CLF-C02 question patterns

A managed or serverless service: RDS, DynamoDB, Lambda, Fargate.

You don't patch or scale servers yourself.

Deploy across multiple Availability Zones.

AZs have independent power, cooling and networking.

Use more than one Region.

Regions are independent, so data and endpoints can be placed where needed.

AWS Well-Architected Tool.

It checks the workload against the six pillars and gives an improvement plan.

Rehost (lift and shift).

Fastest, no code change.

Replatform.

Small optimisation without redesign.

Refactor (re-architect).

Biggest change, biggest cloud benefit.

AWS Snow Family.

Physical devices avoid weeks of transfer time.

AWS DMS, with SCT if the engines differ.

DMS replicates continuously. SCT converts the schema.

AWS Cloud Adoption Framework.

Six perspectives guide organisational change.

AWS Artifact.

It's the portal for reports and agreements.

AWS CloudTrail.

It records API calls and console actions.

AWS Config.

It keeps configuration history and evaluates rules.

Amazon CloudWatch.

It monitors performance and operations.

Amazon GuardDuty.

It analyses logs for threats.

Amazon Inspector.

It checks software for CVEs and exposure.

Amazon Macie.

It discovers sensitive data with ML.

AWS WAF.

It's a layer 7 web application firewall.

AWS Shield.

Standard is automatic and free. Advanced is paid.

AWS Security Hub.

It aggregates findings from other services.

Amazon Detective.

It links related activity into a graph.

AWS Secrets Manager.

It supports built-in rotation.

AWS KMS, or CloudHSM for a dedicated module.

KMS is managed. CloudHSM is single-tenant hardware you control.

Root user.

Only root can do these.

IAM role.

Roles give temporary credentials, with no long-term keys to leak.

IAM Identity Center.

It replaces per-account IAM users.

CloudFormation or CDK.

Templates make environments consistent.

AWS Direct Connect.

VPN runs over the internet.

AWS Fargate.

It's serverless compute for ECS and EKS.

Amazon RDS or Aurora.

Both handle patches and backups.

Amazon DynamoDB.

It's serverless and scales automatically.

Amazon EFS.

EBS attaches to one instance.

S3 Glacier Deep Archive.

Lowest price, slowest retrieval.

S3 Lifecycle policy.

Rules transition or delete objects by age.

Amazon SNS.

SNS pushes to subscribers. SQS holds work for pulling.

Amazon Athena.

Pay per query.

Amazon Textract.

Rekognition is for images and video.

Spot Instances.

Up to 90% off but can be interrupted.

Savings Plans or Reserved Instances.

A commitment earns a discount.

Compute Savings Plans.

Most flexible commitment.

Dedicated Hosts.

You get a whole physical server.

AWS Pricing Calculator.

Cost Explorer only shows existing spend.

AWS Cost Explorer.

It charts spend with filters.

Cost allocation tags, activated in Billing.

Inactive tags don't appear in reports.

Organizations consolidated billing.

Volume and reservation discounts are shared.

Business Support or above.

Developer has business-hours email only.

Enterprise Support.

On-Ramp has a pool of TAMs.

AWS Trust and Safety team.

It handles abuse reports.

AWS IQ, or AWS Marketplace.

IQ is for expert help. Marketplace is for software.

AWS Health Dashboard.

It shows events that affect your resources.