AWS Services/Concepts Checklist

README.md

Networking

• IPv6 Addressing
• Dual Stack - IPv4/IPv6
• VPC Interface Endpoints
• AWS PrivateLink
• Route53 Resolver
• VPC IP Address Manager (IPAM)
• ALB integration through NLB

VPC

• Reachability Analyzer

EKS

• Instance/IP mode
• ExternalSNAT
• Secondary IPs for Pods
• Prefix delegation
• Security groups for Pods - Trunk ENI
• Cloud Map Registry
• Cloud Map MCS Controller

Route53

• Route53 Resolver
• DNSSEC
• Application Recovery Controller (ARC)

WAF

• AWS Managed Rules (AMR)

Loadbalancer

ALB

• gRPC
• IPv6
• Integrated WAF
• Cookie stickiness
• ALB as a target of NLB (static IP address, Private Link)

NLB

• NLB with PrivateLink
• IP session affinity
• Source IP preservation for IP targets

Storage

• EBS
• S3
  • Standard
  • Standard-IA
  • One Zone-IA
  • Intelligent-Tiering
  • Glacier Instant Retrieval
  • Glacier Flexible Retrieval
  • Glacier Deep Archive
• EFS
• FSx for Lustre
• FSx for Windows

S3

• Security
  • Server Access Logs
    • Athena For Analyzing Logs
  • Access Analyzer for S3
  • Trusted Advisor
  • Block Public Access
  • Bucket Policies
  • Bucket Owner Preferred Ownership
  • Access Points
  • Pre-signed URLs
  • SSE
  • VPC Endpoints
  • Guard Duty
  • Macie
• S3 Inventory
• S3 Select
• S3 Events
• S3 Batch Operations
  • Object Tagging
  • Object ACL
  • Intiate Restore Object
  • Object Copy
  • Invoke Lambda
  • Manage Object Lock
• Cost Optimization
  • S3 Storage Class Analysis
  • Quicksight
  • Storage Lens
  • Cloudwatch
  • Budgets
  • Cost & Usage Reports
  • Lifecycle Policies
• Performance Optimization
  • Prefixes
    • Don't use date based prefixes (Hive, Spark, Presto)
  • Size >= 100 MB Use Multipart Uploads
  • Use S3 Select With Spark To Improve Query Performance
  • Accelerate Content Delivery With Cloudfront
  • S3 Transfer Acceleration
• Business Continuity/DR
  • Versioning
  • MFA Delete
  • S3 Object Lock
  • Replication
  • Multi Region Access Point
  • AWS Backup

EBS

• Encryption
• AWS Compute Optimizer

EFS

• Security Groups
• NFS Level Permission
• Access Points for Apps (e.g. Lambda)

Hybrid

• AWS Outposts
  • AWS EBS
  • S3 on Outposts
• Storage Gateway
  • S3 File Gateway
  • FSx File Gateway

Edge

• Snow Family
  • Snowcone
  • Snowball Edge Storage Optimize
  • Snowball Edge Storage Optimized with compute
  • Snowball Edge Compute Optimized

Transfer

• Transfer Family
• Data Sync

Disaster Recovery & Data Protection

• Elastic Disaster Recovery
• AWS Backup