AWS Services Reference Matrix | AWS Architecture Guide

Analytics 8 Services

Amazon Athena

2 Studies

Centralized Enterprise Security Log Lake: CloudTrail & VPC Flow Logs Executes threat hunting SQL queries across billions of audit records.

Real-Time Clickstream Analytics: Ingesting 20,000 Events/Sec into S3 & Athena Executes ad-hoc distributed serverless Presto/Trino SQL queries directly on S3 Parquet partitions.

Amazon Kinesis Data Firehose

1 Studies

Real-Time Clickstream Analytics: Ingesting 20,000 Events/Sec into S3 & Athena Buffers streaming events and converts JSON payloads to columnar Apache Parquet format.

Amazon Kinesis Data Streams

2 Studies

Sub-Millisecond Gaming Leaderboard: Redis Sorted Sets & DynamoDB Buffers high-frequency score submission events for asynchronous persistence.

Smart Connected Fleet: Ingesting Telemetry from 500,000 Vehicles Decouples message broker throughput spikes from real-time analytics engines.

Amazon QuickSight

1 Studies

Executive BI Datamart Pipeline: Redshift Serverless & Glue ETL Cloud-native business intelligence visualization with SPICE in-memory engine.

Amazon Redshift Serverless

1 Studies

Executive BI Datamart Pipeline: Redshift Serverless & Glue ETL Provides petabyte-scale columnar SQL querying that automatically scales compute (RPUs) up and down.

Amazon SageMaker

1 Studies

Smart Connected Fleet: Ingesting Telemetry from 500,000 Vehicles Detects battery cell anomalies and predicts engine failures before roadside breakdown.

AWS Glue

1 Studies

Executive BI Datamart Pipeline: Redshift Serverless & Glue ETL Serverless Apache Spark ETL jobs extracting, transforming, and loading dimensional models.

AWS Glue Data Catalog

1 Studies

Real-Time Clickstream Analytics: Ingesting 20,000 Events/Sec into S3 & Athena Maintains centralized metastore and manages schema evolution.

Compute 9 Services

Amazon EC2

1 Studies

Legacy Monolith Migration: Lift & Shift to Multi-AZ Auto Scaling EC2 Runs stateless Django/Rails web application workers.

Amazon EC2 Spot Instances

1 Studies

Internal Analytics Portal: Scheduled Auto-Scaling & Spot Fleets Provides up to 90% discount for fault-tolerant analytics workers.

Auto Scaling Groups (ASG)

1 Studies

Legacy Monolith Migration: Lift & Shift to Multi-AZ Auto Scaling EC2 Maintains target capacity and scales instances based on CPU utilization.

Auto Scaling Scheduled Actions

1 Studies

Internal Analytics Portal: Scheduled Auto-Scaling & Spot Fleets Automatically provisions capacity before business hours and scales to zero at night.

AWS Lambda

6 Studies

Cloud Cost Anomaly Sentinel: Autonomous FinOps Waste Hunting Snapshots and terminates orphaned cloud resources.

Automated Incident Detection & Self-Healing Telemetry Engine Executes automated remediation scripts (clears degraded cache nodes, restarts hung tasks).

Free-Tier & Budget Trap Guard: Automated Cost Anomaly Defense Automated circuit breaker that revokes developer keys or scales down dev compute on budget breach.

Real-Time Serverless Image Processing & Media Pipeline Executes Sharp/FFmpeg media transformations with 1024MB ephemeral compute.

Global Serverless URL Shortener: Sub-15ms Redirection ARM64 (Graviton2) runtime executing Base62 encoding and 301 redirects.

Resilient Webhook Ingestion Engine: Buffering 10,000 Webhooks/Sec Pulls batches of 10-50 webhooks to verify signatures and update databases.

AWS Lambda & ECS Fargate

1 Studies

Global Multi-Tenant B2B SaaS: Tenant Isolation & Metering Engine Stateless multi-tenant microservices with contextual tenant identity headers.

AWS Lambda & Fargate

1 Studies

FinTech Active-Active Core Banking: Zero-RPO Multi-Region Ledger Stateless banking microservices running synchronously in both regions.

CloudFront Functions

2 Studies

Global Enterprise Blog: Edge-Localized Content & Security Headers Inspects Viewer Accept-Language headers and injects strict security headers.

Viral Startup Marketing Site: Surviving 50,000 Req/Sec Surges Sub-millisecond URL rewrites and A/B testing cookie redirects at the edge.

Karpenter

1 Studies

Polyglot Microservices on Amazon EKS with Karpenter Autoscaling High-performance node autoscaler that provisions custom EC2 instance sizes in < 45 seconds.

Containers 4 Services

Amazon ECR

1 Studies

Monolith to Microservices: Strangler Fig Pattern on AWS Fargate Stores secure, immutable Docker container images with vulnerability scanning.

