Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA Pro Cert 2020 > AWS Account Management > Flashcards

AWS Account Management Flashcards

1
Q

What is a standard AWS account?

A

A standalone AWS account with no linked accounts and no parent account relationships.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How many master accounts can there be per AWS Organization?

A

One.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you create a master account?

A

You convert a standard account to a master account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Once you have a master account, what are the other accounts known as which are linked to the master account?

A

Member accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the account structure of accounts in an AWS Organization?

A

Hierarchical

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the root container, when is one created, and how many can there be?

A
  • The root container contains, directly or indirectly, all accounts below it.
  • It’s created when your AWS Organization is created.
  • There can only be one root container.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What happens to when a policy is applied to the root container?

A

The policy is propagated to all OUs and member accounts contained by root.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an Organizational Unit? Why is it useful?

A
  • An OU allows you to group multiple accounts under it.
  • It’s useful because much like the root account, attaching policies at the OU level allows those policies to propagate to all member accounts contained by it.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What two entities can OUs contain?

A
  • Member accounts

- Other OUs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What two modes can AWS Organizations operate in?

A
  • Consolidated billing

- All features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the default mode for AWS Organizations?

A

Consolidated billing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Consolidated Billing mode allow? What other aspects of AWS Organizations functionality is available with Consolidated Billing?

A

Consolidated billing only allows for all bills to trickle up to the master (payer) account, which therefore generates only one bill per month. No other functionality is available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do AWS Organizations and AWS volume discounts interact?

A

With AWS Organizations, the usage of all accounts under the master account is considered for volume discounts. This makes volume discounts much easier to trigger.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does All Features mode add to Consolidated Billing mode?

A

All Features allows service control policies at the Root and OU level to propagate downwards.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

There are two ways to bring an account into an AWS Organization. What are they?

A
  • Invite account, or

- Create account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What steps are required for a master account to gain access to a member account after the member account has been added to the Organization?

A

None. An IAM Role is created to provide full admin access to the member account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What’s the best way to access a member account from a master account? What information is needed?

A

Use the switch role functionality for Organizations at the master account. You’ll need the account number and the Role name which was created when the account joined the Organization (as well as providing a name alias and color for your reference).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the effect of a service control policy (SCP) on the master account in an Organization?

A
  • It DOES NOT affect the master account, but

- IT DOES trickle down to child accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Best practice for using the master account involves the usage of specific services, users, and billing. What is that best practice?

A
  • NO services.
  • Centralized billing.
  • User store.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Service Control Policies (SCP) restrict access to IAM users on child accounts. Does it restrict access to root users on child accounts?

A

Yep.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What’s the best way to think of the interaction of multiple SCPs?

A

Overlays. Only the permissions common to all engaged SCPs will be effective for the member account in question.

22
Q

What are the four support plans available for AWS accounts?

A

Basic, Developer, Business, and Enterprise.

23
Q

Which support plans provide access to the full set of Trusted Advisor checks?

A

Business and Enterprise only.

24
Q

How many Trusted Advisor checks does the Developer support plan provide access to?

A

Seven.

25
Q

During what times, via which media, and with how many customer-side contacts, can AWS account owners looking for support under the Developer plan request support?

A

Business hours only.
Email contacts only.
One (a primary contact only).

26
Q

During what times, via which media, and with how many customer side contacts, can AWS account owners looking for support under the Business or Enterprise plan request support?

A
  • 24/7 contacts.
  • Email, phone, and chat.
  • Unlimited contacts.
27
Q

What kind of architectural guidance is available to AWS account holders:

  • on the developer plan?
  • on the business plan?
  • on the enterprise plan?
A
  • General guidance only.
  • Contextual to your use cases
  • Consultative review and guidance based on applications
28
Q

Which AWS support levels provide programmatic access to the AWS Support API?

A

Business and Enterprise.

29
Q

What access to proactive support programs do Business support members have access to?

A

Paid access to Infrastructure Event Management (IEMs)

30
Q

What access to proactive support programs do Enterprise support members have access to?

A

IEMs, WARs, Operational Reviews, TAMs to coordinate access to SMEs.

31
Q

Which support plan comes with access to a dedicated technical account manager?

A

Enterprise.

32
Q

What are the monthly minimum price points for Developer, Business, and Enterprise support plans?

A
  • Developer: $29/mo
  • Business: $100/mo
  • Enterprise: $15,000/mo
33
Q

What does AWS Config do, at a high level?

A

Tracks the configuration of resources (and changes to those configurations over time) within an AWS account.

34
Q

What two main functions does AWS Config perform?

A
  • Monitors configuration and drift of resources over time

- Checks resources against compliance requirements

35
Q

Is AWS Config a global service?

A

No.

36
Q

How can AWS Config be configured?

A

Per region.

37
Q

What AWS tool can be used to evaluate changes over time to an AWS resource?

A

AWS Config.

38
Q

What does an AWS Config Rule do?

A

It allows AWS Config to evaluate the current state of any given AWS resource and determine whether that resource is in compliance with the Rule.

39
Q

What does AWS Service Catalog do, and what functionality does it provide?

A

AWS SC allows you to implement an IT service catalog within AWS. It provides a curated list of all the services a department can provide to an end user.

40
Q

What customer demographic is AWS Service Catalog aimed at?

A

Larger businesses.

41
Q

How does AWS Service Catalog allow you to describe available services to end users?

A
  • Items in the catalog
  • Steps necessary
  • Cost to the end user
  • SLR to perform the requested service
42
Q

What is a Product in the AWS Service Catalog?

A

It’s the ‘thing’ that you want an end user to be able to request from your organization.

43
Q

What is a Portfolio in the AWS Service Catalog?

A

A collection of Service Catalog Products which are available to end users.

44
Q

What’s the minimum number of Products allowed in an AWS Service Catalog Portfolio?

A

One.

45
Q

What functionality does a AWS Service Catalog Portfolio provide?

A
  • Lists products
  • Defines permissions
  • Defines constraints
  • Allows end users to launch products
46
Q

How does the AWS Service Catalog allow an end user to provision a Product?

A
  • User selects the product in the portfolio
  • Admin’s CloudFormation template is used to build the stack
  • Stack is assigned a Role giving it permissions to build all assets on behalf of the end user inside the AWS account.
47
Q

How can end users gain access to an AWS Service Catalog Portfolio?

A

By Group, User, or Role, or by sharing with other AWS accounts.

48
Q

What four Constraint types are available to AWS Service Catalog portfolios? What is the effect of each?

A
  • Launch: assign an IAM role to the product when it launches.
  • Notification: Allows the product to stream notifications to an SNS topic.
  • Template: Limits the options available to an end-user after launching the product.
  • StackSet: Configure deployment options across accounts and regions.
49
Q

Is Service Catalog a global, per-region, or per-AZ service?

A

Per-region.

50
Q

What IAM permission is missing from the ServiceCatalogEndUserAccess policy?

A

servicecatalog:ProvisionProduct.

AWS SA Pro Cert 2020 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions