Skip to main content
Back to Tags

Cloud

222 items tagged with "cloud"

Filter by type:

Anti-Patterns13

Anti-Pattern

Vendor Lock-In

Designing a system so deeply around one provider's proprietary services that switching becomes prohibitively expensive, eroding negotiating power and portability.

Anti-Pattern

Nanoservices

Splitting a system into services so small that coordination, network, and operational overhead vastly exceed the value of each tiny service.

Anti-Pattern

Entity Service

Designing microservices around data entities rather than business capabilities, forcing every workflow to orchestrate chatty calls across CRUD-only services.

Anti-Pattern

ClickOps

Provisioning and changing cloud infrastructure by hand through web consoles, producing undocumented, irreproducible, and unauditable configuration.

Anti-Pattern

No Infrastructure as Code

Running infrastructure without any code-based definition, so it cannot be versioned, reviewed, reproduced, or recovered systematically.

Anti-Pattern

Over-Provisioning

Allocating far more compute, memory, or capacity than workloads need, wasting money for headroom that is rarely used.

Anti-Pattern

Under-Provisioning

Allocating too little capacity to save money, leaving workloads starved so they slow down, fail, or fall over under load.

Anti-Pattern

Cloud Bill Shock

An unexpectedly huge cloud invoice arriving because spend was never tracked, attributed, or governed until the bill landed.

Anti-Pattern

Lift and Shift Without Optimization

Moving applications to the cloud unchanged and stopping there, inheriting on-prem inefficiencies while paying cloud prices and gaining none of the benefits.

Anti-Pattern

Single Region, No Disaster Recovery

Running an entire system in one region or data center with no disaster-recovery plan, so a regional failure takes everything down with no recovery path.

Anti-Pattern

Wildcard IAM Permissions

Granting broad cloud permissions with wildcards like Action:* or Resource:*, violating least privilege and widening the blast radius of any compromise.

Anti-Pattern

Long-Lived Static Credentials

Using permanent API keys and access tokens that never expire and are rarely rotated, maximizing the value and lifespan of any leak.

Anti-Pattern

Publicly Exposed Storage Buckets

Leaving cloud object storage open to anonymous read or write, a leading cause of large-scale data leaks from simple misconfiguration.

Tutorials34

Tutorial

How to autoscale Kubernetes nodes with the Cluster Autoscaler

Add and remove nodes automatically based on pending pods using the Cluster Autoscaler on a managed cluster.

Tutorial

How to provision an Amazon EKS cluster and deploy a workload

Create a managed EKS cluster with managed node groups using eksctl, then deploy and verify an application.

Tutorial

How to provision an Azure AKS cluster and deploy a workload

Create a managed AKS cluster with the Azure CLI, connect kubectl, and deploy an application.

Tutorial

How to provision a Google GKE cluster and deploy a workload

Create a GKE cluster with the gcloud CLI, connect kubectl, and deploy an application with autoscaling.

Tutorial

How to deploy a serverless REST API on AWS Lambda

Build and deploy a production REST API using AWS Lambda and API Gateway with infrastructure as code.

Tutorial

How to build an HTTP API with Azure Functions

Create and deploy a serverless HTTP-triggered API on Azure Functions using the Azure CLI and a consumption plan.

Tutorial

How to deploy a container to Google Cloud Run

Containerize an app and deploy it to Google Cloud Run for autoscaling, request-billed serverless hosting.

Tutorial

How to host a static site on Amazon S3 with CloudFront

Serve a static website from an S3 bucket behind the CloudFront CDN with HTTPS and global caching.

Tutorial

How to host a static site on Azure with Front Door

Serve static content from Azure Blob Storage behind Azure Front Door for global delivery and HTTPS.

Tutorial

How to design a VPC with public and private subnets on AWS

Build a secure AWS VPC with public and private subnets, NAT, and route tables using Terraform.

Tutorial

How to write least-privilege IAM roles on AWS

Create tightly scoped AWS IAM roles and policies that grant only the permissions a workload actually needs.

Tutorial

How to build a REST API with Amazon API Gateway

Configure Amazon API Gateway routes, stages, and authorizers to expose backend services as a managed REST API.

Tutorial

How to build a CRUD API on Amazon DynamoDB

Model data and implement create, read, update, and delete operations against Amazon DynamoDB from Node.js.

