AWS GLOSSARY · EN / 中文 / 日本語
Trilingual AWS Glossary
AWS service names, abbreviations, and exam terminology in one quick-reference table.
674 terms
473 high-frequency
English · 中文 · 日本語 | Term / Abbreviation | English | 中文 | 日本語 | Notes | Exam frequency |
|---|---|---|---|---|---|
| Access Denied | Access Denied | 访问被拒绝 | アクセス拒否（必要な Allow がない、または明示的な Deny や権限境界などによって AWS API リクエストが拒否された状態） | Start with the denied Action, then check the current principal, direct and inherited policies, explicit denies, resources, and conditions. | 5 |
| Access Key ID | Access Key ID | 访问密钥 ID | アクセスキー ID（AWS API の認証情報一式を識別するための公開側の識別子） | Identifies a set of API credentials; it is like a username, not a password. A secret is still required, plus a session token for temporary credentials. | 5 |
| Action | Action | 操作 | アクション（ポリシーで許可または拒否する AWS API 操作を指定する要素） | Specifies an AWS API operation such as s3:GetObject; least privilege avoids unnecessary service:* grants. | 5 |
| AdministratorAccess | AWS Managed Policy AdministratorAccess | 管理员访问策略 | AdministratorAccess（すべての AWS アクションをすべてのリソースに対して許可する、非常に広範な管理権限の AWS 管理ポリシー） | An AWS managed policy with extremely broad permissions; it should not be the default policy for ordinary users. | 5 |
| ALB | Application Load Balancer | 应用负载均衡器 | Application Load Balancer（アプリケーションロードバランサー） | Layer 7 HTTP/HTTPS; supports path-based and host-based routing, plus WebSocket. | 5 |
| Alias Record | Alias Record | 别名记录 | エイリアスレコード | A Route 53 extension that can target supported AWS resources at the zone apex and inherits the target's TTL behavior. | 5 |
| Amazon Cognito | Amazon Cognito | 应用客户身份服务 | Amazon Cognito（顧客 ID・アクセス管理） | Provides customer identity for web and mobile apps: user pools authenticate users and issue tokens, while identity pools exchange identity for temporary AWS credentials. | 5 |
| Amazon Data Firehose | Amazon Data Firehose | 托管数据投递服务 | Amazon Data Firehose（配信ストリーム） | A destination-oriented near-real-time delivery service with size/time buffering, transformation, compression, and format conversion; it is not a general replay stream. | 5 |
| Amazon EC2 | Amazon Elastic Compute Cloud | 弹性计算云 | Amazon EC2（仮想サーバーを必要に応じて起動・停止・拡張できるコンピューティングサービス） | An IaaS virtual-server service configured from an AMI, instance type, networking, storage, authentication, and authorization. | 5 |
| AMI | Amazon Machine Image | Amazon 机器映像 | Amazon マシンイメージ | A template for launching EC2 that contains an OS, software, and configuration; it can include one or more EBS snapshots. | 5 |
| API Gateway | Amazon API Gateway | API 网关 | Amazon API Gateway（API の作成・公開・管理サービス） | A managed front door for APIs, not a VPC routing gateway. | 5 |
| ASG | Auto Scaling Group | 自动伸缩组 | Auto Scaling グループ（自動スケーリンググループ） | Maintains desired, minimum, and maximum instance counts; commonly paired with an ALB across multiple AZs. | 5 |
| AssumeRole | AWS STS AssumeRole | 代入 IAM 角色 | AssumeRole（信頼されたプリンシパルが AWS STS を通じて IAM ロールの一時認証情報を取得する操作） | A successful call returns expiring access key ID, secret access key, and session token credentials. | 5 |
| Aurora | Amazon Aurora | AWS 云原生关系型数据库 | Amazon Aurora（クラウドネイティブリレーショナルデータベース） | MySQL- and PostgreSQL-compatible, with storage replicated across multiple AZs; part of the RDS family. | 5 |
| Aurora Global Database | Amazon Aurora Global Database | Aurora 全球数据库 | Amazon Aurora Global Database（グローバルデータベース） | Uses one primary Region for writes and secondary Regions for global reads and regional disaster recovery. | 5 |
| Authentication | Authentication | 身份验证 | 認証（にんしょう） | Verifies who a user or entity is. | 5 |
| Authorization | Authorization | 授权 | 認可（にんか） | Determines which actions a principal is allowed to perform. | 5 |
| Auto Scaling | Amazon EC2 Auto Scaling | 自动扩缩容 | オートスケーリング | Adds or removes instances based on metrics; Auto Scaling manages capacity while ELB distributes traffic. | 5 |
| Availability | Service Availability | 服务可用性 | 可用性 | Whether a service can be accessed successfully when it is needed. | 5 |
| AWS | Amazon Web Services | 亚马逊云科技 / 云服务平台 | アマゾン・ウェブ・サービス | A global cloud platform; exams emphasize security, reliability, elasticity, pay-as-you-go pricing, and the shared responsibility model. | 5 |
| AWS Account | Amazon Web Services Account | AWS 账户 | AWS アカウント（AWS リソース、認証、請求を管理する単位） | The management boundary for AWS resources, identities, and billing; multiple IAM identities in one account are not separate accounts. | 5 |
| AWS Billing and Cost Management | AWS Billing and Cost Management | AWS 账单与成本管理 | AWS 請求とコスト管理 | The central entry point for bills, payments, cost analysis, and financial governance. | 5 |
| AWS Budgets | AWS Budgets | AWS 预算与阈值告警 | AWS Budgets（コストや使用量の実績値・予測値にしきい値を設定して通知するサービス） | Alerts when actual or forecast cost, usage, or commitment metrics cross configured thresholds. | 5 |
| AWS Config | AWS Config | 资源配置与合规 | リソース構成とコンプライアンス | Records resource configuration history and evaluates resources against compliance rules. | 5 |
| AWS Cost Explorer | AWS Cost Explorer | AWS 成本与用量分析 | AWS Cost Explorer（コストと使用量の可視化・分析） | Analyzes historical cost and usage with filters, grouping, trends, and forecasts. | 5 |
| AWS KMS | AWS Key Management Service | 密钥管理服务 | AWS KMS（暗号鍵管理サービス） | Creates, controls, and audits keys used to encrypt data. | 5 |
| AWS Organizations | AWS Organizations | 多账户集中管理 | AWS Organizations（複数アカウントの一元管理） | Manages accounts, OUs, SCPs, and consolidated billing; SCPs restrict permissions but do not grant them. | 5 |
| AWS Pricing Calculator | AWS Pricing Calculator | AWS 定价计算器 | AWS Pricing Calculator（AWS 利用料金の見積もり） | Estimates AWS costs from architecture and usage assumptions before deployment. | 5 |
| AWS Step Functions | AWS Step Functions | 无服务器工作流编排 | AWS Step Functions（ワークフローオーケストレーション） | Orchestrates multi-step workflows with sequence, choice, parallel, wait, retry/catch, and callback patterns; it coordinates work rather than running application code. | 5 |
| AWS Support Plans | AWS Support Plans | AWS 支持计划 | AWS サポートプラン | Provides different technical-support response targets and proactive guidance based on workload criticality. | 5 |
| AWS Three-Phase Migration Process | Assess → Mobilize → Migrate & Modernize | AWS 三阶段迁移流程 | AWS 3段階移行プロセス | Describes the migration sequence: Assess, Mobilize, then Migrate and Modernize. | 5 |
| AWS Well-Architected Framework | AWS Well-Architected Framework | AWS 架构最佳实践框架 | AWS Well-Architected Framework（優れた設計のためのベストプラクティス体系） | Continuously reviews and improves workloads through six architectural pillars. | 5 |
| AWS Well-Architected Six Pillars | AWS Well-Architected Framework Six Pillars | Well-Architected 六大支柱 | AWS Well-Architected の 6 本の柱（運用上の優秀性・セキュリティ・信頼性・パフォーマンス効率・コスト最適化・持続可能性） | The six pillars are Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. | 5 |
| AZ | Availability Zone | 可用区 | AWS アベイラビリティーゾーン（リージョン内で障害分離されたインフラストラクチャ拠点） | A failure-isolation boundary made of one or more discrete data centers within a Region; highly available designs usually span at least two AZs. | 5 |
| Backup & Restore | Backup and Restore | 备份与恢复策略 | バックアップと復元 | Backup and Restore is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Pilot Light / Continuous Replication. | 5 |
| Block Storage | Block Storage | 块存储 | ブロックストレージ | Provides low-latency random reads and writes in blocks, similar to a disk. | 5 |
| Bucket | Amazon S3 Bucket | S3 存储桶 | S3 バケット | The object container and management boundary for permissions, Region, Versioning, and Lifecycle. | 5 |
| Capacity Reservation | On-Demand Capacity Reservation | 按需容量预留 | オンデマンドキャパシティ予約（特定のアベイラビリティーゾーンで EC2 コンピューティング容量を確保する仕組み） | Reserves matching EC2 capacity in a specific AZ without providing a discount by itself; unused reserved capacity is normally billed. | 5 |
| CIDR | Classless Inter-Domain Routing | 无类别域间路由 | クラスレスドメイン間ルーティング | Represents an IP address range using a prefix length. | 5 |
| Cloud Computing | Cloud Computing | 云计算 | クラウドコンピューティング（必要な IT リソースをインターネット経由でオンデマンド利用する形態） | Provides compute, storage, databases, and other IT resources on demand over the internet with usage-based pricing and rapid scaling. | 5 |
| CloudFormation | AWS CloudFormation | 基础设施即代码 | AWS CloudFormation（コードによるインフラストラクチャ管理サービス） | Declares and repeatedly creates AWS resources from templates; useful for standardization, version control, and disaster recovery rebuilds. | 5 |
| CloudFormation Template | AWS CloudFormation Template | CloudFormation 模板 | CloudFormation テンプレート | Declares the required AWS resources in YAML or JSON. | 5 |
| CloudFront | Amazon CloudFront | 内容分发网络 | コンテンツ配信ネットワーク | Caches and distributes content through global edge locations to reduce user latency. | 5 |
| CloudFront Cache Invalidation | Amazon CloudFront Cache Invalidation | CloudFront 缓存失效 | CloudFront キャッシュ無効化 | Expires selected edge-cache paths before their TTL so the next request fetches fresh content from the origin. | 5 |
| CloudTrail | AWS CloudTrail | API 操作审计日志 | AWS CloudTrail（API 操作の監査ログサービス） | Records who performed which API action on what resource and when; answers who did what. | 5 |
| CloudWatch | Amazon CloudWatch | 监控与可观测性服务 | Amazon CloudWatch（モニタリング・ログ・オブザーバビリティサービス） | Monitors metrics, logs, alarms, and dashboards; answers how the system is performing now. | 5 |
| Cluster Placement Group | Cluster Placement Group | 集群放置组 | クラスタープレイスメントグループ（単一 AZ 内で EC2 を近接配置して低遅延と高スループットを重視する配置戦略） | Places instances close together in one AZ for tightly coupled or HPC performance; it is not Multi-AZ high availability. | 5 |
| Cognito Identity Pool | Amazon Cognito Identity Pool | Cognito 身份池 | Cognito ID プール | Exchanges identities from a user pool or external IdP for temporary AWS credentials constrained by IAM roles and policies. | 5 |
| Cognito User Pool | Amazon Cognito User Pool | Cognito 用户池 | Cognito ユーザープール | An application user directory and authentication service that handles sign-up/sign-in and issues ID, access, and refresh tokens, not AWS access keys. | 5 |
| Condition | Condition | 条件 | 条件（MFA、送信元 IP、タグ、組織などのリクエストコンテキストに基づいて規則の適用条件を指定する任意要素） | An optional policy element that limits when a statement applies based on request context. | 5 |
| CRR | Cross-Region Replication | 跨区域复制 | クロスリージョンレプリケーション | Replicates objects to another Region according to configured rules. | 5 |
| Customer Managed Policy | Customer Managed Policy | 客户托管策略 | カスタマー管理ポリシー（利用者が作成・管理し、複数の IAM アイデンティティで再利用できるポリシー） | A reusable standalone policy created by the customer, centrally maintained and versioned. | 5 |
| Cutover | Migration Cutover | 迁移正式切换 | 移行のカットオーバー | Migration Cutover is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Failover / Failback / Test Launch. | 5 |
| Database | Database | 数据库 | データベース | A system for persistently organizing, querying, updating, and analyzing business data. | 5 |
| Default Route | Default Route | 默认路由 | デフォルトルート | Usually written as 0.0.0.0/0 for IPv4 and ::/0 for IPv6. | 5 |
| Delete on Termination | Delete on Termination | 终止时删除 | 終了時に削除 | Controls whether an attached EBS volume is deleted when EC2 terminates; verify the actual block-device mapping rather than relying on defaults. | 5 |
| Deregistration Delay | Deregistration Delay | 注销延迟 / 连接排空 | 登録解除の遅延（コネクションドレイニング） | Protects in-flight connections while a target is removed or an ASG scales in; the older Classic Load Balancer term is connection draining. | 5 |
| DLQ | Dead-Letter Queue | 死信队列 | デッドレターキュー | Stores messages that repeatedly failed processing so they can be isolated, investigated, and reprocessed. | 5 |
| DNS | Domain Name System | 域名系统 | ドメインネームシステム | Resolves domain names to reachable network addresses or service endpoints. | 5 |
| Durability | Data Durability | 数据持久性 | 耐久性 | Whether data remains intact over time without permanent loss. | 5 |
| DynamoDB | Amazon DynamoDB | 无服务器 NoSQL 数据库 | サーバーレス NoSQL | A serverless key-value and document database built for single-digit-millisecond performance at scale. | 5 |
| DynamoDB Streams | Amazon DynamoDB Streams | DynamoDB 变更流 | DynamoDB Streams | Captures item creates, updates, and deletes in order for 24 hours. Use Kinesis Data Streams for DynamoDB when longer retention or more streaming consumers are required. | 5 |
| EBS | Amazon Elastic Block Store | 弹性块存储 | Amazon EBS（永続ブロックストレージ） | An EBS volume belongs to a specific account, Region, and AZ, not privately to the IAM user who created it; visibility depends on account, Region, and policy. | 5 |
| EC2 | Amazon Elastic Compute Cloud | 弹性云服务器 / 虚拟机 | Amazon EC2（仮想サーバー） | You manage the operating system, patches, and runtime; suited to long-running workloads that need system-level control. | 5 |
| EC2 Hibernate | EC2 Instance Hibernation | EC2 休眠 | EC2 休止（RAM の内容を暗号化されたルート EBS に保存し、次回起動時にプロセス状態を復元する機能） | Writes RAM to an encrypted root EBS volume and restores process state after start. It must be enabled at launch and is not backup or DR. | 5 |
| EC2 Instance Profile | Amazon EC2 Instance Profile | EC2 实例配置文件 | EC2 インスタンスプロファイル（IAM ロールを EC2 インスタンスへ渡すためのコンテナ） | An instance profile can contain one role at a time; SDK and CLI processes on EC2 obtain that role's temporary credentials through IMDS. | 5 |
| EC2 Instance Type | EC2 Instance Type | EC2 实例类型 | EC2 インスタンスタイプ（CPU、メモリ、ネットワーク、ストレージ性能の組み合わせを定義するインスタンス構成） | Defines the CPU, memory, network, and storage performance combination. Read the name by family, generation, capabilities, and size. | 5 |
| ECS | Amazon Elastic Container Service | AWS 容器编排服务 | Amazon ECS | AWS-native container orchestration with generally lower learning and operational overhead than EKS. | 5 |
| ECS Capacity Provider | Amazon ECS Capacity Provider | ECS 容量提供程序 | ECS キャパシティプロバイダー | Defines where ECS tasks obtain compute capacity, such as Fargate, Fargate Spot, or an Auto Scaling group; Base and Weight control strategy allocation. | 5 |
| ECS Task Execution Role | Amazon ECS Task Execution IAM Role | ECS 任务执行角色 | ECS タスク実行 IAM ロール | Used by the ECS or Fargate agent to pull private ECR images, publish logs, and retrieve startup secrets; it is not the application role. | 5 |
| ECS Task Role | Amazon ECS Task IAM Role | ECS 任务角色 | ECS タスク IAM ロール | Grants the application inside an ECS task permission to call AWS APIs, independent of whether the task runs on EC2 or Fargate. | 5 |
| Edge Location | AWS Edge Location | 边缘站点 | AWS エッジロケーション（利用者に近いコンテンツ配信拠点） | An edge facility near end users that reduces access latency; it is not a Region, AZ, or ordinary application data center. | 5 |
| Effect | Effect | 效果 | 効果（ポリシーステートメントがアクセスを許可するか拒否するかを Allow または Deny で指定する要素） | Either Allow or Deny; an applicable explicit Deny overrides Allow. | 5 |
| Egress-only Internet Gateway | Egress-only Internet Gateway | 仅出站互联网网关 | Egress-only インターネットゲートウェイ | Egress-only Internet Gateway is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Internet Gateway NAT64. | 5 |
| Elastic IP | Elastic IP Address | 弹性 IP 地址 | Elastic IP アドレス（AWS アカウントに割り当てて別の EC2 または ENI へ再関連付けできる固定パブリック IPv4） | A static public IPv4 address that the customer can allocate and reassociate. | 5 |
| Elastic Network Interface (ENI) | Elastic Network Interface | 弹性网络接口 | Elastic Network Interface（EC2 に IP、Security Group、MAC アドレスなどのネットワーク識別情報を与える仮想ネットワークカード） | A virtual NIC carrying IP addresses, security groups, and MAC identity. It belongs to one subnet and one AZ. | 5 |
| ElastiCache | Amazon ElastiCache | 托管内存数据存储与缓存 | Amazon ElastiCache（マネージドインメモリデータストア） | A general-purpose backend cache that reduces repeated database reads. | 5 |
| Elasticity | Elasticity | 弹性 | エラスティシティ（需要変動に応じてリソースを動的に増減する性質） | Capacity grows or shrinks quickly with actual demand, matching supply to load. | 5 |
| ELB | Elastic Load Balancing | 弹性负载均衡 | Elastic Load Balancing（マネージド負荷分散サービス） | Distributes traffic across targets and performs health checks; ALB and NLB are members of the ELB product family. | 5 |
| Encryption at Rest | Encryption at Rest | 静态加密 | 保管中の暗号化 | Protects data that has already been stored on media. | 5 |
| Encryption in Transit | Encryption in Transit | 传输中加密 | 転送中の暗号化 | Protects data while it travels across a network. | 5 |
| Explicit Deny | Explicit Deny | 显式拒绝 | 明示的な拒否（適用される Allow より優先してアクセスを拒否する規則） | An applicable explicit Deny overrides Allows in other policies and is the highest-priority IAM evaluation result. | 5 |
