Application Services Flashcards

1
Q

What configuration is required to be set to avoid errors when communicating between resources with different domain names in API Gateway?

A

In order for resources with different domain names to communicate you need to enable CORS (Cross Origin Resource Sharing) for the desired methods.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Amazon SNS?

A

Amazon DNS (Simple Notification Service) is a web service that makes it easy to set up, operate and send messages from the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is SQS?

A

SQS (Simple Queue Service) is a service that enables access to a message queue.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Is SQS push based or pull based?

A

SQS is a pull based service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How big can an SQS message be?

A

A message can be up to 256KB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How long are messages kept in an SQS queue?

A

A message can be in the queue from 1 minute to 14 days. The default is 4 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

In SQS what is the Visibility Timeout?

A

The Visibility Timeout is the amount of time the message is kept invisible in the SQS queue after a reader has picked it up. If the message’s job is processed before the Visibility Timeout expires the message will be removed from the queue, if not it will become visible again and can be processed by another reader.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

In SQS what is Long Polling?

A

Long Polling increases the length of a single polling call to SQS. While Short Polling (the default polling configuration) constantly polls the SQS queue even when it is empty, a Long Polling event does not return a response until there is a message to return or the polling timeout is reached. This can save money because it will result in fewer polling events when the queue is empty.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the main difference between SWF and SQS?

A

In SWF (Simple Workflow Service) a task is only assigned once and never duplicated. In SQS (Simple Queue Service) a task can be assigned multiple times and if the message visibility timeout is reached on a task that task can be duplicated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Amazon SWF?

A

SWF (Simple Workflow Service) is a web service that makes it easy to coordinate work across distributed application components.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Elastic Transcoder?

A

It is a Media Transcoder that allows you to convert media files from their original format to various formats designed to play on different devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is API Gateway?

A

amazon API Gateway is a fully managed service that allows developers to publish, maintain, monitor, and secure APIs at any scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How can API Gateway increase performance for duplicated requests?

A

API Gateway has the ability to cache responses in order to increase performance for commonly requested responses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If API Gateway returns an error such as “Origin Policy Cannot Be Read At The Remote Resource” what can fix this issue?

A

To fix this issue you can enable CORS (Cross Origin Resource Sharing) in API Gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the core Kinesis services?

A

Kinesis Streams - used to capture large amounts of data (terabytes per hour) from data producers, and streaming it into custom applications for data processing and analysis. Data is stored in Shards, by default for 24 hours, this can be extended up to 7 days.

Kinesis Firehose - Firehose is Amazon’s data-ingestion product offering for Kinesis. It is used to capture and load streaming data into other Amazon services such as S3 and Redshift. From there, you can load the streams into data processing and analysis tools like Elastic Map Reduce, and Amazon Elasticsearch Service. It is also possible to load the same data into S3 and Redshift at the same time using Firehose.

Kinesis Analytics - Using Data Analytics you can process and analyze streaming data using standard SQL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are AWS resource groups?

A

Resource groups are a way to organize AWS resources by their tag name so that you can easily keep track of them.

17
Q

What is VPC peering?

A

VPC peering is a connection between VPCs that allows you to route traffic between them using a private IP address?

18
Q

Hey w can VPC peering be set up across regions?

A

It can’t, VPC peering is set up between multiple VPCs in a single region.

19
Q

What benefits does Direct Connect offer over a VPN connection to AWS?

A
  • it allows traffic to go directly into AWS without crossing the internet
  • it can reduce network costs when using large volumes of data
  • it can increase bandwidth
  • it can increase reliability

A site to site VPN should be used if there is an immediate need for a private connection that will use low bandwidth and can tolerate inconsistent network connectivity

20
Q

When calling STS (Security Token Service) from an identity broker what four values are returned?

A

An access key

A secret access key

A token

A duration for the token

21
Q

What steps are involved for STS to authenticate a user to an AWS service?

A
  1. The user logs into an application
  2. The application calls an identity broker (this is an independent piece of software used to communicate with federated user databases)
  3. The identity broker calls LDAP (or whichever user database is used), which replies based on whether the user is authenticated or not
  4. The identity broker calls STS to get an AWS token which is returned to the application
  5. The application makes a call to an AWS service (like S3)
  6. The AWS service calls IAM to verify that the user has access to the requested resource
22
Q

What is AWS Workspaces?

A

AWS Workspaces is a VDI (Virtual Desktop Infrastructure) that operates as a replacement for a traditional desktop. To access Workspaces the user can log in using a free AWS Workspaces client application and credentials set by an administrator or an integrated single sign on solution.

Each user is given administrative access to their workspace (this can be locked down by an administrator if desired) and the data in the workspace is persisted. Data stored on the D drive of each workspace is backed up every 12 hours.

23
Q

Amazon Web Services offer 3 different levels of support, which of the below are valid support levels.

A

Enterprise, Business, Developer

24
Q

Which of the following services allows you root access (ie you can login using SSH) - Elastic Load Balancer, Elastic Map Reduce, Elasticache, RDS

A

Elastic Map Reduce

25
Q

Which of the following is NOT a valid SNS subscribers - Lambda, SWF, SQS, Email, HTTPS, SMS

A

SWF

26
Q

What are the 3 types of load balancers provided by AWS?

A

Application Load Balancers - best suited for working with HTTP and HTTPS traffic. These operate at layer 7 and are application-aware - specific requests can be sent to specific web servers

Network Load Balancers - best suited for handling TCP traffic where extreme speed is required. Operate at layer 4 and used for extreme performance

Classic Load Balancers - legacy ELB load balancers. These can operate at layer 4 or 7

27
Q

What does a 504 error tell you when using a load balancer?

A

A 504 means the gateway has timed out - the application you are trying to reach has not responded within the idle timeout and you should troubleshoot the application endpoint

28
Q

How can you find the IPv4 address of your end user when using a load balancer?

A

This can be found in the X-Forwarded-For header

29
Q

What are the three types of SWF actors?

A

Workflow Starters - An application that can initiate a workflow. For example - an e-commerce website where orders are placed.

Deciders - Control the flow of activity tasks in a workflow execution. If something has finished in a workflow (or failed) a Decider decides what to do next.

Activity Workers - Carry out activity tasks.

30
Q

What are the valid types of SNS subscribers?

A
HTTP
HTTPS
Email
Email-JSON
SQS
Application
Lambda