AWS GLOSSARY · EN / 中文 / 日本語
Trilingual AWS Glossary
AWS service names, abbreviations, and exam terminology in one quick-reference table.
384 terms
283 high-frequency
English · 中文 · 日本語 | Term / Abbreviation | English | 中文 | 日本語 | Notes | Exam frequency |
|---|---|---|---|---|---|
| Access Denied | Access Denied | 访问被拒绝 | アクセス拒否（必要な Allow がない、または明示的な Deny や権限境界などによって AWS API リクエストが拒否された状態） | Start with the denied Action, then check the current principal, direct and inherited policies, explicit denies, resources, and conditions. | 5 |
| Access Key ID | Access Key ID | 访问密钥 ID | アクセスキー ID（AWS API の認証情報一式を識別するための公開側の識別子） | Identifies a set of API credentials; it is like a username, not a password. A secret is still required, plus a session token for temporary credentials. | 5 |
| Action | Action | 操作 | アクション（ポリシーで許可または拒否する AWS API 操作を指定する要素） | Specifies an AWS API operation such as s3:GetObject; least privilege avoids unnecessary service:* grants. | 5 |
| AdministratorAccess | AWS Managed Policy AdministratorAccess | 管理员访问策略 | AdministratorAccess（すべての AWS アクションをすべてのリソースに対して許可する、非常に広範な管理権限の AWS 管理ポリシー） | An AWS managed policy with extremely broad permissions; it should not be the default policy for ordinary users. | 5 |
| ALB | Application Load Balancer | 应用负载均衡器 | Application Load Balancer（アプリケーションロードバランサー） | Layer 7 HTTP/HTTPS; supports path-based and host-based routing, plus WebSocket. | 5 |
| API Gateway | Amazon API Gateway | API 网关 | Amazon API Gateway（API の作成・公開・管理サービス） | A managed front door for APIs, not a VPC routing gateway. | 5 |
| ASG | Auto Scaling Group | 自动伸缩组 | Auto Scaling グループ（自動スケーリンググループ） | Maintains desired, minimum, and maximum instance counts; commonly paired with an ALB across multiple AZs. | 5 |
| AssumeRole | AWS STS AssumeRole | 代入 IAM 角色 | AssumeRole（信頼されたプリンシパルが AWS STS を通じて IAM ロールの一時認証情報を取得する操作） | A successful call returns expiring access key ID, secret access key, and session token credentials. | 5 |
| Aurora | Amazon Aurora | AWS 云原生关系型数据库 | Amazon Aurora（クラウドネイティブなリレーショナルデータベース） | MySQL- and PostgreSQL-compatible, with storage replicated across multiple AZs; part of the RDS family. | 5 |
| Authentication | Authentication | 身份验证 | 認証（にんしょう） | Verifies who a user or entity is. | 5 |
| Authorization | Authorization | 授权 | 認可（にんか） | Determines which actions a principal is allowed to perform. | 5 |
| Auto Scaling | Amazon EC2 Auto Scaling | 自动扩缩容 | オートスケーリング | Adds or removes instances based on metrics; Auto Scaling manages capacity while ELB distributes traffic. | 5 |
| Availability | Service Availability | 服务可用性 | 可用性 | Whether a service can be accessed successfully when it is needed. | 5 |
| AWS | Amazon Web Services | 亚马逊云科技 / 云服务平台 | アマゾン・ウェブ・サービス | A global cloud platform; exams emphasize security, reliability, elasticity, pay-as-you-go pricing, and the shared responsibility model. | 5 |
| AWS Account | Amazon Web Services Account | AWS 账户 | AWS アカウント（AWS リソース、認証、請求を管理する単位） | The management boundary for AWS resources, identities, and billing; multiple IAM identities in one account are not separate accounts. | 5 |
| AWS Billing and Cost Management | AWS Billing and Cost Management | AWS 账单与成本管理 | AWS 請求とコスト管理 | The central entry point for bills, payments, cost analysis, and financial governance. | 5 |
| AWS Budgets | AWS Budgets | AWS 预算与阈值告警 | AWS Budgets（予算の設定・アラート） | Alerts when actual or forecast cost, usage, or commitment metrics cross configured thresholds. | 5 |
| AWS Config | AWS Config | 资源配置与合规 | リソース構成とコンプライアンス | Records resource configuration history and evaluates resources against compliance rules. | 5 |
| AWS Cost Explorer | AWS Cost Explorer | AWS 成本与用量分析 | AWS Cost Explorer（コストと使用量の可視化・分析） | Analyzes historical cost and usage with filters, grouping, trends, and forecasts. | 5 |
| AWS KMS | AWS Key Management Service | 密钥管理服务 | AWS KMS（暗号鍵管理サービス） | Creates, controls, and audits keys used to encrypt data. | 5 |
| AWS Organizations | AWS Organizations | 多账户集中管理 | AWS Organizations（複数アカウントの一元管理） | Manages accounts, OUs, SCPs, and consolidated billing; SCPs restrict permissions but do not grant them. | 5 |
| AWS Pricing Calculator | AWS Pricing Calculator | AWS 定价计算器 | AWS Pricing Calculator（AWS 利用料金の見積もり） | Estimates AWS costs from architecture and usage assumptions before deployment. | 5 |
| AWS Support Plans | AWS Support Plans | AWS 支持计划 | AWS サポートプラン | Provides different technical-support response targets and proactive guidance based on workload criticality. | 5 |
| AWS Three-Phase Migration Process | Assess → Mobilize → Migrate & Modernize | AWS 三阶段迁移流程 | AWS 3段階移行プロセス | Describes the migration sequence: Assess, Mobilize, then Migrate and Modernize. | 5 |
| AWS Well-Architected Framework | AWS Well-Architected Framework | AWS 架构最佳实践框架 | AWS Well-Architected Framework（優れた設計のためのベストプラクティス体系） | Continuously reviews and improves workloads through six architectural pillars. | 5 |
| AWS Well-Architected Six Pillars | AWS Well-Architected Framework Six Pillars | Well-Architected 六大支柱 | AWS Well-Architected の 6 本の柱（運用上の優秀性・セキュリティ・信頼性・パフォーマンス効率・コスト最適化・持続可能性） | The six pillars are Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. | 5 |
| AZ | Availability Zone | 可用区 | AWS アベイラビリティーゾーン（リージョン内で障害分離されたインフラストラクチャ拠点） | A failure-isolation boundary made of one or more discrete data centers within a Region; highly available designs usually span at least two AZs. | 5 |
| Block Storage | Block Storage | 块存储 | ブロックストレージ | Provides low-latency random reads and writes in blocks, similar to a disk. | 5 |
| Bucket | Amazon S3 Bucket | S3 存储桶 | S3 バケット | The object container and management boundary for permissions, Region, Versioning, and Lifecycle. | 5 |
| CIDR | Classless Inter-Domain Routing | 无类别域间路由 | クラスレスドメイン間ルーティング | Represents an IP address range using a prefix length. | 5 |
| Cloud Computing | Cloud Computing | 云计算 | クラウドコンピューティング（必要な IT リソースをインターネット経由でオンデマンド利用する形態） | Provides compute, storage, databases, and other IT resources on demand over the internet with usage-based pricing and rapid scaling. | 5 |
| CloudFormation | AWS CloudFormation | 基础设施即代码 | AWS CloudFormation（コードによるインフラストラクチャ管理サービス） | Declares and repeatedly creates AWS resources from templates; useful for standardization, version control, and disaster recovery rebuilds. | 5 |
| CloudFormation Template | AWS CloudFormation Template | CloudFormation 模板 | CloudFormation テンプレート | Declares the required AWS resources in YAML or JSON. | 5 |
| CloudFront | Amazon CloudFront | 内容分发网络 | コンテンツ配信ネットワーク | Caches and distributes content through global edge locations to reduce user latency. | 5 |
| CloudTrail | AWS CloudTrail | API 操作审计日志 | AWS CloudTrail（API 操作の監査ログサービス） | Records who performed which API action on what resource and when; answers who did what. | 5 |
| CloudWatch | Amazon CloudWatch | 监控与可观测性服务 | Amazon CloudWatch（モニタリング・ログ・オブザーバビリティサービス） | Monitors metrics, logs, alarms, and dashboards; answers how the system is performing now. | 5 |
| Condition | Condition | 条件 | 条件（MFA、送信元 IP、タグ、組織などのリクエストコンテキストに基づいて規則の適用条件を指定する任意要素） | An optional policy element that limits when a statement applies based on request context. | 5 |
| CRR | Cross-Region Replication | 跨区域复制 | クロスリージョンレプリケーション | Replicates objects to another Region according to configured rules. | 5 |
| Customer Managed Policy | Customer Managed Policy | 客户托管策略 | カスタマー管理ポリシー（利用者が作成・管理し、複数の IAM アイデンティティで再利用できるポリシー） | A reusable standalone policy created by the customer, centrally maintained and versioned. | 5 |
| Database | Database | 数据库 | データベース | A system for persistently organizing, querying, updating, and analyzing business data. | 5 |
| Default Route | Default Route | 默认路由 | デフォルトルート | Usually written as 0.0.0.0/0 for IPv4 and ::/0 for IPv6. | 5 |
| DLQ | Dead-Letter Queue | 死信队列 | デッドレターキュー | Stores messages that repeatedly failed processing so they can be isolated, investigated, and reprocessed. | 5 |
| Durability | Data Durability | 数据持久性 | 耐久性 | Whether data remains intact over time without permanent loss. | 5 |
| DynamoDB | Amazon DynamoDB | 无服务器 NoSQL 数据库 | サーバーレス NoSQL | A serverless key-value and document database built for single-digit-millisecond performance at scale. | 5 |
| EBS | Amazon Elastic Block Store | 块存储 | Amazon EBS（EC2 向けの永続ブロックストレージサービス） | An EBS volume belongs to a specific account, Region, and AZ, not privately to the IAM user who created it; visibility depends on account, Region, and policy. | 5 |
| EC2 | Amazon Elastic Compute Cloud | 弹性云服务器 / 虚拟机 | Amazon EC2（仮想サーバー） | You manage the operating system, patches, and runtime; suited to long-running workloads that need system-level control. | 5 |