| External Session Store | External Session Store | 外部会话存储 | 外部セッションストア | Stores only a session ID in a cookie and keeps actual session state in a shared store available to all web nodes. | 5 |
| Failover | Failover | 故障切换 | フェイルオーバー | Switches traffic or workloads to a standby resource when the primary resource fails. | 5 |
| Failover Routing | Failover Routing Policy | 故障转移路由 | フェイルオーバールーティング | Implements primary/secondary active-passive DNS and can fail open when all evaluated endpoints are unhealthy. | 5 |
| Fan-out | Publish/Subscribe Fan-out | 发布订阅扇出 | パブリッシュ／サブスクライブ型ファンアウト | Publish/Subscribe Fan-out is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from SQS. | 5 |
| Fargate | AWS Fargate | 无服务器容器计算引擎 | AWS Fargate（ファーゲート） | Not an orchestrator, but a serverless compute option for ECS and EKS that removes the need to manage EC2 instances. | 5 |
| File Storage | File Storage | 文件存储 | ファイルストレージ | Provides directories, paths, and shared file-system semantics. | 5 |
| Full Load | Full Load | 全量加载 | フルロード | Full Load is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from CDC / Full Load + CDC. | 5 |
| Gateway Endpoint | Gateway VPC Endpoint | 网关型 VPC 端点 | ゲートウェイ VPC エンドポイント | Gateway VPC Endpoint is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Interface Endpoint Gateway Load Balancer Endpoint. | 5 |
| Glacier Deep Archive | Amazon S3 Glacier Deep Archive | Glacier 深度归档 | S3 Glacier Deep Archive | For long-term archives at the lowest cost, with the longest restore times. | 5 |
| Glacier Flexible Retrieval | Amazon S3 Glacier Flexible Retrieval | Glacier 灵活检索 | S3 Glacier Flexible Retrieval | For archival data that can wait minutes to hours for retrieval. | 5 |
| Glacier Instant Retrieval | Amazon S3 Glacier Instant Retrieval | Glacier 即时检索 | S3 Glacier Instant Retrieval | For rarely accessed data that still requires millisecond retrieval. | 5 |
| Global Service | AWS Global Service | 全球级服务 | AWS グローバルサービス（単一リージョンに限定されないサービス） | Its control plane or configuration is not limited to one Region; resource scope can still depend on the protected service. | 5 |
| Global Tables | DynamoDB Global Tables | DynamoDB 全球表 | グローバルテーブル | DynamoDB replication across multiple Regions with a multi-active architecture. | 5 |
| Golden AMI | Golden Amazon Machine Image | 黄金镜像 | ゴールデンAMI | Pre-bakes stable, repeated, slow-to-install operating-system dependencies and application components to accelerate launch and reduce drift. | 5 |
| gp3 | General Purpose SSD (gp3) | 通用型 SSD gp3 | 汎用 SSD（gp3） | General-purpose EBS SSD whose capacity, IOPS, and throughput can be configured more independently; usually the default choice for new general workloads. | 5 |
| HA | High Availability | 高可用性 | 高可用性（こうかようせい） | Reduces downtime through multiple AZs, redundancy, and automatic failover; it does not mean zero interruption. | 5 |
| Health Check Grace Period | Health Check Grace Period | 健康检查宽限期 | ヘルスチェック猶予期間 | Temporarily prevents an ASG from replacing a newly InService instance for EC2 or ELB health failures. | 5 |
| Hosted Zone | Hosted Zone | 托管区域 | ホストゾーン | An authoritative namespace containing DNS records. A matching private hosted zone does not fall back to public DNS when a record is absent. | 5 |
| IaC | Infrastructure as Code | 基础设施即代码 | Infrastructure as Code（コードによるインフラストラクチャ管理） | Declares infrastructure with templates or code and manages it under version control. | 5 |
| IAM | AWS Identity and Access Management | 身份与访问管理 | AWS Identity and Access Management（AWS のアイデンティティとアクセス権限を管理するグローバルサービス） | An account-level/global-view identity and permissions service. Access is denied by default, explicit denies win, and least privilege applies. | 5 |
| IAM Password Policy | IAM Account Password Policy | IAM 账户密码策略 | IAM パスワードポリシー（同一 AWS アカウント内の IAM ユーザーのコンソールパスワードについて、長さ、文字種、有効期限、再利用制限などを定める規則） | Controls only IAM user console passwords, not the root password, access keys, or IAM Identity Center passwords. | 5 |
| IAM Policy | IAM Policy | 权限策略 | IAM ポリシー（AWS の操作とリソースに対する許可・拒否を JSON で定義する権限文書） | A JSON permissions document, usually with Version and Statement. Identity-based policies omit Principal, and explicit Deny overrides Allow. | 5 |
| IAM Role | IAM Role | IAM 角色 | IAM ロール（信頼された主体が一時的に引き受け、許可された AWS 操作を実行するための IAM アイデンティティ） | The trust policy defines who may assume it; permissions policies define what the resulting role session may do. STS temporary credentials support workloads, federation, and cross-account access. | 5 |
| iam:PassRole | IAM PassRole permission | 将 IAM 角色传递给 AWS 服务的权限 | iam:PassRole（指定した IAM ロールを AWS サービスへ渡すことをユーザーに許可する IAM 権限） | PassRole is not AssumeRole. It lets a caller pass a specified role to an AWS service and should restrict both the role and destination service. | 5 |
| IAMReadOnlyAccess | IAMReadOnlyAccess | IAM 只读访问策略 | IAMReadOnlyAccess（IAM のユーザー、グループ、ロール、ポリシーなどを取得・一覧表示できる読み取り専用の AWS 管理ポリシー） | Mainly grants IAM Get and List actions, so resources can be viewed but not created, changed, or deleted. | 5 |
| Idempotency | Idempotency | 幂等性 | 冪等性（べきとうせい） | Repeating the same request produces no additional side effects; common in queue, retry, and payment scenarios. | 5 |
| Identity-based Policy | Identity-based Policy | 基于身份的策略 | アイデンティティベースのポリシー（IAM ユーザー、グループ、またはロールに付与する権限ポリシー） | Attached or embedded in an IAM identity; the principal is implied by the attachment, so Principal is not used. | 5 |
| IGW | Internet Gateway | 互联网网关 | インターネットゲートウェイ | Enables two-way internet communication for public-subnet resources; an instance still needs a public IP and correct routing. | 5 |
| Implicit Deny | Implicit Deny | 隐式拒绝 | 暗黙的な拒否（アクセスを許可する適用可能な Allow が存在しないため、既定で拒否される状態） | IAM denies by default; without an applicable Allow, the request remains implicitly denied. | 5 |
| Inbound Resolver Endpoint | Route 53 Resolver Inbound Endpoint | 入站解析器端点 | インバウンドリゾルバーエンドポイント | Allows on-premises DNS clients to resolve AWS private DNS through conditional forwarding and reachable TCP/UDP port 53. | 5 |
| Inherited Policy | Inherited Policy | 继承策略 | 継承されたポリシー（IAM ユーザーが所属グループを通じて受け取る権限ポリシー） | A user receives it through a group; removing the user from that group removes this permission source. | 5 |
| Inline Policy | Inline Policy | 内联策略 | インラインポリシー（単一の IAM ユーザー、グループ、またはロールに直接埋め込む一対一のポリシー） | Embedded one-to-one in a user, group, or role; it is deleted with the identity and is not suited to reuse. | 5 |
| Instance Profile | IAM Instance Profile | 实例配置文件 | インスタンスプロファイル | The container that delivers an IAM role to EC2. In Elastic Beanstalk it differs from the service role used by the platform. | 5 |
| Instance Warmup | Instance Warmup | 实例预热期 | インスタンスのウォームアップ | Prevents new instances from being counted as fully contributing capacity before initialization completes, reducing metric distortion and repeated scale-out. | 5 |
| Interface Endpoint | Interface VPC Endpoint | 接口型 VPC 端点 | インターフェイス VPC エンドポイント | Interface VPC Endpoint is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Gateway Endpoint NAT Gateway. | 5 |
| io2 | Provisioned IOPS SSD (io2) | 预置 IOPS SSD io2 | プロビジョンド IOPS SSD（io2） | Provisioned IOPS SSD for critical databases and sustained high-IOPS, low-latency workloads; EC2 EBS bandwidth can still limit performance. | 5 |
| IOPS | Input/Output Operations Per Second | 每秒输入/输出操作数 | IOPS（1 秒あたりの入出力操作数） | Measures read and write operations per second; important for random, small-block I/O. | 5 |
| JOIN | SQL JOIN | 多表连接 | 結合（JOIN） | Combines data from multiple relational tables using related keys. | 5 |
| Kinesis Data Streams | Amazon Kinesis Data Streams | 实时数据流服务 | Amazon Kinesis Data Streams（リアルタイムストリーム） | A replayable real-time stream. Partition keys select shards, ordering is per shard, and retention can extend to 365 days. | 5 |
| Lambda | AWS Lambda | 无服务器函数计算 | AWS Lambda（ラムダ） | Event-driven, automatically scales, and charges by invocation and duration; each run is limited to 15 minutes and is not suited to long-running processes. | 5 |
| Latency Routing | Latency-based Routing Policy | 延迟路由 | レイテンシールーティング | Returns the AWS Region expected to offer the lowest network latency; it is not geographic distance or a live ping. | 5 |
| Least Privilege | Principle of Least Privilege | 最低权限原则 | 最小権限の原則（業務に必要な最小限のアクセス権だけを付与する考え方） | Start with only the Actions, Resources, and conditions needed for the current task to reduce security risk, mistakes, and unexpected cost. | 5 |
| Lifecycle Policy | Amazon S3 Lifecycle Policy | S3 生命周期策略 | S3 ライフサイクルポリシー | Moves data between storage classes, expires objects, and cleans up old versions according to rules. | 5 |
| Listener Rule | Listener Rule | 监听器规则 | リスナールール | Combines priority, conditions, and an action. Lower numeric priorities match first and the default rule runs last. | 5 |
| Long Polling | SQS Long Polling | 长轮询 | ロングポーリング | Waits for messages for up to 20 seconds, reducing empty responses and API cost. It does not extend a message's visibility timeout. | 5 |
| Longest Prefix Match | Longest Prefix Match | 最长前缀匹配 | 最長プレフィックス一致 | The route with the most specific matching destination takes precedence. | 5 |
| Loose Coupling | Loosely Coupled Architecture | 松散耦合 | 疎結合（そけつごう） | Lets components scale and recover independently; SQS is the most common exam example of decoupling. | 5 |
| Message Group ID | Message Group ID | 消息组 ID | メッセージグループ ID | Defines the ordering boundary in a FIFO queue: messages in one group are processed in order while different groups can progress in parallel. | 5 |
| MFA | Multi-Factor Authentication | 多因素认证 | 多要素認証（パスワードなどの第一要素に加えて、パスキーや認証アプリなど別の要素を要求する本人確認方式） | Adds another authentication factor but grants no permission. Enable it first for root and privileged identities; root and IAM users currently support up to eight devices. | 5 |
| MFA Delete | Amazon S3 MFA Delete | MFA 删除保护 | MFA 削除 | Requires MFA to permanently delete a specific S3 object version or change versioning state. Only the root user can enable or disable it. | 5 |
| Mount Target | Amazon EFS Mount Target | EFS 挂载目标 | EFS マウントターゲット | The network entry point for EFS in a subnet within an AZ. | 5 |
| Multi-AZ | Multi-Availability Zone Deployment | 多可用区部署 | マルチ AZ 配置 | Primarily provides high availability and automatic failover, not read scaling. | 5 |
| Multi-AZ DB Cluster | Multi-AZ DB Cluster | 多可用区数据库集群 | マルチ AZ DB クラスター | Spans three Availability Zones and combines database high availability with readable instances. | 5 |
| Multi-Region | Multi-Region Architecture | 多区域架构 | マルチリージョン構成 | Deploys across AWS Regions for Region-level disaster recovery, global low latency, or compliance. | 5 |
| Multi-site Active/Active | Multi-site Active/Active | 多站点双活／多活 | マルチサイト・アクティブ／アクティブ | Multi-site Active/Active is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Hot Standby / Aurora Global Database. | 5 |
| NACL | Network Access Control List | 网络访问控制列表 | ネットワーク ACL | Subnet-level and stateless, with both allow and deny rules; inbound and outbound rules must be configured explicitly. | 5 |
| NAT Gateway | Network Address Translation Gateway | NAT 网关 | NAT ゲートウェイ | Lets private-subnet resources initiate internet access without allowing unsolicited inbound connections; deployed in a public subnet. | 5 |
| NFS | Network File System | 网络文件系统 | ネットワークファイルシステム | A common shared-file protocol on Linux; EFS commonly uses TCP port 2049. | 5 |
| NoSQL | Not Only SQL | 非关系型数据库范式 | NoSQL データベース | Does not mean no structure; it means a fixed relational-table model is not the only data model. | 5 |
| Object | Amazon S3 Object | S3 对象 | S3 オブジェクト | The storage unit in object storage, consisting of data, a key, metadata, and related attributes. | 5 |
| Object Key | Amazon S3 Object Key | S3 对象键 | S3 オブジェクトキー | The unique name of an object in a bucket; slashes only represent prefixes. | 5 |
| Object Lock | Amazon S3 Object Lock | S3 对象锁 | S3 オブジェクトロック | Prevents an object from being modified or deleted during its retention period. | 5 |
| Object Storage | Object Storage | 对象存储 | オブジェクトストレージ | Stores data as objects with metadata and accesses it through APIs or HTTP. | 5 |
| Origin Access Control (OAC) | CloudFront Origin Access Control | 源站访问控制 | オリジンアクセスコントロール | Signs CloudFront requests to a private S3 origin and works with a bucket policy. S3 website endpoints do not support OAC. | 5 |
| Outbound Resolver Endpoint | Route 53 Resolver Outbound Endpoint | 出站解析器端点 | アウトバウンドリゾルバーエンドポイント | Provides the AWS-to-on-premises DNS forwarding path and must be combined with Resolver rules. | 5 |
| Partition Key | Partition Key | 分区键 | パーティションキー | Determines the distribution of DynamoDB items and is the key element required by Query. | 5 |
| Partition Placement Group | Partition Placement Group | 分区放置组 | パーティションプレイスメントグループ（多数の EC2 を独立したラック集合ごとの障害分離グループへ分ける配置戦略） | Separates many instances into independent rack groups. Each AZ supports up to seven partitions, and each partition can contain many instances. | 5 |
| Permissions Policy | IAM Permissions Policy | IAM 权限策略 | アクセス許可ポリシー（IAM ユーザーやロールなどが実行できる AWS のアクションと対象リソースを定義するポリシー） | A role's permissions policy defines what the role session may do; it does not define who may assume the role. | 5 |
| Pilot Light | Pilot Light | 指示灯灾备策略 | パイロットライト | Pilot Light is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Warm Standby. | 5 |
| Point-in-Time Recovery (PITR) | Point-in-Time Recovery | 时间点恢复 | ポイントインタイムリカバリ | Restores a database to a specific point within the retention window. | 5 |
| Policy Statement | Policy Statement | 策略语句 | ポリシーステートメント（Effect、Action、Resource、Condition などで一つの権限規則を表す記述） | The core IAM JSON permission rule; Statement may be one object or an array of multiple statements. | 5 |
| Policy Wildcard | Policy Wildcard | 策略通配符 | ポリシーのワイルドカード（アクション名やリソース範囲の複数の値を * または ? でまとめて一致させる記号） | In Action it matches API operation names; in Resource it matches resource scope, so meaning depends on the field. | 5 |
| Presigned URL | Amazon S3 Presigned URL | 预签名 URL | 署名付き URL | Provides temporary, expiring access within the permissions of the signer. | 5 |
| Primary Key | Primary Key | 主键 | 主キー | A key that uniquely identifies a record or item. | 5 |
| Principal | Principal | 主体 | プリンシパル（リソースベースまたは信頼ポリシーで、規則の対象となるアカウント、ユーザー、ロール、サービスなどの主体） | Common in resource-based and trust policies; identity-based policies do not use it, and IAM groups cannot be principals. | 5 |
| Private IP | Private IP Address | 私有 IP 地址 | プライベート IP アドレス（VPC など到達可能なプライベートネットワーク内で通信するための IP アドレス） | Used for private-network communication. A primary private IPv4 normally survives stop/start and can be reached through VPN, bastion, Direct Connect, or private endpoints. | 5 |
| Private Subnet | Private Subnet | 私有子网 | プライベートサブネット | Has no direct route to an IGW; resources can initiate outbound access through NAT. | 5 |
| PrivateLink | AWS PrivateLink | AWS 私有链接 | AWS PrivateLink（AWS サービスへのプライベート接続） | Provides private access to a specific service without connecting entire networks. | 5 |
| Provisioned Concurrency | AWS Lambda Provisioned Concurrency | 预置并发 | プロビジョニング済み同時実行数 | Keeps a configured number of Lambda environments initialized to reduce cold starts. It requires a version or alias, adds cost, and is not a maximum concurrency limit. | 5 |
| Public IP | Public IP Address | 公有 IP 地址 | パブリック IP アドレス（インターネット上でルーティング可能な IP アドレス） | An Internet-routable address. An auto-assigned public IPv4 is normally released on stop, and reachability still requires routes and security controls. | 5 |
| Public Subnet | Public Subnet | 公有子网 | パブリックサブネット | Its route table has a direct route to an IGW; resources also need public addresses and security rules for internet communication. | 5 |
| Query | Query | 查询操作 | クエリ | A DynamoDB Query locates data by partition key and is usually more efficient than Scan. | 5 |
| RDS | Amazon Relational Database Service | 托管关系型数据库服务 | Amazon RDS（マネージドリレーショナルデータベース） | AWS manages backups, patching, and infrastructure; Multi-AZ improves availability while Read Replicas scale reads. | 5 |
| RDS Proxy | Amazon RDS Proxy | RDS 数据库代理 | Amazon RDS Proxy（データベースプロキシ） | Pools and multiplexes backend database connections, especially for Lambda connection storms; it is not a query cache. | 5 |