Tutorial

How to build a CRUD API on Azure Cosmos DB

Model documents and perform CRUD operations against Azure Cosmos DB for NoSQL from a .NET application.

Tutorial

How to build a CRUD app on Google Cloud Firestore

Model collections and perform CRUD operations and queries against Google Cloud Firestore from a web app.

Tutorial

How to decouple services with Amazon SQS

Use Amazon SQS queues to decouple producers and consumers, with dead-letter queues and Lambda triggers.

Tutorial

How to fan out events with Amazon SNS

Publish events to an Amazon SNS topic and fan them out to multiple SQS queues and Lambda subscribers.

Tutorial

How to route events with Amazon EventBridge

Build an event-driven workflow with Amazon EventBridge using event buses, rules, and pattern-based routing.

Tutorial

How to orchestrate workflows with AWS Step Functions

Build a state machine with AWS Step Functions to orchestrate Lambda tasks with retries, branching, and error handling.

Tutorial

How to provision a managed PostgreSQL database on Cloud SQL

Provision, secure, and connect to a managed PostgreSQL instance on Google Cloud SQL with private IP.

Tutorial

How to configure EC2 Auto Scaling groups on AWS

Set up an EC2 Auto Scaling group with a launch template, target tracking policies, and health checks.

Tutorial

How to manage secrets with AWS Secrets Manager

Store, retrieve, and rotate application secrets securely with AWS Secrets Manager and IAM access control.

Tutorial

How to set up cost budgets and alerts on AWS

Create AWS Budgets with thresholds and notifications to catch cost overruns before the bill arrives.

Tutorial

How to build a multi-region active-active app on AWS

Architect a multi-region active-active application on AWS with Route 53, global tables, and health-based failover.

Tutorial

How to do blue-green deployments on AWS with CodeDeploy

Run zero-downtime blue-green deployments for containers on Amazon ECS using AWS CodeDeploy and a load balancer.

Tutorial

How to deploy a serverless container with Azure Container Apps

Deploy a containerized service to Azure Container Apps with scale-to-zero, ingress, and revision-based updates.

Tutorial

How to manage secrets with Azure Key Vault

Store secrets, keys, and certificates in Azure Key Vault and access them from apps using managed identity.

Tutorial

How to design a VPC and firewall rules on Google Cloud

Build a custom-mode VPC on Google Cloud with subnets, firewall rules, and Cloud NAT for private workloads.

Tutorial

How to deploy a Python function on Google Cloud Functions

Write and deploy an HTTP-triggered Python function on Google Cloud Functions (2nd gen) with the gcloud CLI.

Tutorial

How to set up budgets and cost alerts on Google Cloud

Create Google Cloud budgets with threshold alerts and Pub/Sub automation to control project spend.

Tutorial

How to provision an AWS VPC with Terraform

Write Terraform configuration to create a VPC, subnets, and routing, then apply and destroy it safely.

Tutorial

How to provision cloud infrastructure with Pulumi

Define cloud resources in a general-purpose programming language using Pulumi and deploy them with up and destroy.

Tutorial

Connect the CLI to Vibgrate Cloud with vg login

Sign the Vibgrate CLI into your workspace from the browser with vg login, with no DSN to copy or paste, then push scan results.

Tutorial

Sign Out of Vibgrate Cloud with vg logout

Sign the Vibgrate CLI out of your workspace by clearing the stored login credential, useful on shared machines or when rotating access.

Reference Architectures9

Playbooks9

Playbook

Datacenter Exit Program Playbook

A phased program to fully vacate one or more owned datacenters by migrating workloads to public cloud and decommissioning physical infrastructure.

Playbook

VMware to Cloud Program Playbook

A phased program to migrate a VMware vSphere estate to public cloud, choosing between lift-and-shift hypervisor services and native replatforming.

Playbook

FinOps Cost Optimization Program Playbook

A phased program to establish FinOps practice, gain cloud cost visibility, and drive sustained savings through accountability and automation.

Playbook

Cloud Governance Rollout Playbook

A phased program to establish guardrails, policy-as-code, and compliance automation across a growing multi-account cloud estate.

Playbook

AWS to GCP Migration Program Playbook

A phased program to relocate workloads, data, and identity from AWS to Google Cloud while mapping services and minimizing downtime.