Amazon ECS (AWS Fargate)

1 Studies

Monolith to Microservices: Strangler Fig Pattern on AWS Fargate Runs containerized microservices without managing EC2 instances or cluster capacity.

Amazon EKS

1 Studies

Polyglot Microservices on Amazon EKS with Karpenter Autoscaling Managed Kubernetes control plane with multi-AZ etcd redundancy.

AWS Cloud Map

1 Studies

Monolith to Microservices: Strangler Fig Pattern on AWS Fargate Provides private DNS service discovery for internal microservice-to-microservice communication.

Database 6 Services

Amazon Aurora Serverless v2

1 Studies

E-Commerce Catalog & Orders: Relational vs NoSQL Polyglot Persistence Provides full ACID transactions, strict foreign keys, and financial integrity for orders and payments.

Amazon DynamoDB

6 Studies

E-Commerce Catalog & Orders: Relational vs NoSQL Polyglot Persistence Handles 100,000+ reads/sec with single-digit ms latency for product catalog and inventory checks.

Global Multi-Tenant B2B SaaS: Tenant Isolation & Metering Engine Dynamically partitioned pooled tenant storage with tenant_id partition keys.

Global Session Store: Sub-Millisecond Auth with ElastiCache Redis Acts as cold persistent storage for archived audit sessions.

Sub-Millisecond Gaming Leaderboard: Redis Sorted Sets & DynamoDB Persistent history and player profile record storage.

Global Serverless URL Shortener: Sub-15ms Redirection Single-digit millisecond primary key lookups (ShortCode -> TargetURL).

Resilient Webhook Ingestion Engine: Buffering 10,000 Webhooks/Sec Stores idempotent transaction records with TTL.

Amazon DynamoDB Global Tables

2 Studies

FinTech Active-Active Core Banking: Zero-RPO Multi-Region Ledger Multi-region active-active fully managed ledger with sub-second cross-ocean data replication.

Netflix-Scale Global Video Streaming: Transcoding, Origin Shielding & CDN Stores global user viewing history and resume playback timestamps with < 1s multi-region sync.

Amazon ElastiCache (Redis)

3 Studies

Global Session Store: Sub-Millisecond Auth with ElastiCache Redis Provides in-memory session token storage and automatic TTL expiration.

Legacy Monolith Migration: Lift & Shift to Multi-AZ Auto Scaling EC2 Externalizes user session states to enable safe horizontal scaling.

Sub-Millisecond Gaming Leaderboard: Redis Sorted Sets & DynamoDB Provides in-memory Sorted Sets (ZADD, ZREVRANGE) for real-time global player rank calculations in O(log N).

Amazon Timestream

1 Studies

Smart Connected Fleet: Ingesting Telemetry from 500,000 Vehicles Serverless time-series database optimized for vehicle GPS, speed, battery, and engine diagnostics.

AWS RDS Proxy

1 Studies

E-Commerce Catalog & Orders: Relational vs NoSQL Polyglot Persistence Pools and reuses database connections from thousands of concurrent serverless Lambda workers.

DevOps 4 Services

AWS CDK (TypeScript)

1 Studies

Multi-Environment GitOps Engine: Trunk-Based Delivery with AWS CDK Defines cloud infrastructure using object-oriented, type-safe constructs.

AWS CodeBuild

1 Studies

Multi-Environment GitOps Engine: Trunk-Based Delivery with AWS CDK Runs unit tests, cdk-nag security linters, and synthetic end-to-end integration tests.

AWS CodeDeploy

1 Studies

Zero-Downtime Blue/Green & Canary Traffic Shifting with CodeDeploy Manages linear and canary traffic shifting policies across ALB target groups.

AWS CodePipeline

1 Studies

Multi-Environment GitOps Engine: Trunk-Based Delivery with AWS CDK Orchestrates multi-stage promotion workflows (Source -> Build -> Dev -> Staging -> Prod).

IoT 1 Services

AWS IoT Core

1 Studies

Smart Connected Fleet: Ingesting Telemetry from 500,000 Vehicles Manages bidirectional MQTT message broker connections with X.509 device certificate authentication.

Management 5 Services

AWS Budgets

1 Studies

Free-Tier & Budget Trap Guard: Automated Cost Anomaly Defense Sends automated email and SNS alerts when actual or forecasted spend exceeds thresholds.

AWS Config

1 Studies

Cloud Cost Anomaly Sentinel: Autonomous FinOps Waste Hunting Continuously evaluates resource configuration compliance rules.

AWS Cost Anomaly Detection

2 Studies

Cloud Cost Anomaly Sentinel: Autonomous FinOps Waste Hunting Uses machine learning to catch anomalous spend surges per service.

Free-Tier & Budget Trap Guard: Automated Cost Anomaly Defense Uses machine learning to identify anomalous spikes in service usage.

