Cheatsheet

AWS Cloud Practitioner

The ideas and services the Cloud Practitioner exam and everyday AWS talk are built on, plus the first CLI commands.

Core ideas

```
Region
```
A geographic area with several isolated Availability Zones. Pick by latency, law and price.
```
Availability Zone (AZ)
```
One or more data centres in a Region. Spread across two or more for high availability.
```
Edge location
```
A point of presence for CloudFront and Route 53, close to users.
```
Shared responsibility
```
AWS secures the cloud itself; you secure what you put in it (data, IAM, config).
```
Well-Architected pillars
```
Operational excellence, security, reliability, performance efficiency, cost optimization, sustainability.
```
Elasticity
```
Add and remove resources as demand changes, and pay only for what you use.

```
EC2
```
Virtual servers you manage. Choose the instance type, image and storage.
```
Lambda
```
Run code without servers, billed per request and run time.
```
ECS / EKS / Fargate
```
Run containers: ECS is AWS-native, EKS is Kubernetes, Fargate removes server management.
```
Elastic Beanstalk
```
Upload an app and AWS provisions and runs the environment.
```
Auto Scaling
```
Keep the right number of instances for the load.

```
S3
```
Object storage with very high durability. Buckets, objects, storage classes, lifecycle rules.
```
EBS
```
Block storage attached to one EC2 instance, like a disk.
```
EFS
```
Shared network file system for many instances.
```
RDS / Aurora
```
Managed relational databases (backups, patching, Multi-AZ).
```
DynamoDB
```
Managed key-value and document database that scales automatically.
```
S3 Glacier
```
Very low-cost archive storage with slower retrieval.

```
VPC
```
Your private network: subnets, route tables, gateways, security groups.
```
Security group vs NACL
```
Security group: stateful, per instance. Network ACL: stateless, per subnet.
```
Route 53
```
DNS, with health checks and routing policies.
```
CloudFront
```
A content delivery network that caches content near users.
```
ELB
```
Spreads traffic over many targets (Application, Network and Gateway load balancers).

```
IAM
```
Users, groups, roles and policies. Grant least privilege; use roles, not long-term keys.
```
Root user
```
Use it only to set up the account. Turn on MFA and lock it away.
```
KMS
```
Create and control encryption keys.
```
GuardDuty / Inspector / Macie
```
Threat detection, vulnerability scanning, sensitive-data discovery.
```
Artifact
```
Download AWS compliance reports.

```
CloudWatch
```
Metrics, logs and alarms.
```
CloudTrail
```
A record of API calls: who did what, and when.
```
AWS Config
```
Track resource configuration and check it against rules.
```
On-Demand / Reserved / Savings Plans / Spot
```
Pay as you go; commit for a discount; commit to spend; use spare capacity cheaply (can be interrupted).
```
Cost Explorer / Budgets
```
See spend over time, and get alerts before you overspend.
```
Support plans
```
Basic, Developer, Business and Enterprise: more help and faster response as the plan grows.

```
aws configure
```
Store an access key, secret, default Region and output format
```
aws sts get-caller-identity
```
Who am I? The account and identity the CLI is using
```
aws s3 ls
```
List your buckets
```
aws ec2 describe-regions --output table
```
The Regions available to you
```
aws iam list-users
```
List IAM users

Cheatsheet for the AWS Cloud Practitioner path · Deboistech · All cheatsheets