Playbook

On-Prem to Azure Migration Program Playbook

A phased program to migrate an on-premises estate to Microsoft Azure with assessment, landing zone, wave migration, and optimization.

Playbook

Cloud Migration Wave Planning Playbook

A phased program to plan and execute a large cloud migration as repeatable waves driven by a migration factory and a portfolio backlog.

Playbook

Terraform and IaC Rollout Playbook

A program to introduce Terraform-based infrastructure as code across teams with reusable modules, secure state, and policy guardrails.

Playbook

Cloud Cost and FinOps Program Playbook

A program to bring financial accountability to cloud spend through cost visibility, allocation, optimization, and continuous governance.

Checklists17

Checklist

Cloud Migration Checklist

End-to-end checklist for migrating workloads to cloud platforms

Checklist

Cloud Migration Readiness Checklist

Verify your organization, applications, and operations are ready before moving workloads from on-premises to the cloud.

Checklist

AWS Landing Zone Setup Checklist

Stand up a secure, multi-account AWS foundation with guardrails, networking, and logging before workloads arrive.

Checklist

Azure Landing Zone Setup Checklist

Build an enterprise-scale Azure landing zone with management groups, policy, networking, and identity ready for workloads.

Checklist

GCP Landing Zone Setup Checklist

Establish a secure Google Cloud foundation with a resource hierarchy, org policies, shared VPC, and centralized logging.

Checklist

Kubernetes Production Readiness Checklist

Confirm a Kubernetes cluster and its workloads are secure, observable, and resilient before serving production traffic.

Checklist

Cloud Cost Optimization Checklist

Systematically reduce cloud spend through visibility, rightsizing, commitments, and architectural changes without harming reliability.

Checklist

Container Security Hardening Checklist

Harden container images, build pipelines, and runtime so containerized workloads resist compromise and supply-chain attacks.

Checklist

AWS Well-Architected Review Checklist

Run a structured Well-Architected review across the six pillars to find and prioritize risks in an AWS workload.

Checklist

Disaster Recovery Test Checklist

Plan and run a disaster-recovery test that proves backups, runbooks, and recovery objectives actually work end to end.

Checklist

Terraform Module Review Checklist

Review a Terraform module for correctness, reusability, security, and maintainability before publishing it for shared use.

Checklist

Kubernetes Cluster Setup Checklist

Provision a new managed Kubernetes cluster with the networking, security, and platform add-ons teams need from day one.

Checklist

Cloud Network Security Review Checklist

Audit a cloud network's segmentation, access controls, and exposure to reduce the blast radius of a compromise.

Checklist

Serverless Production Readiness Checklist

Confirm a serverless application is observable, secure, resilient, and cost-aware before it serves production traffic.

Checklist

GitOps Adoption Readiness Checklist

Verify the prerequisites for declarative, Git-driven Kubernetes delivery are in place before adopting GitOps.

Checklist

Infrastructure-as-Code Migration Readiness Checklist

Confirm you are ready to bring an existing manually managed cloud estate under infrastructure-as-code without disruption.

Checklist

Cloud Landing Zone Security Checklist

Verify a multi-account cloud landing zone enforces identity, network, guardrails, and logging before workloads are onboarded.

Stacks20

Stack

AWS Serverless Stack

Lambda, API Gateway, DynamoDB, S3 - AWS serverless architecture

Stack

Edge Computing Stack

Cloudflare Workers, D1, R2, KV - Edge-first architecture

Stack

.NET Azure Stack

ASP.NET Core, Azure Services, SQL Server - Microsoft ecosystem

Stack

Quarkus Cloud-Native Java Stack

Cloud-native Java backend using Quarkus with GraalVM native compilation and PostgreSQL for fast-starting, low-memory containerized services.

Stack

Micronaut JVM Microservices Stack

JVM microservices stack using Micronaut with ahead-of-time compilation and PostgreSQL for low-memory, fast-starting services and serverless functions.

Stack

Kubernetes + Istio Service Mesh Stack

Cloud-native platform stack pairing Kubernetes orchestration with the Istio service mesh for traffic management, security, and observability.

Stack

Knative Serverless Containers Stack

Kubernetes-based serverless stack using Knative for scale-to-zero, request-driven container workloads with event-driven autoscaling.

Stack

AWS Serverless Stack

Fully managed AWS serverless stack using Lambda, DynamoDB, and API Gateway for event-driven, pay-per-use applications with no server management.

