Ada ke cover? Cari sini.

users, groups, roles, policies, least privilege, MFA, principals, identity federation

temporary credentials, AssumeRole, AssumeRoleWithSAML, AssumeRoleWithWebIdentity, GetSessionToken, GetFederationToken, cross-account, role chaining

Active Directory, Managed Microsoft AD, AD Connector, Simple AD, LDAP, Kerberos, Group Policy, on-premises AD

SSO, single sign-on, multiple accounts, federation, SAML 2.0, Active Directory, SaaS integration, EC2 Windows

IAM Access Analyzer, external access, unused access, zone of trust, public access, cross-account exposure, resource shared external, automated reasoning

AWS RAM, Resource Access Manager, share resources, VPC sharing, shared subnets, Transit Gateway sharing, Route 53 Resolver rules, cross-account sharing

IAM Roles Anywhere, on-premises, X.509 certificate, trust anchor, hybrid, temporary credentials, no access keys, non-AWS workload

AWS Artifact, compliance reports, SOC, ISO 27001, PCI DSS, FedRAMP, BAA, HIPAA

User Pools, Identity Pools, OAuth, JWT, federated identity, MFA, STS, temp credentials

cross-account sharing, shared subnets, Transit Gateway sharing, no resource duplication, AWS Organizations, centralized resources

multi-account, SCPs, guardrails, Control Tower, management account, OU, management account exemption, SCP cannot grant

stateful, instance-level, allow only, custom SG default, inbound denied, outbound allowed

stateless, subnet-level, allow & deny, numbered rules, explicit both ways, ephemeral ports, explicit deny, block IP

Layer 7, SQL injection, XSS, rate limiting, managed rules, ALB, CloudFront, URI-specific rate-based rule

DDoS, Layer 3/4, Shield Standard, Shield Advanced, DRT, always-on, Shield Standard free, Shield Advanced paid

deep packet inspection, stateful, stateless, VPC-level, intrusion prevention, IDS/IPS, domain filtering, Suricata

VPC Flow Logs, network monitoring, ACCEPT, REJECT, metadata, CloudWatch Logs, S3, Data Firehose

threat detection, ML, CloudTrail logs, VPC Flow Logs, no agents, findings, S3 Protection, management events

security investigation, forensics, GuardDuty findings, root cause, behavior graph, post-incident

vulnerability scanning, CVE, EC2, ECR, Lambda, continuous, network reachability, package vulnerability

PII detection, sensitive data, S3, ML-based, data privacy, GDPR, data discovery, policy findings

Security Hub, aggregate findings, single pane of glass, compliance score, CIS, PCI DSS, FSBP, ASFF

Firewall Manager, central firewall, across accounts, Organization wide, WAF policy, Shield Advanced, security group policy, Network Firewall policy

penetration testing, pentest, security assessment, AUP, Acceptable Use Policy, no prior approval, 8 services, prohibited activities

security stack, defense in depth, layered security, custom rules, suppression rules, custom data identifier, threat IP list, integration

encryption at rest, CMK, key rotation, SSE-KMS, envelope encryption, CloudTrail audit, asymmetric keys, symmetric keys

auto-rotation, credentials, API keys, no hardcoded secrets, Lambda integration, custom rotation, on-premises database, Parameter Store

WORM, compliance, retention period, Governance mode, Compliance mode, legal hold, versioning required, BypassGovernanceRetention

Vault Lock, Vault Access Policy, WORM, compliance, immutable, retention, Glacier archive, in-progress state

Redshift, KMS, encryption at rest, SSL TLS, in transit, AES-256, data warehouse, DataShare

API audit, who did what, compliance, forensics, account activity, 90-day retention, CloudTrail Lake, SQL query

SSL, TLS, HTTPS, free certificate, auto-renewal, ALB, CloudFront, API Gateway

dedicated HSM, FIPS 140-2 Level 3, customer control, single-tenant, hardware security, TDE, Oracle RDS, SQL Server RDS

dedicated connection, private, consistent latency, 1Gbps/10Gbps, no internet, vs VPN, IPSec backup, data transfer cost

