AWS(218 terms)
A full list of the AWS terms and explanations covered by ITBGM.
Use the search box below to filter by term name.
Each term links to a page with a more detailed, engineer-oriented explanation.
No terms match "
Access Key IAM ☆ Credentials used to operate AWS programmatically.
ACM Security Services ☆ A service for issuing, renewing, and managing SSL/TLS certificates.
Alarm Monitoring & Operations ☆ A feature that notifies or takes action when a specified threshold is crossed.
Amazon Corretto Other Services ☆ A free, production-ready OpenJDK distribution provided by AWS.
Amazon Kendra AI/ML ☆ An enterprise search service that can answer natural-language questions.
Amazon Lex AI/ML ☆ A service for building conversational interfaces for voice and text.
Amazon Managed Grafana Monitoring & Operations ☆ A fully managed AWS service for the open-source visualization tool Grafana.
Amazon Managed Service for Prometheus Monitoring & Operations ☆ A fully managed service for using open-source Prometheus.
Amazon MSK Other Services ☆ A fully managed AWS service for running Apache Kafka.
Amazon Nova AI/ML ☆ A family of foundation models developed in-house by AWS.
Amazon OpenSearch Service Other Services ☆ A fully managed AWS service for the open-source search and analytics engine, OpenSearch.
Amazon Q Business AI/ML ☆ A generative-AI assistant for business use that answers based on internal company data.
Amazon Q Developer AI/ML ☆ A generative AI assistant from AWS focused on coding support.
AMI Compute ☆ A template, including OS and software, used to launch an EC2 instance.
Amplify Deployment ☆ A full-stack development service for building and deploying both frontend and backend together.
API Gateway Serverless ☆ A service for creating an API endpoint and connecting it to backends such as Lambda.
App Mesh Containers ☆ A service mesh for visualizing and controlling communication between microservices.
App Runner Compute ☆ A service for quickly publishing a containerized web app with no infrastructure management.
AppFlow Other Services ☆ A service for integrating data between SaaS applications and AWS services.
AppSync Other Services ☆ A managed service for building and running a GraphQL API.
Athena Other Services ☆ A service for analyzing data in S3 directly with SQL.
Aurora Database ☆ AWS's own high-performance, relational-database-compatible engine.
Aurora Serverless Database ☆ A serverless version of Aurora that automatically scales database capacity up and down based on load.
Auto Scaling Compute ☆ A mechanism that automatically increases or decreases the number of servers based on load.
Auto Scaling Group Compute ☆ A collection of EC2 instances managed as a unit for auto scaling.
AWS AppConfig Monitoring & Operations ☆ A service for dynamically changing and rolling out an application's configuration without redeploying it.
AWS Backup Storage ☆ A service for centrally managing backups across multiple AWS services.
AWS Fault Injection Simulator Monitoring & Operations ☆ A chaos-engineering service that intentionally injects faults to verify a system's resilience.
AWS Firewall Manager Security Services ☆ A service for centrally managing firewall settings across multiple accounts and resources.
AWS IoT Greengrass Other Services ☆ A service that lets you run a subset of AWS capabilities locally on edge devices.
AWS Local Zones Other Services ☆ AWS infrastructure sites placed in major metro areas that are geographically distant from a parent region.
AWS Network Firewall Security Services ☆ A managed firewall service that performs stateful traffic inspection at the VPC level.
AWS Nitro System Compute ☆ The underlying architecture of EC2 that offloads virtualization overhead onto dedicated hardware.
AWS Resilience Hub Monitoring & Operations ☆ A service for assessing and improving an application's resilience.
AWS Verified Access Security Services ☆ A service that provides zero-trust access to applications without requiring a VPN.
AWS Well-Architected Tool Monitoring & Operations ☆ A free tool for self-assessing a workload against the Well-Architected Framework.
Batch Compute ☆ A service that runs a large number of batch jobs, automatically procuring the compute resources needed.
Bedrock AI/ML ☆ A generative-AI service that provides access to multiple foundation models via API.
Bedrock AgentCore AI/ML ☆ A set of Bedrock capabilities that support safely running AI agents in production.
