Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Architect Associate > Amazon S3 Introduction > Flashcards

Amazon S3 Introduction Flashcards

1
Q

What do you use S3 for?

A

Backup/storage
DR
Archive
Hybrid Cloud storage
App hosting
Media hosting
Data lakes & big data analytics
Software delivery
Static Website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does S3 save data in?

A

Buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does S3 save in buckets?

A

Objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do Buckets MUST have globally?

A

Unique name - across all regions all accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where are buckets defined?

A

Region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Region Level mean in S3 Buckets?

A

That they are tied & created in a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What do objects have?

A

Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which part is the key of s3://my-bucket/my_file.txt?

A

/my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Key composed of?

A

Prefix & object name

s3://my-bucket/my_folder1/another_folder/my_file.txt

prefix = my_folder1/another_folder

key = /my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Do S3 have directories within buckets?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the max object size?

A

5 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What do you have to do if uploading more than 5GB?

A

Multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What do objects include?

A

Metadata (key-value pairs)
Tags (unicode key/value pair)
Version ID (if enabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is User-Based security for S3?

A

IAM Policies - which API calls should be allowed for a specific user from IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Resource-Based security in S3?

A

Bucket Policies - bucket wide rules from S3 console - allows cross account

Object ACL - finer grain (can be disabled)

Bucket ACL - less common (can be disabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When can an IAM principal access an S3 object?

A

If the user IAM permissions ALLOW ir, OR the resource policy ALLOWS it AND there is no explicit DENY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How can you encrypt objects in S3?

A

Using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what do S3 Bucket Policies look like?

A

JSON based policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What can you do with a bucket policy?

A

Grant public access to bucket
Force objects to be encrypted at upload
Grant access to another acc (cross acc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How can you give public to S3?

A

Via Bucket Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What can you do to give access to an S3 bucket within your account for a user within your acc?

A

Assign an IAM policy to the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How can you allow an EC2 instance to access the S3 bucket?

A

By assigning EC2 instance role with the correct IAM permissions to the ec2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How can you give cross acc access to S3 bucket?

A

Assign S3 Bucket Policy to the bucket that allows cross acc access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How can you block public access of an S3 bucker?

A

It is a setting created by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What can you do if you know your bucket should never be public?

A

Set the Block Public Access setting in the acc level

26
Q

What does it mean if you get a 403 when you visit your website?

A

You have not enabled public reads via a bucket policy

27
Q

What is Versioning in S3?

A

Every time you upload something in the bucket it creates a newer version of that item instead of deleting it

28
Q

Where is Versioning enabled in S3?

A

Bucket level

29
Q

Why is versioning important?

A

Protects against unintended deletes (restore versions)

Easy roll back to previous version

30
Q

What version do files have before enabling versioning?

A

Null

31
Q

what happens if you delete an object?

A

It creates a delete marker

32
Q

How do you restore a deleted object?

A

You delete the “delete marker”

33
Q

What is S3 CRR?

A

Cross Region Replication

34
Q

?What is SRR

A

Same Region Replication

35
Q

How does Replication Work?

A

You have an S3 bucket in one region, and another one in another region and you want to set up asynchronous replication between the two.

36
Q

What are the requirements for S3 replication?

A

Versioning must be enabled in both source & destination buckets.

37
Q

What kind of copying happens when replicating S3?

A

Asynchronous

38
Q

Can buckets be in different AWS accounts in order for replication to work?

A

Yes they can be

39
Q

What permissions do S3 must have for replication?

A

IAM

40
Q

CRR use cases

A

compliance
lower latency access
replication across accounts

41
Q

SRR use cases

A

log aggregation
live replication between prod and test accounts

42
Q

Which objects get replicated once you enable Replication?

A

Only new ones

43
Q

How can you replicate already existing objects?

A

S3 Batch Replication

44
Q

What does S3 Batch Replication do?

A

Replicates existing objects and objects that failed replication

45
Q

How does DELETE operation work in Replication?

A

You can only replicate delete markers from source to target

46
Q

Which Deletions are not replicated?

A

Ones with Version ID (to avoid malicious deletes

47
Q

What does no “chaining” of replication mean?

A

If bucket 1 has replication into bucket 2, and bucket 2 to bucket 3. Objects from Bucket 1 are not replicated to bucket 3

48
Q

S3 Standard - General Purpose

A

99.99 availability
Used for frequently accessed data
low latency and high throughput
sustain 2 concurrent facility failures

49
Q

S3 Standard - General Purpose use cases?

A

big data analytics
mobile
gaming apps
content distribution

50
Q

S3 Infrequent Access

A

Less frequently accessed data but rapid access when needed

lower cost than s3 standard

Cost on retrieval

51
Q

How do cost happens for S3 IA?

A

On retrieval

52
Q

S3 IA use cases

A

99.9 availability
DR & Backups

53
Q

S3 One Zone IA

A

High durability in single AZ
data lost when AZ is destroyed

99.5 availability

54
Q

S3 One Zone IA use cases

A

storing secondary backup copies of on-prem data or data you can recreate

55
Q

S3 Glacier Storage

A

Low cost object storage meant for archiving / backup

56
Q

Pricing of Glacier Storage

A

price for storage & retrieval cost

57
Q

S3 Glacier Instant Retrieval

A

Millisecond retrieval, great for data accessed once a quarter

Minimun storage duration 90 days

58
Q

S3 Glacier Flexible Retrieval - 3 retrieval modes

A

Expedited (1-5 mins)
Standard (3-5 hours)
Bulk (5-12 hours) - free

Minimum storage duration of 90 days

59
Q

S3 Glacier Deep Archive - long term storage

A

Standard (12 hours, Bulk (48 hours)

minimum storage 180 days

60
Q

S3 Intelligent-Tiering

A

Small monthly monitoring and auto-tiering fee

moves objects automatically between Access Tiers based on usage

No retrieval charges

61
Q

S3 Intelligent-Tiering (5 tiers)

A

Frequent Access (automatic) - default

Infrequent access (automatic) - objects not accessed for 30 days

Archive Instant Access (automatic) objects not accessed for 90 days

Archive Access (optional) configurable from 90 - 700+ days

Deep Archive Access (optional) config from 180 - 700+ days

AWS Architect Associate (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions