AWS Basics Flashcards
What user is created when an AWS account is created?
The account root user.
What span of control does the root user of an AWS account have over its account and and resources created within its account?
Full and unrestricted control.
What is the default access setting for AWS accounts?
Deny, with the exeption of the root user. The root user has full and unrestricted access.
What are the three types of multi-factor authentication (MFA) devices supported for AWS account authentication?
Authenticator app, security key, and hardware TOTP token
What are AWS Budgets used for?
Monitors AWS costs and generates email alerts when accrued costs meet certain percentage thresholds.
What is an AWS Public Service?
A Public Service can be accessed using public end points. This means it can be accessed from anywhere with an Internet connection.
What is an AWS Private Service?
A Private Service exists inside of a VPC. Access to the VPC is a pre-requisite for access to a private service.
What is an AWS Region?
A full deployment of computer, storage, database, and other AWS resources that are separated from analogous resources in other regions. For example, EC2 in one region is NOT the same as EC2 in another region.
What is an AWS Edge Location?
A localized distribution or edge computing point. Edge locations can bring data and processing closer to customers, but do not have the full capabilities of a region.
What are the benefits of AWS Regions?
- Geographic separation allows for isolation of failures.
- Geopolicical and regulatory separation allows for compliance based on the laws of different countries.
- Customer proximity allows for increased performance when deployments are placed in a region close to customers.
What is an Availablity Zone (AZ)?
Isolated resources located inside a Region. AZs are geographically separated within the region and operate with discrete facilities, networking, and power.
What does it mean for a service to be globally resilient?
A global failure of AWS is required to cause the service to fail. Data is replicated across multiple Regions to ensure global reliability.
What does it mean for a service to be Region resilient?
An entire AWS Region must fail to cause the service to fail. Data is replicated across multiple Availability Zones (AZ) within the Region to ensure regional reliability.
What does it mean for a service to be AZ resilient?
An Availability Zone must fail to cause the service to fail. This happens when services are deployed in a single AZ.
What is the customer’s responsibility in the AWS Shared Responsibility Model?
The customer has responsibility for security in the cloud. This includes configuration and security of the resources you provision, such as routing rules, security groups, identity and access management, customer data, EC2 instance patching, and patching of software you install on EC2 instances.