AWS Cost Explorer

1 Studies

Deconstructing Enterprise Architecture: The Case Study Method Visualizing and forecasting monthly cloud spend velocity.

AWS Systems Manager Parameter Store

1 Studies

Multi-Environment GitOps Engine: Trunk-Based Delivery with AWS CDK Injects dynamic environment configuration variables and secrets.

Media 1 Services

AWS Elemental MediaConvert

1 Studies

Netflix-Scale Global Video Streaming: Transcoding, Origin Shielding & CDN Broadcast-grade file-based video transcoding into multi-bitrate HLS and MPEG-DASH packages.

Networking 14 Services

Amazon CloudFront

3 Studies

Global Enterprise Blog: Edge-Localized Content & Security Headers Global edge CDN terminating TLS and caching localized assets.

Zero-Maintenance Developer Portfolio & Docs Site Global CDN caching assets at edge locations and terminating TLS.

Viral Startup Marketing Site: Surviving 50,000 Req/Sec Surges Absorbs massive traffic spikes and delivers cached assets from edge PoPs.

Amazon CloudFront & Origin Shield

1 Studies

Netflix-Scale Global Video Streaming: Transcoding, Origin Shielding & CDN Delivers encrypted HLS video chunks (.ts / .m4s) from edge PoPs with 99.9% cache hit ratios.

Amazon Route 53

1 Studies

Global Enterprise Blog: Edge-Localized Content & Security Headers Latency-based DNS routing with health checks.

Amazon VPC

2 Studies

Diagram Literacy: Translating Logical Architecture to Physical Subnets Logical network isolation for cloud resources.

Production 3-Tier Enterprise VPC: Complete Network Isolation Core network boundary partitioned across 3 Availability Zones.

Amazon VPC Flow Logs

1 Studies

Centralized Enterprise Security Log Lake: CloudTrail & VPC Flow Logs Records all accepted and rejected IP network flows across subnets.

Application Load Balancer

2 Studies

Monolith to Microservices: Strangler Fig Pattern on AWS Fargate Routes incoming requests to the legacy monolith or new microservices using path-based rules.

Zero-Downtime Blue/Green & Canary Traffic Shifting with CodeDeploy Performs weighted target group routing between Blue (v1) and Green (v2) fleets.

Application Load Balancer (ALB)

1 Studies

Legacy Monolith Migration: Lift & Shift to Multi-AZ Auto Scaling EC2 Distributes incoming traffic across healthy EC2 targets in multiple AZs.

AWS Load Balancer Controller

1 Studies

Polyglot Microservices on Amazon EKS with Karpenter Autoscaling Automatically provisions and configures ALBs directly from Kubernetes Ingress manifests.

Internet Gateway

1 Studies

Diagram Literacy: Translating Logical Architecture to Physical Subnets Provides bidirectional internet routing for public subnets.

NAT Gateway

1 Studies

Production 3-Tier Enterprise VPC: Complete Network Isolation Provides outbound-only internet connectivity for private compute tasks.

Route 53

1 Studies

Zero-Maintenance Developer Portfolio & Docs Site DNS resolution with Alias records routing apex domain to CloudFront.

Route 53 Application Recovery Controller (ARC)

1 Studies

FinTech Active-Active Core Banking: Zero-RPO Multi-Region Ledger Manages failover readiness checks and routing control switches across regions without DNS propagation delays.

Route Tables

1 Studies

Diagram Literacy: Translating Logical Architecture to Physical Subnets Determines packet routing paths between subnets and gateways.

VPC Endpoints (Gateway & Interface)

1 Studies

Zero-Trust Financial Backend: Eliminating NAT Gateway Data Fees Routes internal AWS service traffic across private AWS fiber without traversing NAT Gateways.

Observability 3 Services

Amazon CloudWatch Alarms

2 Studies

Free-Tier & Budget Trap Guard: Automated Cost Anomaly Defense Monitors estimated billing metrics and triggers notification actions.

Zero-Downtime Blue/Green & Canary Traffic Shifting with CodeDeploy Monitors HTTP 5XX error spikes and triggers immediate CodeDeploy rollback.

Amazon CloudWatch Composite Alarms

1 Studies

Automated Incident Detection & Self-Healing Telemetry Engine Combines multiple metric alarms (p99 latency + 5XX error rate + CPU) to reduce alert fatigue.

AWS X-Ray

1 Studies

Automated Incident Detection & Self-Healing Telemetry Engine Provides distributed service maps and trace segment latency breakdowns.

Security 11 Services

AWS Certificate Manager (ACM)

1 Studies

Zero-Maintenance Developer Portfolio & Docs Site Free, auto-renewing SSL/TLS certificates.

AWS CloudTrail

1 Studies

Centralized Enterprise Security Log Lake: CloudTrail & VPC Flow Logs Captures API activity and management events across all AWS member accounts.

