AWS Glossary - AWS Glossary

Numbers and symbols

100-continue: A method that gives a client the ability to see whether a server can accept a request before actually sending it. For large PUT requests, this method can save both time and bandwidth charges.

A

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

AAD

See additional authenticated data.

access control list (ACL)

A document that defines who can access a particular bucket or object. Each bucket and object in Amazon S3 has an ACL. This document defines what each type of user can do, such as write and read permissions.

access identifiers

See credentials.

access key

The combination of an access key ID (for example, AKIAIOSFODNN7EXAMPLE) and a secret access key (for example, wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY). You use access keys to sign API requests that you make to AWS.

access key ID

A unique identifier that's associated with a secret access key; the access key ID and secret access key are used together to sign programmatic AWS requests cryptographically.

access key rotation

A method to increase security by changing the AWS access key ID. You can use this method to retire an old key at your discretion.

access policy language

A language for writing documents (specifically, policies) that specify who can access a particular AWS resource and under what conditions.

account

A formal relationship with AWS that's associated with all of the following:

The owner email address and password
The control of resources created under its umbrella
Payment for the AWS activity related to those resources

The AWS account has permission to do anything and everything with all the AWS account resources. This is in contrast to a user, which is an entity contained within the account.

account activity

A webpage showing your month-to-date AWS usage and costs. The account activity page is located at https://aws.amazon.com/account-activity/.

AWS Account Management

AWS Account Management is a tool that you can use to update the contact information for each of your AWS accounts.

ACL

See access control list (ACL).

ACM

AWS Certificate Manager is a web service for provisioning, managing, and deploying Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services.

action

An API function. Also called operation or call. The activity the principal has permission to perform. The action is B in the statement "A has permission to do B to C where D applies." For example, Jane sends a request to Amazon SQS with Action=ReceiveMessage.

CloudWatch: The response initiated by the change in an alarm's state (for example, from OK to ALARM). The state change might be caused by a metric reaching the alarm threshold, or by a SetAlarmState request. Each alarm can have one or more actions assigned to each state. Actions are performed once each time the alarm changes to a state that has an action assigned. Example actions include an Amazon SNS notification, running an Amazon EC2 Auto Scaling policy, and an Amazon EC2 instance stop/terminate action.

active trusted key groups

A list that shows each of the trusted key groups, and the IDs of the public keys in each key group, that are active for a distribution in Amazon CloudFront. CloudFront can use the public keys in these key groups to verify the signatures of CloudFront signed URLs and signed cookies.

active trusted signers

See active trusted key groups.

active-active

A class of high availability strategies in which a workload exists simultaneously in multiple Regions, uses multiple primary resources, and serves traffic from all of the Regions to which it's deployed. Sometimes referred to as active/active.

active-passive

A class of disaster recovery strategies that involve a primary Region and a standby Region in a back up and restore, hot standby, pilot light, or warm standby configuration. Sometimes referred to as active/passive.

additional authenticated data

Information that's checked for integrity but not encrypted, such as headers or other contextual metadata.

administrative suspension

Amazon EC2 Auto Scaling might suspend processes for Auto Scaling group that repeatedly fail to launch instances. Auto Scaling groups that most commonly experience administrative suspension have zero running instances, have been trying to launch instances for more than 24 hours, and have not succeeded in that time.

alarm

An item that watches a single metric over a specified time period and starts an Amazon SNS topic or an Amazon EC2 Auto Scaling policy. These actions are started if the value of the metric crosses a threshold value over a predetermined number of time periods.

allow

One of two possible outcomes (the other is deny) when an IAM access policy is evaluated. When a user makes a request to AWS, AWS evaluates the request based on all permissions that apply to the user and then returns either allow or deny.

Amazon Machine Image (AMI)

An Amazon Machine Image (AMI) is an encrypted machine image stored in Amazon EBS or Amazon S3. AMIs function similarly to a template of a computer's root drive. They contain the operating system and can also include software and layers of your application, such as database servers, middleware, and web servers.

Amazon Web Services (AWS)

An infrastructure web services platform in the cloud for companies of all sizes.

AMI

See Amazon Machine Image (AMI).

Amplify

AWS Amplify is a complete solution that frontend web and mobile developers can use to build and deploy secure, scalable full-stack applications powered by AWS. Amplify provides two services: Amplify Hosting and Amplify Studio.

Amplify Android

Amplify Android is a collection of open-source client libraries that provides interfaces for specific use cases across many AWS services. Amplify Android is the recommended way to build native Android applications powered by AWS.

Amplify Hosting

AWS Amplify Hosting is a fully managed continuous integration and continuous delivery (CI/CD) and hosting service for fast, secure, and reliable static and server-side rendered apps. Amplify Hosting provides a Git-based workflow for hosting full-stack serverless web apps with continuous deployment.

Amplify iOS

Amplify iOS is a collection of open-source client libraries that provides interfaces for specific use cases across many AWS services. Amplify iOS is the recommended way to build native iOS applications powered by AWS.