| Read Replica | Read Replica | 只读副本 | リードレプリカ | Primarily scales reads and reporting queries; replication is usually asynchronous and can span Regions. | 5 |
| Reader Endpoint | Reader Endpoint | 读取端点 | リーダーエンドポイント | Provides one connection endpoint for general Aurora read traffic and automatically includes eligible new readers. | 5 |
| Redundancy | Redundancy | 冗余 | 冗長性（じょうちょうせい） | Reduces single points of failure by duplicating components and paths. | 5 |
| Refactor / Re-architect | Refactor / Re-architect | 重构、重新架构 | リファクタリング／再設計 | Changes or rewrites code to redesign the architecture around cloud-native capabilities. | 5 |
| Region | AWS Region | 区域 | AWS リージョン（複数のアベイラビリティーゾーンを含む独立した地理的領域） | Choose a Region by checking compliance, latency, service availability, and price; cross-Region designs commonly address disaster recovery, compliance, or global latency. | 5 |
| Regional Service | AWS Regional Service | 区域级服务 | AWS リージョナルサービス（単一リージョンを作用範囲とするサービス） | Resources and operations belong to a selected Region; switching the console Region shows a different regional resource set. | 5 |
| Rehost | Rehost (Lift and Shift) | 重新托管、原样迁移 | 再ホスト（リフト・アンド・シフト） | Moves an individual server or application to AWS with little or no application change. | 5 |
| Relational Database | Relational Database | 关系数据库 | リレーショナルデータベース | Organizes data with tables, keys, and relationships, supporting SQL, joins, and transactions. | 5 |
| Replatform | Replatform (Lift, Tinker and Shift) | 更换平台、小幅优化后迁移 | 再プラットフォーム化 | Migrates after limited cloud optimization without changing the core architecture. | 5 |
| Reserved Concurrency | AWS Lambda Reserved Concurrency | 预留并发 | 予約済み同時実行数 | Reserves capacity for a Lambda function and caps its maximum concurrency. A value of zero throttles the function, but does not pre-warm environments. | 5 |
| Reserved Instance | Reserved Instance | 预留实例 | リザーブドインスタンス（一定期間の利用コミットメントにより EC2 料金の割引を受ける課金上の仕組み） | A billing discount based on commitment. Regional RIs emphasize flexible discount, while matching Zonal RIs also provide an AZ capacity benefit. | 5 |
| Resource | Resource | 资源 | リソース（ポリシーステートメントの適用対象となる AWS リソースを ARN などで指定する要素） | Specifies the AWS resource a statement affects; avoid * when an exact scope can be defined. | 5 |
| Resource-based Policy | Resource-based Policy | 基于资源的策略 | リソースベースのポリシー（AWS リソース側に設定し、どのプリンシパルに何を許可・拒否するかを定義するポリシー） | Attached to a resource and usually names principals; it is common for cross-account authorization. | 5 |
| Root User | AWS Account Root User | AWS 账户根用户 | AWS アカウントのルートユーザー（アカウント作成時の最高権限を持つ本人確認主体） | Use only for the few account tasks that require root. Enable MFA, create no access key, and do not use it for daily administration. | 5 |
| Route 53 | Amazon Route 53 | 权威 DNS、域名与流量路由服务 | Amazon Route 53（DNS・ドメイン登録・ヘルスチェック・ルーティング） | Provides DNS resolution, domain registration, health checks, and traffic routing. | 5 |
| Route 53 Health Check | Amazon Route 53 Health Check | Route 53 健康检查 | Route 53 ヘルスチェック | Produces a health signal that affects DNS only when associated with a record or policy. Private resources commonly use CloudWatch alarms. | 5 |
| Route 53 Resolver | Amazon Route 53 Resolver | Route 53 解析器 | Route 53 Resolver | The default recursive resolver in a VPC for VPC-local names, private hosted zones, and public DNS. | 5 |
| Route 53 Routing Policy | Amazon Route 53 Routing Policy | Route 53 路由策略 | Route 53 ルーティングポリシー | Selects which authoritative DNS record to return; it is not an application proxy and includes simple, weighted, latency, failover, geographic, IP-based, and multi-value options. | 5 |
| Route Table | Route Table | 路由表 | ルートテーブル | Determines the next hop for network traffic; it does not allow or deny individual connections. | 5 |
| RPO | Recovery Point Objective | 恢复点目标 | 目標復旧時点 | The maximum amount of data loss, measured in time, that the business can tolerate. | 5 |
| RTO | Recovery Time Objective | 恢复时间目标 | 目標復旧時間 | The maximum time allowed to restore the business after a failure. | 5 |
| S3 | Amazon Simple Storage Service | 对象存储 | Amazon S3（オブジェクトストレージ） | Stores data as objects in buckets with very high durability; it is not mounted to EC2 as a traditional block device. | 5 |
| S3 Block Public Access | Amazon S3 Block Public Access | S3 阻止公共访问 | S3 ブロックパブリックアクセス | A guardrail that blocks public ACLs or policies from accidentally exposing data; it does not grant access. | 5 |
| S3 Bucket Policy | Amazon S3 Bucket Policy | S3 存储桶策略 | S3 バケットポリシー | A resource-based policy attached to a bucket. Object operations such as GetObject must match object ARNs such as bucket/*. | 5 |
| S3 Event Notifications | Amazon S3 Event Notifications | S3 事件通知 | S3 イベント通知 | Sends object events directly to SNS, SQS Standard, or Lambda. Use EventBridge for richer filtering, replay, or FIFO targets. | 5 |
| S3 Intelligent-Tiering | Amazon S3 Intelligent-Tiering | S3 智能分层 | S3 Intelligent-Tiering（自動階層化ストレージクラス） | For data with unknown or changing access patterns; automatically moves data between access tiers. | 5 |
| S3 Standard | Amazon S3 Standard | S3 标准存储 | S3 Standard（標準ストレージクラス） | The default storage class for frequently accessed data, with multiple AZs and low latency. | 5 |
| S3 Standard-IA | Amazon S3 Standard-Infrequent Access | S3 标准-低频访问 | S3 Standard-IA（標準-低頻度アクセス） | For infrequently accessed data that still needs millisecond retrieval; retrieval fees apply. | 5 |
| Savings Plans | Savings Plans | 节省计划 | Savings Plans（1 年または 3 年の時間当たり利用額をコミットしてコンピューティング料金の割引を受ける仕組み） | Discounts eligible compute in exchange for a one- or three-year hourly spend commitment; it has no two-year term and does not reserve capacity. | 5 |
| Scalability | Scalability | 可扩展性 | スケーラビリティ（需要増加に合わせて処理能力を拡張できる性質） | A system can scale vertically or horizontally to handle more load, but it does not necessarily scale down automatically. | 5 |
| Schema | Schema | 数据结构定义 | スキーマ | Defines tables, columns, types, and constraints; DynamoDB still has a primary-key schema. | 5 |
| Secret Access Key | Secret Access Key | 秘密访问密钥 | シークレットアクセスキー（AWS API リクエストの署名に使用する秘密値で、作成時以外は再表示できない認証情報） | Keep it secret and never share or hard-code it; if lost, create and validate a new key before revoking the old one. | 5 |
| Security Group | Security Group | 安全组 | セキュリティグループ（EC2 などのリソースに適用するステートフルな仮想ファイアウォール） | Instance-level and stateful, with allow rules only; return traffic is automatically permitted. | 5 |
| Serverless | Serverless Computing | 无服务器计算 | サーバーレスコンピューティング | Servers still exist, but users do not manage them; common examples include Lambda, Fargate, and DynamoDB. | 5 |
| Service Role | IAM Role for an AWS Service | AWS 服务角色 | サービスロール（AWS サービスが利用者に代わって処理を実行するために引き受ける IAM ロール） | Its trust policy trusts the relevant AWS service, while its permissions policy grants only what that service needs to perform the task. | 5 |
| Session Token | Session Token | 会话令牌 | セッショントークン（STS などが発行する一時的な Access Key ID と Secret Access Key とともに使用する、期限付き認証情報の追加要素） | The third component of temporary credentials; it must accompany the temporary access key and expires with the session. | 5 |
| Snapshot | Amazon EBS Snapshot | EBS 快照 | EBS スナップショット | An incremental backup that can restore a volume in any AZ and can be copied to another Region. | 5 |
| SNS | Amazon Simple Notification Service | 通知与发布订阅服务 | Amazon SNS（通知サービス） | Push-based pub/sub and broadcasting; a common fan-out pattern sends one SNS message to multiple SQS queues. | 5 |
| SPOF | Single Point of Failure | 单点故障 | 単一障害点 | A component whose failure makes the entire system unavailable. | 5 |
| Spot Instance | EC2 Spot Instance | 竞价型实例 | スポットインスタンス（AWS の未使用 EC2 キャパシティを割引価格で利用する中断可能なインスタンス） | Uses discounted spare EC2 capacity and can be interrupted. Design for checkpoints, retries, and a best-effort interruption notice. | 5 |
| Spread Placement Group | Spread Placement Group | 分散放置组 | スプレッドプレイスメントグループ（少数の重要な EC2 を異なる基盤ハードウェアへ分散して障害分離を高める配置戦略） | Separates a small number of critical instances across hardware; rack-level spread supports up to seven running instances per AZ per group. | 5 |
| SQL | Structured Query Language | 结构化查询语言 | 構造化照会言語 | A language for defining, querying, and modifying data in relational databases. | 5 |
| SQS | Amazon Simple Queue Service | 消息队列服务 | Amazon SQS（メッセージキュー） | A pull-based buffer for decoupling; Standard provides at-least-once delivery, while FIFO preserves order and deduplicates. | 5 |
| SSE-KMS | Server-Side Encryption with AWS KMS keys | KMS 密钥的服务端加密 | AWS KMS キーによるサーバー側暗号化 | Uses KMS keys for S3 encryption and requires both S3 and KMS authorization; account for KMS audit events, cost, and quotas. | 5 |
| SSE-S3 | Server-Side Encryption with Amazon S3 managed keys | S3 托管密钥的服务端加密 | S3 管理キーによるサーバー側暗号化 | The default S3 server-side encryption using S3-managed AES-256 keys with minimal operational overhead. | 5 |
| Stateful | Stateful | 有状态 | ステートフル | Tracks permitted connections and their related return traffic. | 5 |
| Stateless | Stateless | 无状态 | ステートレス | Evaluates each direction independently without tracking connections. | 5 |
| Stateless Architecture | Stateless Architecture | 无状态架构 | ステートレスアーキテクチャ | Keeps required session and business state out of an individual web node, enabling horizontal scale and safe replacement. | 5 |
| Subnet | Subnet | 子网 | サブネット | A subnet belongs to one AZ; it is public only when its route table points to an Internet Gateway. | 5 |
| Table | Table | 表 | テーブル | Made of rows and columns in a relational database, and of items in DynamoDB. | 5 |
| Target Group | Target Group | 目标组 | ターゲットグループ | Defines backends, protocol, port, and health checks; a target can move through initial, healthy, unhealthy, draining, and unused states. | 5 |
| Target Tracking Scaling | Target Tracking Scaling | 目标跟踪伸缩 | ターゲット追跡スケーリング | Maintains a target for a capacity-sensitive metric such as CPU or ALBRequestCountPerTarget; that metric is not outstanding requests. | 5 |
| Temporary Credentials | Temporary Security Credentials | 临时安全凭证 | 一時的なセキュリティ認証情報 | Time-limited credentials consisting of an access key, secret key, and session token. | 5 |
| Temporary Security Credentials | AWS Temporary Security Credentials | AWS 临时安全凭证 | AWS 一時的セキュリティ認証情報（Access Key ID、Secret Access Key、Session Token で構成され、有効期限がある API 認証情報） | Expire automatically and are used by roles, IAM Identity Center, and federation; prefer them over long-term IAM user keys. | 5 |
| Three-Tier Architecture | Three-Tier Architecture | 三层架构 | 3層アーキテクチャ | Separates entry/presentation, application logic, and data so each layer can scale and be secured independently. | 5 |
| Throughput | Storage Throughput | 存储吞吐量 | スループット | Measures data transferred per second; important for large sequential I/O. | 5 |
| TLS | Transport Layer Security | 传输层安全协议 | トランスポート層セキュリティ | The modern protocol used to establish encrypted network connections. | 5 |
| Trust Policy | IAM Role Trust Policy | IAM 角色信任策略 | 信頼ポリシー（どのプリンシパルが IAM ロールを引き受けられるかを定義する、ロール必須のリソースベースポリシー） | Defines who may assume a role; it does not replace the permissions policy that defines what the role session may do. | 5 |
| TTL | Time to Live | 生存时间 | TTL（生存時間） | Controls how long recursive resolvers cache a DNS answer. Lowering it does not purge copies already cached under the prior value. | 5 |
| Versioning | Amazon S3 Versioning | S3 版本控制 | S3 バージョニング | Keeps historical object versions to protect against accidental overwrites and deletions. | 5 |
| Virtual MFA Device | Virtual Multi-Factor Authentication Device | 虚拟 MFA 设备 | 仮想 MFA デバイス（認証アプリで TOTP コードを生成し、パスワードに加えて本人確認を行うソフトウェア認証器） | Linked through a QR code or secret configuration key; those values can generate TOTP codes and must be protected as credentials. | 5 |
| Visibility Timeout | Visibility Timeout | 可见性超时 | 可視性タイムアウト | After an SQS message is read, it is temporarily hidden from other consumers; set it longer than actual processing time. | 5 |
| VPC | Amazon Virtual Private Cloud | 虚拟私有云 | Amazon VPC（仮想プライベートクラウド） | A logically isolated, Region-level network; CIDR planning, routing, security groups, and NACLs are core VPC concepts. | 5 |
| VPC Endpoint | Virtual Private Cloud Endpoint | VPC 端点 | VPC エンドポイント | Provides private access to supported AWS services or endpoint services. | 5 |
| VPC Flow Logs | Amazon Virtual Private Cloud Flow Logs | VPC 流日志 | VPC フローログ | Amazon Virtual Private Cloud Flow Logs is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Traffic Mirroring CloudTrail GuardDuty. | 5 |
| VPC Peering | Virtual Private Cloud Peering | VPC 对等连接 | VPC ピアリング | Virtual Private Cloud Peering is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Transit Gateway PrivateLink. | 5 |
| Warm Standby | Warm Standby | 温备用灾备策略 | ウォームスタンバイ | Warm Standby is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Pilot Light / Hot Standby. | 5 |
| Weighted Routing | Weighted Routing Policy | 加权路由 | 加重ルーティング | Chooses DNS answers by relative weights for canary or blue/green releases, without guaranteeing an exact request percentage. | 5 |
| Writer Endpoint | Writer Endpoint / Cluster Endpoint | 写入端点 | ライターエンドポイント | The Aurora endpoint for reads, writes, DDL, and transactions; after failover it points to the new writer. | 5 |
| Zonal Resource | AWS Zonal Resource | 可用区级资源 | AWS ゾーナルリソース（特定のアベイラビリティーゾーンに配置されるリソース） | Lives in a specific AZ; the architecture must use multiple AZs when it needs resilience to AZ failure. | 5 |
| Access Key | AWS Access Key | AWS 访问密钥 | AWS アクセスキー（AWS API リクエストへの署名に使用する認証情報。長期キーは必要な場合だけ使用し、安全な手順で更新する） | API signing credentials. Long-term keys usually belong to IAM users; temporary keys also include a session token. When long-term keys are unavoidable, create a new key, update and verify consumers, then deactivate and delete the old key. | 4 |
| Amazon GuardDuty | Amazon GuardDuty | 智能威胁检测 | Amazon GuardDuty（インテリジェントな脅威検出） | Continuously analyzes activity and threat intelligence to identify suspicious behavior. | 4 |
| Amazon MQ | Amazon MQ | 托管消息代理服务 | Amazon MQ（マネージドメッセージブローカー） | A managed broker for existing JMS, AMQP, MQTT, OpenWire, or STOMP applications. Cloud-native designs usually prefer SQS and SNS. | 4 |
| Anycast IP | Anycast Internet Protocol Address | 任播 IP 地址 | エニーキャスト IP | The same IP is advertised from multiple network locations so users enter through a nearby point. | 4 |
| API Call | Application Programming Interface Call | API 调用 | API 呼び出し（プログラムや AWS マネジメントコンソールが AWS サービスの操作を実行するために送信するリクエスト） | Console actions also trigger one or more API calls, and IAM policy Actions determine whether those calls are authorized. | 4 |
| At-Least-Once Delivery | At-Least-Once Delivery | 至少一次投递 | 少なくとも1回の配信 | Messages can be delivered more than once, so consumers must be designed to be idempotent. | 4 |
| Athena | Amazon Athena | S3 无服务器 SQL 查询 | S3 サーバーレス SQL | Runs serverless SQL queries directly against data stored in S3. | 4 |
| Attribute | Attribute | 属性 | 属性（アトリビュート） | A field and its value within a DynamoDB item. | 4 |
| Aurora Backtrack | Aurora Backtrack | Aurora 快速回退 | Aurora バックトラック | An Aurora MySQL feature enabled at cluster creation that quickly rewinds within a configured window of up to 72 hours. | 4 |
| Aurora Database Clone | Aurora Database Cloning | Aurora 数据库克隆 | Aurora データベースクローン | Uses copy-on-write to create an independent, writable Aurora cluster quickly for development, test, or staging. | 4 |
| Aurora Replica Auto Scaling | Aurora Replica Auto Scaling | Aurora 副本自动扩缩 | Aurora レプリカオートスケーリング | Adds or removes Aurora replicas based on reader CPU, connection count, or other supported scaling metrics. | 4 |
| Aurora Serverless | Amazon Aurora Serverless | Aurora 无服务器计算 | Amazon Aurora Serverless（サーバーレス） | Automatically adjusts the compute capacity of Aurora writer and reader instances based on workload. | 4 |
| Authenticator App | Authenticator Application | 身份验证器应用 | 認証アプリ（仮想 MFA デバイスとして TOTP コードを生成し、ログイン時の追加認証に使用するアプリケーション） | Initially linked with a QR code or secret key; later sign-ins use the current TOTP code. | 4 |
| Authoritative DNS | Authoritative Domain Name System | 权威 DNS | 権威DNS | Stores and returns final DNS records for a zone, unlike a resolver that recursively looks up records for clients. | 4 |