IPSec, encrypted, internet-based, Virtual Private Gateway, Customer Gateway, Transit Gateway, two tunnels, quick setup

Client VPN, user authentication, OpenVPN, SAML, authorization rules, per-user access, remote access, temporary access

VPC, CIDR, subnet, public, private, isolated network, default VPC, private network

CIDR, subnet mask, IP addressing, /24, /26, /27, 5 reserved IPs, usable hosts

Private IP, Public IP, Elastic IP, EIP, static IP, consistent public IP, Stop Start IP change, failover IP

IGW, internet gateway, public subnet, bidirectional, free, 0.0.0.0/0

NAT, outbound only, private subnet, Elastic IP, paid, no inbound, bastion host, cross-AZ cost

route table, routing, 0.0.0.0/0, local route, subnet association, main route table

SG, NACL, stateful, stateless, instance-level, subnet-level, deny, defense-in-depth

packet journey, traffic flow, laluan packet, order of evaluation, IGW route table NACL SG, inbound order, outbound order, public subnet

VPC peering, cross-account, cross-region, non-transitive, no IP overlap, private routing

Transit Gateway, hub, transitive routing, many VPCs, replace peering mesh, on-premises, cross-account, ECMP

VPC endpoint, Gateway endpoint, Interface endpoint, PrivateLink, S3, DynamoDB, no internet, free

region, availability zone, AZ, AZ ID, edge location, local zone, wavelength, global infrastructure

horizontal scaling, scale out/in, launch template, scaling policies, desired capacity, min/max, OldestLaunchTemplate, termination policy

automatic failover, standby, different AZ, sync replication, same endpoint, HA only, automated backups, manual snapshot

read scaling, async replication, cross-region, up to 15 replicas, read-only, multi-region, promote to master

connection pooling, too many connections, Lambda scaling, idle connections, connection multiplexing, faster failover, IAM authentication, Secrets Manager

global routing, AWS backbone, anycast, static IP, TCP/UDP, failover <30s, two static IPs, IP caching

MySQL compatible, PostgreSQL compatible, 6 copies, 3 AZs, auto storage 256 TiB, fast failover, 15 read replicas, Global Database

scale to zero, ACU, pay per second, intermittent, dev/test, auto-pause, variable traffic, v1 vs v2

NoSQL, key-value, serverless, millisecond latency, DAX, Global Tables, streams, auto-scale

DynamoDB Accelerator, microsecond latency, in-memory cache, read caching, drop-in compatible, DAX vs ElastiCache

RPO: hours/days, RTO: hours, lowest cost, no standby infra, S3/Glacier backup, DR spectrum, Pilot Light, Warm Standby

RPO: minutes, RTO: minutes-hours, core DB running, app servers off, medium cost, financial institute, budget concerns, 20 minutes RTO

RPO: seconds/minutes, RTO: minutes, scaled-down active, quick scale up, higher cost

RPO: near-zero, RTO: seconds, full capacity both, highest cost, mission-critical, zero downtime

AWS DRS, Elastic Disaster Recovery, CloudEndure Disaster Recovery, continuous replication, block-level replication, failover, failback, staging area

centralized backup, backup plans, backup vault, vault lock, WORM, immutable backup, ransomware protection, retention

versioning, CRR, SRR, delete marker, MFA Delete, accidental deletion, cross-region replication, same-region replication

incremental backup, point-in-time, cross-AZ, cross-region copy, EC2 recovery, Snapshot Archive, archive tier, Fast Snapshot Restore

Windows SMB, NTFS, Active Directory, DFS, VSS, Lustre HPC, Scratch, Persistent

hybrid storage, S3 File Gateway, FSx File Gateway, Volume Gateway, Tape Gateway, cached volume, stored volume, VTL

data migration, automated transfer, S3, EFS, FSx, NFS, SMB, HDFS

database migration, minimal downtime, homogeneous, heterogeneous, Schema Conversion Tool, SCT, CDC, change data capture