Stack

Azure Serverless Stack

Managed Microsoft Azure serverless stack using Azure Functions and Cosmos DB for event-driven, globally distributed, pay-per-use applications.

Stack

GCP Serverless Stack

Google Cloud serverless stack using Cloud Run and Firestore for container-based, scale-to-zero applications with managed NoSQL storage.

Stack

Dapr Distributed Application Stack

Polyglot microservices stack using Dapr building blocks for service invocation, state, pub/sub, and bindings, abstracted from underlying infrastructure.

Stack

Serverless Containers Stack

Cloud stack running standard OCI containers on managed serverless platforms for scale-to-zero, pay-per-use workloads without cluster management.

Stack

AWS ECS Fargate Containers Stack

Managed container stack running Docker workloads on AWS ECS with Fargate serverless compute, behind a load balancer, without managing servers or clusters.

Stack

Snowflake + Fivetran + Looker

A fully managed cloud analytics stack: Fivetran ingests data, Snowflake stores and transforms it, and Looker serves governed BI on top.

Stack

dbt + Amazon Redshift

An ELT analytics stack where data lands in Amazon Redshift and dbt transforms it with version-controlled, tested SQL models.

Stack

Databricks + Unity Catalog

A governed lakehouse stack centering Databricks compute and Delta Lake storage under Unity Catalog for unified data and AI governance.

Stack

Cloudflare Workers + D1 + R2

A serverless edge stack running JavaScript at Cloudflare's edge with Workers, the D1 SQLite database, and R2 object storage for low-latency global apps.

Stack

Deno Deploy Edge

A serverless edge runtime stack built on Deno, running secure TypeScript and JavaScript globally with web-standard APIs and built-in KV storage.

Stack

Fastly Compute Edge

A high-performance edge computing stack running WebAssembly at Fastly's network for ultra-fast, secure serverless logic close to users.

Stack

SAP BTP

SAP Business Technology Platform: an enterprise PaaS for extending and integrating SAP systems, building apps with the Cloud Application Programming model, Fiori, and integration services.

Comparisons24

Comparison

Azure vs GCP

Microsoft Azure and Google Cloud Platform are the second and third largest public clouds, with different strengths in enterprise integration versus data and AI.

Comparison

EKS vs GKE

Amazon EKS and Google GKE are the leading managed Kubernetes services. GKE is more automated and mature; EKS offers deepest AWS integration.

Comparison

ECS vs EKS

Amazon ECS is AWS's simpler proprietary container orchestrator; EKS is managed Kubernetes. ECS trades portability for ease; EKS trades simplicity for the open ecosystem.

Comparison

Fargate vs Lambda

AWS Fargate runs serverless containers; AWS Lambda runs serverless functions. Fargate suits long-running services; Lambda suits short, event-driven work.

Comparison

Terraform vs Pulumi

Terraform uses a declarative DSL (HCL) for infrastructure as code; Pulumi lets you define infrastructure in general-purpose languages like TypeScript, Python, or Go.

Comparison

Terraform vs CloudFormation

Terraform is a multi-cloud IaC tool; AWS CloudFormation is AWS's native infrastructure-as-code service. Terraform wins on portability; CloudFormation on AWS depth.

Comparison

OpenTofu vs Terraform

OpenTofu is the open-source fork of Terraform created after HashiCorp's BSL license change. The two are largely compatible but differ on licensing and governance.

Comparison

VMs vs Containers

Virtual machines virtualize hardware with a full guest OS; containers virtualize the OS, sharing the host kernel. VMs offer stronger isolation; containers offer density and speed.

Comparison

Serverless vs Containers

Serverless abstracts away infrastructure and scales to zero; containers give portable, full control over the runtime. The choice balances operational simplicity against flexibility.

Comparison

EC2 vs Lambda

Amazon EC2 provides full virtual servers you manage; AWS Lambda runs event-driven functions with no servers to manage. Control and steady cost versus elasticity and simplicity.

Comparison

Cloudflare vs CloudFront

Cloudflare is an independent global edge platform with CDN, security, and edge compute; Amazon CloudFront is AWS's CDN, deeply integrated with the AWS ecosystem.

Comparison

S3 vs EBS

Amazon S3 is object storage accessed over HTTP; Amazon EBS is block storage attached to EC2 instances. They serve fundamentally different storage needs.

