Know what each service actually does.

Resizable virtual machines in AWS with control over the operating system, instance type, storage, and networking.

Maintains and adjusts groups of EC2 instances from a launch template and health signals.

AWS's container orchestrator for scheduling and operating container tasks and services.

A managed Kubernetes control plane for running Kubernetes workloads on AWS.

Serverless compute capacity for ECS or EKS containers; it runs tasks without you managing EC2 worker instances.

Runs event-driven function code on managed infrastructure and scales executions within configured limits.

Plans, queues, and runs batch computing jobs using managed scheduling and compute environments.

Managed big-data clusters and serverless options for frameworks such as Spark and Hadoop.

AWS-managed infrastructure installed on premises for workloads needing local AWS compute and storage.

Extends AWS IoT software, messaging, and local processing to edge devices.

Durable object storage for data addressed by bucket and object key rather than as a mounted disk.

Persistent block volumes for EC2 instances in one Availability Zone.

Elastic managed NFS file storage that multiple Linux clients can mount.

Managed Windows file storage using SMB and Windows-native integration.

Managed high-performance Lustre file systems for compute-intensive workloads.

Centrally defines, runs, and audits backup policies across supported AWS resources.

Accelerates and automates online file and object data movement between storage locations.

Connects on-premises environments to AWS storage through file, volume, or tape gateway modes.

Managed file-transfer endpoints for protocols such as SFTP that store data in AWS storage.

Managed relational database engines with automated infrastructure operations.

AWS-built relational database compatible with MySQL or PostgreSQL and designed for distributed managed storage.

Serverless key-value and document database designed for predictable low-latency access at scale.

Managed in-memory caching using supported Redis- or Memcached-compatible engines.

A managed in-memory cache built specifically for DynamoDB-compatible reads.

Managed columnar data warehousing for analytical SQL over large datasets.

Managed time-series database for measurements and events indexed by time.

A managed database proxy that pools and reuses connections to supported RDS and Aurora databases.

Serverless interactive SQL and Spark analytics over data stored in locations such as Amazon S3.

S3 archive storage classes that trade lower storage cost for retrieval-time, retrieval-charge, and minimum-duration boundaries.

Secure physical locations where customers bring storage devices and upload data through high-throughput connections to AWS endpoints.

A logically isolated virtual network where you choose IP ranges, subnets, routes, and traffic controls.

Private service access through interface endpoints without broad network routing between consumers and providers.

Dedicated network connectivity from a location to AWS through a Direct Connect facility or partner.

Encrypted IPsec tunnels between an AWS network and an external network over the internet.

A regional routing hub connecting VPCs and supported hybrid networks.

Managed DNS, domain registration, and health-check-based routing features.

A content delivery network that serves and can cache HTTP content at edge locations near viewers.

Routes TCP or UDP traffic over the AWS global network through static anycast IP addresses.

Distributes incoming traffic across healthy targets using application, network, or gateway load balancer types.

Layer 7 load balancer for HTTP and HTTPS content-based routing to targets.

High-performance Layer 4 load balancer for TCP, TLS, and UDP flows.

Transparently inserts and scales virtual network appliances in traffic paths.

Defines AWS identities, roles, policies, and authorization for AWS API actions and resources.

Issues temporary AWS credentials for role sessions and federation.

Centrally manages workforce access to multiple AWS accounts and supported applications.

Provides user directories, sign-in tokens, and optional AWS credential federation for application users.

Groups AWS accounts for consolidated billing and organization-wide governance policies.

Sets up and governs a multi-account landing zone using AWS Organizations and integrated controls.

Creates and controls cryptographic keys used directly or through integrated AWS services.

Provides dedicated hardware security modules in a managed cluster while you control users and keys.

Stores, retrieves, and can rotate application secrets such as database credentials.

Filters supported HTTP and HTTPS requests using web access-control rules.

Protects AWS resources against distributed denial-of-service attacks, with Standard and Advanced service levels.

Analyzes supported telemetry to detect suspicious activity and produce security findings.

Discovers sensitive data and evaluates data-security posture in Amazon S3.

Continuously scans supported compute workloads and container images for vulnerabilities and exposure.

Provisions and manages TLS certificates for supported AWS integrations.

Records supported AWS API and account activity for audit, investigation, and delivery to logs or event systems.

Records supported resource configurations and evaluates them against rules.

Collects mapped evidence and organizes it for audit assessments against frameworks.

Collects metrics, logs, alarms, dashboards, and related operational telemetry.

Provides operational management capabilities for supported AWS and hybrid nodes and resources.

Analyzes utilization and recommends sizing for supported AWS resources.

A physical data-transfer and edge-compute device retained in the course for existing-customer scenarios; AWS says new customers cannot order it.

An AWS operations offering that extends a customer's team with managed operational capabilities and automation.

Managed natural-language processing that extracts documented insights such as entities, sentiment, and key phrases from text.

Managed text-to-speech that turns text into synthesized speech using supported voices and languages.

The business-intelligence capability used to build, publish, and embed interactive dashboards from analytical datasets.

Assesses and converts database schemas and code when source and target database engines differ.

Interactive analysis and forecasting for AWS cost and usage data.

Evaluates configured actual or forecast cost and usage thresholds and can notify or invoke supported actions.

Detailed AWS cost and usage line items delivered for durable analysis, allocation, and showback workflows.

Uses AWS cost-management models to detect unusual spend patterns and issue configured alerts.

Estimates the modeled cost of proposed AWS service configurations before actual usage exists.

Creates and operates managed REST, HTTP, and WebSocket API front doors.

A durable message queue where competing consumers receive and delete work independently of producers.

A publish-and-subscribe service that pushes each published message from a topic to every matching subscription.

An event bus and routing service that matches events against rules and sends them to targets.

Coordinates tasks as explicit state-machine workflows with branches, waits, retries, errors, and execution history.

A retained partitioned stream for high-throughput records that multiple consumers can read and replay.

Managed delivery of streaming records to supported destinations with buffering and optional transformation.

Managed Apache Kafka clusters and serverless capacity on AWS.

Managed message brokers compatible with supported open-source broker engines and protocols.

Serverless data integration with a data catalog and managed extract-transform-load capabilities.

Helps build and centrally govern data lakes using fine-grained permissions over cataloged data.

Replicates source servers and helps cut them over to AWS with minimal application change.

Moves and continuously replicates data between supported database sources and targets.