Snowcone, Snowball Edge, Snowmobile, physical transfer, petabyte, edge computing, offline migration, OpsHub

SFTP, FTP, FTPS, AS2, S3 backend, EFS backend, managed FTP, legacy protocol

MGN, Application Migration Service, lift-and-shift, rehost, server migration, EC2 migration, block replication, CloudEndure

migration tracking, single pane of glass, dashboard, home region, strategy recommendations, orchestrator, refactor spaces, pricing

Outposts, Outposts rack, Outposts server, on-premises AWS, data residency, compliance, cannot migrate, local processing

full control, custom OS, lift and shift, placement groups, cluster/partition/spread, pricing, per-second billing, per-hour Windows

serverless, event-driven, 15-min max, reserved concurrency, provisioned concurrency, cold start, snapstart, Lambda SnapStart

PaaS, deploy app, developer friendly, auto EC2+ALB+ASG, free service, deployment policy, all at once, rolling

Docker, containers, microservices, task definition, JSON template, Fargate, EC2 launch type, service

Kubernetes, K8s, container orchestration, IRSA, IAM Roles for Service Accounts, pod identity, ECS vs EKS, control plane cost

EKS Anywhere, EKS Distro, ECS Anywhere, on-premises Kubernetes, hybrid containers

AWS Load Balancer Controller, ALB, NLB, Ingress, path-based routing, EKS, Kubernetes, Layer 7

bootstrap, launch script, cloud-init, first boot, initialization, 16KB limit, user data vs metadata, auto-configure

hibernation, RAM save, EBS root, fast resume, in-memory state, encrypted root volume, stop start reboot terminate, instance lifecycle

169.254.169.254, instance info, IMDSv2, IMDSv1, hostname, IP address, IAM role name, SSRF

Recycle Bin, AMI recovery, EBS snapshot recovery, accidental deletion, retention period, retention rule, Data Lifecycle Manager, DLM

AWS Batch, batch computing, long-running job, managed, job queue, job definition, compute environment, EC2 fleet

serverless containers, ECS, EKS, no EC2 management, pay per vCPU/memory, Fargate Spot, vs Lambda, no time limit

container registry, Docker images, private registry, IAM integration, image scanning, lifecycle policy, immutable tags, replication

ephemeral, temporary storage, high IOPS, NVMe, scratch disk, data lost on stop, physically attached, no snapshot

ENI, ENA, EFA, network interface, virtual NIC, OS-bypass, libfabric, MPI

Lambda@Edge, edge computing, CloudFront, Viewer Request, Viewer Response, Origin Request, Origin Response, CloudFront Functions

tenancy, shared, dedicated instance, dedicated host, single-tenant, BYOL, bring your own license, Oracle

block storage, single EC2, persistent disk, instance store, ephemeral, Elastic Volumes, resize, encryption

gp3, gp2, io2, io1, io2 Block Express, st1, sc1, Magnetic

shared storage, multiple EC2, NFS, General Purpose, Max I/O, Provisioned Throughput, Bursting Throughput, Elastic Throughput

object storage, 11 nines durability, strong consistency, bucket policy, block public access, versioning, CRR, SRR

S3 access control, IAM policy, bucket policy, ACL, access control list, block public access, BPA, cross-account

archiving, cold storage, Glacier Instant Retrieval, Glacier Flexible Retrieval, Glacier Deep Archive, restore job, Expedited, Standard

S3 Standard, Standard-IA, One Zone-IA, Intelligent-Tiering, S3 Express One Zone, Glacier Instant Retrieval, Glacier Flexible Retrieval, Deep Archive

lifecycle, transition rule, expiration rule, auto-move, auto-delete, age-based, storage class transition, transition waterfall

CORS, cross-origin, browser security, AllowedOrigin, Access-Control-Allow-Origin, web app, domain, bucket CORS

presigned URL, temporary access, no credentials, IAM credentials, expiry time, download, upload, PUT

