A security group is a stateful virtual firewall that controls inbound and outbound traffic for AWS resources such as EC2 instances. Because it is stateful, return traffic for an allowed request is automatically permitted. Security groups allow rules only (no explicit deny), unlike network ACLs which are stateless and support deny rules.
The AWS Well-Architected Framework is a set of design principles and best practices organized into pillars — Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.
Amazon Virtual Private Cloud (VPC) is a logically isolated section of the AWS Cloud where you launch resources into a virtual network you define.
A security group is a stateful virtual firewall that controls inbound and outbound traffic for AWS resources such as EC2 instances.
AWS Identity and Access Management (IAM) lets you control who is authenticated and authorized to use AWS resources.
Amazon Simple Storage Service (S3) is an object storage service offering high durability and multiple storage classes (Standard, Intelligent-Tiering, Standard-IA, One Zone-IA, Glacier tiers) for different access patterns.
Amazon Elastic Block Store (EBS) is a block-storage service providing volumes attached to EC2 instances.
Amazon EC2 Auto Scaling automatically adjusts the number of instances in a group to match demand, using scaling policies and health checks to add or replace instances.
Elastic Load Balancing (ELB) distributes incoming traffic across multiple targets such as EC2 instances and containers.
Amazon Simple Queue Service (SQS) is a fully managed message queue that decouples the components of a distributed system.
Amazon Relational Database Service (RDS) is a managed service for relational databases (including Amazon Aurora, MySQL, PostgreSQL, and others) that handles patching, backups, and failover.
Amazon DynamoDB is a fully managed NoSQL key-value and document database delivering single-digit-millisecond performance at any scale.
Amazon CloudFront is a content delivery network (CDN) that caches content at edge locations close to users to reduce latency.
AWS Key Management Service (KMS) is a managed service that creates and controls the cryptographic keys used to encrypt data across AWS services.