| Automated Backup | Automated Backup | 自动备份 | 自動バックアップ | RDS automated backups combine snapshots and logs to support point-in-time recovery within the retention period. | 4 |
| AWS Artifact | AWS Artifact | 合规文档与协议自助服务 | AWS Artifact（コンプライアンス文書・契約のセルフサービス） | Provides AWS compliance reports and manages applicable agreements; it does not scan customer resources. | 4 |
| AWS Audit Manager | AWS Audit Manager | 审计证据自动收集与评估管理 | AWS Audit Manager（監査証拠の自動収集・評価支援） | Organizes controls by audit framework and continuously collects evidence from the customer environment. | 4 |
| AWS Backup | AWS Backup | 集中式备份服务 | AWS Backup（一元管理型バックアップサービス） | Centrally manages backup and retention policies across multiple AWS services. | 4 |
| AWS Backup Vault Lock | AWS Backup Vault Lock | AWS Backup 不可变保留锁 | AWS Backup ボールトロック | AWS Backup Vault Lock is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from S3 Object Lock / Glacier Vault Lock. | 4 |
| AWS CLI | AWS Command Line Interface | AWS 命令行界面 | AWS CLI（ターミナルからコマンドやシェルスクリプトで AWS API を操作するコマンドラインツール） | Calls AWS APIs from terminal commands and shell scripts. aws configure stores profile credentials, default Region, and output format but grants no IAM permissions; people should prefer Identity Center and temporary credentials. | 4 |
| AWS Cloud Adoption Framework | AWS Cloud Adoption Framework (AWS CAF) | AWS 云采用框架 | AWS クラウド導入フレームワーク | Improves cloud readiness through six perspectives: Business, People, Governance, Platform, Security, and Operations. | 4 |
| AWS Compute Optimizer | AWS Compute Optimizer | AWS 计算资源优化建议 | AWS Compute Optimizer（コンピューティングリソースの適正化推奨） | Uses utilization data to recommend right-sized resource configurations. | 4 |
| aws configure | AWS CLI configure command | AWS CLI 配置命令 | aws configure（AWS CLI のプロファイルに認証情報、既定リージョン、既定の出力形式などを保存する設定コマンド） | Stores client configuration; it does not create an IAM user, attach a policy, or guarantee permission for later API calls. | 4 |
| AWS Control Tower | AWS Control Tower | 多账户 Landing Zone 与治理 | AWS Control Tower（マルチアカウント環境の構築・統制） | Provides a landing zone, Account Factory, controls, and a governance dashboard. | 4 |
| AWS DMS | AWS Database Migration Service | 数据库迁移服务 | データベース移行サービス | Migrates databases with minimal downtime through full load and ongoing replication. | 4 |
| AWS DRS | AWS Elastic Disaster Recovery | AWS 弹性灾难恢复 | AWS Elastic Disaster Recovery（災害復旧サービス） | Continuously replicates servers at the block level and quickly launches recovery instances during a disaster. | 4 |
| AWS Health Dashboard | AWS Health Dashboard | 账户相关的 AWS 服务健康与事件通知 | AWS Health Dashboard（アカウント別のサービス稼働状況） | Shows whether AWS service events, planned changes, and account notifications affect your resources. | 4 |
| AWS Managed Policy | AWS Managed Policy | AWS 托管策略 | AWS 管理ポリシー（AWS が作成・管理し、複数の IAM アイデンティティにアタッチできるポリシー） | Created and maintained by AWS and attachable to multiple identities; AWS may update its permissions. | 4 |
| AWS Marketplace | AWS Marketplace | AWS 第三方产品数字市场 | AWS Marketplace（サードパーティ製品・サービスのデジタルカタログ） | A digital catalog for discovering, purchasing, and deploying third-party software, data, and professional services. | 4 |
| AWS Network Firewall | AWS Network Firewall | AWS 网络防火墙 | AWS Network Firewall | AWS Network Firewall is an AWS Security concept. Review its purpose and operational boundaries, and distinguish it from AWS WAF Security Group NACL Firewall Manager. | 4 |
| AWS ParallelCluster | AWS ParallelCluster | HPC 集群部署与管理工具 | AWS ParallelCluster（HPC クラスター管理ツール） | AWS ParallelCluster is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from AWS Batch Slurm vs. | 4 |
| AWS SCT | AWS Schema Conversion Tool | Schema 转换工具 | スキーマ変換ツール | Assesses and converts schemas and code objects for heterogeneous database migrations. | 4 |
| AWS SDK | AWS Software Development Kit | AWS 软件开发工具包 | AWS SDK（アプリケーションコードから AWS API を呼び出すための、プログラミング言語別のソフトウェア開発キット） | Language-specific libraries for calling AWS APIs from application code; the credential provider chain can obtain role, Identity Center, and other temporary or long-term credentials. | 4 |
| AWS Secrets Manager | AWS Secrets Manager | 机密与凭证管理 | AWS Secrets Manager（シークレット・認証情報管理） | Securely stores passwords, tokens, and API keys and can rotate them automatically. | 4 |
| AWS Service Catalog | AWS Service Catalog | 已批准 IT 服务目录 | AWS Service Catalog（承認済み IT サービスのカタログ管理） | Lets users deploy approved products through controlled self-service. | 4 |
| AWS Shield | AWS Shield | DDoS 防护 | AWS Shield（DDoS 保護サービス） | Protects AWS applications against DoS and DDoS attacks. | 4 |
| AWS Systems Manager | AWS Systems Manager | 集中式运维管理 | AWS Systems Manager（統合運用管理サービス） | Centrally manages nodes, patches, commands, and operations automation. | 4 |
| AWS Tags | AWS Resource Tags | AWS 资源标签 | AWS リソースタグ（リソースへ付与するキーと値の任意メタデータ） | Key-value metadata for classification, cost, automation, and governance; tags do not grant access by themselves. | 4 |
| AWS Transform MGN | AWS Transform MGN (formerly AWS Application Migration Service) | AWS 服务器与应用迁移服务 | AWS Transform MGN（サーバー・アプリケーション移行サービス） | AWS Application Migration Service was renamed in June 2026; it migrates servers through continuous block-level replication. | 4 |
| AWS Trusted Advisor | AWS Trusted Advisor | AWS 最佳实践检查与优化建议 | AWS Trusted Advisor（ベストプラクティスに基づく最適化推奨） | Provides best-practice recommendations for cost, performance, security, fault tolerance, and service quotas. | 4 |
| AWS WAF | AWS Web Application Firewall | Web 应用防火墙 | AWS WAF（ウェブアプリケーションファイアウォール） | Filters HTTP(S) requests with rules to defend against attacks such as SQL injection and XSS. | 4 |
| AWS Well-Architected Tool | AWS Well-Architected Tool | 架构评审与风险改进工具 | AWS Well-Architected Tool（Well-Architected レビュー支援サービス） | Reviews workloads against the six pillars and records risks, improvement plans, and milestones. | 4 |
| AWS X-Ray | AWS X-Ray | 分布式请求追踪服务 | AWS X-Ray（分散トレーシング・性能分析サービス） | Uses traces and a service map to locate latency and errors across a distributed call path. | 4 |
| Backup Plan | Backup Plan | 备份计划 | バックアッププラン | Backup Plan is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from Backup Rule / Resource Assignment. | 4 |
| Backup Rule | Backup Rule | 备份规则 | バックアップルール | Backup Rule is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from Retention / Start Window / Completion Window. | 4 |
| Backup Vault | Backup Vault | 备份保管库 | バックアップボールト | Backup Vault is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from S3 Bucket / Glacier Vault. | 4 |
| Bastion Host | Bastion Host / SSH Jump Host | 堡垒机 / 跳板机 | 踏み台サーバー | Bastion Host / SSH Jump Host is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from NAT Instance Session Manager EIC Endpoint. | 4 |
| Beanstalk Environment | Elastic Beanstalk Environment | Beanstalk 环境 | Elastic Beanstalk 環境 | A collection of AWS resources running one Elastic Beanstalk application version, commonly separated into development, test, and production. | 4 |
| BGP | Border Gateway Protocol | 边界网关协议 | ボーダーゲートウェイプロトコル | A protocol for dynamically exchanging routes between networks. | 4 |
| Block-level Replication | Block-level Replication | 块级复制 | ブロックレベルレプリケーション | Continuously copies changed data blocks to reduce RPO. | 4 |
| Cache Coherency | Cache Coherency | 缓存一致性 / 协调 | キャッシュの整合性 | Cache Coherency is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from TTL. | 4 |
| Cache Key | Cache Key | 缓存键 | キャッシュキー | Cache Key is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from URL TTL Authorization. | 4 |
| Cache-Aside | Cache-Aside / Lazy Loading | 旁路缓存模式 / 延迟加载 | キャッシュアサイド（遅延読み込み） | The application checks the cache first, then reads from the database and fills the cache on a miss. | 4 |
| CDN | Content Delivery Network | 内容分发网络 | コンテンツデリバリーネットワーク | Caches or distributes content from locations close to users. | 4 |
| CGW | Customer Gateway | 客户网关 | カスタマーゲートウェイ | Represents the customer-side router, firewall, or VPN device. | 4 |
| Change Data Capture (CDC) | Change Data Capture | 变更数据捕获 | 変更データキャプチャ | Continuously captures changes in the source database and replicates them to the target. | 4 |
| Change Set | CloudFormation Change Set | 资源变更预览 | 変更セット | CloudFormation Change Set is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Update / Execute / Replacement. | 4 |
| Client VPN | AWS Client VPN | 客户端 VPN | AWS Client VPN（クライアント向けリモートアクセス VPN） | Provides secure VPC access for individual remote users. | 4 |
| CloudFormation Service Role | AWS CloudFormation Service Role | CloudFormation 部署服务角色 | CloudFormation サービスロール | AWS CloudFormation Service Role is an AWS Security concept. Review its purpose and operational boundaries, and distinguish it from EC2 Instance Role / iam:PassRole. | 4 |
| CloudFormation Stack | AWS CloudFormation Stack | CloudFormation 资源栈 | CloudFormation スタック | AWS CloudFormation Stack is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Template / StackSet. | 4 |
| CloudFront Geo Restriction | Amazon CloudFront Geographic Restriction | CloudFront 地理限制 | CloudFront 地理的制限 | Allows or blocks content at the distribution level by country; blocked requests normally receive HTTP 403. | 4 |
| CloudFront VPC Origin | Amazon CloudFront VPC Origin | CloudFront VPC 源站 | CloudFront VPC オリジン | Lets CloudFront connect privately to an ALB, NLB, or EC2 instance in a VPC so the backend need not be directly Internet-facing. | 4 |
| CloudWatch Logs | Amazon CloudWatch Logs | 日志管理服务 | Amazon CloudWatch Logs（ログ管理サービス） | Centrally collects and queries application, system, and Lambda logs. | 4 |
| CNAME | Canonical Name Record | 规范名称记录 | CNAMEレコード | A standard name-to-name DNS record that cannot be used at the zone apex. | 4 |
| Compliance | Compliance | 合规性 | コンプライアンス（法令・規制・業界基準への適合） | When choosing a Region, first check data residency, regulatory, data-protection, and industry compliance requirements. | 4 |
| Compute Optimized Instance | Compute Optimized Instance | 计算优化型实例 | コンピューティング最適化インスタンス（高い CPU 性能を重視した EC2 インスタンス） | An EC2 family for CPU-intensive workloads such as high-performance web servers, batch processing, gaming, and scientific computing. | 4 |
| Connection Refused | Connection Refused | 连接被拒绝 | 接続拒否（宛先へ到達したが対象ポートでサービスが待ち受けていない、または明示的に拒否された状態） | The destination was reached but no service accepted the port, so check the listener and host firewall before network-path filters. | 4 |
| Connection Timeout | Connection Timeout | 连接超时 | 接続タイムアウト（応答が返らず、接続試行が制限時間を超えた状態） | No response arrived before the limit. Check the complete path including IP, route, IGW, NACL, security group, and firewalls. | 4 |
| Container | Container | 容器 | コンテナ | Shares the host kernel, starts quickly, and is portable; lighter than a virtual machine. | 4 |
| Container Image | Container Image | 容器镜像 | コンテナイメージ | A read-only template; a container is a running instance of an image. | 4 |
| CORS | Cross-Origin Resource Sharing | 跨源资源共享 | オリジン間リソース共有 | A browser cross-origin rule, not an identity authorization mechanism. | 4 |
| Cost Allocation Tag | Cost Allocation Tag | 成本分配标签 | コスト配分タグ | Attributes and analyzes cost by project, department, environment, or another business dimension. | 4 |
| Credential Provider Chain | AWS Credential Provider Chain | AWS 凭证提供程序链 | 認証情報プロバイダーチェーン（AWS SDK やツールがロール、IAM Identity Center、環境変数、設定ファイル、メタデータなどから認証情報を順番に探索する仕組み） | Lets SDKs and tools discover and refresh suitable credentials without hard-coding secrets in application code. | 4 |
| Credential Rotation | Credential Rotation | 凭证轮换 | 認証情報のローテーション（古い認証情報を安全に新しいものへ切り替え、漏えいや長期利用のリスクを減らす運用） | Safely replace an old credential: create a new key, update every consumer, verify it, deactivate the old key, and delete it after confirming no failures. | 4 |
| Cross-Zone Load Balancing | Cross-Zone Load Balancing | 跨可用区负载均衡 | クロスゾーン負荷分散 | Lets load-balancer nodes route to targets in other AZs. It is enabled by default for ALB and disabled by default for NLB and GWLB. | 4 |
| CSI Driver | Container Storage Interface Driver | 容器存储接口驱动 | CSI ドライバー | Connects Kubernetes storage requests to a storage system. StorageClass and PVC express demand; EBS or EFS CSI drivers perform the AWS integration. | 4 |
| Data Center | AWS Data Center | 物理数据中心 | AWS データセンター（コンピューティング設備を収容する物理施設） | A physical facility containing servers, storage, and networking; one AZ may consist of one or more discrete data centers. | 4 |
| DDoS | Distributed Denial of Service | 分布式拒绝服务攻击 | 分散型サービス拒否攻撃 | A denial-of-service attack launched simultaneously from many distributed sources. | 4 |
| Declarative | Declarative Configuration | 声明式配置 | 宣言的構成 | Describes the desired final resources while the tool determines the creation steps. | 4 |
| Default Region | AWS CLI default Region | 默认区域 | 既定のリージョン（コマンドでリージョンを明示しない場合に AWS CLI が使用する標準の AWS リージョン） | Sets the request Region when none is specified; higher-priority options may override it, and it never bypasses IAM. | 4 |
| Delete Marker | Amazon S3 Delete Marker | 删除标记 | 削除マーカー | A marker that becomes the current version when an ordinary delete is performed with Versioning enabled. | 4 |
| Direct Connect | AWS Direct Connect | AWS 专线连接 | AWS Direct Connect（AWS への専用ネットワーク接続） | A dedicated connection that provides consistent bandwidth; encryption is not enabled by default. | 4 |
| Direct Connect Gateway | AWS Direct Connect Gateway | Direct Connect 网关 | Direct Connect ゲートウェイ | AWS Direct Connect Gateway is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Virtual Private Gateway Transit Gateway. | 4 |
| Directly Attached Policy | Directly Attached Policy | 直接附加策略 | 直接アタッチされたポリシー（グループを経由せず、IAM ユーザーやロールなどのアイデンティティに直接付与されたポリシー） | Permissions come directly from the identity; removing a user from a group does not revoke this policy. | 4 |
| DLM | Amazon Data Lifecycle Manager | 数据生命周期管理器 | データライフサイクルマネージャー | Automates the creation, retention, and deletion of EBS snapshots and EBS-backed AMIs. | 4 |
| DMS | AWS Database Migration Service | 数据库迁移服务 | データベース移行サービス | Migrates database data with full load and ongoing change data capture for low-downtime moves. | 4 |
| DMS Endpoint | AWS DMS Source / Target Endpoint | DMS 源／目标连接端点 | DMS ソース／ターゲットエンドポイント | AWS DMS Source / Target Endpoint is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from VPC Endpoint / Writer Endpoint. | 4 |
| DMS Schema Conversion | AWS DMS Schema Conversion | DMS 托管 Schema 转换 | DMS スキーマ変換 | AWS DMS Schema Conversion is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from AWS SCT / DMS Full Load & CDC. | 4 |
| Domain Registrar | Domain Registrar | 域名注册商 | ドメインレジストラ | Manages domain registration, renewal, and parent delegation; it is not necessarily the authoritative DNS provider. | 4 |
| Dual Stack | IPv4/IPv6 Dual Stack | IPv4/IPv6 双栈 | IPv4/IPv6 デュアルスタック | IPv4/IPv6 Dual Stack is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from IPv6-only Subnet. | 4 |
| DynamoDB Accelerator (DAX) | DynamoDB Accelerator | DynamoDB 加速器 | DynamoDB アクセラレータ | A managed in-memory cache built for DynamoDB that can reduce suitable reads to microsecond latency. | 4 |
| EBS Encryption | Amazon EBS Encryption | EBS 加密 | EBS 暗号化 | Transparently encrypts volumes, snapshots, and EC2-EBS traffic with KMS. An unencrypted volume is normally converted through snapshot/copy and a new encrypted volume. | 4 |
| EBS Multi-Attach | Amazon EBS Multi-Attach | EBS 多重挂载 | EBS マルチアタッチ | Allows one io1/io2 volume to be used by compatible Nitro instances in one AZ and requires cluster-aware software; all instances share performance. | 4 |
| EC2 Instance Connect | EC2 Instance Connect | EC2 实例连接 | EC2 Instance Connect（一時的な SSH 公開鍵をインスタンスへ送信して接続する仕組み） | Pushes a temporary SSH public key to an instance. SSH still requires IAM permission, the correct OS user, EIC support, and a reachable port 22. | 4 |
| EC2 User Data | Amazon EC2 User Data | EC2 用户数据 | EC2 ユーザーデータ | Runs launch initialization, normally on the first boot. A Running instance does not prove that the script or application is ready. | 4 |
| ECMP | Equal-Cost Multi-Path Routing | 等价多路径路由 | 等コストマルチパス | Equal-Cost Multi-Path Routing is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from VPN Link Aggregation Group. | 4 |