Amplify Studio

AWS Amplify Studio is a visual development environment that web and mobile developers can use to build the frontend UI components and the backend environment for a full-stack application.

analysis rules

AWS Clean Rooms: The query restrictions that authorize a specific type of query.

analysis scheme

CloudSearch: Language-specific text analysis options that are applied to a text field to control stemming and configure stopwords and synonyms.

API Gateway

Amazon API Gateway is a fully managed service that developers can use to create, publish, maintain, monitor, and secure APIs at any scale.

AWS App2Container

AWS App2Container is a transformation tool that modernizes .NET and Java applications by migrating them into containerized applications.

AWS AppConfig

AWS AppConfig is a service used to update software at runtime without deploying new code. With AWS AppConfig, you can configure, validate, and deploy feature flags and application configurations.

Amazon AppFlow

Amazon AppFlow is a fully managed integration service that you can use to transfer data securely between software as a service (SaaS) applications and AWS services.

application

Elastic Beanstalk: A logical collection of components, including environments, versions, and environment configurations. An application is conceptually similar to a folder.

CodeDeploy: A name that uniquely identifies the application to be deployed. AWS CodeDeploy uses this name to ensure the correct combination of revision, deployment configuration, and deployment group are referenced during a deployment.

Application Auto Scaling

AWS Application Auto Scaling is a web service that you can use to configure automatic scaling for AWS resources beyond Amazon EC2, such as Amazon ECS services, Amazon EMR clusters, and DynamoDB tables.

Application Billing

The location where your customers manage the Amazon DevPay products they've purchased. The web address is http://www.amazon.com/dp-applications.

Application Composer

AWS Application Composer is a visual designer that you can use to build serverless applications from multiple AWS services. As you design an application, Application Composer automatically generates a YAML template with CloudFormation and AWS SAM template resources.

Application Cost Profiler

AWS Application Cost Profiler is a solution to track the consumption of shared AWS resources used by software applications and report granular cost breakdown across tenant base.

Application Discovery Service

AWS Application Discovery Service is a web service that helps you plan to migrate to AWS by identifying IT assets in a data center—including servers, virtual machines, applications, application dependencies, and network infrastructure.

application revision

CodeDeploy: An archive file containing source content—such as source code, webpages, executable files, and deployment scripts—along with an application specification file. Revisions are stored in Amazon S3 buckets or GitHub repositories. For Amazon S3, a revision is uniquely identified by its Amazon S3 object key and its ETag, version, or both. For GitHub, a revision is uniquely identified by its commit ID.

application specification file

CodeDeploy: A YAML-formatted file used to map the source files in an application revision to destinations on the instance. The file is also used to specify custom permissions for deployed files and specify scripts to be run on each instance at various stages of the deployment process.

application version

Elastic Beanstalk: A specific, labeled iteration of an application that represents a functionally consistent set of deployable application code. A version points to an Amazon S3 object (a JAVA WAR file) that contains the application code.

AppSpec file

See application specification file.

AppStream 2.0

Amazon AppStream 2.0 is a fully managed, secure service for streaming desktop applications to users without rewriting those applications.

AWS AppSync

AWS AppSync is an enterprise-level, fully managed GraphQL service with real-time data synchronization and offline programming features.

ARN

See Amazon Resource Name (ARN).

artifact

CodePipeline: A copy of the files or changes that are worked on by the pipeline.

asymmetric encryption

Encryption that uses both a public key and a private key.

asynchronous bounce

A type of bounce that occurs when a receiver initially accepts an email message for delivery and then subsequently fails to deliver it.

Athena

Amazon Athena is an interactive query service that you can use to analyze data in Amazon S3 using ANSI SQL. Athena is serverless, so there's no infrastructure to manage. Athena scales automatically and is simple to use, so you can start analyzing your datasets within seconds.

atomic counter

DynamoDB: A method of incrementing or decrementing the value of an existing attribute without interfering with other write requests.

attribute

A fundamental data element, something that doesn't need to be broken down any further. In DynamoDB, attributes are similar in many ways to fields or columns in other database systems.

Amazon Machine Learning: A unique, named property within an observation in a dataset. In tabular data, such as spreadsheets or comma-separated values (.csv) files, the column headings represent the attributes, and the rows contain values for each attribute.

AUC

Area Under a Curve. An industry-standard metric to evaluate the quality of a binary classification machine learning model. AUC measures the ability of the model to predict a higher score for positive examples, those that are “correct,” than for negative examples, those that are “incorrect.” The AUC metric returns a decimal value from 0 to 1. AUC values near 1 indicate an ML model that's highly accurate.

Aurora

Amazon Aurora is a fully managed MySQL-compatible relational database engine that combines the speed and availability of commercial databases with the simplicity and cost-effectiveness of open-source databases.

authenticated encryption

Encryption that provides confidentiality, data integrity, and authenticity assurances of the encrypted data.

authentication

The process of proving your identity to a system.

AWS Auto Scaling

AWS Auto Scaling is a fully managed service that you can use to quickly discover the scalable AWS resources that are part of your application and to configure dynamic scaling.

Auto Scaling group

A representation of multiple EC2 instances that share similar characteristics, and that are treated as a logical grouping for the purposes of instance scaling and management.