| EC2 Instance Profile | Amazon EC2 Instance Profile | EC2 实例配置文件 | EC2 インスタンスプロファイル（1 つの IAM ロールを Amazon EC2 インスタンスへ渡すためのコンテナ） | An instance profile can contain one role at a time; SDK and CLI processes on EC2 obtain that role's temporary credentials through IMDS. | 5 |
| ECS | Amazon Elastic Container Service | AWS 容器编排服务 | Amazon ECS | AWS-native container orchestration with generally lower learning and operational overhead than EKS. | 5 |
| Edge Location | AWS Edge Location | 边缘站点 | AWS エッジロケーション（利用者に近いコンテンツ配信拠点） | An edge facility near end users that reduces access latency; it is not a Region, AZ, or ordinary application data center. | 5 |
| Effect | Effect | 效果 | 効果（ポリシーステートメントがアクセスを許可するか拒否するかを Allow または Deny で指定する要素） | Either Allow or Deny; an applicable explicit Deny overrides Allow. | 5 |
| Elasticity | Elasticity | 弹性 | エラスティシティ（需要変動に応じてリソースを動的に増減する性質） | Capacity grows or shrinks quickly with actual demand, matching supply to load. | 5 |
| ELB | Elastic Load Balancing | 弹性负载均衡 | Elastic Load Balancing（マネージド負荷分散サービス） | Distributes traffic across targets and performs health checks; ALB and NLB are members of the ELB product family. | 5 |
| Encryption at Rest | Encryption at Rest | 静态加密 | 保管中の暗号化 | Protects data that has already been stored on media. | 5 |
| Encryption in Transit | Encryption in Transit | 传输中加密 | 転送中の暗号化 | Protects data while it travels across a network. | 5 |
| Explicit Deny | Explicit Deny | 显式拒绝 | 明示的な拒否（適用される Allow より優先してアクセスを拒否する規則） | An applicable explicit Deny overrides Allows in other policies and is the highest-priority IAM evaluation result. | 5 |
| Failover | Failover | 故障切换 | フェイルオーバー | Switches traffic or workloads to a standby resource when the primary resource fails. | 5 |
| Fargate | AWS Fargate | 无服务器容器计算引擎 | AWS Fargate（ファーゲート） | Not an orchestrator, but a serverless compute option for ECS and EKS that removes the need to manage EC2 instances. | 5 |
| File Storage | File Storage | 文件存储 | ファイルストレージ | Provides directories, paths, and shared file-system semantics. | 5 |
| Glacier Deep Archive | Amazon S3 Glacier Deep Archive | Glacier 深度归档 | S3 Glacier Deep Archive | For long-term archives at the lowest cost, with the longest restore times. | 5 |
| Glacier Flexible Retrieval | Amazon S3 Glacier Flexible Retrieval | Glacier 灵活检索 | S3 Glacier Flexible Retrieval | For archival data that can wait minutes to hours for retrieval. | 5 |
| Glacier Instant Retrieval | Amazon S3 Glacier Instant Retrieval | Glacier 即时检索 | S3 Glacier Instant Retrieval | For rarely accessed data that still requires millisecond retrieval. | 5 |
| Global Service | AWS Global Service | 全球级服务 | AWS グローバルサービス（単一リージョンに限定されないサービス） | Its control plane or configuration is not limited to one Region; resource scope can still depend on the protected service. | 5 |
| Global Tables | DynamoDB Global Tables | DynamoDB 全球表 | グローバルテーブル | DynamoDB replication across multiple Regions with a multi-active architecture. | 5 |
| HA | High Availability | 高可用性 | 高可用性（こうかようせい） | Reduces downtime through multiple AZs, redundancy, and automatic failover; it does not mean zero interruption. | 5 |
| IaC | Infrastructure as Code | 基础设施即代码 | Infrastructure as Code（コードによるインフラストラクチャ管理） | Declares infrastructure with templates or code and manages it under version control. | 5 |
| IAM | AWS Identity and Access Management | 身份与访问管理 | AWS Identity and Access Management（AWS のアイデンティティとアクセス権限を管理するグローバルサービス） | An account-level/global-view identity and permissions service. Access is denied by default, explicit denies win, and least privilege applies. | 5 |
| IAM Password Policy | IAM Account Password Policy | IAM 账户密码策略 | IAM パスワードポリシー（同一 AWS アカウント内の IAM ユーザーのコンソールパスワードについて、長さ、文字種、有効期限、再利用制限などを定める規則） | Controls only IAM user console passwords, not the root password, access keys, or IAM Identity Center passwords. | 5 |
| IAM Policy | IAM Policy | 权限策略 | IAM ポリシー（AWS の操作とリソースに対する許可・拒否を JSON で定義する権限文書） | A JSON permissions document, usually with Version and Statement. Identity-based policies omit Principal, and explicit Deny overrides Allow. | 5 |
| IAM Role | IAM Role | IAM 角色 | IAM ロール（信頼された主体が一時的に引き受け、許可された AWS 操作を実行するための IAM アイデンティティ） | The trust policy defines who may assume it; permissions policies define what the resulting role session may do. STS temporary credentials support workloads, federation, and cross-account access. | 5 |
| iam:PassRole | IAM PassRole permission | 将 IAM 角色传递给 AWS 服务的权限 | iam:PassRole（指定した IAM ロールを AWS サービスへ渡すことをユーザーに許可する IAM 権限） | PassRole is not AssumeRole. It lets a caller pass a specified role to an AWS service and should restrict both the role and destination service. | 5 |
| IAMReadOnlyAccess | IAMReadOnlyAccess | IAM 只读访问策略 | IAMReadOnlyAccess（IAM のユーザー、グループ、ロール、ポリシーなどを取得・一覧表示できる読み取り専用の AWS 管理ポリシー） | Mainly grants IAM Get and List actions, so resources can be viewed but not created, changed, or deleted. | 5 |
| Idempotency | Idempotency | 幂等性 | 冪等性（べきとうせい） | Repeating the same request produces no additional side effects; common in queue, retry, and payment scenarios. | 5 |
| Identity-based Policy | Identity-based Policy | 基于身份的策略 | アイデンティティベースのポリシー（IAM ユーザー、グループ、またはロールに付与する権限ポリシー） | Attached or embedded in an IAM identity; the principal is implied by the attachment, so Principal is not used. | 5 |
| IGW | Internet Gateway | 互联网网关 | インターネットゲートウェイ | Enables two-way internet communication for public-subnet resources; an instance still needs a public IP and correct routing. | 5 |
| Implicit Deny | Implicit Deny | 隐式拒绝 | 暗黙的な拒否（アクセスを許可する適用可能な Allow が存在しないため、既定で拒否される状態） | IAM denies by default; without an applicable Allow, the request remains implicitly denied. | 5 |
| Inherited Policy | Inherited Policy | 继承策略 | 継承されたポリシー（IAM ユーザーが所属グループを通じて受け取る権限ポリシー） | A user receives it through a group; removing the user from that group removes this permission source. | 5 |
| Inline Policy | Inline Policy | 内联策略 | インラインポリシー（単一の IAM ユーザー、グループ、またはロールに直接埋め込む一対一のポリシー） | Embedded one-to-one in a user, group, or role; it is deleted with the identity and is not suited to reuse. | 5 |
| Instance Store | Amazon EC2 Instance Store | EC2 实例存储 | インスタンスストア | Temporary block storage on the physical host; data is lost when the instance stops or terminates. | 5 |
| IOPS | Input/Output Operations Per Second | 每秒输入/输出操作数 | IOPS（1 秒あたりの入出力操作数） | Measures read and write operations per second; important for random, small-block I/O. | 5 |
| JOIN | SQL JOIN | 多表连接 | 結合（JOIN） | Combines data from multiple relational tables using related keys. | 5 |
| Lambda | AWS Lambda | 无服务器函数计算 | AWS Lambda（ラムダ） | Event-driven, automatically scales, and charges by invocation and duration; each run is limited to 15 minutes and is not suited to long-running processes. | 5 |
| Least Privilege | Principle of Least Privilege | 最低权限原则 | 最小権限の原則（業務に必要な最小限のアクセス権だけを付与する考え方） | Start with only the Actions, Resources, and conditions needed for the current task to reduce security risk, mistakes, and unexpected cost. | 5 |
| Lifecycle Policy | Amazon S3 Lifecycle Policy | S3 生命周期策略 | S3 ライフサイクルポリシー | Moves data between storage classes, expires objects, and cleans up old versions according to rules. | 5 |
| Longest Prefix Match | Longest Prefix Match | 最长前缀匹配 | 最長プレフィックス一致 | The route with the most specific matching destination takes precedence. | 5 |
| Loose Coupling | Loosely Coupled Architecture | 松散耦合 | 疎結合（そけつごう） | Lets components scale and recover independently; SQS is the most common exam example of decoupling. | 5 |
| MFA | Multi-Factor Authentication | 多因素认证 | 多要素認証（パスワードなどの第一要素に加えて、パスキーや認証アプリなど別の要素を要求する本人確認方式） | Adds another authentication factor but grants no permission. Enable it first for root and privileged identities; root and IAM users currently support up to eight devices. | 5 |
| Mount Target | Amazon EFS Mount Target | EFS 挂载目标 | EFS マウントターゲット | The network entry point for EFS in a subnet within an AZ. | 5 |
| Multi-AZ | Multi-AZ Deployment | 多可用区部署 | マルチ AZ 配置 | Primarily provides high availability and automatic failover, not read scaling. | 5 |
| Multi-Region | Multi-Region Architecture | 多区域架构 | マルチリージョン構成 | Deploys across AWS Regions for Region-level disaster recovery, global low latency, or compliance. | 5 |
| NACL | Network Access Control List | 网络访问控制列表 | ネットワーク ACL | Subnet-level and stateless, with both allow and deny rules; inbound and outbound rules must be configured explicitly. | 5 |
| NAT Gateway | Network Address Translation Gateway | NAT 网关 | NAT ゲートウェイ | Lets private-subnet resources initiate internet access without allowing unsolicited inbound connections; deployed in a public subnet. | 5 |
| NFS | Network File System | 网络文件系统 | ネットワークファイルシステム | A common shared-file protocol on Linux; EFS commonly uses TCP port 2049. | 5 |
| NoSQL | Not Only SQL | 非关系型数据库范式 | NoSQL データベース | Does not mean no structure; it means a fixed relational-table model is not the only data model. | 5 |