| ECR | Amazon Elastic Container Registry | 容器镜像仓库 | Amazon ECR | ECR stores container images; ECS and EKS run and orchestrate them. | 4 |
| EDA | Event-Driven Architecture | 事件驱动架构 | イベント駆動型アーキテクチャ | Components collaborate through events to reduce coupling; commonly combines EventBridge, SNS, SQS, and Lambda. | 4 |
| EFA | Elastic Fabric Adapter | 弹性 Fabric 适配器 | Elastic Fabric Adapter（HPC 向け低遅延通信） | Elastic Fabric Adapter is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from ENA Cluster Placement Group TCP. | 4 |
| EFS | Amazon Elastic File System | 弹性文件系统 | Amazon EFS（共有ファイルシステム） | A Linux NFS file system that multiple EC2 instances can mount concurrently across AZs. | 4 |
| EFS Mount Target | Amazon EFS Mount Target | EFS 挂载目标 | EFS マウントターゲット | The EFS network entry in a VPC and AZ. Workload AZs normally have one, with security groups allowing NFS TCP 2049. | 4 |
| EFS Throughput Mode | Amazon EFS Throughput Mode | EFS 吞吐模式 | EFS スループットモード | Elastic suits unpredictable or bursty demand, provisioned suits known sustained throughput, and bursting relates throughput to filesystem size. | 4 |
| EKS | Amazon Elastic Kubernetes Service | 托管 Kubernetes 服务 | Amazon EKS | Prefer EKS when a scenario mentions Kubernetes, cross-cloud compatibility, or existing K8s workloads. | 4 |
| EKS Auto Mode | Amazon EKS Auto Mode | EKS 自动模式 | Amazon EKS Auto Mode | Provisions and manages additional EC2 infrastructure from pod requirements. It still uses managed EC2 instances and is different from Fargate. | 4 |
| ENA | Elastic Network Adapter | 弹性网络适配器 | Elastic Network Adapter（拡張ネットワーキング） | Elastic Network Adapter is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from ENI EFA Placement. | 4 |
| Ephemeral Port | Ephemeral Port | 临时端口 | エフェメラルポート | A short-lived dynamic client port; NACLs often need rules allowing return traffic on these ports. | 4 |
| EventBridge | Amazon EventBridge | 事件总线服务 | Amazon EventBridge（イベントバス） | Matches and routes events by rules, making it suitable for event-driven architectures and SaaS integrations. | 4 |
| Execution Role | Lambda Execution Role | Lambda 执行角色 | Lambda 実行ロール | Controls which AWS resources Lambda can access at runtime; it does not control who can invoke the function. | 4 |
| Failback | Failback | 灾后回切 | フェイルバック | Failback is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Failover / Migration Cutover. | 4 |
| Federation | Identity Federation | 身份联合 | フェデレーション（外部の ID プロバイダーと連携し、AWS アカウントごとに長期利用者を作成せず、一時認証情報でアクセスする仕組み） | Sign in through an external identity provider and receive temporary AWS credentials instead of creating long-term IAM users in every account; this is a preferred approach for workforce access. | 4 |
| Foreign Key | Foreign Key | 外键 | 外部キー | References the primary key of another table to establish a relationship. | 4 |
| Forwarded IP | Forwarded IP Address | 代理转发的客户端 IP | 転送されたクライアント IP アドレス | Forwarded IP Address is an AWS Security concept. Review its purpose and operational boundaries, and distinguish it from Source IP Header. | 4 |
| General Purpose Bucket | Amazon S3 General Purpose Bucket | 通用存储桶 | 汎用バケット | The regular S3 bucket type with broad feature support, distinct from an Express One Zone directory bucket. | 4 |
| General Purpose Instance | General Purpose Instance | 通用型实例 | 汎用インスタンス（コンピューティング、メモリ、ネットワーク資源のバランスを重視した EC2 インスタンス） | A balanced EC2 family for web servers, small or medium databases, and development environments. | 4 |
| Geolocation Routing | Geolocation Routing Policy | 地理位置路由 | 位置情報ルーティング | Selects answers by country, continent, or US state and should include a default location for unmatched clients. | 4 |
| Geoproximity Routing | Geoproximity Routing Policy | 地理邻近路由 | 地理的近接性ルーティング | Chooses by user and resource geography and can shift boundaries with a bias value; bias is not a traffic percentage. | 4 |
| Global Accelerator | AWS Global Accelerator | 全球网络加速 | AWS Global Accelerator（グローバルネットワーク高速化サービス） | Accelerates global TCP/UDP traffic and shifts traffic between endpoints based on health. | 4 |
| gp2 | General Purpose SSD (gp2) | 通用型 SSD gp2 | 汎用 SSD（gp2） | Older general-purpose EBS SSD with baseline IOPS tied to volume size and a burst-credit model. | 4 |
| Heterogeneous Migration | Heterogeneous Database Migration | 异构数据库迁移 | 異種データベース移行 | Heterogeneous Database Migration is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from Homogeneous Migration / Schema Conversion. | 4 |
| Homogeneous Migration | Homogeneous Database Migration | 同构数据库迁移 | 同種データベース移行 | Homogeneous Database Migration is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from Heterogeneous Migration / On-premises to AWS. | 4 |
| Hot Standby | Hot Standby | 热备用 | ホットスタンバイ | Hot Standby is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Multi-site Active/Active. | 4 |
| HPC | High Performance Computing | 高性能计算 | ハイパフォーマンスコンピューティング | High Performance Computing is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS MPI vs. | 4 |
| Hybrid Cloud | Hybrid Cloud | 混合云 | ハイブリッドクラウド | Combines on-premises data centers with public cloud; Outposts and Direct Connect commonly appear in these scenarios. | 4 |
| IAM Access Advisor | IAM Access Advisor / Service Last Accessed Information | IAM 访问顾问／最后访问时间信息 | IAM アクセスアドバイザー（利用者、グループ、ロール、ポリシーに許可されたサービスや操作の最終アクセス情報と権限元を確認する機能） | Reviews service/action last-accessed data and permission sources for users, groups, roles, and policies. It is not a complete real-time audit log. | 4 |
| IAM Access Analyzer | AWS Identity and Access Management Access Analyzer | 访问权限分析器 | IAM Access Analyzer（外部アクセス・未使用アクセスの分析） | Analyzes external access, policies, and unused permissions to help enforce least privilege. | 4 |
| IAM Credentials Report | IAM Credential Report | IAM 凭证报告 | IAM 認証情報レポート（ルートアカウント行と IAM ユーザーのパスワード、MFA、アクセスキー、署名証明書の状態や最終利用・更新情報を一覧化する CSV レポート） | An account-level CSV covering the root-account row and IAM-user passwords, MFA, access keys, signing certificates, and last-use/rotation data. It excludes role temporary credentials and service-specific credentials. | 4 |
| IAM DB Authentication | IAM Database Authentication | IAM 数据库认证 | IAM データベース認証 | Uses short-lived SigV4 tokens instead of long-term database passwords for supported RDS and Aurora engines. | 4 |
| IAM Group | IAM User Group | IAM 用户组 | IAM ユーザーグループ（複数の IAM ユーザーへ共通権限を割り当てるための集合） | Contains IAM users only, not other groups. A user may join multiple groups, while a group cannot sign in or be assumed. | 4 |
| IAM User | IAM User | IAM 用户 | IAM ユーザー（AWS アカウント内で長期的な認証情報を持つ利用者。現在は従業員の通常利用には IAM Identity Center や認証連携による一時認証情報が推奨される） | A long-term identity in an AWS account that can have a console password or access key and join multiple groups. Prefer Identity Center or federation with temporary credentials for routine workforce access. | 4 |
| IAMFullAccess | IAMFullAccess | IAM 完全访问策略 | IAMFullAccess（IAM サービスのユーザー、グループ、ロール、ポリシーなどを管理する完全アクセス権限の AWS 管理ポリシー） | Provides full management of IAM, not administrator access to every AWS service and resource. | 4 |
| Inbound Rule | Inbound Rule | 入站规则 | インバウンドルール（リソースへ入ってくる通信を許可する Security Group の規則） | A security-group rule allowing incoming traffic by source, protocol, and port; security groups have no explicit deny rules. | 4 |
| Instance Store | Amazon EC2 Instance Store | EC2 实例存储 | EC2 インスタンスストア | Temporary block storage on the physical host; data is lost when the instance stops or terminates. | 4 |
| IPv6 | Internet Protocol Version 6 | 互联网协议第六版 | インターネットプロトコル バージョン 6 | Internet Protocol Version 6 is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from IPv4 Dual Stack NAT64. | 4 |
| Item | Item | 项目 / 数据项 | 項目（アイテム） | A record in a DynamoDB table, composed of multiple attributes. | 4 |
| Lambda On-failure Destination | AWS Lambda Asynchronous On-failure Destination | Lambda 异步失败目标 | Lambda 非同期呼び出しの失敗時送信先 | AWS Lambda Asynchronous On-failure Destination is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from SNS Subscription DLQ SQS Redrive Policy. | 4 |
| Lambda SnapStart | AWS Lambda SnapStart | Lambda 快照启动 | Lambda SnapStart | Creates an encrypted snapshot of initialized function memory and disk state for a published version and restores it on invocation to reduce initialization latency. | 4 |
| Legal Hold | S3 Object Lock Legal Hold | 法律保留 | リーガルホールド | Protects an S3 object version independently of a retention period and has no automatic expiry until an authorized principal removes it. | 4 |
| Lifecycle Hook | Amazon EC2 Auto Scaling Lifecycle Hook | Auto Scaling 生命周期钩子 | Auto Scaling ライフサイクルフック | Amazon EC2 Auto Scaling Lifecycle Hook is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from User Data Hook. | 4 |
| Managed Node Group | Amazon EKS Managed Node Group | 托管节点组 | EKS マネージドノードグループ | Automates provisioning and lifecycle for EKS EC2 worker nodes. The underlying capacity remains EC2 plus Auto Scaling and is not serverless. | 4 |
| Managed Service | Managed Service | 托管服务 | マネージドサービス | AWS operates part of the underlying stack, while users may still configure capacity, versions, and networking. | 4 |
| Manual Snapshot | Manual Snapshot | 手动数据库快照 | 手動スナップショット | A user-created backup of database state at a specific time, retained until explicitly deleted. | 4 |
| Memcached | Memcached | 分布式内存缓存引擎 | Memcached（分散型インメモリキャッシュ） | A lightweight distributed in-memory caching engine. | 4 |
| Memory Optimized Instance | Memory Optimized Instance | 内存优化型实例 | メモリ最適化インスタンス（大容量メモリと高速なメモリアクセスを重視した EC2 インスタンス） | An EC2 family for memory-heavy workloads such as in-memory caches, real-time analytics, and large databases. | 4 |
| Metadata | Object Metadata | 对象元数据 | オブジェクトメタデータ | Describes an object's content and properties; changing user metadata usually requires rewriting the object. | 4 |
| Multi-node Parallel Job | AWS Batch Multi-node Parallel Job | Batch 多节点并行作业 | AWS Batch マルチノード並列ジョブ | AWS Batch Multi-node Parallel Job is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from Array Job Batch Spot. | 4 |
| Multi-Value Answer Routing | Multi-Value Answer Routing Policy | 多值应答路由 | 複数値回答ルーティング | Returns up to eight healthy values with per-record health checks; it is not a load balancer and does not support Alias records. | 4 |
| Multipart Upload | Multipart Upload | 分段上传 | マルチパートアップロード | Uploads a large object in parallel parts; required for objects larger than 5 GB. | 4 |
| NAT64 | IPv6-to-IPv4 Network Address Translation | IPv6 到 IPv4 地址转换 | NAT64（IPv6/IPv4 アドレス変換） | IPv6-to-IPv4 Network Address Translation is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from IPv4 NAT DNS64 Egress-only IGW. | 4 |
| NLB | Network Load Balancer | 网络负载均衡器 | Network Load Balancer（ネットワークロードバランサー） | Layer 4 TCP/UDP/TLS; suited to extremely high performance, ultra-low latency, and static IP requirements. | 4 |
| Noncurrent Version | Amazon S3 Noncurrent Object Version | 非当前对象版本 | 非現行バージョン | A historical S3 object version created after the same key receives a newer version; lifecycle rules can transition or permanently delete it. | 4 |
| Object Tags | Amazon S3 Object Tags | S3 对象标签 | S3 オブジェクトタグ | Managed separately from object metadata and used for classification, lifecycle rules, and permission conditions. | 4 |
| On-premises | On-premises | 本地数据中心 / 本地机房 | オンプレミス環境（企業が自社で所有・運用するサーバーやデータセンター） | A data-center and server environment owned and managed by the organization. | 4 |
| Orchestration | Container Orchestration | 容器编排 | コンテナオーケストレーション | Handles deployment, scaling, scheduling, networking, and failure recovery; ECS and EKS are orchestration services. | 4 |
| Outbound Rule | Outbound Rule | 出站规则 | アウトバウンドルール（リソースから外へ出ていく通信を許可する Security Group の規則） | A security-group rule allowing outgoing traffic. Stateful return traffic does not require a matching rule in the reverse direction. | 4 |
| Partial Batch Response | Partial Batch Response | 部分批次响应 | 部分バッチレスポンス | Partial Batch Response is an AWS Messaging concept. Review its purpose and operational boundaries. | 4 |
| Passkey | Passkey | 通行密钥 | パスキー（FIDO 規格と公開鍵暗号を利用し、パスワードより強い耐フィッシング性を持つ認証方式） | AWS supports device-bound security keys and synced passkeys as phishing-resistant MFA options. | 4 |
| Patch Manager | AWS Systems Manager Patch Manager | 集中补丁管理 | Patch Manager（パッチ管理） | AWS Systems Manager Patch Manager is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Inspector / Config / Maintenance Windows. | 4 |
| Point of Presence | AWS Point of Presence | 边缘接入点 | AWS Point of Presence（利用者に近いエッジネットワーク拠点） | A generic edge network access site, often discussed together with Edge Locations in foundation exams. | 4 |
| Poison Message | Poison Message | 持续失败的毒消息 | ポイズンメッセージ（繰り返し失敗するメッセージ） | Poison Message is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from DLQ Exactly Once. | 4 |
| Policy Language Version | Policy Language Version | 策略语言版本 | ポリシー言語バージョン（IAM ポリシーの構文機能を指定する Version 要素の値） | Usually 2012-10-17; it is the policy syntax version, not a resource version or modification date. | 4 |
| Predictive Scaling | Predictive Scaling | 预测伸缩 | 予測スケーリング | Forecasts recurring demand from history and launches capacity before the expected load. | 4 |
| Price-Capacity-Optimized | Price-Capacity-Optimized Allocation Strategy | 价格容量优化分配策略 | 価格・キャパシティ最適化（中断リスクが低い容量プールの中から価格も考慮して Spot を割り当てる戦略） | A Spot allocation strategy that balances deeper available capacity with lower price and is preferred for many new Spot workloads. | 4 |
| Pub/Sub | Publish / Subscribe | 发布 / 订阅 | パブリッシュ／サブスクライブ | Publishers do not need to know their subscribers; suitable for one-to-many broadcasting. | 4 |
| Pull | Pull Model | 拉取模式 | プル型 | Consumers actively retrieve messages; SQS is a typical pull-based service. | 4 |
| Purpose-Built Database | Purpose-Built Database | 专用数据库 | 専用データベース | Selects the database best suited to the data model and access pattern. | 4 |
| Push | Push Model | 推送模式 | プッシュ型 | The service actively sends messages to subscribers; SNS is typically push-based. | 4 |
| Queue | Message Queue | 消息队列 | メッセージキュー | Messages are generally processed by one consumer; queues provide ordering, buffering, and load smoothing. | 4 |
| RDS Storage Auto Scaling | RDS Storage Auto Scaling | RDS 存储自动扩展 | RDS ストレージオートスケーリング | Increases allocated storage when free space remains low and modification constraints are satisfied; it does not shrink storage. | 4 |
| Recovery Point | Recovery Point | 备份恢复点 | 復旧ポイント | Recovery Point is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from RPO / Backup Job. | 4 |
| Redis OSS | Redis Open Source Software | Redis 开源引擎 | Redis OSS（オープンソースエンジン） | Supports rich data structures, replication, leaderboards, sessions, and other use cases. | 4 |
| Region Selector | AWS Console Region Selector | 区域选择器 | AWS コンソールのリージョンセレクター（操作対象リージョンを切り替える機能） | Sets the console's current Region; regional resources change with it, while global services usually do not. | 4 |
| Regional NAT Gateway | Regional Network Address Translation Gateway | 区域性 NAT 网关 | リージョナル NAT ゲートウェイ | Regional Network Address Translation Gateway is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Zonal NAT Gateway Private NAT Gateway. | 4 |
| Relocate | Relocate | 重新放置、整个平台迁移 | 再配置（プラットフォーム全体の移行） | Moves an entire virtualization or container platform to a similar environment on AWS. | 4 |
| Replica | Replica | 副本 | レプリカ（複製） | A copy used for read scaling, failover, or durability depending on the service and replication model. | 4 |
| Replication Agent | AWS Replication Agent | 复制代理 | レプリケーションエージェント | AWS Replication Agent is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Discovery Agent. | 4 |
| Repurchase | Repurchase (Drop and Shop) | 重新购买、更换产品 | 再購入（SaaS への置き換え） | Replaces legacy software with a new product or SaaS offering. | 4 |
| Resolver Rule | Route 53 Resolver Rule | 解析器规则 | リゾルバールール | Defines a forwarded domain and target DNS server IPs and is associated with VPCs; the most specific matching domain wins. | 4 |
| Resource Assignment | AWS Backup Resource Assignment | 备份资源分配 | バックアップ対象リソースの割り当て | AWS Backup Resource Assignment is an AWS Storage concept. Review its purpose and operational boundaries, and distinguish it from Tags / IAM Role / Backup Plan. | 4 |