Availability Zone

A distinct location within a Region that's insulated from failures in other Availability Zones, and provides inexpensive, low-latency network connectivity to other Availability Zones in the same Region.

AWS

See Amazon Web Services (AWS).

B

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

back up and restore

A disaster recovery strategy in which backups of data in the primary Region are copied to a standby Region and can be restored from the standby Region. You must provision the infrastructure and other resources, such as compute, as part of a failover process.

Backint Agent

AWS Backint Agent for SAP HANA is an SAP-certified backup and restore solution for SAP HANA workloads running on Amazon EC2 instances in the cloud.

AWS Backup

AWS Backup is a managed backup service that you can use to centralize and automate the backup of data across AWS services in the cloud and on premises.

basic monitoring

Monitoring of AWS provided metrics derived at a 5-minute frequency.

batch

See document batch.

batch prediction

Amazon Machine Learning: An operation that processes multiple input data observations at one time (asynchronously). Unlike real-time predictions, batch predictions aren't available until all predictions have been processed.

C

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

cache cluster

A logical cache distributed over multiple cache nodes. A cache cluster can be set up with a specific number of cache nodes.

cache cluster identifier

Customer-supplied identifier for the cache cluster that must be unique for that customer in an AWS Region.

cache engine version

The version of the Memcached service that's running on the cache node.

cache node

A fixed-size chunk of secure, network-attached RAM. Each cache node runs an instance of the Memcached service, and has its own DNS name and port. Multiple types of cache nodes are supported, each with varying amounts of associated memory.

cache node type

An EC2 instance type used to run the cache node.

cache parameter group

A container for cache engine parameter values that can be applied to one or more cache clusters.

cache security group

A group maintained by ElastiCache that combines inbound authorizations to cache nodes for hosts belonging to Amazon EC2 security groups that are specified through the console or the API or command line tools.

campaign

Amazon Personalize: A deployed solution version (trained model) with provisioned dedicated transaction capacity for creating real-time recommendations for your application users. After you create a campaign, you use the getRecommendations or getPersonalizedRanking personalization operations to get recommendations.

See also recommendations.

See also solution version.

canned access policy

A standard access control policy that you can apply to a bucket or object. Options include: private, public-read, public-read-write, and authenticated-read.

canonicalization

The process of converting data into a standard format that a service such as Amazon S3 can recognize.

capacity

The amount of available compute size at a given time. Each Auto Scaling group is defined with a minimum and maximum compute size. A scaling activity increases or decreases the capacity within the defined minimum and maximum values.

Cartesian product

A mathematical operation that returns a product from multiple sets.

Cartesian product processor

A processor that calculates a Cartesian product. Also known as a Cartesian data processor.

AWS CDK

AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining your cloud infrastructure in code and provisioning it through AWS CloudFormation.

See also eventual consistency.

console

See AWS Management Console.

Console Mobile Application

AWS Console Mobile Application lets AWS customers monitor and manage a select set of resources to stay informed and connected with their AWS resources while on the go.

consolidated billing

A feature of the AWS Organizations service for consolidating payment for multiple AWS accounts. You create an organization that contains your AWS accounts, and you use the management account of your organization to pay for all member accounts. You can see a combined view of AWS costs that are incurred by all accounts in your organization, and you can get detailed cost reports for individual accounts.

container

A container is a standard unit of software that contains application code and all relevant dependencies.

container definition

A container definition specifies the details that are associated with running a container on Amazon ECS. More specifically, a container definition specifies details such as the container image to use and how much CPU and memory the container is allocated. The container definition is included as part of an Amazon ECS task definition.

container instance

A container instance is a self-managed EC2 instance or an on-premises server or virtual machine (VM) that's running the Amazon Elastic Container Service (Amazon ECS) container agent and has been registered into a cluster. A container instance serves as the infrastructure that your Amazon ECS workloads are run on.

container registry

A container registry is a collection of repositories that store container images. One example is Amazon Elastic Container Registry (Amazon ECR).

content delivery network (CDN)

A web service that speeds up distribution of your static and dynamic web content—such as .html, .css, .js, media files, and image files—to your users by using a worldwide network of data centers. When a user requests your content, the request is routed to the data center that provides the lowest latency (time delay). If the content is already in the location with the lowest latency, the CDN delivers it immediately. If not, the CDN retrieves it from an origin that you specify (for example, a web server or an Amazon S3 bucket). With some CDNs, you can help secure your content by configuring an HTTPS connection between users and data centers, and between data centers and your origin. Amazon CloudFront is an example of a CDN.

contextual metadata

Amazon Personalize: Interactions data that you collect about a user's browsing context (such as device used or location) when an event (such as a click) occurs. Contextual metadata can improve recommendation relevance for new and existing users.

See also Interactions dataset.

See also metrics.

See also Interactions dataset.

D

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

dashboard

See service health dashboard.

data consistency

A concept that describes when data is written or updated successfully and all copies of the data are updated in all AWS Regions. However, it takes time for the data to propagate to all storage locations. To support varied application requirements, DynamoDB supports both eventually consistent and strongly consistent reads.

See also eventual consistency.