| Object | Amazon S3 Object | S3 对象 | S3 オブジェクト | The storage unit in object storage, consisting of data, a key, metadata, and related attributes. | 5 |
| Object Key | Amazon S3 Object Key | S3 对象键 | S3 オブジェクトキー | The unique name of an object in a bucket; slashes only represent prefixes. | 5 |
| Object Lock | Amazon S3 Object Lock | S3 对象锁 | S3 オブジェクトロック | Prevents an object from being modified or deleted during its retention period. | 5 |
| Object Storage | Object Storage | 对象存储 | オブジェクトストレージ | Stores data as objects with metadata and accesses it through APIs or HTTP. | 5 |
| Partition Key | Partition Key | 分区键 | パーティションキー | Determines the distribution of DynamoDB items and is the key element required by Query. | 5 |
| Permissions Policy | IAM Permissions Policy | IAM 权限策略 | アクセス許可ポリシー（IAM ユーザーやロールなどが実行できる AWS のアクションと対象リソースを定義するポリシー） | A role's permissions policy defines what the role session may do; it does not define who may assume the role. | 5 |
| Point-in-Time Recovery (PITR) | Point-in-Time Recovery | 时间点恢复 | ポイントインタイムリカバリ | Restores a database to a specific point within the retention window. | 5 |
| Policy Statement | Policy Statement | 策略语句 | ポリシーステートメント（Effect、Action、Resource、Condition などで一つの権限規則を表す記述） | The core IAM JSON permission rule; Statement may be one object or an array of multiple statements. | 5 |
| Policy Wildcard | Policy Wildcard | 策略通配符 | ポリシーのワイルドカード（アクション名やリソース範囲の複数の値を * または ? でまとめて一致させる記号） | In Action it matches API operation names; in Resource it matches resource scope, so meaning depends on the field. | 5 |
| Presigned URL | Amazon S3 Presigned URL | 预签名 URL | 署名付き URL | Provides temporary, expiring access within the permissions of the signer. | 5 |
| Primary Key | Primary Key | 主键 | 主キー | A key that uniquely identifies a record or item. | 5 |
| Principal | Principal | 主体 | プリンシパル（リソースベースまたは信頼ポリシーで、規則の対象となるアカウント、ユーザー、ロール、サービスなどの主体） | Common in resource-based and trust policies; identity-based policies do not use it, and IAM groups cannot be principals. | 5 |
| Private Subnet | Private Subnet | 私有子网 | プライベートサブネット | Has no direct route to an IGW; resources can initiate outbound access through NAT. | 5 |
| PrivateLink | AWS PrivateLink | AWS 私有链接 | AWS PrivateLink（AWS サービスへのプライベート接続） | Provides private access to a specific service without connecting entire networks. | 5 |
| Public Subnet | Public Subnet | 公有子网 | パブリックサブネット | Its route table has a direct route to an IGW; resources also need public addresses and security rules for internet communication. | 5 |
| Query | Query | 查询操作 | クエリ | A DynamoDB Query locates data by partition key and is usually more efficient than Scan. | 5 |
| RDS | Amazon Relational Database Service | 托管关系型数据库 | Amazon RDS | AWS manages backups, patching, and infrastructure; Multi-AZ improves availability while Read Replicas scale reads. | 5 |
| Read Replica | Read Replica | 只读副本 | リードレプリカ | Primarily scales reads and reporting queries; replication is usually asynchronous and can span Regions. | 5 |
| Redundancy | Redundancy | 冗余 | 冗長性（じょうちょうせい） | Reduces single points of failure by duplicating components and paths. | 5 |
| Refactor / Re-architect | Refactor / Re-architect | 重构、重新架构 | リファクタリング／再設計 | Changes or rewrites code to redesign the architecture around cloud-native capabilities. | 5 |
| Region | AWS Region | 区域 | AWS リージョン（複数のアベイラビリティーゾーンを含む独立した地理的領域） | Choose a Region by checking compliance, latency, service availability, and price; cross-Region designs commonly address disaster recovery, compliance, or global latency. | 5 |
| Regional Service | AWS Regional Service | 区域级服务 | AWS リージョナルサービス（単一リージョンを作用範囲とするサービス） | Resources and operations belong to a selected Region; switching the console Region shows a different regional resource set. | 5 |
| Rehost | Rehost (Lift and Shift) | 重新托管、原样迁移 | 再ホスト（リフト・アンド・シフト） | Moves an individual server or application to AWS with little or no application change. | 5 |
| Relational Database | Relational Database | 关系数据库 | リレーショナルデータベース | Organizes data with tables, keys, and relationships, supporting SQL, joins, and transactions. | 5 |
| Replatform | Replatform (Lift, Tinker and Shift) | 更换平台、小幅优化后迁移 | 再プラットフォーム化 | Migrates after limited cloud optimization without changing the core architecture. | 5 |
| Resource | Resource | 资源 | リソース（ポリシーステートメントの適用対象となる AWS リソースを ARN などで指定する要素） | Specifies the AWS resource a statement affects; avoid * when an exact scope can be defined. | 5 |
| Resource-based Policy | Resource-based Policy | 基于资源的策略 | リソースベースのポリシー（AWS リソース側に設定し、どのプリンシパルに何を許可・拒否するかを定義するポリシー） | Attached to a resource and usually names principals; it is common for cross-account authorization. | 5 |
| Root User | AWS Account Root User | AWS 账户根用户 | AWS アカウントのルートユーザー（アカウント作成時の最高権限を持つ本人確認主体） | Use only for the few account tasks that require root. Enable MFA, create no access key, and do not use it for daily administration. | 5 |
| Route 53 | Amazon Route 53 | DNS 与域名服务 | Amazon Route 53（DNS・ドメイン登録・トラフィックルーティングサービス） | Provides DNS resolution, domain registration, health checks, and traffic routing. | 5 |
| Route Table | Route Table | 路由表 | ルートテーブル | Determines the next hop for network traffic; it does not allow or deny individual connections. | 5 |
| RPO | Recovery Point Objective | 恢复点目标 | 目標復旧時点 | The maximum amount of data loss, measured in time, that the business can tolerate. | 5 |
| RTO | Recovery Time Objective | 恢复时间目标 | 目標復旧時間 | The maximum time allowed to restore the business after a failure. | 5 |
| S3 | Amazon Simple Storage Service | 对象存储 | Amazon S3（オブジェクトストレージ） | Stores data as objects in buckets with very high durability; it is not mounted to EC2 as a traditional block device. | 5 |
| S3 Intelligent-Tiering | Amazon S3 Intelligent-Tiering | S3 智能分层 | S3 Intelligent-Tiering（自動階層化ストレージクラス） | For data with unknown or changing access patterns; automatically moves data between access tiers. | 5 |
| S3 Standard | Amazon S3 Standard | S3 标准存储 | S3 Standard（標準ストレージクラス） | The default storage class for frequently accessed data, with multiple AZs and low latency. | 5 |
| S3 Standard-IA | Amazon S3 Standard-Infrequent Access | S3 标准-低频访问 | S3 Standard-IA（標準-低頻度アクセス） | For infrequently accessed data that still needs millisecond retrieval; retrieval fees apply. | 5 |
| Scalability | Scalability | 可扩展性 | スケーラビリティ（需要増加に合わせて処理能力を拡張できる性質） | A system can scale vertically or horizontally to handle more load, but it does not necessarily scale down automatically. | 5 |
| Schema | Schema | 数据结构定义 | スキーマ | Defines tables, columns, types, and constraints; DynamoDB still has a primary-key schema. | 5 |
| Secret Access Key | Secret Access Key | 秘密访问密钥 | シークレットアクセスキー（AWS API リクエストの署名に使用する秘密値で、作成時以外は再表示できない認証情報） | Keep it secret and never share or hard-code it; if lost, create and validate a new key before revoking the old one. | 5 |
| Security Group | Security Group | 安全组 | セキュリティグループ | Instance-level and stateful, with allow rules only; return traffic is automatically permitted. | 5 |
| Serverless | Serverless Computing | 无服务器计算 | サーバーレスコンピューティング | Servers still exist, but users do not manage them; common examples include Lambda, Fargate, and DynamoDB. | 5 |
| Service Role | IAM Role for an AWS Service | AWS 服务角色 | サービスロール（AWS サービスが利用者に代わって処理を実行するために引き受ける IAM ロール） | Its trust policy trusts the relevant AWS service, while its permissions policy grants only what that service needs to perform the task. | 5 |
| Session Token | Session Token | 会话令牌 | セッショントークン（STS などが発行する一時的な Access Key ID と Secret Access Key とともに使用する、期限付き認証情報の追加要素） | The third component of temporary credentials; it must accompany the temporary access key and expires with the session. | 5 |
| SNS | Amazon Simple Notification Service | 通知与发布订阅服务 | Amazon SNS（通知サービス） | Push-based pub/sub and broadcasting; a common fan-out pattern sends one SNS message to multiple SQS queues. | 5 |
| SPOF | Single Point of Failure | 单点故障 | 単一障害点 | A component whose failure makes the entire system unavailable. | 5 |
| SQL | Structured Query Language | 结构化查询语言 | 構造化照会言語 | A language for defining, querying, and modifying data in relational databases. | 5 |
| SQS | Amazon Simple Queue Service | 消息队列服务 | Amazon SQS（メッセージキュー） | A pull-based buffer for decoupling; Standard provides at-least-once delivery, while FIFO preserves order and deduplicates. | 5 |
| Stateful | Stateful | 有状态 | ステートフル | Tracks permitted connections and their related return traffic. | 5 |
| Stateless | Stateless | 无状态 | ステートレス | Evaluates each direction independently without tracking connections. | 5 |
| Subnet | Subnet | 子网 | サブネット | A subnet belongs to one AZ; it is public only when its route table points to an Internet Gateway. | 5 |
| Table | Table | 表 | テーブル | Made of rows and columns in a relational database, and of items in DynamoDB. | 5 |
