AWS (Amazon Web Services)

What it is: Amazon’s *cloud* /klaʊd/ (đám mây) platform.

What it’s for: Build and run systems without managing physical hardware; many services are *managed* /ˈmænɪdʒd/ (được nhà cung cấp vận hành hộ).

Hard words (English + IPA + Vietnamese meaning):

• *cloud* /klaʊd/: đám mây (hạ tầng qua Internet)
• *managed* /ˈmænɪdʒd/: được vận hành hộ
• *scalability* /ˌskeɪləˈbɪləti/: khả năng mở rộng
• *availability* /əˌveɪləˈbɪləti/: tính sẵn sàng

• Region
  • Regional vs Global Services
• Availability Zone (AZ)
  • Multi-AZ
  • Fault Isolation
• Edge Location
  • CloudFront (CDN)

• IAM (Identity and Access Management)
  • IAM User
  • IAM Group
  • IAM Role
  • IAM Policy
  • STS (Security Token Service)
  • AssumeRole
  • Permission Boundary
  • Least Privilege
• MFA (Multi-Factor Authentication)
• KMS (Key Management Service)
  • Customer Managed Key (CMK)
  • Key Policy
• Secrets Manager
  • Secret Rotation
• SSM Parameter Store
• CloudTrail (Audit Logs)

• VPC (Virtual Private Cloud)
  • Subnet
    • Public Subnet
    • Private Subnet
  • Route Table
  • Internet Gateway (IGW)
  • NAT Gateway
  • Security Group
  • Network ACL (NACL)
  • VPC Endpoint
• Route 53 (DNS)
  • Routing Policies
• Elastic Load Balancing (ELB)
  • Application Load Balancer (ALB)
  • Network Load Balancer (NLB)
  • Health Check

• EC2 (Elastic Compute Cloud)
  • Instance Type
  • AMI (Amazon Machine Image)
  • Key Pair
  • User Data
  • Instance Profile
• Auto Scaling
  • Auto Scaling Group (ASG)
  • Scaling Policy
• Lambda
  • Triggers
  • Concurrency
• API Gateway
• Step Functions

• S3 (Simple Storage Service)
  • Bucket
  • Object
  • Storage Classes
  • Versioning
  • Lifecycle Rules
  • Encryption (SSE-S3, SSE-KMS)
  • Bucket Policy
  • Pre-signed URL
• EBS (Elastic Block Store)
  • Snapshot
  • Volume Types (gp3, io2, st1, sc1)
• EFS (Elastic File System)
• S3 Glacier

• RDS (Relational Database Service)
  • Multi-AZ
  • Read Replica
  • Automated Backups
• Aurora
  • Aurora Cluster
  • Aurora Replicas
• DynamoDB
  • Partition Key
  • Sort Key
  • Global Secondary Index (GSI)
  • Local Secondary Index (LSI)
  • DynamoDB Streams
• ElastiCache
  • Redis
  • Memcached

• ECR (Elastic Container Registry)
• ECS (Elastic Container Service)
  • Task Definition
  • Service
  • Cluster
• EKS (Elastic Kubernetes Service)
  • Cluster
  • Node Group
  • Pod
  • Service Account
  • IRSA (IAM Roles for Service Accounts)
  • OIDC Provider
• Fargate

• CloudWatch
  • Logs
  • Metrics
  • Alarms
• CloudFormation
  • Stack
  • Change Set
• Systems Manager (SSM)
  • Session Manager
  • Patch Manager
  • Run Command
• Trusted Advisor

• Pricing Models
  • On-Demand
  • Reserved Instances
  • Savings Plans
  • Spot Instances
  • Free Tier
• Budgets
• Cost Explorer
• Cost Allocation Tags

• CodeCommit
• CodeBuild
• CodePipeline
• CodeDeploy

• *identity* /aɪˈdentəti/: danh tính
• *authorization* /ˌɔːθərəˈzeɪʃn/: cấp quyền
• *authentication* /ɔːˌθentɪˈkeɪʃn/: xác thực
• *encryption* /ɪnˈkrɪpʃən/: mã hóa
• *throughput* /ˈθruːpʊt/: thông lượng
• *latency* /ˈleɪtənsi/: độ trễ
• *durability* /ˌdʊrəˈbɪləti/: độ bền dữ liệu
• *orchestrate* /ˈɔːrkəstreɪt/: điều phối
• *serverless* /ˈsɝːvərləs/: không quản lý server