See also Interactions dataset.

See also dataset.

See also campaign.

datasource

Amazon ML: An object that contains metadata about the input data. Amazon ML reads the input data, computes descriptive statistics on its attributes, and stores the statistics—along with a schema and other information—as part of the datasource object. Amazon ML uses datasources to train and evaluate a machine learning model and generate batch predictions.

E

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Amazon EBS

Amazon Elastic Block Store is a service that provides block level storage volumes or use with EC2 instances.

See also dataset.

See also Interactions dataset.

event tracker

Amazon Personalize: Specifies a destination dataset group for event data that you record in real time. When you record events in real time, you provide the ID of the event tracker so that Amazon Personalize knows where to add the data.

See also eventual consistency.

See also recommendations.

See also Interactions dataset.

See also impressions data.

F

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

facet

CloudSearch: An index field that represents a category that you want to use to refine and filter search results.

facet enabled

CloudSearch: An index field option that enables facet information to be calculated for the field.

AWS Fargate

AWS Fargate is a serverless, pay-as-you-go compute engine that you can use to build applications on AWS. You can use Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS) to maintain container applications using AWS Fargate.

Fault Injection Simulator (AWS FIS)

AWS Fault Injection Service is a managed service that you can use to perform fault injection experiments on your AWS workloads.

G

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

GameKit

AWS GameKit is an open-source SDK and game engine plugin that empowers game developers to build and deploy cloud-based features with AWS from their game engine.

Amazon GameLift

Amazon GameLift is a managed service for deploying, operating, and scaling session-based multiplayer games.

GameSparks

Amazon GameSparks is a fully managed AWS service that provides a multi-service backend for game developers.

geospatial search

A search query that uses locations specified as a latitude and longitude to determine matches and sort the results.

gibibyte (GiB)

A contraction of giga binary byte, a gibibyte is 2^30 or 1,073,741,824 bytes. A gigabyte (GB) is 10^9 or 1,000,000,000 bytes. 1,024 GiB is a tebibyte (TiB).

GitHub

A web-based repository that uses Git for version control.

Global Accelerator

AWS Global Accelerator is a network layer service that you use to create accelerators that direct traffic to optimal endpoints over the AWS global network. This improves the availability and performance of your internet applications that are used by a global audience.

global consistency

An active-active strategy in which all reads and writes for a workload are handled in the Region where the request originates and are replicated synchronously to all other Regions in the architecture.

global secondary index

An index with a partition key and a sort key that can be different from those on the table. A global secondary index is considered global because queries on the index can span all of the data in a table, across all partitions.

H

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Hadoop

Software that enables distributed processing for big data by using clusters and simple programming models. For more information, see http://hadoop.apache.org.

hard bounce

A persistent email delivery failure such as "mailbox does not exist."

hardware VPN

A hardware-based IPsec VPN connection over the internet.

AWS Health

AWS Health is a service that provides ongoing visibility into AWS customers' accounts and the availability of their AWS services and resources.

health check

A system call to check on the health status of each instance in an Amazon EC2 Auto Scaling group.

HealthLake

AWS HealthLake is a HIPAA-eligible service that helps customers store, query, and generate artificial intelligence (AI) and machine learning (ML) insights from healthcare data and enables healthcare data interoperability.

highlight enabled

CloudSearch: An index field option that enables matches within the field to be highlighted.

highlights

CloudSearch: Excerpts returned with search results that show where the search terms appear within the text of the matching documents.

high-quality email

Email that recipients find valuable and want to receive. Value means different things to different recipients and can come in such forms as offers, order confirmations, receipts, or newsletters.

hit

A document that matches the criteria specified in a search request. Also referred to as a search result.

HMAC

Hash-based Message Authentication Code is a specific construction for calculating a message authentication code (MAC) involving a cryptographic hash function in combination with a secret key. You can use it to verify both the data integrity and the authenticity of a message at the same time. AWS calculates the HMAC using a standard, cryptographic hash algorithm, such as SHA-256.

hosted zone

A collection of resource record sets that Route 53 hosts. Similar to a traditional DNS zone file, a hosted zone represents a collection of records that are managed together under a single domain name.

hot standby

An active-passive disaster recovery strategy in which a workload is fully scaled up in both the primary and standby Regions, but serves traffic from only the primary Region.

HRNN

Amazon Personalize: A hierarchical recurrent neural network machine learning algorithm that models changes in user behavior and predicts the items that a user might interact with in personal recommendation applications.

HTTP-Query

See Query.

HVM virtualization

Hardware Virtual Machine virtualization. Allows the guest VM to run as though it's on a native hardware platform, except that it still uses paravirtual (PV) network and storage drivers for improved performance.

I

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

IAM

AWS Identity and Access Management is a web service that Amazon Web Services (AWS) customers can use to manage users and user permissions within AWS.

See also recommendations.

See also impressions data.

See also dataset.

See also impressions data.

See also recommendations.

See also campaign.

See also solution version.

See also dataset.

item-to-item similarities (SIMS) recipe

Amazon Personalize: A RELATED_ITEMS recipe that uses the data from an Interactions dataset to make recommendations for items that are similar to a specified item. The SIMS recipe calculates similarity based on the way users interact with items instead of matching item metadata, such as price or age.

