Objects in an S3 Bucket
    - S3 Encryption
    - S3 Glacier Vaults
    - Object Locks
  - Select and Glacier Select
  - Access Points and Object Lambda
  - S3 Lifecycle Rules
  - Object Storage Classes
    - S3 Outposts
    - S3 Glacier Deep Archive
    - S3 Glacier Flexible Retrieval
    - S3 Glacier Instant Retrieval
    - S3 One Zone-IA
    - S3 Standard-IA
    - S3 Express One Zone
    - S3 Intelligent-Tiering
    - S3 Standard
  - S3 Events and Batch Operations
    - S3 Event Notifications
  - Presigned URLs
  - Performance Optimization
    - Amazon CRTs
    - S3 Transfer Acceleration
    - Multipart uploads
  - S3 Replication
    - S3 Batch Replication
    - Bi-directional Replication
    - SRR
    - CRR
  - Object Versioning
  - Static Webiste Hosting
  - S3 Access Management
    - Access Grants
    - Block Public Access Setting
    - ACLs
    - Resource based Policies
- File Storage and Transfer
  - AWS Backup
    - Benefits
    - Use Cases
    - Core Components
  - Amazon Stroage Gateway
    - Benefits
    - Use Cases
    - Gateway Types
  - Amazon FSx
    - Benefits
    - Use Cases
    - File Systems
- AWS Databases
  - Relational Databases
    - Amazon RDS
    - Amazon Aurora DB
  - NoSQL
    - Ledger Database
      - Amazon Quantum Ledger Database
    - Wide-column Database
      - Amazon Keyspaces (for Apache Cassandra)
    - Document Database
      - Amazon DocumentDB
    - Graph Database
      - Amazon Neptune
    - Key-value Database
      - Amazon DynamoDB
  - In-memory Database
    - Amazon ElastiCache
    - Amazon MemoryDB for Redis
- Migration and Transfer
  - AWS Application Migration Service
  - AWS Transfer Family
  - AWS Snow Family
    - Snowmobile
    - Snowball Edge
    - Snowball
    - Snowcone
  - AWS Application Discovery Service
    - Agent-based discovery
    - Agentless discovery
  - AWS Migration Hub
  - AWS DataSync
  - AWS Database Migration Service
- Security and Compliance
  - AWS Audit Manager and Artifact
  - AWS CloudHSM
  - AWS Certificate Manager (ACM)
  - AWS Resource Access Manager (AWS RAM)
  - AWS Shield
  - AWS Network Firewall
  - Amazon Inspector
  - Amazon GuardDuty
  - AWS Firewall Manager
  - AWS Security Hub
  - Amazon Macie
  - AWS Secrets Manager
  - AWS Directory Service
  - Amazon Detective
  - Web Application Firewall
  - Encrypting S3 and EBS Volumes using KMS
  - AWS Key Management Service (AWS KMS)
- Deployment services
  - AWS Elastic Beanstalk
    - Pricing
    - Deployment methods
    - Environments
  - AWS App Runner
    - Pricing
    - Security
    - Autoscaling
- AWS CloudFormation
  - Stacks
  - Templates
  - Change Sets
  - Stack policies
  - Helper scripts
    - cfn-init
    - cfn-signal
    - cfn-hup
    - cfn-get-metadata
- Machine Learning
  - Amazon Forecast
    - Pricing
    - Working
    - Core components
  - Amazon Lex
    - Working Core components
  - Amazon Kendra
    - Working
    - Core components
  - Amazon Fraud Detector
    - Working
    - Core components
  - Amazon SageMaker
    - Instances and services
    - Core components
  - Amazon Translate
    - Customize translations
    - Batch translation
    - Real-time translation
  - Amazon Polly
    - Use cases
    - How Amazon Polly works
    - Primary features
  - Amazon Transcribe
    - Other Amazon Transcribe services
    - Customize language models
    - Batch transcription
    - Streaming transcription
  - Amazon Rekognition
    - How it works
    - Video analysis
    - Image analysis
  - Amazon Textract
    - Best practices
    - How Amazon Textract works
    - Primary features
  - Amazon Comprehend
- Content Delivery and Optimization
  - Global Accelerator
    - Benefits of AWS Global Accelerator
    - Comparison with CloudFront
    - Anycast IP Addresses and Edge Locations
      - Transit over AWS global network
      - Optimizing network connectivity
  - CloudFront
    - Functions at Edge
      - CloudFront Functions vs. Lambda@Edge
        
        Use cases for CloudFront Functions
        
        Use cases for Lambda@Edge
      - Use case scenarios for functions at edge
      - Execution workflow
        
        Execution limits on CloudFront Functions
        
        Execution limits on Lambda@Edge
      - CloudFront Functions
        
        Limitations of CloudFront Functions
      - Lambda@Edge
        
        Limitations of Lambda@Edge
    - Securing Origins in CloudFront
      - CloudFront pricing model
      - Securing other origins
      - Securing S3 origins
        
        Origin Access Control
        
        Origin Access Identity
      - Security measures and access restrictions
      - Origins and origin groups
    - Secured Sockets Layer
      - SSL configuration for viewer and origin
      - SNI and compatibility issues
      - Evolution of SSL and SNI
      - HTTPS vs. HTTP handling
      - Amazon Certificate Manager
        
        Custom domain Names and SSL certificates
        
        Default domain name and SSL certificate
    - TTL and Invalidations
      - Enhancing cache management with versioning
      - Cache Invalidation
      - Time-to-Live (TTL)
    - CloudFront Architecture
      - How does CloudFront work?
      - Integration and limitations
      - CloudFront behaviors
      - Regional edge caches
      - Edge locations
      - Distributions
      - Origins
- Analytics
  - Amazon OpenSearch
    - ElasticSearch
  - AWS Data Exchange
    - AWS Marketplace Data Products
    - Data Grants
  - AWS Data Pipeline
  - AWS MSK
  - Amazon Kinesis
    - Amazon Kinesis Data Analytics
    - Amazon Kinesis Video Streams
    - Amazon Data Firehose
    - Amazon Kinesis Data Streams
  - Amazon QuickSight
  - AWS Athena
  - AWS Lake Formation
    - Integration with AWS Glue
  - AWS Glue
    - Glue ETL Jobs
    - AWS Glue Crawler
  - Amazon Redshift
  - AWS EMR
    - Data processing frameworks
- Monitoring and Auditing
  - AWS CloudWatch
    - CloudWatch agent
    - CloudWatch events
    - CloudWatch alarms
    - CloudWatch statistics
    - CloudWatch Logs
    - CloudWatch metrics
  - AWS CloudTrail
    - CloudTrail Insights
    - CloudTrail trails
    - CloudTrail Lake
    - CloudTrail Event History
  - AWS Config
    - Conformance packs
    - Remediations
    - Config rules
    - Configuration recorder
- Management and Governance
  - AWS Control Tower
  - AWS License Manager
  - AWS System Manager
  - AWS Health Dashboard
  - AWS Compute Optimizer
  - Amazon Managed Grafana
  - Amazon Managed Service for Prometheus
  - AWS Well-Architected Tool
  - AWS Trusted Advisor
- AWS Billing and Cost Management
  - Cost Explorer
  - Budgets
  - Savings Plans
  - Cost Anomaly Detection

发表回复 取消回复

发表回复取消回复