CDN, edge location, low latency, static content, OAC, Origin Access Control, Lambda@Edge, CloudFront Functions

ELB, Elastic Load Balancing, ELB vs ALB, EC2 behind ELB, EC2 behind ALB, load balancer types, ALB vs NLB, path-based routing

TCP, UDP, TCP_UDP, TLS, QUIC, layer 4, static IP, Elastic IP

GWLB, Gateway Load Balancer, layer 3, IP packets, GENEVE, GENEVE 6081, port 6081, virtual appliance

DNS, domain, routing policy, failover, Alias record, CNAME, apex domain, root domain

failover, active-passive, health check, weighted, latency-based, geolocation, simple, Evaluate Target Health

queue, decouple, async, pull-based, visibility timeout, FIFO, DLQ, at-least-once

pub/sub, push notification, fan-out, broadcast, topic, subscription, filter policy, message filtering

real-time, streaming, data pipeline, analytics, Data Streams, Firehose, shards, retention

Kinesis Video Streams, KVS, video stream, CCTV, camera, drone, dashcam, video doorbell

REST API, HTTP API, WebSocket, real-time, bidirectional, API management, throttling, usage plans

event bus, event-driven, cron schedule, rule-based routing, decouple, SaaS integration, CloudWatch Events, schema registry

workflow, state machine, orchestration, retry logic, error handling, Lambda orchestration, visual workflow, Distributed Map

ActiveMQ, RabbitMQ, AMQP, MQTT, lift-and-shift, message broker, legacy migration, open protocols

delivery stream, S3 delivery, Redshift, OpenSearch, no consumer code, buffer, transform with Lambda, Parquet conversion

AppFlow, SaaS integration, Salesforce, ServiceNow, no-code connector, data transfer, bidirectional, S3

GraphQL, real-time, subscriptions, WebSocket, offline sync, conflict resolution, resolvers, DynamoDB

fullstack, CI/CD, frontend hosting, mobile, React, Next.js, Cognito, AppSync

IaC, Infrastructure as Code, template, stack, rollback, repeatable deployment, Lambda-backed custom resource, AMI lookup

Run Command, Patch Manager, Parameter Store, Session Manager, no SSH, fleet management, parallel execution, AmazonSSMManagedInstanceCore

compliance, audit, config changes, config rules, resource history, drift detection, auto-remediation, conformance packs

Git, source control, version control, private repo, IAM integration, pricing

CI/CD, CodePipeline, CodeBuild, CodeDeploy, DevOps, automation, pipeline, blue-green

metrics, logs, alarms, dashboards, CPU monitoring, custom metrics, Log Groups, VPC Flow Logs

distributed tracing, service map, latency analysis, microservices, Lambda tracing, bottleneck, debugging, SQS tracing

service health, personal health dashboard, scheduled changes, account events, EventBridge, operational issues, maintenance notification

purpose-built database, OLTP vs OLAP, relational, NoSQL, key-value, document, graph, wide-column

MongoDB compatible, document store, JSON, BSON, collections, NoSQL, MongoDB migration, DocumentDB pricing

graph database, social network, fraud detection, fraud ring, recommendation engine, Gremlin, SPARQL, openCypher

Cassandra compatible, CQL, wide column, IoT telemetry, time-series, high write throughput, serverless, on-demand capacity

time-series, Timestream, IoT telemetry, sensor data, metrics over time, memory store, magnetic store, tiered storage

MemoryDB, durable in-memory, Redis, Valkey, primary database, microsecond reads, Multi-AZ transactional log, in-memory database

data warehouse, OLAP, columnar, MPP, RA3, managed storage, RMS, Redshift Spectrum

QuickSight, BI, dashboard, forecasting, ML Insights, visualization, S3 direct, SPICE

serverless SQL, S3 queries, pay per scan, Parquet, ORC, Glue Catalog, log analysis, ad-hoc