See also recipe.

See also Interactions dataset.

J

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

job flow

Amazon EMR: One or more steps that specify all of the functions to be performed on the data.

job ID

A five-character, alphanumeric string that uniquely identifies an Import/Export storage device in your shipment. AWS issues the job ID in response to a CREATE JOB email command.

job prefix

An optional string that you can add to the beginning of an Import/Export log file name to prevent collisions with objects of the same name.

K

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Amazon Kendra

Amazon Kendra is a search service powered by machine learning (ML) that developers can use to add search capabilities to their applications so their end users can discover information stored within the vast amount of content spread across their company.

key

A credential that identifies an AWS account or user to AWS (such as the AWS secret access key).

Amazon S3, Amazon EMR: The unique identifier for an object in a bucket. Every object in a bucket has exactly one key. Because a bucket and key together uniquely identify each object, you can think of Amazon S3 as a basic data map between the bucket + key, and the object itself. You can uniquely address every object in Amazon S3 through the combination of the web service endpoint, bucket name, and key, as in this example: http://doc.s3.amazonaws.com/2006-03-01/AmazonS3.wsdl, where doc is the name of the bucket, and 2006-03-01/AmazonS3.wsdl is the key.

Import/Export: The name of an object in Amazon S3. It's a sequence of Unicode characters whose UTF-8 encoding can't exceed 1024 bytes. If a key (for example, logPrefix + import-log-JOBID) is longer than 1024 bytes, Elastic Beanstalk returns an InvalidManifestField error.

IAM: In a policy, a specific characteristic that's the basis for restricting access (such as the current time or the IP address of the requester).

Tagging resources: A general tag label that acts like a category for more specific tag values. For example, you might have EC2 instance with the tag key of Owner and the tag value of Jan. You can tag an AWS resource with up to 10 key–value pairs. Not all AWS resources can be tagged.

key pair

A set of security credentials that you use to prove your identity electronically. A key pair consists of a private key and a public key.

key prefix

A string of characters that is a subset of an object key name, starting with the first character. The prefix can be any length, up to the maximum length of the object key name (1,024 bytes).

Amazon Keyspaces

Amazon Keyspaces (for Apache Cassandra) is a scalable, highly available, and managed Apache Cassandra-compatible database service.

kibibyte (KiB)

A contraction of kilo binary byte, a kibibyte is 2^10 or 1,024 bytes. A kilobyte (KB) is 10^3 or 1,000 bytes. 1,024 KiB is a mebibyte (MiB).

Kinesis

Amazon Kinesis is a platform for streaming data on AWS. Kinesis offers services that simplify the loading and analysis of streaming data.

Firehose

Amazon Data Firehose is a fully managed service for loading streaming data into AWS. Firehose can capture and automatically load streaming data into Amazon S3 and Amazon Redshift , enabling near real-time analytics with existing business intelligence tools and dashboards. Firehose automatically scales to match the throughput of your data and requires no ongoing administration. It can also batch, compress, and encrypt the data before loading it.

Kinesis Data Streams

Amazon Kinesis Data Streams is a web service for building custom applications that process or analyze streaming data for specialized needs. Amazon Kinesis Data Streams can continuously capture and store terabytes of data per hour from hundreds of thousands of sources.

AWS KMS

AWS Key Management Service is a managed service that simplifies the creation and control of encryption keys that are used to encrypt data.

L

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

labeled data

In machine learning, data for which you already know the target or “correct” answer.

Lake Formation

AWS Lake Formation is a managed service that makes it easy to set up, secure, and manage your data lakes. Lake Formation helps you discover your data sources and then catalog, cleanse, and transform the data.

Lambda

AWS Lambda is a web service that you can use to run code without provisioning or managing servers. You can run code for virtually any type of application or backend service with zero administration. You can set up your code to automatically start from other AWS services or call it directly from any web or mobile app.

launch configuration

A set of descriptive parameters used to create new EC2 instances in an Amazon EC2 Auto Scaling activity.

A template that an Auto Scaling group uses to launch new EC2 instances. The launch configuration contains information such as the Amazon Machine Image (AMI) ID, the instance type, key pairs, security groups, and block device mappings, among other configuration settings.

launch permission

An Amazon Machine Image (AMI) attribute that allows users to launch an AMI.

Launch Wizard

AWS Launch Wizard is a cloud solution that offers a guided way of sizing, configuring, and deploying AWS resources for third-party applications, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual AWS resources.

Amazon Lex

Amazon Lex is a fully managed artificial intelligence (AI) service with advanced natural language models to design, build, test, and deploy conversational interfaces in applications.

M

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Macie

Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS.

See also metrics.

See also recommendations.

mebibyte (MiB)

A contraction of mega binary byte. A mebibyte (MiB) is 2^20 or 1,048,576 bytes. A megabyte (MB) is 10^6 or 1,000,000 bytes. 1,024 MiB is a gibibyte (GiB).

member resources

See resource.