| Retain | Retain | 保留、暂不迁移 | 保持（現環境に残す） | Keeps a valuable application in place for now because of compliance, dependencies, or insufficient migration benefit. | 4 |
| Retire | Retire | 停用、下线 | 廃止（システムを停止する） | Decommissions and stops maintaining a system that is no longer needed. | 4 |
| Route Propagation | Route Propagation | 路由传播 | ルート伝播 | Route Propagation is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Route Table Association Static Route. | 4 |
| Route Table Association | Route Table Association | 路由表关联 | ルートテーブルの関連付け | Route Table Association is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Route Propagation. | 4 |
| Run Command | AWS Systems Manager Run Command | 批量远程命令执行 | Run Command（一括コマンド実行） | AWS Systems Manager Run Command is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Session Manager / Automation. | 4 |
| S3 Access Point | Amazon S3 Access Point | S3 访问点 | S3 アクセスポイント | Provides independent access endpoints and policies for different applications or teams. | 4 |
| S3 Batch Operations | Amazon S3 Batch Operations | S3 批量操作 | S3 バッチオペレーション | Runs managed copy, tagging, restore, Lambda, and other jobs across large sets of existing objects with progress and reports. | 4 |
| S3 Batch Replication | Amazon S3 Batch Replication | S3 批量复制 | S3 バッチレプリケーション | Backfills objects that predate a replication rule or failed replication; it differs from continuous replication of new versions. | 4 |
| S3 Bucket Key | Amazon S3 Bucket Key | S3 存储桶密钥 | S3 バケットキー | Reduces KMS request volume and cost for SSE-KMS encrypted S3 objects while remaining an SSE-KMS design. | 4 |
| S3 File Gateway | Amazon S3 File Gateway | S3 文件网关 | Amazon S3 ファイルゲートウェイ | Maps local NFS or SMB files to objects in S3. | 4 |
| S3 Inventory | Amazon S3 Inventory | S3 清单 | S3 インベントリ | Produces scheduled object-level metadata reports that can be queried with Athena or used as an S3 Batch Operations manifest. | 4 |
| S3 Object Lambda | Amazon S3 Object Lambda | S3 对象 Lambda | S3 Object Lambda | Transforms, enriches, or redacts S3 data dynamically on reads without modifying the source object; availability for new customers must be verified. | 4 |
| S3 One Zone-IA | Amazon S3 One Zone-Infrequent Access | S3 单可用区-低频访问 | S3 1 ゾーン-IA（1 ゾーン低頻度アクセス） | Lower-cost, single-AZ storage for infrequently accessed data that can be recreated. | 4 |
| S3 Outposts | Amazon S3 on Outposts | Outposts 本地对象存储 | Amazon S3 on Outposts（Outposts 向けオブジェクトストレージ） | Provides S3 object storage on Outposts at the customer's location. | 4 |
| S3 Prefix | Amazon S3 Object Key Prefix | S3 键前缀 | S3 プレフィックス | The leading string of an object key, used for organization, lifecycle and event filters, and per-prefix request scaling. | 4 |
| S3 Server Access Logging | Amazon S3 Server Access Logging | S3 服务器访问日志 | S3 サーバーアクセスログ | Delivers S3 request logs with delay to a dedicated bucket in the same Region and account; avoid creating a logging loop. | 4 |
| S3 Static Website Hosting | Amazon S3 Static Website Hosting | S3 静态网站托管 | S3 静的ウェブサイトホスティング | Provides index and error-document behavior through an HTTP-only website endpoint; direct public delivery requires public GetObject access. | 4 |
| S3 Storage Lens | Amazon S3 Storage Lens | S3 存储透镜 | S3 Storage Lens（ストレージ分析） | Aggregates S3 usage, cost, protection, activity, and performance metrics across organizations, accounts, Regions, and buckets. | 4 |
| S3 Transfer Acceleration | Amazon S3 Transfer Acceleration | S3 传输加速 | S3 Transfer Acceleration（転送高速化） | Routes distant clients through a nearby edge location and the AWS global network to accelerate transfers to one S3 bucket. | 4 |
| Scale Out / In | Horizontal Scaling | 横向扩展 / 缩减 | スケールアウト / イン | Scales by adding or removing instances; it is more elastic and more common in cloud architecture exams. | 4 |
| Scan | Scan | 全表 / 全索引扫描 | スキャン | Reads many items before filtering and usually consumes more read capacity than Query. | 4 |
| Scheduled Scaling | Scheduled Scaling | 计划伸缩 | スケジュールされたスケーリング | Changes minimum, desired, or maximum capacity at known times, such as market open or a scheduled event. | 4 |
| Secondary ENI | Secondary Elastic Network Interface | 辅助网络接口 | セカンダリ ENI（既存の EC2 に追加でアタッチする独立した仮想ネットワークインターフェイス） | An independent additional virtual NIC that can move between compatible EC2 instances in the same AZ while retaining its network identity. | 4 |
| Security Key | FIDO Security Key | 安全密钥 | セキュリティキー（FIDO 規格に基づく公開鍵認証を行う、耐フィッシング性の高い物理認証デバイス） | A phishing-resistant physical FIDO authenticator; U2F is older course terminology. | 4 |
| Service | ECS Service | ECS 服务 | ECS サービス | Continuously maintains a desired number of tasks and can integrate with load balancing and auto scaling. | 4 |
| Service Availability in a Region | AWS Service Availability by Region | 区域服务可用性 | リージョン別サービス提供状況（各リージョンで利用できる AWS サービスの範囲） | Shows whether a service or feature is offered in a target Region, not uptime or high availability. | 4 |
| Session Manager | AWS Systems Manager Session Manager | 安全会话管理 | セッションマネージャー | Creates controlled sessions without opening inbound SSH or RDP ports. | 4 |
| Shard | Shard | 分片 | シャード（データ分片） | Horizontally scales capacity by distributing different keys across multiple partitions. | 4 |
| Site-to-Site VPN | AWS Site-to-Site VPN | 站点到站点 VPN | AWS Site-to-Site VPN（拠点間 VPN） | Connects complete networks through encrypted IPsec tunnels. | 4 |
| SNI | Server Name Indication | 服务器名称指示 | Server Name Indication（サーバー名表示） | Allows one TLS listener or endpoint to select a certificate by the hostname supplied during the TLS handshake. | 4 |
| SNS Subscription DLQ | Amazon SNS Subscription Dead-Letter Queue | SNS 订阅死信队列 | SNS サブスクリプションのデッドレターキュー | Amazon SNS Subscription Dead-Letter Queue is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from Lambda Async DLQ SQS Consumer DLQ. | 4 |
| Sort Key | Sort Key | 排序键 | ソートキー | Forms a composite primary key with the partition key and enables range queries within the same partition. | 4 |
| Source/Destination Check | Source/Destination Check | 源/目标检查 | 送信元／送信先チェック（EC2 を通過するトラフィックの送信元または送信先がそのインスタンス自身であることを確認する機能） | Verifies that EC2 traffic is sourced from or destined to the instance; disable it for NAT, router, or firewall appliances that forward other hosts' traffic. | 4 |
| Spot Fleet | EC2 Spot Fleet | 竞价型实例队列 | スポットフリート（複数の Spot キャパシティプールから目標容量を満たすようインスタンス群を起動する仕組み） | Launches a fleet across multiple Spot capacity pools to meet target capacity; also compare modern EC2 Fleet and ASG mixed-instance options. | 4 |
| SSE-C | Server-Side Encryption with Customer-Provided Keys | 客户提供密钥的服务端加密 | 顧客提供キーによるサーバー側暗号化 | S3 encrypts with a customer-provided key that it never stores. Every request supplies the key and must use HTTPS. | 4 |
| SSL/TLS Certificate | SSL/TLS Certificate | SSL/TLS 证书 | SSL/TLS 証明書 | Proves a service's identity and enables TLS-encrypted connections. | 4 |
| SSM Automation | AWS Systems Manager Automation | 运维流程自动化 | Systems Manager Automation（運用自動化） | AWS Systems Manager Automation is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Run Command / Step Functions. | 4 |
| st1 | Throughput Optimized HDD (st1) | 吞吐优化型 HDD | スループット最適化 HDD（st1） | A throughput-optimized HDD EBS volume for logs, big data, and large sequential I/O; it cannot be a boot volume. | 4 |
| Staging Area | Replication Staging Area | 复制暂存区 | レプリケーションのステージング領域 | Replication Staging Area is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Test Instance / Recovery Instance. | 4 |
| Step Scaling | Step Scaling | 步进伸缩 | ステップスケーリング | Uses different scaling adjustments based on how far a metric breaches its threshold. | 4 |
| Sticky Sessions | Sticky Sessions | 会话粘滞 | スティッキーセッション | Routes one client to the same target for a period using load-balancer or application cookies; externalized session state scales more cleanly. | 4 |
| Storage Gateway | AWS Storage Gateway | 混合云存储网关 | AWS Storage Gateway（ハイブリッドクラウドストレージゲートウェイ） | Lets on-premises applications access AWS storage through file, volume, or tape interfaces. | 4 |
| Storage Optimized Instance | Storage Optimized Instance | 存储优化型实例 | ストレージ最適化インスタンス（ローカルストレージへの高い連続読み書き性能を重視した EC2 インスタンス） | An EC2 family optimized for high sequential local-storage throughput; it is a separate choice from EBS volume types such as gp3 or io2. | 4 |
| Tape Gateway | AWS Storage Gateway Tape Gateway | 磁带网关 | テープゲートウェイ | Replaces physical tape backup infrastructure with virtual tapes. | 4 |
| Task | ECS Task | ECS 任务 / 运行实例 | ECS タスク | A running instance of a task definition; it can run once or be continuously maintained by a service. | 4 |
| Task Definition | ECS Task Definition | ECS 任务定义 | ECS タスク定義 | Defines container images, CPU, memory, ports, and environment variables; it is the runtime template. | 4 |
| TLS Termination | Transport Layer Security Termination | TLS 终止 | TLS 終端 | Makes the load balancer handle certificates, handshakes, and decryption; the certificate proves identity while the policy selects protocols and ciphers. | 4 |
| TOTP | Time-Based One-Time Password | 基于时间的一次性密码 | 時刻同期型ワンタイムパスワード（共有秘密と現在時刻から一定間隔で生成される、一度限りの認証コード） | A short-lived code generated from a shared secret and the current time, not a fixed second password. | 4 |
| Traffic Mirroring | Amazon VPC Traffic Mirroring | VPC 流量镜像 | VPC トラフィックミラーリング | Amazon VPC Traffic Mirroring is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from VPC Flow Logs Network Firewall GWLB. | 4 |
| Transit Gateway | AWS Transit Gateway | 中转网关 | トランジットゲートウェイ | Centrally connects multiple VPCs and on-premises networks. | 4 |
| Trusted Entity | IAM Role Trusted Entity | IAM 角色受信任实体 | 信頼されたエンティティ（IAM ロールの信頼ポリシーで、そのロールを引き受けることを許可された主体） | Identifies who may assume a role, such as an AWS service, account, user, role, or federated principal. | 4 |
| Valkey | Valkey | 开源键值数据存储引擎 | Valkey（オープンソース・キー値データストア） | One of the in-memory data-store engines supported by ElastiCache. | 4 |
| VGW | Virtual Private Gateway | 虚拟私有网关 | 仮想プライベートゲートウェイ | The traditional private-connectivity gateway attached to one VPC. | 4 |
| Virtual Interface | Virtual Interface | 虚拟接口 | 仮想インターフェイス | A logical Direct Connect interface, such as a private, public, or transit VIF. | 4 |
| Volume Gateway | AWS Storage Gateway Volume Gateway | 卷网关 | ボリュームゲートウェイ | Presents iSCSI volumes on premises and backs up their data to AWS. | 4 |
| VPN | Virtual Private Network | 虚拟专用网络 | 仮想プライベートネットワーク | Protects network communication through an encrypted tunnel. | 4 |
| Worker Environment | Elastic Beanstalk Worker Environment | 工作环境 | ワーカー環境 | Pulls work from SQS for asynchronous processing and can scale from queue backlog. | 4 |
| WORM | Write Once, Read Many | 一次写入、多次读取 | 一度書き込み・複数回読み取り | Write Once, Read Many is an AWS Security concept. Review its purpose and operational boundaries, and distinguish it from Governance / Compliance Mode. | 4 |
| Write-Through | Write-Through | 写穿缓存模式 | ライトスルー | Updates the cache whenever the database is written, keeping cached data fresh. | 4 |
| Account Alias | AWS Account Alias | AWS 账户别名 | AWS アカウントエイリアス（IAM ユーザーのサインイン時にアカウント ID の代わりに使える一意の別名） | Simplifies the IAM user sign-in URL. It must be unique, but it neither creates a new account nor changes permissions. | 3 |
| ACM | AWS Certificate Manager | SSL/TLS 证书管理 | AWS Certificate Manager（SSL/TLS 証明書管理） | Centrally provisions, deploys, and renews SSL/TLS certificates. | 3 |
| ACU | Aurora Capacity Unit | Aurora 容量单位 | Aurora Capacity Unit（Aurora 容量単位） | Aurora Serverless compute capacity unit representing a corresponding combination of memory, CPU, and network capacity. | 3 |
| Agentless Discovery | Agentless Discovery | 无代理发现 | エージェントレス検出 | Agentless Discovery is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Discovery Agent / Agentless Replication. | 3 |
| Agility | Agility | 敏捷性 | アジリティ（必要なリソースを短時間で試作・変更・展開できる俊敏性） | Focuses on faster experimentation, creation, change, and deployment; it is not automatic capacity scaling with load. | 3 |
| ALPN | Application-Layer Protocol Negotiation | 应用层协议协商 | Application-Layer Protocol Negotiation（アプリケーション層プロトコルネゴシエーション） | A TLS extension that negotiates an upper-layer protocol such as HTTP/1.1 or HTTP/2 during the handshake. | 3 |
| Amazon AppFlow | Amazon AppFlow | SaaS 托管数据集成 | Amazon AppFlow（SaaS データ連携） | Amazon AppFlow is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from EventBridge / Glue / DMS / DataSync. | 3 |
| Amazon Connect | Amazon Connect | 云联络中心服务 | Amazon Connect（クラウドコンタクトセンターサービス） | Provides IVR, queues, agents, chat, and callback capabilities for a cloud contact center. | 3 |
| Amazon Detective | Amazon Detective | 安全事件调查与根因分析 | Amazon Detective（セキュリティ調査・根本原因分析サービス） | Investigates security incidents through visual relationships and timelines. | 3 |
| Amazon Inspector | Amazon Inspector | 漏洞管理 | Amazon Inspector（脆弱性管理サービス） | Continuously scans workloads for software vulnerabilities and CVEs. | 3 |
| Amazon Macie | Amazon Macie | S3 敏感数据发现 | Amazon Macie（S3 機密データ検出サービス） | Uses machine learning to discover sensitive data such as PII in S3. | 3 |
| Amazon SES | Amazon Simple Email Service | 应用程序邮件发送服务 | Amazon Simple Email Service（アプリケーション向けメール送信サービス） | Sends transactional, notification, and marketing email through an API or SMTP. | 3 |
| Amazon WorkSpaces | Amazon WorkSpaces | 托管式云桌面服务 | Amazon WorkSpaces（フルマネージド型クラウドデスクトップサービス） | Provides users with complete managed Windows or Linux cloud desktops. | 3 |
| Amazon WorkSpaces Applications | Amazon WorkSpaces Applications (formerly Amazon AppStream 2.0) | 托管式桌面应用流式交付服务 | Amazon WorkSpaces Applications（旧 Amazon AppStream 2.0、デスクトップアプリケーション配信サービス） | Streams managed desktop applications; older exam questions and courses use the name Amazon AppStream 2.0. | 3 |
| Amazon WorkSpaces Secure Browser | Amazon WorkSpaces Secure Browser (formerly Amazon WorkSpaces Web) | 托管式隔离浏览器服务 | Amazon WorkSpaces Secure Browser（旧 Amazon WorkSpaces Web、分離ブラウザーサービス） | Opens an isolated cloud browser session from the user's existing browser. | 3 |
| API | Application Programming Interface | 应用程序编程接口 | アプリケーション・プログラミング・インターフェース | An interface through which software systems call each other and exchange data. | 3 |
| Application Version | Elastic Beanstalk Application Version | 应用版本 | アプリケーションバージョン | A deployable application package in Elastic Beanstalk; an environment runs one version at a time. | 3 |
| Architecture Pattern | Architecture Pattern | 架构模式 | アーキテクチャパターン | Architecture Pattern is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS /. | 3 |
| Auto-assign public IPv4 | Auto-assign Public IPv4 Address | 自动分配公有 IPv4 | パブリック IPv4 アドレスの自動割り当て | Controls only whether an instance automatically receives a public IPv4 address; it does not by itself make a subnet public. | 3 |
| AWS Amplify | AWS Amplify | Web 与移动应用全栈开发及托管平台 | AWS Amplify（Web・モバイル向けフルスタック開発・ホスティングプラットフォーム） | A platform for frontend teams to build, host, and connect web and mobile applications to cloud backends. | 3 |
| AWS API | AWS Application Programming Interface | AWS 应用程序编程接口 | AWS API（AWS のアプリケーションプログラミングインターフェース） | Every method of managing AWS resources ultimately interacts with AWS APIs. | 3 |
| AWS Application Discovery Service | AWS Application Discovery Service | AWS 本地环境发现与应用依赖分析 | AWS Application Discovery Service（アプリケーション検出・依存関係分析サービス） | Collects server configuration, performance, process, connection, and application-dependency data. | 3 |
| AWS AppSync | AWS AppSync | 托管 GraphQL API 与实时数据服务 | AWS AppSync（フルマネージド型 GraphQL API・リアルタイムデータサービス） | Its core components include GraphQL schemas, resolvers, data sources, and subscriptions. | 3 |
| AWS Batch | AWS Batch | 批处理计算服务 | AWS Batch（バッチコンピューティングサービス） | Runs large numbers of queued, non-real-time compute jobs and automatically schedules and scales compute resources. | 3 |
| AWS CLI Profile | AWS CLI named profile | AWS CLI 命名配置档案 | AWS CLI プロファイル（認証情報、リージョン、出力形式などの設定を名前付きで分離し、切り替えて使用する設定単位） | Select it explicitly with --profile. A profile is local configuration, not an IAM identity or permission policy. | 3 |
| AWS CloudShell | AWS CloudShell | 浏览器云命令行环境 | AWS CloudShell（ブラウザ上で事前設定済みの AWS CLI を使用し、コンソールの IAM 権限に基づく一時認証情報を自動取得するシェル環境） | Requires no local CLI installation and uses rotating temporary credentials for the current console identity. Persistent HOME storage is separated by Region, and --region can override the default Region for one command. | 3 |