| Temporary Credentials | Temporary Security Credentials | 临时安全凭证 | 一時的なセキュリティ認証情報 | Time-limited credentials consisting of an access key, secret key, and session token. | 5 |
| Temporary Security Credentials | AWS Temporary Security Credentials | AWS 临时安全凭证 | AWS 一時的セキュリティ認証情報（Access Key ID、Secret Access Key、Session Token で構成され、有効期限がある API 認証情報） | Expire automatically and are used by roles, IAM Identity Center, and federation; prefer them over long-term IAM user keys. | 5 |
| Throughput | Storage Throughput | 存储吞吐量 | スループット | Measures data transferred per second; important for large sequential I/O. | 5 |
| TLS | Transport Layer Security | 传输层安全协议 | トランスポート層セキュリティ | The modern protocol used to establish encrypted network connections. | 5 |
| Trust Policy | IAM Role Trust Policy | IAM 角色信任策略 | 信頼ポリシー（どのプリンシパルが IAM ロールを引き受けられるかを定義する、ロール必須のリソースベースポリシー） | Defines who may assume a role; it does not replace the permissions policy that defines what the role session may do. | 5 |
| Versioning | Amazon S3 Versioning | S3 版本控制 | S3 バージョニング | Keeps historical object versions to protect against accidental overwrites and deletions. | 5 |
| Virtual MFA Device | Virtual Multi-Factor Authentication Device | 虚拟 MFA 设备 | 仮想 MFA デバイス（認証アプリで TOTP コードを生成し、パスワードに加えて本人確認を行うソフトウェア認証器） | Linked through a QR code or secret configuration key; those values can generate TOTP codes and must be protected as credentials. | 5 |
| Visibility Timeout | Visibility Timeout | 可见性超时 | 可視性タイムアウト | After an SQS message is read, it is temporarily hidden from other consumers; set it longer than actual processing time. | 5 |
| VPC | Amazon Virtual Private Cloud | 虚拟私有云 | Amazon VPC（仮想プライベートクラウド） | A logically isolated, Region-level network; CIDR planning, routing, security groups, and NACLs are core VPC concepts. | 5 |
| VPC Endpoint | Virtual Private Cloud Endpoint | VPC 端点 | VPC エンドポイント | Provides private access to supported AWS services or endpoint services. | 5 |
| Zonal Resource | AWS Zonal Resource | 可用区级资源 | AWS ゾーナルリソース（特定のアベイラビリティーゾーンに配置されるリソース） | Lives in a specific AZ; the architecture must use multiple AZs when it needs resilience to AZ failure. | 5 |
| Access Key | AWS Access Key | AWS 访问密钥 | AWS アクセスキー（AWS API リクエストへの署名に使用する認証情報。長期キーは必要な場合だけ使用し、安全な手順で更新する） | API signing credentials. Long-term keys usually belong to IAM users; temporary keys also include a session token. When long-term keys are unavoidable, create a new key, update and verify consumers, then deactivate and delete the old key. | 4 |
| Amazon GuardDuty | Amazon GuardDuty | 智能威胁检测 | Amazon GuardDuty（インテリジェントな脅威検出） | Continuously analyzes activity and threat intelligence to identify suspicious behavior. | 4 |
| AMI | Amazon Machine Image | 机器镜像 | Amazon マシンイメージ | A template for launching EC2 that contains an OS, software, and configuration; it can include one or more EBS snapshots. | 4 |
| API Call | Application Programming Interface Call | API 调用 | API 呼び出し（プログラムや AWS マネジメントコンソールが AWS サービスの操作を実行するために送信するリクエスト） | Console actions also trigger one or more API calls, and IAM policy Actions determine whether those calls are authorized. | 4 |
| At-Least-Once Delivery | At-Least-Once Delivery | 至少一次投递 | 少なくとも1回の配信 | Messages can be delivered more than once, so consumers must be designed to be idempotent. | 4 |
| Athena | Amazon Athena | S3 无服务器 SQL 查询 | S3 サーバーレス SQL | Runs serverless SQL queries directly against data stored in S3. | 4 |
| Attribute | Attribute | 属性 | 属性（アトリビュート） | A field and its value within a DynamoDB item. | 4 |
| Authenticator App | Authenticator Application | 身份验证器应用 | 認証アプリ（仮想 MFA デバイスとして TOTP コードを生成し、ログイン時の追加認証に使用するアプリケーション） | Initially linked with a QR code or secret key; later sign-ins use the current TOTP code. | 4 |
| Automated Backup | Automated Backup | 自动备份 | 自動バックアップ | RDS automated backups combine snapshots and logs to support point-in-time recovery within the retention period. | 4 |
| AWS Artifact | AWS Artifact | 合规文档与协议自助服务 | AWS Artifact（コンプライアンス文書・契約のセルフサービス） | Provides AWS compliance reports and manages applicable agreements; it does not scan customer resources. | 4 |
| AWS Audit Manager | AWS Audit Manager | 审计证据自动收集与评估管理 | AWS Audit Manager（監査証拠の自動収集・評価支援） | Organizes controls by audit framework and continuously collects evidence from the customer environment. | 4 |
| AWS Backup | AWS Backup | 集中式备份服务 | AWS Backup（一元管理型バックアップサービス） | Centrally manages backup and retention policies across multiple AWS services. | 4 |
| AWS CLI | AWS Command Line Interface | AWS 命令行界面 | AWS CLI（ターミナルからコマンドやシェルスクリプトで AWS API を操作するコマンドラインツール） | Calls AWS APIs from terminal commands and shell scripts. aws configure stores profile credentials, default Region, and output format but grants no IAM permissions; people should prefer Identity Center and temporary credentials. | 4 |
| AWS Cloud Adoption Framework | AWS Cloud Adoption Framework (AWS CAF) | AWS 云采用框架 | AWS クラウド導入フレームワーク | Improves cloud readiness through six perspectives: Business, People, Governance, Platform, Security, and Operations. | 4 |
| AWS Compute Optimizer | AWS Compute Optimizer | AWS 计算资源优化建议 | AWS Compute Optimizer（コンピューティングリソースの適正化推奨） | Uses utilization data to recommend right-sized resource configurations. | 4 |
| aws configure | AWS CLI configure command | AWS CLI 配置命令 | aws configure（AWS CLI のプロファイルに認証情報、既定リージョン、既定の出力形式などを保存する設定コマンド） | Stores client configuration; it does not create an IAM user, attach a policy, or guarantee permission for later API calls. | 4 |
| AWS Control Tower | AWS Control Tower | 多账户 Landing Zone 与治理 | AWS Control Tower（マルチアカウント環境の構築・統制） | Provides a landing zone, Account Factory, controls, and a governance dashboard. | 4 |
| AWS DMS | AWS Database Migration Service | 数据库迁移服务 | データベース移行サービス | Migrates databases with minimal downtime through full load and ongoing replication. | 4 |
| AWS DRS | AWS Elastic Disaster Recovery | AWS 弹性灾难恢复 | AWS Elastic Disaster Recovery（災害復旧サービス） | Continuously replicates servers at the block level and quickly launches recovery instances during a disaster. | 4 |
| AWS Health Dashboard | AWS Health Dashboard | 账户相关的 AWS 服务健康与事件通知 | AWS Health Dashboard（アカウント別のサービス稼働状況） | Shows whether AWS service events, planned changes, and account notifications affect your resources. | 4 |
| AWS Managed Policy | AWS Managed Policy | AWS 托管策略 | AWS 管理ポリシー（AWS が作成・管理し、複数の IAM アイデンティティにアタッチできるポリシー） | Created and maintained by AWS and attachable to multiple identities; AWS may update its permissions. | 4 |
| AWS Marketplace | AWS Marketplace | AWS 第三方产品数字市场 | AWS Marketplace（サードパーティ製品・サービスのデジタルカタログ） | A digital catalog for discovering, purchasing, and deploying third-party software, data, and professional services. | 4 |
| AWS SCT | AWS Schema Conversion Tool | Schema 转换工具 | スキーマ変換ツール | Assesses and converts schemas and code objects for heterogeneous database migrations. | 4 |
| AWS SDK | AWS Software Development Kit | AWS 软件开发工具包 | AWS SDK（アプリケーションコードから AWS API を呼び出すための、プログラミング言語別のソフトウェア開発キット） | Language-specific libraries for calling AWS APIs from application code; the credential provider chain can obtain role, Identity Center, and other temporary or long-term credentials. | 4 |
| AWS Secrets Manager | AWS Secrets Manager | 机密与凭证管理 | AWS Secrets Manager（シークレット・認証情報管理） | Securely stores passwords, tokens, and API keys and can rotate them automatically. | 4 |
| AWS Service Catalog | AWS Service Catalog | 已批准 IT 服务目录 | AWS Service Catalog（承認済み IT サービスのカタログ管理） | Lets users deploy approved products through controlled self-service. | 4 |
| AWS Shield | AWS Shield | DDoS 防护 | AWS Shield（DDoS 保護サービス） | Protects AWS applications against DoS and DDoS attacks. | 4 |
| AWS Systems Manager | AWS Systems Manager | 集中式运维管理 | AWS Systems Manager（統合運用管理サービス） | Centrally manages nodes, patches, commands, and operations automation. | 4 |
| AWS Tags | AWS Resource Tags | AWS 资源标签 | AWS リソースタグ（リソースへ付与するキーと値の任意メタデータ） | Key-value metadata for classification, cost, automation, and governance; tags do not grant access by themselves. | 4 |
| AWS Transform MGN | AWS Transform MGN (formerly AWS Application Migration Service) | AWS 服务器与应用迁移服务 | AWS Transform MGN（サーバー・アプリケーション移行サービス） | AWS Application Migration Service was renamed in June 2026; it migrates servers through continuous block-level replication. | 4 |
| AWS Trusted Advisor | AWS Trusted Advisor | AWS 最佳实践检查与优化建议 | AWS Trusted Advisor（ベストプラクティスに基づく最適化推奨） | Provides best-practice recommendations for cost, performance, security, fault tolerance, and service quotas. | 4 |
| AWS WAF | AWS Web Application Firewall | Web 应用防火墙 | AWS WAF（ウェブアプリケーションファイアウォール） | Filters HTTP(S) requests with rules to defend against attacks such as SQL injection and XSS. | 4 |