MemoryDB

Amazon MemoryDB is a Redis-compatible, durable, in-memory database service that's purpose-built for modern applications with microservices architectures.

message ID

Amazon SES: A unique identifier that's assigned to every email message that's sent.

Amazon SQS: The identifier returned when you send a message to a queue.

metadata

Information about other data or objects. In Amazon S3 and Amazon EMR metadata takes the form of name–value pairs that describe the object. These include default metadata such as the date last modified and standard HTTP metadata (for example, Content-Type). Users can also specify custom metadata at the time they store an object. In Amazon EC2 metadata includes data about an EC2 instance that the instance can retrieve to determine things about itself, such as the instance type or the IP address.

metric

An element of time-series data defined by a unique combination of exactly one namespace, exactly one metric name, and between zero and ten dimensions. Metrics and the statistics derived from them are the basis of CloudWatch.

metric name

The primary identifier of a metric, used with a namespace and optional dimensions.

metrics

Amazon Personalize: Evaluation data that Amazon Personalize generates when you train a model. You use metrics to evaluate the performance of the model, view the effects of modifying a solution’s configuration, and compare results between solutions that use the same training data but were created with different recipes.

See also recipe.

MFA

See multi-factor authentication (MFA).

micro instance

A type of EC2 instance that's more economical to use if you have occasional bursts of high CPU activity.

AWS Microservice Extractor for .NET

AWS Microservice Extractor for .NET is an assistive modernization tool that helps to reduce the time and effort required to break down large, monolithic applications running on the AWS Cloud or on premises into smaller, independent services. These services can be operated and managed independently.

Migration Hub

AWS Migration Hub is a service that provides a single location to track migration tasks across multiple AWS tools and partner solutions.

MIME

See Multipurpose Internet Mail Extensions (MIME).

Amazon ML

Amazon Machine Learning is a cloud-based service that creates machine learning (ML) models by finding patterns in your data, and uses these models to process new data and generate predictions.

ML model

In machine learning (ML), a mathematical model that generates predictions by finding patterns in data. Amazon Machine Learning supports three types of ML models: binary classification, multiclass classification, and regression. Also known as a predictive model.

N

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

namespace

An abstract container that provides context for the items (names, or technical terms, or words) it holds, and allows disambiguation of homonym items residing in different namespaces.

NAT

Network address translation. A strategy of mapping one or more IP addresses to another while data packets are in transit across a traffic routing device. This is commonly used to restrict internet communication to private instances while allowing outgoing traffic.

See also metrics.

See also recommendations.

NoSQL

Nonrelational database systems that are highly available, scalable, and optimized for high performance. Instead of the relational model, NoSQL databases (for example, DynamoDB) use alternate models for data management, such as key–value pairs or document storage.

null object

A null object is one whose version ID is null. Amazon S3 adds a null object to a bucket when versioning for that bucket is suspended. It's possible to have only one null object for each key in a bucket.

number of passes

The number of times that you allow Amazon Machine Learning to use the same data records to train a machine learning model.

O

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

O3DE

Open 3D Engine (successor to Amazon Lumberyard) is an open-source 3D development engine for creating games and simulations. O3DE is licensed under Apache 2.0 and maintained by a community of contributors, including Amazon.

P

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

pagination

The process of responding to an API request by returning a large list of records in small separate parts. Pagination can occur in the following situations:

The client sets the maximum number of returned records to a value below the total number of records.
The service has a default maximum number of returned records that's lower than the total number of records.

When an API response is paginated, the service sends a subset of the large list of records and a pagination token that indicates that more records are available. The client includes this pagination token in a subsequent API request, and the service responds with the next subset of records. This continues until the service responds with a subset of records and no pagination token, indicating that all records have been sent.

pagination token

A marker that indicates that an API response contains a subset of a larger list of records. The client can return this marker in a subsequent API request to retrieve the next subset of records until the service responds with a subset of records and no pagination token, indicating that all records have been sent.

See also recipe.

See also recommendations.

See also recipe.

See also USER_PERSONALIZATION recipes.

Porting Assistant for .NET

Porting Assistant for .NET is a compatibility analyzer that reduces the manual effort required to port Microsoft .NET Framework applications to open source .NET Core.

precision at K (5/10/25)

Amazon Personalize: An evaluation metric that tells you how relevant your model’s recommendations are based on a sample size of K (5, 10, or 25) recommendations. Amazon Personalize calculates this metric based on the number of relevant recommendations out of the top K recommendations, divided by K, where K is 5, 10, or 25.

See also metrics.

See also recommendations.

prefix

See job prefix.

Premium Support

A one-on-one, fast-response support channel that AWS customers can subscribe to for support for AWS infrastructure services.

presigned URL

A web address that uses query string authentication.

primary key

One or two attributes that uniquely identify each item in a DynamoDB table, so that no two items can have the same key.

Q

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Amazon QLDB

Amazon Quantum Ledger Database (Amazon QLDB) is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a central trusted authority.

R

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

AWS RAM

AWS Resource Access Manager is a web service that AWS customers can use to securely share AWS resources with any AWS account or within your organization.

See also USER_PERSONALIZATION recipes.

See also recipe.

