Amazon API Gateway
API Gateway is a managed front door for HTTP, REST, and WebSocket APIs.
AWS Services
Core service explanations reused across certifications, with exam-level links back to the relevant guides.
API Gateway is a managed front door for HTTP, REST, and WebSocket APIs.
Athena runs serverless SQL queries against data in S3 using table metadata from a catalog.
Bedrock provides managed access to foundation models and tools for building generative AI applications.
Foundation-model safety control feature for filtering and constraining GenAI inputs and outputs.
Managed retrieval augmented generation feature for grounding model responses in selected data sources.
CloudFront caches and delivers content from edge locations near users.
CloudWatch is the operational telemetry service for metrics, logs, alarms, dashboards, events, and observability signals.
Managed natural-language processing service.
Firehose delivers streaming data to destinations with minimal management.
DynamoDB is a managed NoSQL key-value and document database built around access patterns and partition keys.
EC2 gives you virtual machines. It is flexible, but you own more of the operating system and scaling work.
Amazon Ec2 Auto Scaling is an AWS service that appears in one or more current certification blueprints.
Container orchestration service for running containers on AWS-managed or customer-managed capacity.
Elastic shared file storage for Linux workloads across multiple compute resources.
Managed container image registry for storing and scanning container images.
EventBridge routes events between AWS services, SaaS partners, and custom applications using buses and rules.
Managed file systems for workloads that need specific file-system engines.
Threat-detection service that analyzes events and logs for suspicious AWS account and workload activity.
Kinesis Data Streams ingests and stores streaming records for custom consumers with replay.
Generative AI assistant service for enterprise knowledge and workflows.
AI-assisted development service for code suggestions, review support, troubleshooting assistance, and developer productivity.
RDS manages relational database engines. Aurora is AWS-designed relational database technology with managed replication and high-performance options.
Redshift is a managed data warehouse for analytics at scale.
Managed image and video analysis service.
Route 53 provides DNS hosting, health checks, and traffic routing policies.
S3 stores objects in buckets. It is not a block device, file system, or relational database.
SageMaker AI supports the ML lifecycle: data prep, training, tuning, model registry, deployment, and monitoring.
SageMaker capability for storing, sharing, and serving ML features.
SageMaker data-labeling capability for creating labeled training datasets.
SageMaker capability for tracking model versions, approval status, and deployment metadata.
SNS is a pub/sub notification service for fanout to subscribers.
SQS is a managed queue for decoupling producers and consumers through asynchronous messages.
Managed neural machine translation service.
A VPC is the network boundary for subnets, routing, gateways, endpoints, and network-level controls.
AWS Backup centralizes backup policies, vaults, retention, and restore workflows across supported AWS services.
Cost-management service for defining budgets and alerts for cost, usage, reservation, or Savings Plans thresholds.
CloudFormation provisions AWS infrastructure from templates and tracks resources as stacks.
CloudTrail records AWS API activity for audit, investigation, and governance.
AWS Config records resource configuration history and evaluates rules against desired configuration.
Cost and usage analysis tool for visualizing AWS spend and usage trends.
Glue is a serverless data integration service for cataloging, ETL, crawlers, and jobs.
IAM is the policy engine for AWS API authorization. It answers who can call which API against which resource under which conditions.
KMS creates and controls cryptographic keys used by AWS services and applications.
Governance service for building and managing secure data lakes on AWS.
Lambda runs code in response to events without managing servers. Your code must fit the runtime, timeout, event, and concurrency model.
Organizations centrally manages multiple AWS accounts, OUs, consolidated billing, and service control policies.
Secrets Manager stores, retrieves, and can rotate secrets such as database credentials and API keys.
Security posture and findings aggregation service for AWS accounts.
Framework and CLI for building, testing, and deploying serverless applications.
Step Functions orchestrates workflows as state machines with retries, branching, parallel steps, and service integrations.
Systems Manager centralizes operational management for instances, automation, patching, parameters, sessions, and inventory.
Best-practice check service for cost optimization, security, fault tolerance, performance, and service limits.
ELB distributes traffic across targets. ALB handles Layer 7 HTTP features; NLB handles Layer 4 high-performance TCP/UDP/TLS.
SageMaker capability for bias detection and explainability analysis.
SageMaker feature for documenting model details, intended use, risk, and evaluation information.
SageMaker capability for monitoring model quality and data drift after deployment.