Account Management, Billing & Support Flashcards
1
Q
AWS Organizations Properties
A
- Global service
- Manage multiple account (master & child)
- Cost benefits
- consolidated billing
- pricing from aggregate usage
- Pooling of reserved ec12 instances
- API is available to automate AWS account creation
- Restrict privs using SCP (service control policies)
2
Q
SCP
A
Service control policy
- whilelist or blacklist IAM
- Apply SCP at OU or account level
- Doesn’t apply to master account
- applies to all users and roles of account
- Deny all
- use cases
- restrict access to certain services (can’t use EMR)
- Enforce PCI compliance by explicitly disabling services
3
Q
Multi-account strategies
A
- Accounts per department, cost center, environment, regulatory, isolation, etc.
- multi account vs one account multi VPC
- use tagging for billing
- Enable cloudtrail, send to central S3
- Send cloudWatch logs to central logging
4
Q
AWS OU
A
organizational unit
Can have multiple accounts
- Root OU has everything
- dev OU
- prod OU
- finanace OU
5
Q
Organization - consolidated billing
A
- Usage of all accounts in the org
- share volume pricing
- share reserved instances and savings plans
- One bill
- can turn off reserved instances discount sharing for any account
6
Q
AWS Control Tower
A
- govern secure multi-account environment based on best practices
- automate set up with clicks
- define policies using guardrails
- Detect policy violations
- monitor compliance
- run on top of Organiations
7
Q
Landing Zone
A
well structured set of accounts in control towerwith a home region, a couple of OUs, some audit accounts, etc.
8
Q
AWS RAM
A
Resource Access Manager
- share AWS resources with other accounts
- share with any account or organization
- avoid resource duplication
- Aurora, VPC subnets, transit gateay, R53, EC3
9
Q
AWS Service Catalog
A
- Simplified portal to launch set of authorized products
- includes virtual machines, databases, storage, etc.
- AWS service catalog predefines these services
10
Q
Service Catalog usage
A
- define produce in CloudFormation templates
- Portfolios are collections of products
- IAM permissions to access portfolios for users
- launched resources are properly configured and tagged
11
Q
What are the four pricing models?
A
- pay as you go (on-demand)
- save when reserved
- reserved instance for different services
- Volume-based discounts
- AWS drops pricing over time
12
Q
What are free services?
A
- IAM
- VPC
- Consolidated billing
- Elastik beanstalk
- CloudFormation
- Auto scaling groups
- Free tier (t2.micro for a year, data transfer)
13
Q
EC2 Pricing
A
- on demand pricing
- 60s min, or by second or hour
- reserved instances
- up to 75% discount, 1-3 yr commit
- all, partial, or no upfront payment
- spot
- up to 90% discount
- bid for unused capacity
- dedicated host
- on demand
- 1 or 3 year reservation
- savings plans if sustained usage
14
Q
Lambda pricing
A
Pay per call and per duration
15
Q
ECS pricing
A
No additional fees, but pay for AWS resources storage and created in the application