See also campaign.

See also solution version.

See also USER_PERSONALIZATION recipes.

See also recipe.

replacement environment

The instances in a deployment group after the CodeDeploy blue/green deployment.

replica shard

See shard.

reply path

The email address that an email reply is sent to. This is different from the return path.

representational state transfer

See REST.

reputation

1. An Amazon SES metric, based on factors that might include bounces, complaints, and other metrics, regarding whether a customer is sending high-quality email.

2. A measure of confidence, as judged by an internet service provider (ISP) or other entity that an IP address that they are receiving email from isn't the source of spam.

requester

The person (or application) that sends a request to AWS to perform a specific action. When AWS receives a request, it first evaluates the requester's permissions to determine whether the requester is allowed to perform the request action (if applicable, for the requested resource).

Requester Pays

An Amazon S3 feature that allows a bucket owner to specify that anyone who requests access to objects in a particular bucket must pay the data transfer and request costs.

reservation

A collection of EC2 instances started as part of the same launch request. This is not to be confused with a Reserved Instance.

Reserved Instance

A pricing option for EC2 instances that discounts the on-demand usage charge for instances that meet the specified parameters. Customers pay for the entire term of the instance, regardless of how they use it.

Reserved Instance Marketplace

An online exchange that matches sellers who have reserved capacity that they no longer need with buyers who are looking to purchase additional capacity. reserved instances that you purchase from third-party sellers have less than a full standard term remaining and can be sold at different upfront prices. The usage or reoccurring fees remain the same as the fees set when the Reserved Instances were originally purchased. Full standard terms for Reserved Instances available from AWS run for one year or three years.

Resilience Hub

AWS Resilience Hub gives you a central place to define, validate, and track the resiliency of your AWS application. It helps you to protect your applications from disruptions, and reduce recovery costs to optimize business continuity to help meet compliance and regulatory requirements.

resource

An entity that users can work with in AWS, such as an EC2 instance, an DynamoDB table, an Amazon S3 bucket, an IAM user, or an OpsWorks stack.

Resource Groups

AWS Resource Groups is a web service that AWS customers can use to manage and automate tasks on large numbers of resources at one time.

S

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

Amazon S3

Amazon S3 is storage for the internet. You can use it to store and retrieve any amount of data at any time, from anywhere on the web.

See also recipe.

See also solution version.

See also recommendations.

solution version

Amazon Personalize: A trained model that you create as part of a solution in Amazon Personalize. You deploy a solution version in a campaign to generate recommendations.

See also campaign.

See also recommendations.

sort enabled

CloudSearch: An index field option that enables a field to be used to sort the search results.

sort key

An attribute used to sort the order of partition keys in a composite primary key (also known as a range attribute).

See also eventual consistency.

T

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

table

A collection of data. Similar to other database systems, DynamoDB stores data in tables.

tag

Metadata that you can define and assign to AWS resources, such as an EC2 instance. Not all AWS resources can be tagged.

tagging

Tagging resources: Applying a tag to an AWS resource.

Amazon SES: Also called labeling. A way to format return path email addresses so that you can specify a different return path for each recipient of a message. You can use tagging to support VERP. For example, if Andrew manages a mailing list, he can use the return paths andrew+recipient1@example.net and andrew+recipient2@example.net so that he can determine which email bounced.

target attribute

Amazon Machine Learning (Amazon ML): The attribute in the input data that contains the “correct” answers. Amazon ML uses the target attribute to learn how to make predictions on new data. For example, if you were building a model for predicting the sale price of a house, the target attribute would be “target sale price in USD.”

target revision

CodeDeploy: The most recent version of the application revision that has been uploaded to the repository and will be deployed to the instances in a deployment group. In other words, the application revision currently targeted for deployment. This is also the revision that will be pulled for automatic deployments.

task

An instantiation of a task definition that's running on a container instance.

task definition

The blueprint for your task. Specifies the name of the task, revisions, container definitions, and volume information.

task node

An EC2 instance that runs Hadoop map and reduce tasks, but doesn't store data. Task nodes are managed by the master node, which assigns Hadoop tasks to nodes and monitors their status. While a job flow is running, you can increase and decrease the number of task nodes. Because they don't store data and can be added and removed from a job flow, you can use task nodes to manage the EC2 instance capacity your job flow uses, increasing capacity to handle peak loads and decreasing it later.

Task nodes only run a TaskTracker Hadoop daemon.

tebibyte (TiB)

A contraction of tera binary byte. A tebibyte (TiB) is 2^40 or 1,099,511,627,776 bytes. A terabyte (TB) is 10^12 or 1,000,000,000,000 bytes. 1,024 TiB is a pebibyte (PiB).

template format version

The version of an CloudFormation template design that determines the available features. If you omit the AWSTemplateFormatVersion section from your template, AWS CloudFormation assumes the most recent format version.

template validation

The process of confirming the use of JSON code in an CloudFormation template. You can validate any AWS CloudFormation template using the cfn-validate-template command.

temporary security credentials

Authentication information that's provided by AWS STS when you call an STS API action. Includes an access key ID, a secret access key, a session token, and an expiration time.