| AWS Well-Architected Tool | AWS Well-Architected Tool | 架构评审与风险改进工具 | AWS Well-Architected Tool（Well-Architected レビュー支援サービス） | Reviews workloads against the six pillars and records risks, improvement plans, and milestones. | 4 |
| AWS X-Ray | AWS X-Ray | 分布式请求追踪服务 | AWS X-Ray（分散トレーシング・性能分析サービス） | Uses traces and a service map to locate latency and errors across a distributed call path. | 4 |
| BGP | Border Gateway Protocol | 边界网关协议 | ボーダーゲートウェイプロトコル | A protocol for dynamically exchanging routes between networks. | 4 |
| Block-level Replication | Block-level Replication | 块级复制 | ブロックレベルレプリケーション | Continuously copies changed data blocks to reduce RPO. | 4 |
| Cache Hit | Cache Hit | 缓存命中 | キャッシュヒット | The requested data is already in the cache and can be returned directly. | 4 |
| Cache Miss | Cache Miss | 缓存未命中 | キャッシュミス | The requested data is not in the cache, so it must be fetched from the source database or service. | 4 |
| Cache-Aside | Cache-Aside Pattern | 旁路缓存模式 | キャッシュアサイド | The application checks the cache first, then reads from the database and fills the cache on a miss. | 4 |
| CDN | Content Delivery Network | 内容分发网络 | コンテンツデリバリーネットワーク | Caches or distributes content from locations close to users. | 4 |
| CGW | Customer Gateway | 客户网关 | カスタマーゲートウェイ | Represents the customer-side router, firewall, or VPN device. | 4 |
| Change Data Capture (CDC) | Change Data Capture | 变更数据捕获 | 変更データキャプチャ | Continuously captures changes in the source database and replicates them to the target. | 4 |
| Client VPN | AWS Client VPN | 客户端 VPN | AWS Client VPN（クライアント向けリモートアクセス VPN） | Provides secure VPC access for individual remote users. | 4 |
| CloudWatch Logs | Amazon CloudWatch Logs | 日志管理服务 | Amazon CloudWatch Logs（ログ管理サービス） | Centrally collects and queries application, system, and Lambda logs. | 4 |
| Compliance | Compliance | 合规性 | コンプライアンス（法令・規制・業界基準への適合） | When choosing a Region, first check data residency, regulatory, data-protection, and industry compliance requirements. | 4 |
| Container | Container | 容器 | コンテナ | Shares the host kernel, starts quickly, and is portable; lighter than a virtual machine. | 4 |
| Container Image | Container Image | 容器镜像 | コンテナイメージ | A read-only template; a container is a running instance of an image. | 4 |
| CORS | Cross-Origin Resource Sharing | 跨源资源共享 | オリジン間リソース共有 | A browser cross-origin rule, not an identity authorization mechanism. | 4 |
| Cost Allocation Tag | Cost Allocation Tag | 成本分配标签 | コスト配分タグ | Attributes and analyzes cost by project, department, environment, or another business dimension. | 4 |
| Credential Provider Chain | AWS Credential Provider Chain | AWS 凭证提供程序链 | 認証情報プロバイダーチェーン（AWS SDK やツールがロール、IAM Identity Center、環境変数、設定ファイル、メタデータなどから認証情報を順番に探索する仕組み） | Lets SDKs and tools discover and refresh suitable credentials without hard-coding secrets in application code. | 4 |
| Credential Rotation | Credential Rotation | 凭证轮换 | 認証情報のローテーション（古い認証情報を安全に新しいものへ切り替え、漏えいや長期利用のリスクを減らす運用） | Safely replace an old credential: create a new key, update every consumer, verify it, deactivate the old key, and delete it after confirming no failures. | 4 |
| Data Center | AWS Data Center | 物理数据中心 | AWS データセンター（コンピューティング設備を収容する物理施設） | A physical facility containing servers, storage, and networking; one AZ may consist of one or more discrete data centers. | 4 |
| DDoS | Distributed Denial of Service | 分布式拒绝服务攻击 | 分散型サービス拒否攻撃 | A denial-of-service attack launched simultaneously from many distributed sources. | 4 |
| Declarative | Declarative Configuration | 声明式配置 | 宣言的構成 | Describes the desired final resources while the tool determines the creation steps. | 4 |
| Default Region | AWS CLI default Region | 默认区域 | 既定のリージョン（コマンドでリージョンを明示しない場合に AWS CLI が使用する標準の AWS リージョン） | Sets the request Region when none is specified; higher-priority options may override it, and it never bypasses IAM. | 4 |
| Delete Marker | Amazon S3 Delete Marker | 删除标记 | 削除マーカー | A marker that becomes the current version when an ordinary delete is performed with Versioning enabled. | 4 |
| Direct Connect | AWS Direct Connect | AWS 专线连接 | AWS Direct Connect（AWS への専用ネットワーク接続） | A dedicated connection that provides consistent bandwidth; encryption is not enabled by default. | 4 |
| Directly Attached Policy | Directly Attached Policy | 直接附加策略 | 直接アタッチされたポリシー（グループを経由せず、IAM ユーザーやロールなどのアイデンティティに直接付与されたポリシー） | Permissions come directly from the identity; removing a user from a group does not revoke this policy. | 4 |
| DLM | Amazon Data Lifecycle Manager | 数据生命周期管理器 | データライフサイクルマネージャー | Automates the creation, retention, and deletion of EBS snapshots and EBS-backed AMIs. | 4 |
| DMS | AWS Database Migration Service | 数据库迁移服务 | データベース移行サービス | Migrates database data with full load and ongoing change data capture for low-downtime moves. | 4 |
| DNS | Domain Name System | 域名系统 | ドメインネームシステム | Resolves domain names to reachable network addresses or service endpoints. | 4 |
| DynamoDB Accelerator (DAX) | DynamoDB Accelerator | DynamoDB 加速器 | DynamoDB アクセラレータ | A managed in-memory cache built for DynamoDB that can reduce suitable reads to microsecond latency. | 4 |
| ECR | Amazon Elastic Container Registry | 容器镜像仓库 | Amazon ECR | ECR stores container images; ECS and EKS run and orchestrate them. | 4 |
| EDA | Event-Driven Architecture | 事件驱动架构 | イベント駆動型アーキテクチャ | Components collaborate through events to reduce coupling; commonly combines EventBridge, SNS, SQS, and Lambda. | 4 |
| EFS | Amazon Elastic File System | 共享文件存储 | Amazon EFS（ファイルストレージ） | A Linux NFS file system that multiple EC2 instances can mount concurrently across AZs. | 4 |
| EKS | Amazon Elastic Kubernetes Service | 托管 Kubernetes 服务 | Amazon EKS | Prefer EKS when a scenario mentions Kubernetes, cross-cloud compatibility, or existing K8s workloads. | 4 |
| Elastic IP | Elastic IP Address | 弹性 IP 地址 | Elastic IP アドレス | A static public IPv4 address that the customer can allocate and reassociate. | 4 |
| ElastiCache | Amazon ElastiCache | 托管内存缓存 | マネージドインメモリキャッシュ | A general-purpose backend cache that reduces repeated database reads. | 4 |
| Ephemeral Port | Ephemeral Port | 临时端口 | エフェメラルポート | A short-lived dynamic client port; NACLs often need rules allowing return traffic on these ports. | 4 |
| EventBridge | Amazon EventBridge | 事件总线服务 | Amazon EventBridge（イベントバス） | Matches and routes events by rules, making it suitable for event-driven architectures and SaaS integrations. | 4 |
| Execution Role | Lambda Execution Role | Lambda 执行角色 | Lambda 実行ロール | Controls which AWS resources Lambda can access at runtime; it does not control who can invoke the function. | 4 |
| Federation | Identity Federation | 身份联合 | フェデレーション（外部の ID プロバイダーと連携し、AWS アカウントごとに長期利用者を作成せず、一時認証情報でアクセスする仕組み） | Sign in through an external identity provider and receive temporary AWS credentials instead of creating long-term IAM users in every account; this is a preferred approach for workforce access. | 4 |
| Foreign Key | Foreign Key | 外键 | 外部キー | References the primary key of another table to establish a relationship. | 4 |
| Global Accelerator | AWS Global Accelerator | 全球网络加速 | AWS Global Accelerator（グローバルネットワーク高速化サービス） | Accelerates global TCP/UDP traffic and shifts traffic between endpoints based on health. | 4 |
| Hybrid Cloud | Hybrid Cloud | 混合云 | ハイブリッドクラウド | Combines on-premises data centers with public cloud; Outposts and Direct Connect commonly appear in these scenarios. | 4 |
| IAM Access Advisor | IAM Access Advisor / Service Last Accessed Information | IAM 访问顾问／最后访问时间信息 | IAM アクセスアドバイザー（利用者、グループ、ロール、ポリシーに許可されたサービスや操作の最終アクセス情報と権限元を確認する機能） | Reviews service/action last-accessed data and permission sources for users, groups, roles, and policies. It is not a complete real-time audit log. | 4 |
| IAM Access Analyzer | AWS Identity and Access Management Access Analyzer | 访问权限分析器 | IAM Access Analyzer（外部アクセス・未使用アクセスの分析） | Analyzes external access, policies, and unused permissions to help enforce least privilege. | 4 |
| IAM Credentials Report | IAM Credential Report | IAM 凭证报告 | IAM 認証情報レポート（ルートアカウント行と IAM ユーザーのパスワード、MFA、アクセスキー、署名証明書の状態や最終利用・更新情報を一覧化する CSV レポート） | An account-level CSV covering the root-account row and IAM-user passwords, MFA, access keys, signing certificates, and last-use/rotation data. It excludes role temporary credentials and service-specific credentials. | 4 |
| IAM Group | IAM User Group | IAM 用户组 | IAM ユーザーグループ（複数の IAM ユーザーへ共通権限を割り当てるための集合） | Contains IAM users only, not other groups. A user may join multiple groups, while a group cannot sign in or be assumed. | 4 |
| IAM User | IAM User | IAM 用户 | IAM ユーザー（AWS アカウント内で長期的な認証情報を持つ利用者。現在は従業員の通常利用には IAM Identity Center や認証連携による一時認証情報が推奨される） | A long-term identity in an AWS account that can have a console password or access key and join multiple groups. Prefer Identity Center or federation with temporary credentials for routine workforce access. | 4 |