Comparison

Cloud Run vs Cloud Functions

Google Cloud Run runs serverless containers; Cloud Functions runs serverless functions. Cloud Run offers more flexibility; Cloud Functions is simpler for event glue.

Comparison

AWS CDK vs Terraform

The AWS CDK defines infrastructure in real programming languages that compile to CloudFormation; Terraform uses declarative HCL across many clouds. Code power versus multi-cloud reach.

Comparison

Vault vs AWS Secrets Manager

HashiCorp Vault is a powerful, cloud-agnostic secrets and identity platform; AWS Secrets Manager is a managed, AWS-native secrets store. Power and portability versus simplicity.

Comparison

RDS vs Aurora

Amazon RDS runs standard managed database engines; Amazon Aurora is AWS's cloud-native engine with a distributed storage layer offering higher performance and availability.

Comparison

Snowflake vs BigQuery

Cloud-agnostic data warehouse with decoupled compute versus Google's fully serverless analytics warehouse.

Comparison

BigQuery vs Redshift

Google's fully serverless analytics warehouse versus Amazon Redshift's AWS-native MPP warehouse.

Comparison

.NET vs .NET Framework

Modern .NET (formerly .NET Core) is the cross-platform, actively developed runtime, while .NET Framework is the legacy Windows-only platform now in maintenance.

Comparison

Spring Boot vs Quarkus

Spring Boot is the mature, ubiquitous Java framework; Quarkus is a cloud-native, Kubernetes-first framework optimized for fast startup and low memory.

Comparison

Spring Boot vs Micronaut

Spring Boot uses runtime reflection and a huge ecosystem; Micronaut uses compile-time dependency injection for fast startup and low memory.

Comparison

HashiCorp Vault vs Cloud Secrets Manager

Vault is a powerful, cloud-agnostic secrets and identity platform; cloud-native secrets managers are simpler, fully managed services tied to one cloud.

Comparison

Kubeflow vs SageMaker

Kubeflow is an open-source ML platform on Kubernetes; Amazon SageMaker is AWS's managed ML service. The choice trades portability and control against managed convenience.

Comparison

Self-Hosted vs Managed Inference

Self-hosted inference runs models on your own infrastructure; managed inference uses a provider's endpoint. The choice trades control, privacy, and cost-at-scale against simplicity.

Benchmarks11

Benchmark

Cloud Configuration Translation

Evaluates accuracy of translating cloud configs (CloudFormation to Terraform, etc.)

Benchmark

Serverless Cold-Start Latency Benchmark

Measures the added latency when a serverless function must initialize a new execution environment before handling a request, across runtimes and platforms.

Benchmark

Autoscaling Responsiveness Benchmark

Measures how quickly and accurately an autoscaler adds or removes capacity in response to load changes, including reaction time, overshoot, and stabilization.

Benchmark

Cost-per-Request Benchmark

Measures the fully loaded cloud cost of serving a single unit of work, attributing compute, memory, network, and storage spend to throughput.

Benchmark

Cloud Storage Throughput Benchmark

Measures sustained read and write throughput, IOPS, and latency of cloud object, block, and file storage under varied access patterns and concurrency.

Benchmark

CDN Latency Benchmark

Measures content delivery network performance from many geographic vantage points, including edge latency, cache hit ratio, and origin offload.

Benchmark

Kubernetes Scheduling Latency Benchmark

Measures how quickly the Kubernetes scheduler places pods on nodes and how the control plane scales as pod, node, and churn counts grow.

Benchmark

Cloud Egress Cost Efficiency Benchmark

Measures the cost and volume of data leaving cloud environments, attributing egress spend to flows, regions, and services to surface optimization targets.

Benchmark

DAWNBench

Stanford benchmark that measured end-to-end deep-learning training and inference by time-to-accuracy and cost, popularizing those metrics.

Benchmark

UnixBench

Classic Unix and Linux system benchmark measuring overall performance through CPU, process, file I/O, and system-call tests aggregated into an index.

Benchmark

sysbench CPU Benchmark

CPU test mode of the sysbench tool measuring processor throughput via prime-number computation across single and multiple threads.

FAQs14

FAQ

What is a container?

A container is a lightweight, standalone unit that packages an application together with its dependencies, libraries, and configuration so it runs con...