Amazon Textract

Amazon Textract is a service that automatically extracts text and data from scanned documents. Amazon Textract goes beyond simple optical character recognition (OCR) to also identify the contents of fields in forms and information stored in tables.

throttling

The automatic restricting or slowing down of a process based on one or more limits. For example, Kinesis Data Streams throttles operations if an application (or group of applications operating on the same stream) attempts to get data from a shard at a rate faster than the shard limit. API Gateway uses throttling to limit the steady-state request rates for a single account. Amazon SES uses throttling to reject attempts to send email that exceeds the sending limits.

time-series data

Data that's provided as part of a metric. The time value is assumed to be when the value occurred. A metric is the fundamental concept for CloudWatch and represents a time-ordered set of data points. You publish metric data points into CloudWatch and later retrieve statistics about those data points as a time-series ordered dataset.

timestamp

A date/time string in the ISO 8601 format (more specifically, in the YYYY-MM-DD format).

Timestream

Amazon Timestream is a scalable and serverless time series database service for real-time analytics, DevOps, and IoT applications that you can use to store and analyze trillions of events per day.

TLS

See Transport Layer Security (TLS).

tokenization

The process of splitting a stream of text into separate tokens on detectable boundaries such as white space and hyphens.

AWS Toolkit for Eclipse

AWS Toolkit for Eclipse is an open-source plugin for the Eclipse Java integrated development environment (IDE) that makes it easier to develop, debug, and deploy Java applications using Amazon Web Services.

AWS Toolkit for JetBrains

AWS Toolkit for JetBrains is an open-source plugin for the integrated development environments (IDEs) from JetBrains that makes it easier to develop, debug, and deploy serverless applications using Amazon Web Services.

AWS Toolkit for Microsoft Azure DevOps

AWS Toolkit for Microsoft Azure DevOps provides tasks you can use in build and release definitions in VSTS to interact with AWS services.

U

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

unbounded

The number of potential occurrences isn't limited by a set number. This value is often used when defining a data type that's a list (for example, maxOccurs="unbounded"), in WSDL.

unit

Standard measurement for the values submitted to CloudWatch as metric data. Units include seconds, percent, bytes, bits, count, bytes/second, bits/second, count/second, and none.

usage report

An AWS record that details your usage of a particular AWS service. You can generate and download usage reports from https://aws.amazon.com/usage-reports/.

user

A person or application under an account that makes API calls to AWS products. Each user has a unique name within the AWS account, and a set of security credentials that aren't shared with other users. These credentials are separate from the security credentials for the AWS account. Each user is associated with one and only one AWS account.

USER_PERSONALIZATION recipes

Amazon Personalize: Recipes that are used to build a recommendation system that predicts the items that a user interacts with based on data provided in Interactions, Items, and Users datasets.

See also recipe.

See also USER_PERSONALIZATION recipes.

See also impressions data.

See also recommendations.

Users dataset

Amazon Personalize: A container for metadata about your users, such as age, gender, or loyalty membership.

See also dataset.

V

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

validation

See template validation.

value

Instances of attributes for an item, such as cells in a spreadsheet. An attribute might have multiple values.

Tagging resources: A specific tag label that acts as a descriptor within a tag category (key). For example, you might have EC2 instance with the tag key of Owner and the tag value of Jan. You can tag an AWS resource with up to 10 key–value pairs. Not all AWS resources can be tagged.

Variable Envelope Return Path

See VERP.

verification

The process of confirming that you own an email address or a domain so that you can send email from or to it.

VERP

Variable Envelope Return Path. A way that email-sending applications can match bounced email with the undeliverable address that caused the bounce by using a different return path for each recipient. VERP is typically used for mailing lists. With VERP, the recipient's email address is embedded in the address of the return path, which is where bounced email is returned. This makes it possible to automate the processing of bounced email without having to open the bounce messages, which might vary in content.

versioning

Every object in Amazon S3 has a key and a version ID. Objects with the same key, but different version IDs can be stored in the same bucket. Versioning is enabled at the bucket layer using PUT Bucket versioning.

VGW

See virtual private gateway (VGW).

virtual private gateway (VGW)

The Amazon side of a VPN connection that maintains connectivity. The internal interfaces of the virtual private gateway connect to your Amazon VPC through the VPN attachment. The external interfaces connect to the VPN connection, which leads to the customer gateway.

virtualization

Allows multiple guest virtual machines (VM) to run on a host operating system. Guest VMs can run on one or more levels above the host hardware, depending on the type of virtualization.

W

Numbers and symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X, Y, Z

AWS WAF

AWS WAF is a web application firewall service that controls access to content by allowing or blocking web requests based on criteria that you specify. For example, you can filter access based on the header values or the IP addresses that the requests originate from. AWS WAF helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.

X, Y, Z

X.509 certificate

A digital document that uses the X.509 public key infrastructure (PKI) standard to verify that a public key belongs to the entity that's described in the certificate.

X-Ray

AWS X-Ray is a web service that collects data about requests that your application serves. X-Ray provides tools that you can use to view, filter, and gain insights into that data to identify issues and opportunities for optimization.