| IAMFullAccess | IAMFullAccess | IAM 完全访问策略 | IAMFullAccess（IAM サービスのユーザー、グループ、ロール、ポリシーなどを管理する完全アクセス権限の AWS 管理ポリシー） | Provides full management of IAM, not administrator access to every AWS service and resource. | 4 |
| Item | Item | 项目 / 数据项 | 項目（アイテム） | A record in a DynamoDB table, composed of multiple attributes. | 4 |
| Managed Service | Managed Service | 托管服务 | マネージドサービス | AWS operates part of the underlying stack, while users may still configure capacity, versions, and networking. | 4 |
| Manual Snapshot | Manual DB Snapshot | 手动数据库快照 | 手動 DB スナップショット | A user-created backup of database state at a specific time, retained until explicitly deleted. | 4 |
| Metadata | Object Metadata | 对象元数据 | オブジェクトメタデータ | Describes an object's content and properties; changing user metadata usually requires rewriting the object. | 4 |
| Multipart Upload | Multipart Upload | 分段上传 | マルチパートアップロード | Uploads a large object in parallel parts; required for objects larger than 5 GB. | 4 |
| NLB | Network Load Balancer | 网络负载均衡器 | Network Load Balancer（ネットワークロードバランサー） | Layer 4 TCP/UDP/TLS; suited to extremely high performance, ultra-low latency, and static IP requirements. | 4 |
| Object Tags | Amazon S3 Object Tags | S3 对象标签 | S3 オブジェクトタグ | Managed separately from object metadata and used for classification, lifecycle rules, and permission conditions. | 4 |
| On-premises | On-premises | 本地数据中心 / 本地机房 | オンプレミス環境（企業が自社で所有・運用するサーバーやデータセンター） | A data-center and server environment owned and managed by the organization. | 4 |
| Orchestration | Container Orchestration | 容器编排 | コンテナオーケストレーション | Handles deployment, scaling, scheduling, networking, and failure recovery; ECS and EKS are orchestration services. | 4 |
| Passkey | Passkey | 通行密钥 | パスキー（FIDO 規格と公開鍵暗号を利用し、パスワードより強い耐フィッシング性を持つ認証方式） | AWS supports device-bound security keys and synced passkeys as phishing-resistant MFA options. | 4 |
| Point of Presence | AWS Point of Presence | 边缘接入点 | AWS Point of Presence（利用者に近いエッジネットワーク拠点） | A generic edge network access site, often discussed together with Edge Locations in foundation exams. | 4 |
| Policy Language Version | Policy Language Version | 策略语言版本 | ポリシー言語バージョン（IAM ポリシーの構文機能を指定する Version 要素の値） | Usually 2012-10-17; it is the policy syntax version, not a resource version or modification date. | 4 |
| Pub/Sub | Publish / Subscribe | 发布 / 订阅 | パブリッシュ／サブスクライブ | Publishers do not need to know their subscribers; suitable for one-to-many broadcasting. | 4 |
| Pull | Pull Model | 拉取模式 | プル型 | Consumers actively retrieve messages; SQS is a typical pull-based service. | 4 |
| Purpose-Built Database | Purpose-Built Database | 专用数据库 | 専用データベース | Selects the database best suited to the data model and access pattern. | 4 |
| Push | Push Model | 推送模式 | プッシュ型 | The service actively sends messages to subscribers; SNS is typically push-based. | 4 |
| Queue | Message Queue | 消息队列 | メッセージキュー | Messages are generally processed by one consumer; queues provide ordering, buffering, and load smoothing. | 4 |
| Region Selector | AWS Console Region Selector | 区域选择器 | AWS コンソールのリージョンセレクター（操作対象リージョンを切り替える機能） | Sets the console's current Region; regional resources change with it, while global services usually do not. | 4 |
| Relocate | Relocate | 重新放置、整个平台迁移 | 再配置（プラットフォーム全体の移行） | Moves an entire virtualization or container platform to a similar environment on AWS. | 4 |
| Repurchase | Repurchase (Drop and Shop) | 重新购买、更换产品 | 再購入（SaaS への置き換え） | Replaces legacy software with a new product or SaaS offering. | 4 |
| Retain | Retain | 保留、暂不迁移 | 保持（現環境に残す） | Keeps a valuable application in place for now because of compliance, dependencies, or insufficient migration benefit. | 4 |
| Retire | Retire | 停用、下线 | 廃止（システムを停止する） | Decommissions and stops maintaining a system that is no longer needed. | 4 |
| S3 Access Point | Amazon S3 Access Point | S3 访问点 | S3 アクセスポイント | Provides independent access endpoints and policies for different applications or teams. | 4 |
| S3 File Gateway | Amazon S3 File Gateway | S3 文件网关 | Amazon S3 ファイルゲートウェイ | Maps local NFS or SMB files to objects in S3. | 4 |
| S3 One Zone-IA | Amazon S3 One Zone-Infrequent Access | S3 单可用区-低频访问 | S3 1 ゾーン-IA（1 ゾーン低頻度アクセス） | Lower-cost, single-AZ storage for infrequently accessed data that can be recreated. | 4 |
| S3 Outposts | Amazon S3 on Outposts | Outposts 本地对象存储 | Amazon S3 on Outposts（Outposts 向けオブジェクトストレージ） | Provides S3 object storage on Outposts at the customer's location. | 4 |
| Scale Out / In | Horizontal Scaling | 横向扩展 / 缩减 | スケールアウト / イン | Scales by adding or removing instances; it is more elastic and more common in cloud architecture exams. | 4 |
| Scan | Scan | 全表 / 全索引扫描 | スキャン | Reads many items before filtering and usually consumes more read capacity than Query. | 4 |
| Security Key | FIDO Security Key | 安全密钥 | セキュリティキー（FIDO 規格に基づく公開鍵認証を行う、耐フィッシング性の高い物理認証デバイス） | A phishing-resistant physical FIDO authenticator; U2F is older course terminology. | 4 |
| Service | ECS Service | ECS 服务 | ECS サービス | Continuously maintains a desired number of tasks and can integrate with load balancing and auto scaling. | 4 |
| Service Availability in a Region | AWS Service Availability by Region | 区域服务可用性 | リージョン別サービス提供状況（各リージョンで利用できる AWS サービスの範囲） | Shows whether a service or feature is offered in a target Region, not uptime or high availability. | 4 |
| Session Manager | AWS Systems Manager Session Manager | 安全会话管理 | セッションマネージャー | Creates controlled sessions without opening inbound SSH or RDP ports. | 4 |
| Site-to-Site VPN | AWS Site-to-Site VPN | 站点到站点 VPN | AWS Site-to-Site VPN（拠点間 VPN） | Connects complete networks through encrypted IPsec tunnels. | 4 |
| Snapshot | EBS Snapshot | EBS 快照 | EBS スナップショット | An incremental backup that can restore a volume in any AZ and can be copied to another Region. | 4 |
| Sort Key | Sort Key | 排序键 | ソートキー | Forms a composite primary key with the partition key and enables range queries within the same partition. | 4 |
| SSL/TLS Certificate | SSL/TLS Certificate | SSL/TLS 证书 | SSL/TLS 証明書 | Proves a service's identity and enables TLS-encrypted connections. | 4 |
| Storage Gateway | AWS Storage Gateway | 混合云存储网关 | AWS Storage Gateway（ハイブリッドクラウドストレージゲートウェイ） | Lets on-premises applications access AWS storage through file, volume, or tape interfaces. | 4 |
| Tape Gateway | AWS Storage Gateway Tape Gateway | 磁带网关 | テープゲートウェイ | Replaces physical tape backup infrastructure with virtual tapes. | 4 |
| Task | ECS Task | ECS 任务 / 运行实例 | ECS タスク | A running instance of a task definition; it can run once or be continuously maintained by a service. | 4 |
| Task Definition | ECS Task Definition | ECS 任务定义 | ECS タスク定義 | Defines container images, CPU, memory, ports, and environment variables; it is the runtime template. | 4 |
| TOTP | Time-Based One-Time Password | 基于时间的一次性密码 | 時刻同期型ワンタイムパスワード（共有秘密と現在時刻から一定間隔で生成される、一度限りの認証コード） | A short-lived code generated from a shared secret and the current time, not a fixed second password. | 4 |
| Transit Gateway | AWS Transit Gateway | 中转网关 | トランジットゲートウェイ | Centrally connects multiple VPCs and on-premises networks. | 4 |
| Trusted Entity | IAM Role Trusted Entity | IAM 角色受信任实体 | 信頼されたエンティティ（IAM ロールの信頼ポリシーで、そのロールを引き受けることを許可された主体） | Identifies who may assume a role, such as an AWS service, account, user, role, or federated principal. | 4 |
| VGW | Virtual Private Gateway | 虚拟私有网关 | 仮想プライベートゲートウェイ | The traditional private-connectivity gateway attached to one VPC. | 4 |
| Virtual Interface | Virtual Interface | 虚拟接口 | 仮想インターフェイス | A logical Direct Connect interface, such as a private, public, or transit VIF. | 4 |
| Volume Gateway | AWS Storage Gateway Volume Gateway | 卷网关 | ボリュームゲートウェイ | Presents iSCSI volumes on premises and backs up their data to AWS. | 4 |
| VPN | Virtual Private Network | 虚拟专用网络 | 仮想プライベートネットワーク | Protects network communication through an encrypted tunnel. | 4 |
| Account Alias | AWS Account Alias | AWS 账户别名 | AWS アカウントエイリアス（IAM ユーザーのサインイン時にアカウント ID の代わりに使える一意の別名） | Simplifies the IAM user sign-in URL. It must be unique, but it neither creates a new account nor changes permissions. | 3 |
| ACM | AWS Certificate Manager | SSL/TLS 证书管理 | AWS Certificate Manager（SSL/TLS 証明書管理） | Centrally provisions, deploys, and renews SSL/TLS certificates. | 3 |
| Agility | Agility | 敏捷性 | アジリティ（必要なリソースを短時間で試作・変更・展開できる俊敏性） | Focuses on faster experimentation, creation, change, and deployment; it is not automatic capacity scaling with load. | 3 |
| Amazon Connect | Amazon Connect | 云联络中心服务 | Amazon Connect（クラウドコンタクトセンターサービス） | Provides IVR, queues, agents, chat, and callback capabilities for a cloud contact center. | 3 |