FAQ

What is the difference between a Docker container and a virtual machine?

A virtual machine (VM) virtualizes hardware and runs a full guest operating system on top of a hypervisor, so each VM carries its own kernel and is he...

FAQ

What is Kubernetes?

Kubernetes is an open-source platform for automating the deployment, scaling, and operation of containerized applications. It groups containers into l...

FAQ

What is the difference between a Kubernetes pod and a container?

A container is a single packaged process, while a pod is the smallest deployable unit in Kubernetes and can hold one or more containers that share the...

FAQ

What is serverless computing?

Serverless computing is a cloud model where the provider automatically provisions, scales, and manages the servers, so developers deploy code that run...

FAQ

What is the difference between IaaS, PaaS, and SaaS?

These are the three main cloud service models, distinguished by how much the provider manages. **IaaS** (Infrastructure as a Service) provides raw com...

FAQ

What is autoscaling in the cloud?

Autoscaling automatically adjusts the number of running resources, such as virtual machines, containers, or pods, in response to demand or defined met...

FAQ

What is a cloud landing zone?

A landing zone is a pre-configured, secure, and scalable cloud environment that establishes a baseline for accounts, networking, identity, security, a...

FAQ

What is the difference between cloud regions and availability zones?

A region is a distinct geographic area where a cloud provider operates data centers, chosen for proximity to users, latency, and data-residency requir...

FAQ

What is multi-cloud?

Multi-cloud is the practice of using services from more than one cloud provider, such as AWS, Azure, and Google Cloud, within a single organization or...

FAQ

What is the difference between hybrid cloud and multi-cloud?

Hybrid cloud combines private infrastructure, such as on-premises data centers or a private cloud, with one or more public clouds, integrating them so...

FAQ

What is infrastructure as code?

Infrastructure as code (IaC) is the practice of defining and provisioning infrastructure, such as servers, networks, and databases, through machine-re...

FAQ

What does cloud native mean?

Cloud native describes an approach to building and running applications that fully exploits the elasticity, automation, and managed services of the cl...

FAQ

What is the Twelve-Factor App methodology?

The Twelve-Factor App is a set of principles for building cloud-native, portable, and scalable software-as-a-service applications. Key factors include...

Glossaries37

Glossary

Elasticity

Elasticity is the ability of a cloud system to automatically add or remove computing resources in response to changing demand, so capacity tracks load in near real time.

Glossary

Availability Zone

An availability zone is one or more discrete data centers within a cloud region, with independent power, cooling, and networking, designed to be isolated from failures in other zones.

Glossary

Region

A region is a geographic area where a cloud provider operates a cluster of data centers, organized into availability zones, in which customers deploy and store resources.

Glossary

Multi-Tenancy

Multi-tenancy is a software architecture in which a single deployment serves multiple customers, called tenants, while keeping each tenant's data and configuration logically isolated.

Glossary

Serverless

Serverless is a cloud execution model in which the provider fully manages servers and scaling, running code in response to events and billing only for actual usage.

Glossary

Function as a Service (FaaS)

Function as a service is a serverless model in which developers deploy individual functions that the cloud provider runs and scales automatically in response to events.

Glossary

Infrastructure as a Service (IaaS)

Infrastructure as a service is a cloud model that provides on-demand access to fundamental computing resources such as virtual machines, storage, and networking, which customers manage themselves.

Glossary

Platform as a Service (PaaS)

Platform as a service is a cloud model that provides a managed application platform, handling servers, runtimes, and scaling so developers focus on code rather than infrastructure.

Glossary

Autoscaling

Autoscaling is the automatic adjustment of the number of running compute instances or resources based on demand, metrics, or schedules, without manual intervention.

Glossary

Spot Instance

A spot instance is spare cloud compute capacity offered at a deep discount that the provider can reclaim with little notice, suited to fault-tolerant and interruptible workloads.

Glossary

Reserved Instance

A reserved instance is a cloud pricing model in which a customer commits to using compute capacity for a one- or three-year term in exchange for a significant discount over on-demand rates.

Glossary

Edge Computing

Edge computing is a model that runs processing and storage close to where data is generated or consumed, rather than in a centralized cloud region, to reduce latency and bandwidth use.

