Glossary

AWS production glossary

Searchable

Plain-language definitions for common production architecture terms.

Availability Zone

An isolated location inside an AWS Region. Production systems usually spread critical paths across multiple AZs.

Region

A geographic AWS area containing multiple Availability Zones. Choose based on latency, compliance, and service availability.

VPC

A private network boundary for AWS resources, subnets, routing, security groups, and controlled connectivity.

Security group

A stateful virtual firewall attached to resources such as EC2, ALB, and RDS.

IAM role

An identity that grants temporary permissions to AWS services or users without static credentials.

Multi-AZ

A deployment pattern that keeps service capacity across more than one Availability Zone for resilience.

Point-in-time recovery

A database recovery feature that restores data to a previous moment inside a retention window.

Dead-letter queue

A queue that stores failed messages so teams can inspect and safely replay or discard them.

Blue/green deployment

A release strategy that shifts traffic from one environment version to another with rollback control.

Canary deployment

A release pattern that sends a small percentage of traffic to a new version before full rollout.

RTO

Recovery Time Objective: how quickly the service must be restored after an incident.

RPO

Recovery Point Objective: how much data loss is acceptable after an incident.

Least privilege

A security principle where identities receive only the permissions required to do their job.

WAF

Web Application Firewall, used to filter malicious or abusive HTTP traffic at the edge or load balancer.

DLQ

Dead-letter queue, used for failed async messages and operational investigation.

Idempotency

Design property where retrying an operation does not create duplicate or incorrect side effects.