5 thẻ
CloudWatch
≠ **CloudTrail** (CW = metrics/logs, CT = API audit)
Multi-AZ
for HA ≠ **Read Replica** for scale
Glacier
retrievals: instant (Instant Retrieval) vs hours (Flexible/Deep)
HTTP API
preferred over **REST API** for cost-sensitive
OAC
preferred over **OAI** for new CloudFront