AWS Cloud Management Services Flashcards

1
Q

What is AWS Organizations?

A

AWS organizations allows you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What feature sets is AWS Organizations available in?

A

Available in two feature sets:

Consolidated Billing.
All features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does AWS Organizations include?

A

Includes root accounts and organizational units.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does consolidated billing include?

A

Consolidated billing includes:

Paying Account – independent and cannot access resources of other accounts.
Linked Accounts – all linked accounts are independent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the use of AWS Control Tower?

A

Simplifies the process of creating multi-account environments.

Sets up governance, compliance, and security guardrails for you.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does AWS Control Tower integrate with?

A

Integrates with other services and features to setup the environment for you including:

  • AWS Organizations, SCPs, OUs, AWS Config, AWS CloudTrail, Amazon S3, Amazon SNS, AWS CloudFormation, AWS Service Catalog, AWS Single Sign-On (SSO).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What security guardrails can AWS Control Tower configure for you?

A

Examples of guardrails AWS Control Tower can configure for you include:

Disallowing public write access to Amazon Simple Storage Service (Amazon S3) buckets.
Disallowing access as a root user without multi-factor authentication.
Enabling encryption for Amazon EBS volumes attached to Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS Config?

A

AWS Config is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and regulatory compliance.

With AWS Config, you can discover existing and deleted AWS resources, determine your overall compliance against rules, and dive into configuration details of a resource at any point in time.

AWS Config enables compliance auditing, security analysis, resource change tracking, and troubleshooting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is AWS Service Catalog?

A

AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS.

AWS Service Catalog allows you to centrally manage commonly deployed IT services.

IT services can include virtual machine images, servers, software, and databases and multi-tier application architectures.

Enables users to quickly deploy only the approved IT services they need.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is AWS Systems Manager?

A

Manages many AWS resources including Amazon EC2, Amazon S3, Amazon RDS etc.

Systems Manager Components:

  • Automation.
  • Run Command.
  • Inventory.
  • Patch Manager.
  • Session Manager.
  • Parameter Store.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS Personal Health Dashboard?

A

AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you.

Personal Health Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How is the dashboard in AWS Personal Health Dashboard useful?

A

The dashboard displays relevant and timely information to help you manage events in progress.

Also provides proactive notification to help you plan for scheduled activities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are alerts triggered by in AWS Personal Health Dashboard?

A

Alerts are triggered by changes in the health of AWS resources, giving you event visibility, and guidance to help quickly diagnose and resolve issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How does AWS Personal Dashboard help you see when AWS is experiencing issues?

A

You get a personalized view of the status of the AWS services that power your applications, enabling you to quickly see when AWS is experiencing issues that may impact you.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What notifications & alerts does AWS Personal Health Dashboard have?

A

Provides forward looking notifications, and you can set up alerts across multiple channels, including email and mobile notifications, so you receive timely and relevant information to help plan for scheduled changes that may affect you.

Alerts include remediation details and specific guidance to enable you to take immediate action to address AWS events impacting your resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What can AWS Personal Health Dashboard integrate with?

A

Can integrate with Amazon CloudWatch Events, enabling you to build custom rules and select targets such as AWS Lambda functions to define automated remediation actions.

The AWS Health API allows you to integrate health data and notifications with your existing in-house or third-party IT Management tools.

17
Q

What is Service Health Dashboard?

A

AWS publishes up-to-the-minute information on service availability.

This information is not personalized to you (unlike Personal Health Dashboard).

18
Q

What is AWS OpsWorks?

A

AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet.

Updates include patching, updating, backup, configuration, and compliance management.

19
Q

What is AWS Trusted Advisor?

A

AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices.

Trusted Advisor checks help optimize your AWS infrastructure, improve security and performance, reduce your overall costs, and monitor service limits.

20
Q

What do Basic and Developer customers get access to in AWS Trusted Advisor?

A

AWS Basic Support and AWS Developer Support customers get access to 6 security checks
(S3 Bucket Permissions, Security Groups – Specific Ports Unrestricted, IAM Use, MFA on Root Account, EBS Public Snapshots, RDS Public Snapshots)
and 50 service limit checks.

21
Q

What do Business and Enterprise Customers get access to in AWS Trusted Advisor?

A

AWS Business Support and AWS Enterprise Support customers get access to all 115 Trusted Advisor checks (14 cost optimization, 17 security, 24 fault tolerance, 10 performance, and 50 service limits) and recommendations.

22
Q

What is AWS CloudFormation?

A

AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.

CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.

This file serves as the single source of truth for your cloud environment.

You can use JSON or YAML to describe what AWS resources you want to create and configure.