AWS IAM (Attribute-Based Access Control)

1 Studies

Global Multi-Tenant B2B SaaS: Tenant Isolation & Metering Engine Generates dynamic scoped temporary STS session tokens enforcing tenant-level data isolation.

AWS Key Management Service (KMS)

2 Studies

FinTech Active-Active Core Banking: Zero-RPO Multi-Region Ledger Multi-Region Customer Managed Keys (CMKs) ensuring identical encryption keys in primary and secondary regions.

Zero-Trust Financial Backend: Eliminating NAT Gateway Data Fees Customer Managed Keys (CMK) with automated envelope encryption.

AWS KMS

1 Studies

Global Session Store: Sub-Millisecond Auth with ElastiCache Redis Encrypts sensitive session data at rest and in transit via TLS.

AWS Organizations

1 Studies

Deconstructing Enterprise Architecture: The Case Study Method Centralized account management and Service Control Policies (SCPs).

AWS Secrets Manager

1 Studies

Zero-Trust Financial Backend: Eliminating NAT Gateway Data Fees Automated rotation and injection of database credentials.

AWS WAF

2 Studies

Viral Startup Marketing Site: Surviving 50,000 Req/Sec Surges Protects against DDoS layer 7 floods, scrapers, and malicious bots.

Production 3-Tier Enterprise VPC: Complete Network Isolation Web application firewall attached to the public ALB for OWASP Top 10 mitigation.

IAM Identity Center

1 Studies

Deconstructing Enterprise Architecture: The Case Study Method SSO authentication and role federation across multiple accounts.

IAM Roles for Service Accounts (IRSA)

1 Studies

Polyglot Microservices on Amazon EKS with Karpenter Autoscaling Assigns granular AWS IAM roles to individual Kubernetes Pod service accounts.

Security Groups & NACLs

1 Studies

Production 3-Tier Enterprise VPC: Complete Network Isolation Stateful instance-level firewalls and stateless subnet-level packet filters.

Serverless 6 Services

Amazon API Gateway

1 Studies

Resilient Webhook Ingestion Engine: Buffering 10,000 Webhooks/Sec Directly integrates with SQS using AWS Service Proxy (zero Lambda in the ingress path).

Amazon API Gateway Usage Plans

1 Studies

Global Multi-Tenant B2B SaaS: Tenant Isolation & Metering Engine Enforces tenant tier rate limits (e.g. Free Tier: 5 req/s vs Enterprise Tier: 1,000 req/s).

Amazon EventBridge

3 Studies

Cloud Cost Anomaly Sentinel: Autonomous FinOps Waste Hunting Triggers automated remediation upon non-compliant resource detection.

Automated Incident Detection & Self-Healing Telemetry Engine Routes alarm state changes to automated remediation Lambdas.

Real-Time Serverless Image Processing & Media Pipeline Routes S3 object-created events to image and video processing queues.

Amazon SQS

2 Studies

Real-Time Serverless Image Processing & Media Pipeline Buffers batch image upload spikes with Dead-Letter Queues (DLQs) for failed files.

Resilient Webhook Ingestion Engine: Buffering 10,000 Webhooks/Sec Buffers high-throughput webhook spikes with standard/FIFO queue durability.

API Gateway HTTP APIs

1 Studies

Global Serverless URL Shortener: Sub-15ms Redirection Provides lightweight, ultra-low-latency API routing (70% cheaper than REST APIs).

AWS Step Functions

1 Studies

Netflix-Scale Global Video Streaming: Transcoding, Origin Shielding & CDN Orchestrates multi-stage media ingestion, DRM licensing, thumbnail sprite generation, and catalog metadata.

Storage 4 Services

Amazon EBS

1 Studies

Internal Analytics Portal: Scheduled Auto-Scaling & Spot Fleets High-throughput gp3 volumes storing analytical caches.

Amazon S3

4 Studies

Global Enterprise Blog: Edge-Localized Content & Security Headers Multi-language static asset repository.

Real-Time Serverless Image Processing & Media Pipeline Stores original high-res uploads and processed responsive image tiers.

Zero-Maintenance Developer Portfolio & Docs Site Stores pre-rendered static HTML, CSS, JavaScript, and images.

Viral Startup Marketing Site: Surviving 50,000 Req/Sec Surges Origin storage for optimized images, video assets, and HTML bundles.

Amazon S3 Lakehouse

1 Studies

Real-Time Clickstream Analytics: Ingesting 20,000 Events/Sec into S3 & Athena Partitioned object lake storing raw and processed analytics data.

Amazon S3 Object Lock

1 Studies

Centralized Enterprise Security Log Lake: CloudTrail & VPC Flow Logs Provides immutable WORM (Write Once, Read Many) compliance storage.