Billing Alert Cost Management ☆ A mechanism that notifies you when usage charges cross a threshold.
Blue/Green Deployment Deployment ☆ A deployment technique that prepares two environments, old and new, and releases by switching between them.
Bucket Storage ☆ The container used to store objects in S3.
Budgets Cost Management ☆ A service for setting a budget and receiving alerts when it's about to be exceeded.
Canary Release Deployment ☆ A technique for gradually rolling out a new version to only a subset of users.
CDK Deployment ☆ An infrastructure-as-code tool that lets you define infrastructure in a programming language.
Client VPN Networking ☆ A service that lets an individual device connect securely to a VPC over VPN.
Cloud9 Deployment ☆ A cloud-based integrated development environment usable in a browser.
CloudFormation Monitoring & Operations ☆ A service for defining and provisioning infrastructure as code.
CloudFront Networking ☆ AWS's CDN service for delivering content across the world.
CloudFront Functions Serverless ☆ A feature that runs lightweight JavaScript code with ultra-low latency at CloudFront's edge locations.
CloudShell Deployment ☆ A browser-based command-line shell for AWS, available at no additional cost.
CloudTrail Monitoring & Operations ☆ A service that records the history of actions taken within an AWS account.
CloudWatch Monitoring & Operations ☆ A service for collecting and monitoring metrics and logs from AWS resources.
CloudWatch Logs Insights Monitoring & Operations ☆ A feature for interactively analyzing logs accumulated in CloudWatch Logs using queries.
Cluster Containers ☆ A collection of resources that runs containers.
CodeArtifact Deployment ☆ A managed repository service for storing and sharing software packages.
CodeBuild Deployment ☆ A managed service for building and testing source code.
CodeCommit Deployment ☆ A managed Git repository service from AWS.
CodeDeploy Deployment ☆ A service that automates application deployment.
CodePipeline Deployment ☆ A service that automates the flow from build to deployment.
CodeStar Deployment ☆ A service for managing the full set of tools from development through deployment together.
Cognito Security Services ☆ A service providing user authentication and access management for apps.
Cold Start Serverless ☆ The delay incurred the first time a function is invoked after a period of inactivity.
Comprehend AI/ML ☆ An NLP service that performs sentiment analysis and entity extraction on text.
Compute Optimizer Monitoring & Operations ☆ A service that analyzes actual usage and recommends the optimal resource size.
Concurrency Serverless ☆ The upper limit on how many instances of a Lambda function can run at once.
Config Monitoring & Operations ☆ A service that records and evaluates the history of resource configuration changes.
Control Tower Monitoring & Operations ☆ A service for building and managing an entire multi-account AWS environment in a governed way.
Cost and Usage Report Cost Management ☆ A reporting feature that outputs detailed AWS usage and cost data.
Cost Explorer Cost Management ☆ A tool for visualizing and analyzing AWS usage charges.
Cross-Account Access IAM ☆ Accessing a resource in a different AWS account through a role.
Cross-Region Replication Storage ☆ A feature that automatically copies S3 objects to a bucket in a different region.
DAX Database ☆ An in-memory caching service that speeds up DynamoDB reads.
Dedicated Host Compute ☆ An EC2 arrangement where you get exclusive use of an entire physical server.
Detective Security Services ☆ A service for investigating the root cause of a security issue based on related data.
Direct Connect Networking ☆ A service for connecting to AWS over a dedicated line, bypassing the internet.
Directory Service Security Services ☆ A service providing Active Directory as a managed offering.
DMS Other Services ☆ A service for migrating data between different databases.
DocumentDB Database ☆ A MongoDB-compatible, document-oriented database service.
DynamoDB Database ☆ AWS's fast, scalable NoSQL database.
DynamoDB Streams Database ☆ A feature that captures a time-ordered sequence of changes (inserts, updates, deletes) made to a DynamoDB table.
EBS Compute ☆ Persistent block storage attached to an EC2 instance.
EC2 Compute ☆ AWS's flagship service for spinning up as many virtual servers as needed.