Glossary

Virtual Private Cloud (VPC)

A virtual private cloud is a logically isolated section of a public cloud where a customer can define their own private network, including subnets, IP ranges, routing, and firewall rules.

Glossary

Object Storage

Object storage is a data storage architecture that manages data as discrete objects with metadata and a unique identifier in a flat namespace, accessed over HTTP APIs and scaling to massive volumes.

Glossary

Block Storage

Block storage is a storage architecture that splits data into fixed-size blocks presented to a server as a raw volume, on which a file system or database can be placed for low-latency, high-performance access.

Glossary

Shared Responsibility Model

The shared responsibility model is a cloud security framework that divides security duties between the provider, who secures the cloud infrastructure, and the customer, who secures what they run in the cloud.

Glossary

Egress

Egress is the movement of data out of a network, system, or cloud provider, often metered and billed; in cloud computing it commonly refers to data transfer leaving a provider's network to the internet or another region.

Glossary

Cold Start

A cold start is the added latency incurred when a serverless function or container must initialize a fresh execution environment before handling a request, rather than reusing a warm, already-running one.

Glossary

Container

A container is a lightweight, isolated unit that packages an application together with its dependencies and runs as an isolated process on a shared host operating system kernel.

Glossary

Container Image

A container image is an immutable, read-only template containing an application and its dependencies, packaged as ordered filesystem layers from which running containers are created.

Glossary

Container Registry

A container registry is a service that stores, versions, and distributes container images, allowing clients to push built images and pull them for deployment.

Glossary

Pod

A pod is the smallest deployable unit in Kubernetes, consisting of one or more tightly coupled containers that share a network namespace, storage volumes, and lifecycle.

Glossary

Deployment (Kubernetes)

A Kubernetes Deployment is a controller that declaratively manages a set of identical pods, handling rollouts, rollbacks, and scaling by maintaining the desired number of replicas.

Glossary

ReplicaSet

A ReplicaSet is a Kubernetes controller that ensures a specified number of identical pod replicas are running at all times, recreating pods that fail or are deleted.

Glossary

StatefulSet

A StatefulSet is a Kubernetes controller for stateful applications that provides pods with stable, unique identities, ordered deployment and scaling, and persistent per-pod storage.

Glossary

DaemonSet

A DaemonSet is a Kubernetes controller that ensures a copy of a specified pod runs on every (or a selected subset of) node in the cluster, commonly used for node-level agents.

Glossary

Namespace (Kubernetes)

A Kubernetes namespace is a virtual partition within a cluster that scopes resource names and enables isolation, access control, and resource quotas across teams or environments.

Glossary

Ingress

Ingress is a Kubernetes resource that defines rules for routing external HTTP and HTTPS traffic to internal services, typically based on hostnames and URL paths.

Glossary

Service (Kubernetes)

A Kubernetes Service is an abstraction that exposes a logical set of pods as a single stable network endpoint, providing service discovery and load balancing across them.

Glossary

ConfigMap

A ConfigMap is a Kubernetes object that stores non-confidential configuration data as key-value pairs, decoupling configuration from container images so applications can be configured per environment.

Glossary

Secret (Kubernetes)

A Kubernetes Secret is an object for storing and distributing small amounts of sensitive data, such as passwords, tokens, and keys, to pods with tighter handling than ordinary configuration.

Glossary

Helm Chart

A Helm chart is a packaged, templated, and versioned collection of Kubernetes manifests that Helm uses to install, upgrade, and manage an application as a single releasable unit.

Glossary

Kubelet

The kubelet is the primary node agent in Kubernetes that runs on every worker node, ensuring the containers described in the pods assigned to that node are running and healthy.

Glossary

Persistent Volume

A persistent volume is a Kubernetes resource representing a piece of durable storage in the cluster whose lifecycle is independent of any individual pod, allowing data to survive pod restarts and rescheduling.

Glossary

Data Warehouse

A data warehouse is a centralized analytical database that stores integrated, structured data from multiple sources, optimized for querying and reporting rather than transactional processing.

Glossary

Data Lake

A data lake is a centralized repository that stores large volumes of raw data in its native format — structured, semi-structured, and unstructured — at low cost, with schema applied at read time rather than on ingestion.

Glossary

Data Lakehouse

A data lakehouse is an architecture that combines the low-cost, flexible storage of a data lake with the management, transactions, and performance of a data warehouse, using open table formats over object storage.