| Amazon Detective | Amazon Detective | 安全事件调查与根因分析 | Amazon Detective（セキュリティ調査・根本原因分析サービス） | Investigates security incidents through visual relationships and timelines. | 3 |
| Amazon Inspector | Amazon Inspector | 漏洞管理 | Amazon Inspector（脆弱性管理サービス） | Continuously scans workloads for software vulnerabilities and CVEs. | 3 |
| Amazon Macie | Amazon Macie | S3 敏感数据发现 | Amazon Macie（S3 機密データ検出サービス） | Uses machine learning to discover sensitive data such as PII in S3. | 3 |
| Amazon SES | Amazon Simple Email Service | 应用程序邮件发送服务 | Amazon Simple Email Service（アプリケーション向けメール送信サービス） | Sends transactional, notification, and marketing email through an API or SMTP. | 3 |
| Amazon WorkSpaces | Amazon WorkSpaces | 托管式云桌面服务 | Amazon WorkSpaces（フルマネージド型クラウドデスクトップサービス） | Provides users with complete managed Windows or Linux cloud desktops. | 3 |
| Amazon WorkSpaces Applications | Amazon WorkSpaces Applications (formerly Amazon AppStream 2.0) | 托管式桌面应用流式交付服务 | Amazon WorkSpaces Applications（旧 Amazon AppStream 2.0、デスクトップアプリケーション配信サービス） | Streams managed desktop applications; older exam questions and courses use the name Amazon AppStream 2.0. | 3 |
| Amazon WorkSpaces Secure Browser | Amazon WorkSpaces Secure Browser (formerly Amazon WorkSpaces Web) | 托管式隔离浏览器服务 | Amazon WorkSpaces Secure Browser（旧 Amazon WorkSpaces Web、分離ブラウザーサービス） | Opens an isolated cloud browser session from the user's existing browser. | 3 |
| Anycast IP | Anycast Internet Protocol Address | 任播 IP 地址 | エニーキャスト IP | The same IP is advertised from multiple network locations so users enter through a nearby point. | 3 |
| API | Application Programming Interface | 应用程序编程接口 | アプリケーション・プログラミング・インターフェース | An interface through which software systems call each other and exchange data. | 3 |
| Auto-assign public IPv4 | Auto-assign Public IPv4 Address | 自动分配公有 IPv4 | パブリック IPv4 アドレスの自動割り当て | Controls only whether an instance automatically receives a public IPv4 address; it does not by itself make a subnet public. | 3 |
| AWS Amplify | AWS Amplify | Web 与移动应用全栈开发及托管平台 | AWS Amplify（Web・モバイル向けフルスタック開発・ホスティングプラットフォーム） | A platform for frontend teams to build, host, and connect web and mobile applications to cloud backends. | 3 |
| AWS API | AWS Application Programming Interface | AWS 应用程序编程接口 | AWS API（AWS のアプリケーションプログラミングインターフェース） | Every method of managing AWS resources ultimately interacts with AWS APIs. | 3 |
| AWS Application Discovery Service | AWS Application Discovery Service | AWS 本地环境发现与应用依赖分析 | AWS Application Discovery Service（アプリケーション検出・依存関係分析サービス） | Collects server configuration, performance, process, connection, and application-dependency data. | 3 |
| AWS AppSync | AWS AppSync | 托管 GraphQL API 与实时数据服务 | AWS AppSync（フルマネージド型 GraphQL API・リアルタイムデータサービス） | Its core components include GraphQL schemas, resolvers, data sources, and subscriptions. | 3 |
| AWS Batch | AWS Batch | 批处理计算服务 | AWS Batch（バッチコンピューティングサービス） | Runs large numbers of queued, non-real-time compute jobs and automatically schedules and scales compute resources. | 3 |
| AWS CLI Profile | AWS CLI named profile | AWS CLI 命名配置档案 | AWS CLI プロファイル（認証情報、リージョン、出力形式などの設定を名前付きで分離し、切り替えて使用する設定単位） | Select it explicitly with --profile. A profile is local configuration, not an IAM identity or permission policy. | 3 |
| AWS CloudShell | AWS CloudShell | 浏览器云命令行环境 | AWS CloudShell（ブラウザ上で事前設定済みの AWS CLI を使用し、コンソールの IAM 権限に基づく一時認証情報を自動取得するシェル環境） | Requires no local CLI installation and uses rotating temporary credentials for the current console identity. Persistent HOME storage is separated by Region, and --region can override the default Region for one command. | 3 |
| AWS CodeBuild | AWS CodeBuild | 托管构建与测试服务 | AWS CodeBuild（フルマネージド型ビルド・テストサービス） | Reads a buildspec to compile, test, package, and output build artifacts. | 3 |
| AWS CodePipeline | AWS CodePipeline | 持续交付流水线编排服务 | AWS CodePipeline（継続的デリバリーパイプライン管理サービス） | Orchestrates stages such as Source, Build, Test, Approval, and Deploy. | 3 |
| AWS IoT Core | AWS IoT Core | 物联网设备安全连接与消息服务 | AWS IoT Core（IoT デバイス接続・メッセージングサービス） | Core capabilities include device certificates, MQTT topics, the Rules Engine, and Device Shadow. | 3 |
| AWS License Manager | AWS License Manager | 软件许可证集中管理 | AWS License Manager（ソフトウェアライセンスの一元管理） | Tracks BYOL and hybrid-environment license usage and helps prevent overuse. | 3 |
| AWS Management Console | AWS Management Console | AWS 管理控制台 | AWS マネジメントコンソール（ウェブ画面から AWS サービスを操作する管理画面） | A web GUI. Multi-session keeps several login contexts in parallel, but a session is not a new account; regional resources also depend on the selected Region. | 3 |
| AWS Migration Hub | AWS Migration Hub | AWS 迁移项目统一管理与跟踪中心 | AWS Migration Hub（移行プロジェクトの一元管理・進捗追跡） | Provides a unified view of migration projects and progress; related migration experiences are increasingly integrated into AWS Transform. | 3 |
| AWS Partner Network | AWS Partner Network | AWS 合作伙伴网络 | AWS パートナーネットワーク | An ecosystem for finding consulting, implementation, migration, managed-service, and technology partners. | 3 |
| AWS Security Hub | AWS Security Hub | 安全态势集中管理 | AWS Security Hub（セキュリティ態勢の一元管理） | Aggregates and standardizes findings from multiple security services. | 3 |
| AWS Snowball Edge | AWS Snowball Edge Storage Optimized | AWS 离线数据迁移与边缘计算设备 | AWS Snowball Edge（オフラインデータ移行・エッジコンピューティングデバイス） | A classic offline migration appliance; it is no longer available to new customers, so alternatives such as DataSync should also be understood. | 3 |
| AWS Transfer Family | AWS Transfer Family | AWS 托管文件传输服务 | AWS Transfer Family（マネージドファイル転送サービス） | Provides managed endpoints for business file exchange over SFTP, FTPS, FTP, and AS2. | 3 |
| Batch Processing | Batch Processing | 批处理 | バッチ処理 | Processes groups of jobs without requiring immediate responses; common for reporting, simulations, and ETL. | 3 |
| Boto3 | AWS SDK for Python (Boto3) | Python 版 AWS SDK | Boto3（Python アプリケーションから AWS サービスの API を呼び出すための AWS SDK for Python） | The modern AWS SDK for Python, used by Python application code to call AWS services. | 3 |
| Business Continuity | Business Continuity | 业务连续性 | 事業継続性 | Ensures critical business operations can continue during failures or disasters. | 3 |
| Cascade Failure | Cascading Failure | 级联故障 | カスケード障害 | A failure that propagates downstream; queues, retries, rate limits, and circuit breakers reduce the risk. | 3 |
| Cluster | Cluster | 集群 | クラスター | A group of resources that jointly provide compute or orchestration capacity; both ECS and EKS use the cluster concept. | 3 |
| Console Multi-session Support | AWS Management Console Multi-session Support | AWS 控制台多会话支持 | AWS マネジメントコンソールのマルチセッション機能（同じブラウザーで複数のログイン状態を並行利用する機能） | Add Session can keep identities from the same or different accounts open in parallel; a session is not a new account and does not change ownership or permissions. | 3 |
| Consumer | Message Consumer | 消息消费者 | コンシューマー | The party that reads and processes messages; retries and idempotency must be considered when processing fails. | 3 |
| Data Residency | Data Residency | 数据驻留 | データレジデンシー | Requires data to be stored in a specified country, Region, or location; often affects Region and Outposts selection. | 3 |
| Dedicated Host | Dedicated Host | 专用主机 | 専有ホスト | Provides visibility and control over an entire physical server, often for license compliance. | 3 |
| Dedicated Instance | Dedicated Instance | 专用实例 | 専有インスタンス | Runs instances on single-tenant hardware without giving the customer control of the specific physical host. | 3 |
| Deployment | Deployment | 部署 | デプロイメント | Releases an application, configuration, or version into a runtime environment. | 3 |
| Document Database | Document Database | 文档数据库 | ドキュメントデータベース | Stores semi-structured and nested data as JSON-like documents. | 3 |
| DoS | Denial of Service | 拒绝服务攻击 | サービス拒否攻撃 | Usually exhausts a target service's resources from a single source. | 3 |
| Elastic Beanstalk | AWS Elastic Beanstalk | 应用部署与托管服务 | AWS Elastic Beanstalk（ウェブアプリケーションのデプロイ・管理サービス） | A PaaS-style service that configures EC2, ALB, Auto Scaling, and more after code upload; the underlying resources remain visible and manageable. | 3 |
| Event Source Mapping | Event Source Mapping | 事件源映射 | イベントソースマッピング | Configuration that makes Lambda poll event sources such as SQS, Kinesis, and DynamoDB Streams. | 3 |
| FaaS | Function as a Service | 函数即服务 | FaaS（関数実行サービス） | Uses functions as the unit of deployment and execution; Lambda is the typical AWS FaaS service. | 3 |
| FSx | Amazon FSx | 托管文件系统系列 | マネージドファイルシステム | A family of fully managed file systems for Windows, Lustre, NetApp ONTAP, and OpenZFS workloads. | 3 |
| Fully Managed Service | Fully Managed Service | 完全托管服务 | フルマネージドサービス | AWS takes on more operational work; this describes a degree of management, not one strict product category. | 3 |