EC2 Image Builder Deployment ☆ A service that automates the pipeline for creating, testing, and distributing AMIs (machine images).
ECR Containers ☆ AWS's registry service for storing and managing container images.
ECS Containers ☆ AWS's own container-orchestration service.
EFS Storage ☆ Shared file storage that can be mounted from multiple EC2 instances at once.
EKS Containers ☆ AWS's managed Kubernetes service.
Elastic Beanstalk Deployment ☆ A service that automates infrastructure provisioning just from your application code.
Elastic IP Compute ☆ A fixed global IP address you can keep using.
Elastic Load Balancing Networking ☆ AWS's load-balancing service for distributing traffic across multiple EC2 instances and more.
ElastiCache Database ☆ A caching service that provides managed Redis and Memcached.
EMR Other Services ☆ A service that provides big-data processing platforms such as Hadoop and Spark as a managed offering.
ENI (Elastic Network Interface) Networking ☆ A virtual network interface card used within a VPC.
EventBridge Serverless ☆ An integration service that triggers another service in response to an event from inside or outside AWS.
Event-Driven Serverless ☆ A design philosophy where processing is triggered by some occurrence (an event).
Fargate Containers ☆ A service for running containers with no server management required.
Federation IAM ☆ A mechanism that lets an external identity provider's credentials be used to access AWS resources.
Forecast AI/ML ☆ A service for time-series forecasting, such as demand forecasting, based on historical data.
Free Tier Cost Management ☆ A perk for new AWS customers that lets them use a certain amount for free.
FSx Storage ☆ A service providing purpose-built file systems, such as for Windows or Lustre.
Global Accelerator Networking ☆ A service that uses AWS's global network to optimize the path to an application.
Global Database Database ☆ An Aurora feature that performs low-latency replication across multiple regions.
Glue Other Services ☆ A managed service for extracting, transforming, and loading data (ETL).
GuardDuty Security Services ☆ A threat-detection service that analyzes logs to detect signs of malicious activity.
Hibernation Compute ☆ A feature for stopping and resuming an EC2 instance while preserving its memory state.
IAM IAM ☆ The mechanism for managing access permissions that users and services have on AWS resources.
IAM Group IAM ☆ A unit for managing permissions across multiple IAM users together.
IAM Identity Center IAM ☆ A service for centrally managing single sign-on across multiple AWS accounts.
IAM Policy IAM ☆ A rule document that defines which actions are allowed or denied.
IAM Role IAM ☆ A bundle of permissions granted to a service or a temporary user.
IAM User IAM ☆ An individual account that logs into AWS and operates it.
Infrastructure as Code Deployment ☆ The idea (IaC) of defining and managing infrastructure configuration as code.
Inspector Security Services ☆ A service that automatically scans EC2 instances and containers for vulnerabilities.
Instance Type Compute ☆ The EC2 spec category that determines a performance configuration, such as CPU and memory.
Intelligent-Tiering Storage ☆ A feature that automatically optimizes an S3 object's storage class based on access frequency.
Internet Gateway Networking ☆ The gateway connecting a VPC to the internet.
IoT Core Other Services ☆ A service for securely connecting a large number of IoT devices to AWS services.
Karpenter Containers ☆ An open-source autoscaler for EKS that adds and removes nodes (EC2 instances) quickly and flexibly.
Key Pair Compute ☆ A public/private key pair for connecting to EC2 securely over SSH.
Kinesis Other Services ☆ A service for processing large volumes of streaming data in real time.
KMS Other Services ☆ A service for creating and managing keys used for encryption.
Lambda Serverless ☆ AWS's service for running just your code, with no server to manage.
Lambda Extensions Serverless ☆ A mechanism for adding capabilities such as monitoring or log forwarding to a Lambda's execution environment.
Lambda@Edge Serverless ☆ A feature that lets you run Lambda functions at CloudFront's edge locations.
Launch Template Compute ☆ A template that predefines the launch configuration for an EC2 instance.
Layers Serverless ☆ A mechanism for sharing common libraries across Lambda functions.
Lifecycle Policy Storage ☆ A feature for setting rules that automatically archive or delete data after a set period.