ETL, data catalog, Spark, serverless, crawler, classifier, ETL job, DataBrew

Lake Formation, row-level security, column-level, cell-level, fine-grained access, data lake, Glue Data Catalog, secure data lake

Hadoop, Spark, Hive, Presto, HBase, big data, cluster, petabyte

search engine, log analytics, Elasticsearch compatible, Kibana, OpenSearch Dashboards, real-time analytics, full-text search, fuzzy

Kafka, managed, streaming, event streaming, migration, Kafka API, real-time pipeline, brokers

Kendra, enterprise search, ML search, semantic search, natural language query, FAQs, unstructured documents, intelligent search

Data Exchange, third-party data, data marketplace, data subscription, market data, financial data, data products, S3 delivery

Polly, Transcribe, Lex, Rekognition, Comprehend, Comprehend Medical, Textract, Translate

SageMaker, custom ML, training, AutoML, Autopilot, hyperparameter tuning, model deployment, MLOps

no commitment, flexible, short-term, highest cost, per-second billing, per-hour billing, pricing, On-Demand Capacity Reservation

1 or 3 year, up to 72% discount, Standard RI, Convertible RI, exchange, modify, All Upfront, Partial Upfront

up to 90% discount, interruptible, 2-minute interruption notice, EventBridge, instance metadata, rebalance recommendation, terminate, stop

flexible, hourly commitment, up to 66% discount, Compute Savings Plans, EC2 Instance Savings Plans, Fargate, Lambda, auto-apply

rightsizing, ML recommendations, EC2 optimization, Lambda optimization, cost savings, underutilized, vs Trusted Advisor, 14 days metrics

cost recommendations, idle resources, rightsizing, underutilized, service limits, five categories, Cost Optimization, Performance

budget alerts, cost threshold, SNS notification, usage budget, forecast alert, before overspend, budget actions, pricing

cost analysis, spending visualization, RI recommendations, usage patterns, rightsizing, forecast, hourly granularity, anomaly detection

Cost Anomaly Detection, unusual spending, anomalous spend, ML, cost monitor, root cause, SNS alert, seasonality

Instance Scheduler on AWS, start stop schedule, office hours, weekday only, part-time workload, CloudFormation solution, EC2 RDS schedule, minimal operational overhead

Cost and Usage Report, CUR, line-item billing, most granular, S3 delivery, CSV, Parquet, Athena

cost allocation tags, AWS-generated, user-defined, activate in billing, track cost by tag, cost center

consolidated billing, management account, member accounts, volume discount, shared RI, shared Savings Plans, one bill, free

storage classes, cost optimization, lifecycle policy, infrequent access, glacier, Glacier Instant Retrieval, Glacier Deep Archive, One Zone-IA

auto-tiering, unpredictable access, no retrieval fees, access tiers, frequent access, infrequent access, archive instant access, archive access

reduce data transfer, edge caching, CDN, cost saving

no NAT fees, private connection, S3 gateway, no internet

Redis, Memcached, in-memory, reduce DB load, caching, sub-millisecond, leaderboards, session store

NoSQL, pay per request, serverless, auto-scale, unpredictable traffic, provisioned capacity, RCU, WCU

DR spectrum, RTO, RPO, Pilot Light, Warm Standby, Backup and Restore, Multi-Site, active/passive

IaC, automation, runbooks, CI/CD, monitoring, continuous improvement

least privilege, IAM, encryption, detective controls, data protection, incident response

Multi-AZ, auto-recovery, RTO, RPO, disaster recovery, horizontal scaling, fault isolation

right-sizing, serverless, caching, CDN, global deployment, benchmarking

right-sizing, Reserved Instances, Spot, Savings Plans, eliminate waste, cost allocation tags

sustainability, carbon footprint, environmental impact, 6th pillar, serverless, utilisation, renewable energy, 2021

SQLite, WAL, S3 replication, sidecar, open-source, backup, not AWS native, single server