| AWS CodeBuild | AWS CodeBuild | 托管构建与测试服务 | AWS CodeBuild（フルマネージド型ビルド・テストサービス） | Reads a buildspec to compile, test, package, and output build artifacts. | 3 |
| AWS CodePipeline | AWS CodePipeline | 持续交付流水线编排服务 | AWS CodePipeline（継続的デリバリーパイプライン管理サービス） | Orchestrates stages such as Source, Build, Test, Approval, and Deploy. | 3 |
| AWS IoT Core | AWS IoT Core | 物联网设备安全连接与消息服务 | AWS IoT Core（IoT デバイス接続・メッセージングサービス） | Core capabilities include device certificates, MQTT topics, the Rules Engine, and Device Shadow. | 3 |
| AWS License Manager | AWS License Manager | 软件许可证集中管理 | AWS License Manager（ソフトウェアライセンスの一元管理） | Tracks BYOL and hybrid-environment license usage and helps prevent overuse. | 3 |
| AWS Management Console | AWS Management Console | AWS 管理控制台 | AWS マネジメントコンソール（ウェブ画面から AWS サービスを操作する管理画面） | A web GUI. Multi-session keeps several login contexts in parallel, but a session is not a new account; regional resources also depend on the selected Region. | 3 |
| AWS Migration Hub | AWS Migration Hub | AWS 迁移项目统一管理与跟踪中心 | AWS Migration Hub（移行プロジェクトの一元管理・進捗追跡） | Provides a unified view of migration projects and progress; related migration experiences are increasingly integrated into AWS Transform. | 3 |
| AWS Partner Network | AWS Partner Network | AWS 合作伙伴网络 | AWS パートナーネットワーク | An ecosystem for finding consulting, implementation, migration, managed-service, and technology partners. | 3 |
| AWS Security Hub | AWS Security Hub | 安全态势集中管理 | AWS Security Hub（セキュリティ態勢の一元管理） | Aggregates and standardizes findings from multiple security services. | 3 |
| AWS Snowball Edge | AWS Snowball Edge Storage Optimized | AWS 离线数据迁移与边缘计算设备 | AWS Snowball Edge（オフラインデータ移行・エッジコンピューティングデバイス） | A classic offline migration appliance; it is no longer available to new customers, so alternatives such as DataSync should also be understood. | 3 |
| AWS Transfer Family | AWS Transfer Family | AWS 托管文件传输服务 | AWS Transfer Family（マネージドファイル転送サービス） | Provides managed endpoints for business file exchange over SFTP, FTPS, FTP, and AS2. | 3 |
| aws_s3 | PostgreSQL aws_s3 Extension | PostgreSQL 的 S3 数据导入扩展 | PostgreSQL の S3 データインポート拡張 | PostgreSQL aws_s3 Extension is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from pg_dump / pg_restore / Percona Restore. | 3 |
| Batch Processing | Batch Processing | 批处理 | バッチ処理 | Processes groups of jobs without requiring immediate responses; common for reporting, simulations, and ETL. | 3 |
| Bootstrapping | Bootstrapping | 引导初始化 | ブートストラップ（起動時にソフトウェアの導入や設定を自動化して利用可能な状態にする処理） | Automates software installation and configuration at launch; repeatable, idempotent scripts make Auto Scaling replacement safer. | 3 |
| Boto3 | AWS SDK for Python (Boto3) | Python 版 AWS SDK | Boto3（Python アプリケーションから AWS サービスの API を呼び出すための AWS SDK for Python） | The modern AWS SDK for Python, used by Python application code to call AWS services. | 3 |
| Business Continuity | Business Continuity | 业务连续性 | 事業継続性 | Ensures critical business operations can continue during failures or disasters. | 3 |
| Cache Hit | Cache Hit | 缓存命中 | キャッシュヒット | The requested data is already in the cache and can be returned directly. | 3 |
| Cache Miss | Cache Miss | 缓存未命中 | キャッシュミス | The requested data is not in the cache, so it must be fetched from the source database or service. | 3 |
| Cascade Failure | Cascading Failure | 级联故障 | カスケード障害 | A failure that propagates downstream; queues, retries, rate limits, and circuit breakers reduce the risk. | 3 |
| Checkpointing | Checkpointing | 计算进度检查点保存 | チェックポイント保存 | Checkpointing is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Instance Store. | 3 |
| Cluster | Cluster | 集群 | クラスター | A group of resources that jointly provide compute or orchestration capacity; both ECS and EKS use the cluster concept. | 3 |
| Compute Environment | AWS Batch Compute Environment | 批作业计算环境 | コンピュート環境 | AWS Batch Compute Environment is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from Job Queue / Job Definition. | 3 |
| Console Multi-session Support | AWS Management Console Multi-session Support | AWS 控制台多会话支持 | AWS マネジメントコンソールのマルチセッション機能（同じブラウザーで複数のログイン状態を並行利用する機能） | Add Session can keep identities from the same or different accounts open in parallel; a session is not a new account and does not change ownership or permissions. | 3 |
| Consumer | Message Consumer | 消息消费者 | コンシューマー | The party that reads and processes messages; retries and idempotency must be considered when processing fails. | 3 |
| Cost Anomaly Detection | AWS Cost Anomaly Detection | AWS 成本异常检测 | コスト異常検知 | AWS Cost Anomaly Detection is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS Budgets / Cost Explorer / CloudWatch. | 3 |
| Data Residency | Data Residency | 数据驻留 | データレジデンシー | Requires data to be stored in a specified country, Region, or location; often affects Region and Outposts selection. | 3 |
| Dedicated Host | Dedicated Host | 专用主机 | 専有ホスト（単一顧客専用の物理 EC2 サーバーを割り当てる購入オプション） | Provides visibility and control over an entire physical server, often for license compliance. | 3 |
| Dedicated Instance | Dedicated Instance | 专用实例 | 専有インスタンス（単一顧客専用のハードウェア上で実行される EC2 インスタンス） | Runs instances on single-tenant hardware without giving the customer control of the specific physical host. | 3 |
| DeletionPolicy | CloudFormation DeletionPolicy | 删除栈或移除资源时的保留策略 | 削除ポリシー | CloudFormation DeletionPolicy is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from UpdateReplacePolicy. | 3 |
| Deployment | Deployment | 部署 | デプロイメント | Releases an application, configuration, or version into a runtime environment. | 3 |
| Directory Bucket | Amazon S3 Directory Bucket | 目录存储桶 | ディレクトリバケット | A special bucket type for S3 Express One Zone in a selected AZ; it is not a console folder. | 3 |
| Discovery Agent | AWS Application Discovery Agent | 应用发现代理 | アプリケーション検出エージェント | AWS Application Discovery Agent is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Replication Agent / Agentless Discovery. | 3 |
| DNS64 | DNS64 (AAAA Record Synthesis) | DNS64 / 合成 IPv6 DNS 记录 | DNS64（AAAA レコード合成） | DNS64 (AAAA Record Synthesis) is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from NAT64 Egress-only IGW. | 3 |
| Document Database | Document Database | 文档数据库 | ドキュメントデータベース | Stores semi-structured and nested data as JSON-like documents. | 3 |
| DoS | Denial of Service | 拒绝服务攻击 | サービス拒否攻撃 | Usually exhausts a target service's resources from a single source. | 3 |
| Drift Detection | CloudFormation Drift Detection | 基础设施配置漂移检测 | ドリフト検出 | CloudFormation Drift Detection is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Auto Remediation / Change Set. | 3 |
| DSSE-KMS | Dual-layer Server-Side Encryption with AWS KMS keys | KMS 双层服务端加密 | AWS KMS キーによる二層サーバー側暗号化 | Applies two independent layers of server-side encryption with KMS keys for high-compliance data; it is not TLS plus SSE-KMS. | 3 |
| EDNS Client Subnet | Extension Mechanisms for DNS Client Subnet | EDNS 客户端子网 | EDNSクライアントサブネット | Lets a resolver include a truncated client subnet to improve geographic, latency, or IP-based routing decisions, but support is not universal. | 3 |
| EFS One Zone | Amazon EFS One Zone | EFS 单可用区 | EFS One Zone | Stores EFS data in one AZ at lower cost without cross-AZ data redundancy; clients in other AZs may add latency and transfer cost. | 3 |
| Elastic Beanstalk | AWS Elastic Beanstalk | 面向开发者的托管应用部署服务 | AWS Elastic Beanstalk（アプリケーションのデプロイ・管理サービス） | A PaaS-style service that configures EC2, ALB, Auto Scaling, and more after code upload; the underlying resources remain visible and manageable. | 3 |
| Event Source Mapping | Event Source Mapping | 事件源映射 | イベントソースマッピング | Configuration that makes Lambda poll event sources such as SQS, Kinesis, and DynamoDB Streams. | 3 |
| FaaS | Function as a Service | 函数即服务 | FaaS（関数実行サービス） | Uses functions as the unit of deployment and execution; Lambda is the typical AWS FaaS service. | 3 |
| Fast Snapshot Restore | Amazon EBS Fast Snapshot Restore | 快速快照恢复 | 高速スナップショット復元 | Eliminates first-read lazy-loading latency for volumes created from a selected snapshot in a selected AZ at additional cost. | 3 |
| FSx | Amazon FSx | 托管文件系统系列 | マネージドファイルシステム | A family of fully managed file systems for Windows, Lustre, NetApp ONTAP, and OpenZFS workloads. | 3 |
| Fully Managed Service | Fully Managed Service | 完全托管服务 | フルマネージドサービス | AWS takes on more operational work; this describes a degree of management, not one strict product category. | 3 |
| Game Day | Game Day | 故障响应与恢复演练 | ゲームデイ（障害対応・復旧演習） | Game Day is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from / /. | 3 |
| Glacier Vault Lock | Amazon S3 Glacier Vault Lock | Glacier 保险库锁 | Glacier ボールトロック | Makes a vault lock policy immutable after locking, supporting WORM compliance controls. | 3 |
| Graph Database | Graph Database | 图数据库 | グラフデータベース | Represents and queries complex relationships using vertices, edges, and properties. | 3 |
| GWLB | Gateway Load Balancer | 网关负载均衡器 | Gateway Load Balancer（ゲートウェイロードバランサー） | Distributes traffic through scalable virtual network appliances such as firewalls and inspection systems. | 3 |
| GWLBe | Gateway Load Balancer Endpoint | 网关负载均衡器端点 | Gateway Load Balancer エンドポイント | Routes traffic transparently through a Gateway Load Balancer service chain for centralized firewalls, IDS/IPS, and deep packet inspection. | 3 |
| High Risk Issue | High Risk Issue (HRI) | 高风险问题 | 高リスクの問題 | High Risk Issue (HRI) is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from CVE / /. | 3 |
| IAM Identity Center | AWS IAM Identity Center | 员工单点登录与多账户访问 | AWS IAM Identity Center（従業員向け SSO・マルチアカウントアクセス） | Centrally manages workforce access to multiple AWS accounts and applications. | 3 |
| Imperative | Imperative Configuration | 命令式配置 | 命令的構成 | Explicitly describes each step of how an operation should be performed. | 3 |
| Improvement Plan | Improvement Plan | 架构改进计划 | 改善計画 | Improvement Plan is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from /. | 3 |
| Infrastructure | Infrastructure | 基础设施 | インフラストラクチャ | The underlying compute, networking, storage, security, and related resources. | 3 |
| IP-based Routing | IP-based Routing Policy | 基于 IP 的路由 | IPベースルーティング | Chooses DNS answers by known ISP or customer CIDR ranges, should include a default rule, and does not support private hosted zones. | 3 |
| Isolation | Isolation | 隔离 | 分離 / アイソレーション | Separates customers or workloads through virtualization, permissions, and network boundaries. | 3 |
| Job Definition | AWS Batch Job Definition | 批作业运行定义 | ジョブ定義 | AWS Batch Job Definition is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from Docker Image / Job Queue. | 3 |
| Job Queue | AWS Batch Job Queue | 批作业队列 | ジョブキュー | AWS Batch Job Queue is an AWS Compute concept. Review its purpose and operational boundaries, and distinguish it from Amazon SQS / Compute Environment. | 3 |
| K8s | Kubernetes | 容器编排平台 | Kubernetes（クバネティス） | Kubernetes is an open-source platform; EKS is the AWS-managed Kubernetes service. | 3 |
| Lens | Lens | 架构评审视角 | レンズ（設計評価の観点） | Lens is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from CloudFormation Template / S3 Storage Lens. | 3 |
| Link Aggregation Group | Link Aggregation Group | 链路聚合组 | リンクアグリゲーショングループ | Aggregates compatible Direct Connect connections; bandwidth aggregation and site redundancy must be considered separately. | 3 |
| Log Group | Log Group | 日志组 | ロググループ | Organizes multiple log streams by application or resource and defines their retention period. | 3 |
| Log Stream | Log Stream | 日志流 | ログストリーム | A sequence of log events from one specific source, such as a Lambda execution environment. | 3 |
| Logical ID | CloudFormation Logical ID | 模板内资源逻辑标识 | 論理 ID | CloudFormation Logical ID is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Physical ID. | 3 |
| Low Latency | Low Latency | 低延迟 | 低レイテンシ（要求から応答までの遅延が小さい状態） | Emphasizes response speed rather than throughput; common when choosing Regions, edge locations, and caches. | 3 |
| Maintenance Windows | AWS Systems Manager Maintenance Windows | 运维维护窗口 | メンテナンスウィンドウ | AWS Systems Manager Maintenance Windows is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Patch Manager / EventBridge Scheduler. | 3 |
| Managed Node | Systems Manager Managed Node | 受 Systems Manager 管理的节点 | マネージドノード | Systems Manager Managed Node is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from EC2-only Instance / Agent Online. | 3 |
| Medium Risk Issue | Medium Risk Issue (MRI) | 中风险问题 | 中リスクの問題 | Medium Risk Issue (MRI) is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from HRI /. | 3 |
| Migration Evaluator | AWS Migration Evaluator | AWS 迁移评估与商业案例服务 | Migration Evaluator（移行評価・ビジネスケース作成サービス） | Builds a data-driven migration business case from the current environment, licensing, and target options. | 3 |
| Milestone | Milestone | 评审里程碑 | マイルストーン | Milestone is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from EBS Snapshot / Backup / Release. | 3 |
| MPI | Message Passing Interface | 消息传递接口 | メッセージパッシングインターフェース | Message Passing Interface is an AWS Compute concept. Review its purpose and operational boundaries. | 3 |
| Multi-Tenancy | Multi-Tenancy | 多租户 | マルチテナンシー | Multiple customers share underlying infrastructure while remaining logically isolated; common in cloud computing. | 3 |
| NAT Instance | Network Address Translation Instance | 网络地址转换实例 | NAT インスタンス | Network Address Translation Instance is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from NAT Gateway Bastion Host. | 3 |
| Network Border Group | Network Border Group | 网络边界组 | ネットワークボーダーグループ | Network Border Group is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Availability Zone IP Region EIP. | 3 |
| OS-bypass | Operating System Bypass | 绕过内核网络栈的通信机制 | OS バイパス（カーネルのネットワークスタックを迂回） | Operating System Bypass is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from TCP. | 3 |
| Outposts | AWS Outposts | AWS 本地部署服务 | AWS Outposts（オンプレミス向け AWS インフラストラクチャ） | Deploys AWS infrastructure and services in a customer's data center for low latency, data residency, and hybrid cloud. | 3 |
| Patch Baseline | Systems Manager Patch Baseline | 补丁批准基线 | パッチベースライン | Systems Manager Patch Baseline is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Patch Compliance / Vulnerability Finding. | 3 |
| Percona XtraBackup | Percona XtraBackup | MySQL 物理备份工具 | MySQL 物理バックアップツール | Percona XtraBackup is an AWS Database concept. Review its purpose and operational boundaries, and distinguish it from mysqldump / Snapshot Export. | 3 |
| Physical ID | CloudFormation Physical ID | 实际资源物理标识 | 物理 ID | CloudFormation Physical ID is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from Logical ID. | 3 |
| PII | Personally Identifiable Information | 个人身份信息 | 個人を特定できる情報 | Data that can directly or indirectly identify an individual. | 3 |
| PPS | Packets Per Second | 每秒数据包数 | 1 秒あたりのパケット数 | Packets Per Second is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Bandwidth Latency IOPS. | 3 |
| Primary ENI | Primary Elastic Network Interface | 主网络接口 | プライマリ ENI（EC2 起動時に Device Index 0 として使用される主要ネットワークインターフェイス） | The device-index-0 network interface that cannot be detached from an instance and provides its primary private IPv4 and network placement. | 3 |
| Producer | Message Producer | 消息生产者 | プロデューサー | The party that creates and sends messages or events. | 3 |
| Production-scale Testing | Production-scale Testing | 生产规模测试 | 本番規模のテスト | Production-scale Testing is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from / CPU. | 3 |
| Provisioning | Resource Provisioning | 资源预置 / 配置 | プロビジョニング | Creates and configures infrastructure resources; deployment focuses more on releasing applications or versions. | 3 |
| RBAC | Role-Based Access Control | 基于角色的访问控制 | ロールベースアクセス制御 | Provides finer-grained authorization for ElastiCache Valkey and Redis OSS than a single shared AUTH token. | 3 |
| RDS Custom | Amazon RDS Custom | 可定制托管关系数据库 | Amazon RDS Custom（カスタムマネージド DB） | Provides deeper operating-system and database customization for supported Oracle and SQL Server workloads. | 3 |