Lightsail Compute ☆ A small-scale virtual server service with simplified pricing and settings.
Macie Security Services ☆ A service that uses machine learning to detect sensitive data within S3.
MediaConvert Other Services ☆ A file-based service for converting video files into various formats.
MemoryDB Database ☆ A Redis-compatible, in-memory database service that also offers durability.
Metrics Monitoring & Operations ☆ Time-series measurement data, such as CPU utilization.
MFA IAM ☆ Multi-factor authentication that verifies identity with an additional factor beyond a password.
MQ Other Services ☆ A service providing existing message brokers, such as ActiveMQ, as a managed offering.
Multi-AZ Database ☆ A configuration that makes a database redundant across multiple data centers.
Multipart Upload Storage ☆ A mechanism for splitting a large file and uploading the parts in parallel.
NAT Gateway Networking ☆ An egress point for a private subnet to communicate with the outside securely.
Neptune Database ☆ A managed service for working with a graph database.
Network ACL Networking ☆ A virtual firewall that controls traffic on a per-subnet basis.
Object Storage Storage ☆ A storage format that treats files as objects with attached metadata.
On-Demand Capacity Reservation Compute ☆ A feature that lets you reserve launch capacity in advance for a specified instance type in a particular Availability Zone.
Organizations Other Services ☆ A service for managing multiple AWS accounts together.
Outposts Compute ☆ A service that brings AWS infrastructure directly into an on-premises environment.
Parameter Group Database ☆ A mechanism for managing RDS database-engine settings together.
Parameter Store Other Services ☆ A service for managing configuration values and secrets in a hierarchical structure.
Pay-as-You-Go Cost Management ☆ A billing model where charges accrue only for what you use.
Personalize AI/ML ☆ A service for delivering recommendations personalized per user.
Placement Group Compute ☆ A setting that controls the physical placement of instances to improve performance or availability.
Polly AI/ML ☆ A service that converts text into natural-sounding speech.
Presigned URL Storage ☆ A URL that grants temporary access for a limited time.
Principle of Least Privilege IAM ☆ The idea that only the minimum permission necessary for a task should be granted.
Private Subnet Networking ☆ A subnet configured so it can't be reached directly from the internet.
PrivateLink Networking ☆ A mechanism for securely connecting between VPCs or to a service without going over the internet.
Provisioned Concurrency Serverless ☆ A setting that pre-initializes a Lambda function to prevent a cold start.
Public Subnet Networking ☆ A subnet that can communicate externally through an internet gateway.
QLDB Database ☆ A ledger-style database service capable of tamper detection.
QuickSight Other Services ☆ A BI service for visualizing data and sharing it as a dashboard.
RDS Database ☆ A service providing major relational databases such as MySQL as a managed offering.
RDS Proxy Database ☆ A service that pools database connections to reduce load under heavy access.
Read Replica Database ☆ A mechanism that creates a read-only copy of a database to spread load.
Redshift Database ☆ AWS's data-warehouse service for large-scale data analytics.
Rekognition AI/ML ☆ An AI service that recognizes objects, faces, and more in images and video.
Reserved Instances Compute ☆ An EC2 purchase option contracted at a discounted price on the assumption of long-term use.
Resource-Based Policy IAM ☆ A policy that sets access permissions on a resource, such as an S3 bucket, rather than on an IAM user.
Rollback Deployment ☆ Reverting to the pre-change state when a problem occurs.
Route 53 Networking ☆ AWS's DNS service.
Route Table Networking ☆ A routing table defining where a subnet's traffic is forwarded.
S3 Storage ☆ AWS's object storage service, letting you store files with no capacity limit.
S3 Glacier Storage ☆ Low-cost, long-term storage for infrequently accessed data.
S3 Object Lock Storage ☆ A feature that locks S3 objects so they cannot be overwritten or deleted for a set period, or indefinitely.
S3 Select Storage ☆ A feature that lets you filter the contents of an S3 object directly using an SQL-like query.
S3 Transfer Acceleration Storage ☆ A feature that speeds up transfers to S3 by routing through CloudFront edge locations.
