Cheatography
https://baltimorebridge.pages.dev
Core AWS services for the CLF-C02 exam: compute, storage, databases, networking, security, and pricing — in one glanceable reference.
Compute
EC2 |
Virtual servers; you manage the OS — resizable, pay-as-you-go |
Lambda |
Serverless functions — run code with zero servers, pay per execution |
Elastic Beanstalk |
PaaS — deploy apps without managing infrastructure |
Auto Scaling |
Adds/removes EC2 instances based on demand |
ELB (ALB/NLB) |
Distributes traffic across instances; ALB = HTTP, NLB = TCP/UDP |
Storage
S3 |
Object storage — 11 nines durability; classes: Standard, Intelligent-Tiering, Glacier |
S3 Glacier |
Archive storage — cheapest, retrieval in minutes to hours |
EBS |
Block storage for EC2 (like a virtual hard drive) |
EFS |
Shared file storage for multiple EC2 instances |
Storage Gateway |
Hybrid — connects on-premises storage to AWS |
Databases
RDS |
Managed relational DB (MySQL, Postgres, Oracle, SQL Server) |
Aurora |
AWS-built relational DB — MySQL/Postgres compatible, high performance |
DynamoDB |
Serverless NoSQL key-value — single-digit millisecond latency |
Redshift |
Data warehouse for analytics |
ElastiCache |
In-memory caching (Redis/Memcached) |
Networking
VPC |
Your isolated virtual network in AWS |
Subnets |
Public (internet-facing) vs private (no direct internet) |
Security Groups |
Stateful instance-level firewall (allow rules only) |
NACLs |
Stateless subnet-level firewall (allow + deny rules) |
Route 53 |
DNS service; IGW | Internet Gateway — lets public subnets reach the internet |
CloudFront |
CDN — caches content at edge locations worldwide |
Direct Connect |
Dedicated private link from on-premises to AWS |
Security & Identity
IAM |
Users, groups, roles, policies — least privilege, MFA on root |
Shared Responsibility |
AWS secures OF the cloud; you secure IN the cloud |
KMS |
Key Management Service — encryption keys |
CloudTrail |
Logs API calls (who did what) |
CloudWatch |
Metrics, alarms, and logs monitoring |
GuardDuty / Inspector |
Threat detection / vulnerability assessments |
WAF / Shield |
Web app firewall / DDoS protection |
Pricing & Support
On-Demand |
Pay per second, no commitment — most flexible, most expensive |
Reserved Instances / Savings Plans |
1- or 3-year commitment for big discounts |
Spot Instances |
Bid on spare capacity — up to 90% off, can be reclaimed |
CAF |
Cloud Adoption Framework — 6 perspectives for migration planning |
Support plans |
Basic (free) → Developer → Business → Enterprise On-Ramp → Enterprise |
Pricing Calculator / Cost Explorer / Budgets |
Estimate, analyze, and alert on spend |
More from ByteBar
|
Free IT certification study resources at bytebarhq.com |
|
Created By
Metadata
Comments
No comments yet. Add yours below!
Add a Comment
Related Cheat Sheets
More Cheat Sheets by bytebar