| Recycle Bin | Recycle Bin for AWS Resources | AWS 回收站 | AWS Recycle Bin | Retention rules protect deleted AWS resources from accidental loss. Retained resources continue to incur charges and outlive deletion of the rule. | 3 |
| Reference Architecture | Reference Architecture | 参考架构 | リファレンスアーキテクチャ | Reference Architecture is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from / /. | 3 |
| Registry | Container Registry | 容器镜像仓库 | コンテナレジストリ | Stores, versions, and distributes container images; ECR is the AWS service for this purpose. | 3 |
| Replacement | CloudFormation Resource Replacement | 更新时资源替换 | リソースの置換 | CloudFormation Resource Replacement is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from In-place Update. | 3 |
| S3 Account Regional Namespace | Amazon S3 Account Regional Namespace | S3 账户区域命名空间 | S3 アカウントリージョナル名前空間 | An account-specific regional bucket namespace whose full name includes account ID, Region, and the -an suffix. | 3 |
| S3 Byte-Range Fetch | Amazon S3 Byte-Range Fetch | S3 字节范围读取 | S3 バイト範囲取得 | Reads selected byte ranges of an object, enabling parallel downloads or retrieval of only a header or segment. | 3 |
| S3 Express One Zone | Amazon S3 Express One Zone | S3 Express 单可用区 | S3 Express One Zone（1 ゾーンの高性能ストレージクラス） | A single-AZ object storage class designed for extremely high performance. | 3 |
| S3 Requester Pays | Amazon S3 Requester Pays | S3 请求者付费 | S3 リクエスタ支払い | Makes an authenticated requester pay request and download charges while the bucket owner continues to pay storage. | 3 |
| S3 Storage Class Analysis | Amazon S3 Storage Class Analysis | S3 存储类别分析 | S3 ストレージクラス分析 | Analyzes access patterns and recommends when objects should transition from Standard to Standard-IA. | 3 |
| SageMaker | Amazon SageMaker | 机器学习平台 | 機械学習プラットフォーム | A managed platform for building, training, tuning, and deploying machine-learning models. | 3 |
| sc1 | Cold HDD (sc1) | 冷数据 HDD | Cold HDD（sc1） | Low-cost cold HDD for infrequent, large sequential EBS access; it cannot boot and is poor for random I/O. | 3 |
| Scale Up / Down | Vertical Scaling | 纵向扩展 / 缩减 | スケールアップ / ダウン | Scales by increasing or decreasing one machine's capacity; it can require downtime and has a single-machine limit. | 3 |
| Secondary Private IP | Secondary Private IP Address | 辅助私有 IP 地址 | セカンダリプライベート IP アドレス（同じ ENI に追加で割り当てるプライベート IP アドレス） | An additional private address on the same ENI, not a second virtual network interface. | 3 |
| Security Finding | Security Finding | 安全调查结果 | セキュリティ検出結果 | A risk record produced by a security service, usually with severity and remediation guidance. | 3 |
| Self-Managed | Self-Managed Service | 自行管理 | セルフマネージド | The user handles installation, patching, backups, scaling, and high availability, as with a database operated on EC2. | 3 |
| Sid | Statement ID | 语句标识符 | ステートメント ID（ポリシー内の各 Statement を識別しやすくする任意の識別子） | An optional statement identifier for readability and troubleshooting; it grants no permission by itself. | 3 |
| Simple Routing | Simple Routing Policy | 简单路由 | シンプルルーティング | Uses no special selection logic. A record can return multiple values, but health checks cannot be attached to individual values. | 3 |
| Snapshot Archive | Amazon EBS Snapshots Archive | 快照归档层 | EBS スナップショットアーカイブ | A lower-cost tier for long-retained EBS snapshots with slower restore and a minimum billing period. | 3 |
| Sorted Set | Sorted Set | 有序集合 | ソート済みセット | An ordered set data structure commonly used for real-time leaderboards. | 3 |
| Spot Capacity Pool | Spot Capacity Pool | Spot 容量池 | Spot キャパシティプール（インスタンスタイプ、アベイラビリティーゾーン、プラットフォームなどで区別される未使用容量の集合） | Spare capacity defined by attributes such as instance type, AZ, and platform; diversification reduces reliance on one pool. | 3 |
| SR-IOV | Single Root I/O Virtualization | 单根 I/O 虚拟化 | シングルルート I/O 仮想化 | Single Root I/O Virtualization is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from ENA EFA OS-bypass ENI. | 3 |
| SRR | Same-Region Replication | 同区域复制 | 同一リージョンレプリケーション | Replicates S3 objects within the same Region according to configured rules. | 3 |
| Tight Coupling | Tightly Coupled Architecture | 紧密耦合 | 密結合（みつけつごう） | Components depend directly on one another, increasing the risk of cascading failures and making scaling harder. | 3 |
| Topic | Topic | 主题 | トピック | The logical entry point for publishing messages in SNS; one message can be delivered to multiple subscribers. | 3 |
| Trigger | Trigger | 触发器 | トリガー | An event source that starts Lambda or another automated workflow. | 3 |
| UpdateReplacePolicy | CloudFormation UpdateReplacePolicy | 替换旧物理资源时的处置策略 | 更新時置換ポリシー | CloudFormation UpdateReplacePolicy is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from DeletionPolicy. | 3 |
| VPN CloudHub | AWS VPN CloudHub | VPN 云枢纽 | AWS VPN CloudHub | AWS VPN CloudHub is an AWS Networking concept. Review its purpose and operational boundaries, and distinguish it from Transit Gateway VPC Peering. | 3 |
| Web Server Environment | Elastic Beanstalk Web Server Environment | Web 服务器环境 | Webサーバー環境 | An Elastic Beanstalk environment serving client HTTP/HTTPS requests, commonly backed by ELB, an Auto Scaling group, and EC2. | 3 |
| Workload | Workload | 工作负载 | ワークロード | Workload is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from EC2 / / Region. | 3 |
| Zero Spend Budget | Zero Spend Budget | 零支出预算 | ゼロ支出予算（料金が発生し始めた時点で通知する AWS Budgets のテンプレート） | An AWS Budgets template that alerts when charges begin, useful for detecting Free Tier overruns and unexpected small charges. | 3 |
| Alert Subscription | Cost Anomaly Detection Alert Subscription | 成本异常告警订阅 | 異常通知サブスクリプション | Cost Anomaly Detection Alert Subscription is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from SNS Subscription / Cost Monitor. | 2 |
| Amazon Pinpoint | Amazon Pinpoint | 客户分群和多渠道营销（历史） | Amazon Pinpoint（顧客セグメント・マルチチャネル施策） | Amazon Pinpoint is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from SES / SNS / AWS End User Messaging. | 2 |
| AWS Architecture Center | AWS Architecture Center | AWS 架构资源中心 | AWS アーキテクチャセンター | AWS Architecture Center is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from / / Well-Architected Tool. | 2 |
| AWS Credits | AWS Promotional Credits | AWS 促销额度 | AWS クレジット（対象となる AWS 利用料金に充当できる販促残高） | Offsets eligible AWS usage charges; expiration, eligible services, and award rules depend on the account terms. | 2 |
| AWS End User Messaging | AWS End User Messaging | 终端用户消息服务 | AWS End User Messaging（エンドユーザー向けメッセージ） | AWS End User Messaging is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from Amazon Pinpoint / Amazon SES. | 2 |
| AWS Solutions Library | AWS Solutions Library | AWS 解决方案库 | AWS ソリューションライブラリ | AWS Solutions Library is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from CloudFormation / /. | 2 |
| AWS Support API | AWS Support API | AWS 支持服务 API | AWS Support API（サポート API） | AWS Support API is an AWS Monitoring concept. Review its purpose and operational boundaries, and distinguish it from Trusted Advisor API / Basic API. | 2 |
| Campaign | Amazon Pinpoint Campaign | 营销触达活动 | キャンペーン | Amazon Pinpoint Campaign is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from Segment / Journey. | 2 |
| Compute Resource | Compute Resource | 计算资源 | コンピューティングリソース | CPU, memory, GPU, running instances, and other resources required to perform computation. | 2 |
| Cost Monitor | Cost Anomaly Detection Cost Monitor | 成本异常监测范围 | コストモニター | Cost Anomaly Detection Cost Monitor is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Alert Subscription / Budget. | 2 |
| Custom Lens | Custom Lens | 自定义架构评审视角 | カスタムレンズ | Custom Lens is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from / Config Rule. | 2 |
| Default Output Format | AWS CLI default output format | 默认输出格式 | 既定の出力形式（AWS CLI のレスポンスを JSON、table、text、YAML などのどの形式で表示するかを定める設定） | Controls only how CLI responses are displayed and can be overridden with --output; it does not affect permissions or resource state. | 2 |
| Dependency | Dependency | 依赖项 | 依存関係（いぞんかんけい） | A library or component required by an application; container images usually package dependencies together. | 2 |
| DKIM | DomainKeys Identified Mail | 域名邮件签名验证 | DKIM（ドメイン鍵によるメール署名認証） | DomainKeys Identified Mail is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from SPF / TLS / DMARC. | 2 |
| DocumentDB | Amazon DocumentDB (with MongoDB compatibility) | 文档数据库服务 | ドキュメントデータベース | Designed for MongoDB-compatible workloads and complex document data. | 2 |
| Edge | Edge | 图关系边 | エッジ | A relationship connecting two vertices in a graph database. | 2 |
| Environment | Environment | 运行环境 | 環境（かんきょう） | Can mean development, testing, or production, or the overall runtime conditions an application depends on. | 2 |
| Free account plan | AWS Free Account Plan | AWS 免费账户计划 | AWS 無料アカウントプラン（期間とクレジット上限のある学習・検証向けプラン） | Plan details can change; check current AWS billing documentation and do not treat it as all services being free forever. | 2 |
| GDPR | General Data Protection Regulation | 欧盟《通用数据保护条例》 | EU 一般データ保護規則 | Protects personal data and privacy in the European Union; exact requirements must be confirmed for the business and applicable law. | 2 |
| Implementation Guide | Implementation Guide | 实施指南 | 実装ガイド | Implementation Guide is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Launch. | 2 |
| Infrastructure Composer | AWS Infrastructure Composer（formerly Application Composer） | 可视化基础设施模板编辑工具 | AWS Infrastructure Composer（視覚的テンプレート作成） | AWS Infrastructure Composer formerly Application Composer is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from CloudFormation / CDK. | 2 |
| Instance Scheduler on AWS | Instance Scheduler on AWS | 实例定时启停解决方案 | Instance Scheduler on AWS（定時起動・停止） | Instance Scheduler on AWS is an AWS DevOps concept. Review its purpose and operational boundaries, and distinguish it from EventBridge Scheduler / Auto Scaling. | 2 |
| Journey | Amazon Pinpoint Journey | 客户营销旅程 | ジャーニー | Amazon Pinpoint Journey is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from Campaign / Step Functions. | 2 |
| Lightsail | Amazon Lightsail | 简化版云服务器 | Amazon Lightsail（簡易型仮想サーバーサービス） | Simple fixed-price bundles for small websites and beginner projects; complex architectures usually use EC2. | 2 |
| Neptune | Amazon Neptune | 图数据库服务 | グラフデータベース | Designed for traversing complex relationships, fraud detection, and knowledge graphs. | 2 |
| PaaS | Platform as a Service | 平台即服务 | PaaS（サービスとしてのプラットフォーム） | Developers mainly manage applications and data while the platform manages the runtime and infrastructure. | 2 |
| Paid account plan | AWS Paid Account Plan | AWS 付费账户计划 | AWS 有料アカウントプラン（従量課金で継続利用するアカウントプラン） | Continues with usage-based billing; promotional credits depend on current AWS terms. | 2 |
| Portability | Portability | 可移植性 | ポータビリティ / 可搬性 | The ability to move and run an application across environments; containers commonly improve portability. | 2 |
| Runtime | Runtime | 运行时 | ランタイム | The software environment required to execute a program, such as Python, Java, or a container runtime. | 2 |
| SDDC | Software-Defined Data Center | 软件定义数据中心 | ソフトウェア定義データセンター | Software-Defined Data Center is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from Native EC2 Rehost / VMware Stack. | 2 |
| Segment | Amazon Pinpoint Segment | 营销受众分群 | セグメント（対象者グループ） | Amazon Pinpoint Segment is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from Campaign / Network Segment. | 2 |
| Simulation | Simulation | 模拟计算 | シミュレーション | Usually a compute-intensive batch workload; AWS Batch and Spot Instances are common options. | 2 |
| SPF | Sender Policy Framework | 发件来源授权验证 | SPF（送信元認証） | Sender Policy Framework is an AWS Messaging concept. Review its purpose and operational boundaries, and distinguish it from DKIM / From Header / TLS. | 2 |
| Trusted Advisor API | AWS Trusted Advisor API | Trusted Advisor 推荐接口 | AWS Trusted Advisor API（推奨事項 API） | AWS Trusted Advisor API is an AWS Monitoring concept. Review its purpose and operational boundaries, and distinguish it from AWS Support API. | 2 |
| Vertex | Vertex / Node | 图节点 | 頂点 / ノード | A node representing an entity in a graph database. | 2 |
| VM | Virtual Machine | 虚拟机 | 仮想マシン | Each VM usually includes a complete operating system; isolation is strong, but startup and resource overhead exceed containers. | 2 |
| VM Import/Export | VM Import/Export | 虚拟机镜像导入／导出 | 仮想マシンイメージのインポート／エクスポート | VM Import/Export is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from MGN / VMware Cloud on AWS. | 2 |
| VMware Cloud on AWS | VMware Cloud on AWS | AWS 基础设施上的 VMware 云环境 | AWS 上の VMware クラウド環境 | VMware Cloud on AWS is an AWS Migration concept. Review its purpose and operational boundaries, and distinguish it from MGN / VM Import/Export. | 2 |
| Web Application | Web Application | Web 应用程序 | Web アプリケーション | An application accessed through a browser, often built with ALB, EC2 or ECS, RDS, and S3. | 2 |
| AWS Builder ID | AWS Builder ID | AWS 构建者身份 | AWS Builder ID | AWS Builder ID is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS AWS Root／IAM. | 1 |
| AWS Certification Account | AWS Certification Account | AWS 认证账号 | AWS 認定アカウント | AWS Certification Account is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS Account Root／IAM. | 1 |
| Certification Benefit | AWS Certification Benefit | AWS 认证福利 | AWS 認定の特典 | AWS Certification Benefit is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from ／ 50%. | 1 |
| Certification Path | AWS Certification Path | 认证学习路线 | 認定資格の学習ルート | AWS Certification Path is an AWS Architecture concept. Review its purpose and operational boundaries. | 1 |
| Compensatory Scoring | Compensatory Scoring | 补偿计分 | 補償型の採点方式 | Compensatory Scoring is an AWS Architecture concept. Review its purpose and operational boundaries. | 1 |
| Content Domain | Content Domain | 考试内容域 | 試験の出題分野 | Content Domain is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from SAA-C03 ／ ／ ／ Well-Architected. | 1 |
| ESL +30 | English as a Second Language (ESL) +30 Minutes | 非英语母语考生英语考试加时 | 英語を母語としない受験者向け30分延長 | English as a Second Language (ESL) +30 Minutes is an AWS Architecture concept. Review its purpose and operational boundaries. | 1 |
| Exam Accommodation | Exam Accommodation | 考试便利安排 | 受験上の配慮 | Exam Accommodation is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from ESL. | 1 |
| Exam Guide | AWS Certification Exam Guide | 考试指南 | 試験ガイド | AWS Certification Exam Guide is an AWS Architecture concept. Review its purpose and operational boundaries. | 1 |
| Exam Voucher | Exam Voucher | 考试优惠券 | 試験バウチャー | Exam Voucher is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Promo Code. | 1 |
| Flag for Review | Flag for Review | 标记待复查 | 見直し用のフラグ | Flag for Review is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Flag. | 1 |
| Managed Blockchain | Amazon Managed Blockchain | 托管区块链 | マネージドブロックチェーン | A managed service for verifiable, tamper-resistant ledgers shared across multiple organizations. | 1 |
| Multiple Choice | Multiple Choice | 单选题 | 単一選択問題 | Multiple Choice is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from SAA-C03 1 3. | 1 |
| Multiple Response | Multiple Response | 多选题 | 複数選択問題 | Multiple Response is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from 5 2 5. | 1 |
| OnVUE | OnVUE | 在线监考考试 | オンライン監督付き試験 | OnVUE is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Pearson VUE ／ System Test. | 1 |
| Pearson VUE | Pearson VUE | 认证考试服务供应商 | 認定試験の配信事業者 | Pearson VUE is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from AWS Test Center OnVUE. | 1 |
| Practice Exam | Practice Exam | 模拟考试 | 模擬試験 | Practice Exam is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from Scaled Score. | 1 |
| Scaled Score | Scaled Score | 换算分数 | 換算スコア | Scaled Score is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from 100–1000 720. | 1 |
| Unscored Questions | Unscored Questions | 不计分题 | 採点対象外の問題 | Unscored Questions is an AWS Architecture concept. Review its purpose and operational boundaries, and distinguish it from 65 15 50. | 1 |
No matching terms found
Try another keyword or clear the frequency filter.