SageMaker AI/ML ☆ A service for building, training, and deploying machine-learning models end-to-end.
SAM Serverless ☆ A framework that simplifies building and deploying serverless applications.
Savings Plans Cost Management ☆ A pricing plan that gives a discount in exchange for committing to a certain amount of usage.
SCP (Service Control Policy) IAM ☆ A policy that restricts, organization-wide, which services and actions the accounts under AWS Organizations are allowed to use.
Secrets Manager Other Services ☆ A service for securely managing secrets such as passwords.
Security Group Compute ☆ An instance-level virtual firewall applied to EC2 and similar resources.
Security Hub Security Services ☆ A service for centrally aggregating and reviewing findings from multiple security services.
Service Catalog Monitoring & Operations ☆ A mechanism for cataloging approved IT services and offering them to users.
Service Discovery Containers ☆ A mechanism for automatically finding the location of containers that change dynamically.
Service Role IAM ☆ An IAM role assumed by an AWS service itself to operate other resources.
SES Other Services ☆ A managed AWS service for sending and receiving email from applications.
Shield Security Services ☆ A service that protects resources from DDoS attacks.
Sidecar Container Containers ☆ An auxiliary container placed in the same task alongside the main one, to support it.
Snowball Storage ☆ A service that stores large volumes of data on a physical device and ships it to AWS to migrate it.
SNS Other Services ☆ A service for delivering notification messages to multiple destinations.
Spot Fleet Compute ☆ A feature that combines multiple Spot Instances (and optionally On-Demand Instances) to maintain a target amount of compute capacity.
Spot Instance Compute ☆ An EC2 purchase option that's cheap because it uses spare capacity, but can be interrupted.
SQS Other Services ☆ A queuing service for exchanging work asynchronously.
Step Functions Serverless ☆ A service for executing multiple steps in order as a workflow.
Storage Class Storage ☆ An S3 storage tier chosen based on access frequency and cost.
Storage Gateway Storage ☆ A service for connecting an on-premises environment seamlessly to AWS storage.
STS IAM ☆ AWS's service for issuing temporary credentials.
Subnet Networking ☆ A network segment that further divides a VPC.
Systems Manager Monitoring & Operations ☆ A service for centralizing the operational management of EC2 and more.
Tag Monitoring & Operations ☆ A named label attached to a resource, used for organization and cost reporting.
Task Definition Containers ☆ A template describing the configuration of containers to run in ECS.
Task Role Containers ☆ An IAM role attached to an ECS/Fargate task that grants access to other AWS resources.
Timestream Database ☆ A database service specialized for storing and analyzing time-series data.
Transcribe AI/ML ☆ A speech-recognition service that converts audio to text.
Transit Gateway Networking ☆ A service that interconnects multiple VPCs and on-premises sites through a single hub.
Translate AI/ML ☆ A service that automatically translates text into another language.
Trust Policy IAM ☆ A policy that defines who is allowed to assume an IAM role.
Trusted Advisor Monitoring & Operations ☆ A service that suggests improvements to your environment from perspectives such as cost and security.
User Data Compute ☆ An initialization script that runs automatically when an EC2 instance launches.
Versioning Storage ☆ A feature that retains an object's update history so an earlier version can be restored.
VPC Networking ☆ A service for building your own private virtual network space on AWS.
VPC Endpoint Networking ☆ A mechanism for accessing an AWS service directly from within a VPC, without going over the internet.
VPC Flow Logs Networking ☆ A feature that records information about the IP traffic going into and out of a VPC.
VPC Peering Networking ☆ A feature for connecting different VPCs directly and privately.
VPN Gateway Networking ☆ The AWS-side gateway for connecting a VPC to an on-premises environment via VPN.
WAF Other Services ☆ AWS's firewall service that protects applications from web attacks.
Well-Architected Framework Cost Management ☆ AWS's set of best practices for good architectural design.
WorkSpaces Other Services ☆ A service that provides a virtual desktop environment in the cloud.
X-Ray Monitoring & Operations ☆ A service for visualizing the flow of requests through a distributed system.
© 2026 ITBGM