| Graph Database | Graph Database | 图数据库 | グラフデータベース | Represents and queries complex relationships using vertices, edges, and properties. | 3 |
| GWLB | Gateway Load Balancer | 网关负载均衡器 | Gateway Load Balancer（ゲートウェイロードバランサー） | Distributes traffic through scalable virtual network appliances such as firewalls and inspection systems. | 3 |
| IAM Identity Center | AWS IAM Identity Center | 员工单点登录与多账户访问 | AWS IAM Identity Center（従業員向け SSO・マルチアカウントアクセス） | Centrally manages workforce access to multiple AWS accounts and applications. | 3 |
| Imperative | Imperative Configuration | 命令式配置 | 命令的構成 | Explicitly describes each step of how an operation should be performed. | 3 |
| Infrastructure | Infrastructure | 基础设施 | インフラストラクチャ | The underlying compute, networking, storage, security, and related resources. | 3 |
| Isolation | Isolation | 隔离 | 分離 / アイソレーション | Separates customers or workloads through virtualization, permissions, and network boundaries. | 3 |
| K8s | Kubernetes | 容器编排平台 | Kubernetes（クバネティス） | Kubernetes is an open-source platform; EKS is the AWS-managed Kubernetes service. | 3 |
| Link Aggregation Group | Link Aggregation Group | 链路聚合组 | リンクアグリゲーショングループ | Aggregates compatible Direct Connect connections; bandwidth aggregation and site redundancy must be considered separately. | 3 |
| Log Group | Log Group | 日志组 | ロググループ | Organizes multiple log streams by application or resource and defines their retention period. | 3 |
| Log Stream | Log Stream | 日志流 | ログストリーム | A sequence of log events from one specific source, such as a Lambda execution environment. | 3 |
| Low Latency | Low Latency | 低延迟 | 低レイテンシ（要求から応答までの遅延が小さい状態） | Emphasizes response speed rather than throughput; common when choosing Regions, edge locations, and caches. | 3 |
| Memcached | Memcached | 分布式内存缓存引擎 | Memcached（分散型インメモリキャッシュエンジン） | A lightweight distributed in-memory caching engine. | 3 |
| Migration Evaluator | AWS Migration Evaluator | AWS 迁移评估与商业案例服务 | Migration Evaluator（移行評価・ビジネスケース作成サービス） | Builds a data-driven migration business case from the current environment, licensing, and target options. | 3 |
| Multi-Tenancy | Multi-Tenancy | 多租户 | マルチテナンシー | Multiple customers share underlying infrastructure while remaining logically isolated; common in cloud computing. | 3 |
| Outposts | AWS Outposts | AWS 本地部署服务 | AWS Outposts（オンプレミス向け AWS インフラストラクチャ） | Deploys AWS infrastructure and services in a customer's data center for low latency, data residency, and hybrid cloud. | 3 |
| PII | Personally Identifiable Information | 个人身份信息 | 個人を特定できる情報 | Data that can directly or indirectly identify an individual. | 3 |
| Producer | Message Producer | 消息生产者 | プロデューサー | The party that creates and sends messages or events. | 3 |
| Provisioning | Resource Provisioning | 资源预置 / 配置 | プロビジョニング | Creates and configures infrastructure resources; deployment focuses more on releasing applications or versions. | 3 |
| Redis OSS | Redis Open Source Software | Redis 开源引擎 | Redis OSS（オープンソースのインメモリデータストア） | Supports rich data structures, replication, leaderboards, sessions, and other use cases. | 3 |
| Registry | Container Registry | 容器镜像仓库 | コンテナレジストリ | Stores, versions, and distributes container images; ECR is the AWS service for this purpose. | 3 |
| S3 Express One Zone | Amazon S3 Express One Zone | S3 Express 单可用区 | S3 Express One Zone（1 ゾーンの高性能ストレージクラス） | A single-AZ object storage class designed for extremely high performance. | 3 |
| SageMaker | Amazon SageMaker | 机器学习平台 | 機械学習プラットフォーム | A managed platform for building, training, tuning, and deploying machine-learning models. | 3 |
| Scale Up / Down | Vertical Scaling | 纵向扩展 / 缩减 | スケールアップ / ダウン | Scales by increasing or decreasing one machine's capacity; it can require downtime and has a single-machine limit. | 3 |
| Security Finding | Security Finding | 安全调查结果 | セキュリティ検出結果 | A risk record produced by a security service, usually with severity and remediation guidance. | 3 |
| Self-Managed | Self-Managed Service | 自行管理 | セルフマネージド | The user handles installation, patching, backups, scaling, and high availability, as with a database operated on EC2. | 3 |
| Sid | Statement ID | 语句标识符 | ステートメント ID（ポリシー内の各 Statement を識別しやすくする任意の識別子） | An optional statement identifier for readability and troubleshooting; it grants no permission by itself. | 3 |
| SRR | Same-Region Replication | 同区域复制 | 同一リージョンレプリケーション | Replicates S3 objects within the same Region according to configured rules. | 3 |
| Tight Coupling | Tightly Coupled Architecture | 紧密耦合 | 密結合（みつけつごう） | Components depend directly on one another, increasing the risk of cascading failures and making scaling harder. | 3 |
| Topic | Topic | 主题 | トピック | The logical entry point for publishing messages in SNS; one message can be delivered to multiple subscribers. | 3 |
| Trigger | Trigger | 触发器 | トリガー | An event source that starts Lambda or another automated workflow. | 3 |
| Valkey | Valkey | 开源键值数据存储引擎 | Valkey（オープンソースのキー・バリューデータストア） | One of the in-memory data-store engines supported by ElastiCache. | 3 |
| Write-Through | Write-Through Cache | 写穿缓存模式 | ライトスルー | Updates the cache whenever the database is written, keeping cached data fresh. | 3 |
| AWS Credits | AWS Promotional Credits | AWS 促销额度 | AWS クレジット（対象となる AWS 利用料金に充当できる販促残高） | Offsets eligible AWS usage charges; expiration, eligible services, and award rules depend on the account terms. | 2 |
| Compute Resource | Compute Resource | 计算资源 | コンピューティングリソース | CPU, memory, GPU, running instances, and other resources required to perform computation. | 2 |
| Default Output Format | AWS CLI default output format | 默认输出格式 | 既定の出力形式（AWS CLI のレスポンスを JSON、table、text、YAML などのどの形式で表示するかを定める設定） | Controls only how CLI responses are displayed and can be overridden with --output; it does not affect permissions or resource state. | 2 |
| Dependency | Dependency | 依赖项 | 依存関係（いぞんかんけい） | A library or component required by an application; container images usually package dependencies together. | 2 |
| DocumentDB | Amazon DocumentDB (with MongoDB compatibility) | 文档数据库服务 | ドキュメントデータベース | Designed for MongoDB-compatible workloads and complex document data. | 2 |
| Edge | Edge | 图关系边 | エッジ | A relationship connecting two vertices in a graph database. | 2 |
| Environment | Environment | 运行环境 | 環境（かんきょう） | Can mean development, testing, or production, or the overall runtime conditions an application depends on. | 2 |
| Free account plan | AWS Free Account Plan | AWS 免费账户计划 | AWS 無料アカウントプラン（期間とクレジット上限のある学習・検証向けプラン） | Plan details can change; check current AWS billing documentation and do not treat it as all services being free forever. | 2 |
| GDPR | General Data Protection Regulation | 欧盟《通用数据保护条例》 | EU 一般データ保護規則 | Protects personal data and privacy in the European Union; exact requirements must be confirmed for the business and applicable law. | 2 |
| Lightsail | Amazon Lightsail | 简化版云服务器 | Amazon Lightsail（簡易型仮想サーバーサービス） | Simple fixed-price bundles for small websites and beginner projects; complex architectures usually use EC2. | 2 |
| Neptune | Amazon Neptune | 图数据库服务 | グラフデータベース | Designed for traversing complex relationships, fraud detection, and knowledge graphs. | 2 |
| PaaS | Platform as a Service | 平台即服务 | PaaS（サービスとしてのプラットフォーム） | Developers mainly manage applications and data while the platform manages the runtime and infrastructure. | 2 |
| Paid account plan | AWS Paid Account Plan | AWS 付费账户计划 | AWS 有料アカウントプラン（従量課金で継続利用するアカウントプラン） | Continues with usage-based billing; promotional credits depend on current AWS terms. | 2 |
| Portability | Portability | 可移植性 | ポータビリティ / 可搬性 | The ability to move and run an application across environments; containers commonly improve portability. | 2 |
| Runtime | Runtime | 运行时 | ランタイム | The software environment required to execute a program, such as Python, Java, or a container runtime. | 2 |
| Simulation | Simulation | 模拟计算 | シミュレーション | Usually a compute-intensive batch workload; AWS Batch and Spot Instances are common options. | 2 |
| Vertex | Vertex / Node | 图节点 | 頂点 / ノード | A node representing an entity in a graph database. | 2 |
| VM | Virtual Machine | 虚拟机 | 仮想マシン | Each VM usually includes a complete operating system; isolation is strong, but startup and resource overhead exceed containers. | 2 |
| Web Application | Web Application | Web 应用程序 | Web アプリケーション | An application accessed through a browser, often built with ALB, EC2 or ECS, RDS, and S3. | 2 |
| Managed Blockchain | Amazon Managed Blockchain | 托管区块链 | マネージドブロックチェーン | A managed service for verifiable, tamper-resistant ledgers shared across multiple organizations. | 1 |
No matching terms found
Try another keyword or clear the frequency filter.