Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Linux Academy > AWS Developer Associate - by Thomas Haslett > Flashcards

AWS Developer Associate - by Thomas Haslett Flashcards

1
Q

S3 Encryption: Protecting Data In-Transit (KMS)

A

1) Using an AWS-KMS managed customer (master) key
- Client gets a unique key for each object
2) On Upload:
- Send request to AWS KMS for key
- AWS KMS returns an encryption key
3) On Download:
- Client downloads encrypted object with their cipher blob stored in metadata -> blob to KMS -> get plain text key -> decrypt object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

DynamoDB: Scans

A

1) Reads every item in a table and is operationally inefficient
2) Looks for all items and attributes in a table by defualt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

SNS: Subscribers

A

1) Subscribe to a topic to receive published messages
2) Subscribers are end-points and include:
- Mobile apps
- Web servers
- Email addresses
- Amazon SQS queue
- AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Cloud Formation: Intrinsic Functions

A

1) Used to pass in values that are NOT available until runtime.

Example: “GetAtt”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

SWF: Domains

A

1) A domain is used to help determine scope of work flows
2) Multiple workflows can live in a domain
3) Workflows cannot interact with workflows in OTHER domains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

DynamoDB: Atomic Counters

A

1) Allows you to increment or decrement the value of an attribute without interfering with other write request
2) Request are applied in the order that they were received
3) Updates are NOT Idempotent: It will update the value each time it is called

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

SNS: Push Notification Setup Process

A

1) Needs a device token
2) There are Device Tokens and Registration IDs, depending on the mobile platform.
3) Request credentials from the mobile platform
4) Request Token from the mobile platform
5) Create a platform application object
6) Create a platform endpoint object
7) Publish a messages to the mobile endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Cloud Formation

A

1) Allows you to create and provision resources in a reusable template fashion
2) Turns your resources into Stacks
3) Allows you to “source control” your infrastructure
4) Templates are in JSON format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 Performance: Sequence Pattern Issue

A

ISSUE: Using sequential object names cause writes to the same partition (overload I/O). KEY NAME is used to decide which partition they key is stored in

SOLUTION: Introduce randomness by using Hex Hash Prefix:

  • use a has (like MD5) of a character sequence
  • Pick a specific number of characters from that hash to use as the prefix OR reserve ID string
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cloud Formation: Resources

A

1) This is where you create different resources like S3, EC2, etc.
2) This section is REQUIRED

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

DynamoDB: Local Secondary Indexes

A

1) Partition key must be the same, but the sort key is different
2) “Local” because every partition is scoped to a table partition with the same partition key
3) uses the tables provisioned throughput

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

S3 Encryption: Protecting Data At-Rest (S3-managed)

A

1) AWS provides server-side encryption before saving data to disk
2) Add the “x-amz-server-side-encryption” request leader to your upload request
3) Uses AES-256
4) Bucket policies can require all objects use server-side encryption
5) Alternatives:
- KMS managed keys
- Customer provided keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Deleting Versioned Objects

A

1) All versions remain in the bucket, but S3 inserts a “delete” marker
2) The “delete” marker becomes the current version
3) GET request retrieve the latest version
4) If current version has a “delete” marker, it returns a 404 error
5) You can get previous versions by specifying an ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Cloud Formation: Template Sections

A

1) AWSTemplateFormatVersion
2) Description
3) MetaData
4) Parameters
5) Mappings
6) Conditions
7) Resources
8) Outputs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

DynamoDB: Scans (benefits)

A

1) Scans can apply filters to the results to refine values

2) Can return only specific attributes with the “ProjectionExpression” parameters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3: IAM Policies

A

1) User policy
2) Can create multiple users and give them the same policy or different policies
3) Policies are attached and can be detached
4) Cannot grant anonymous permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Intrinsic Functions: FN::Select

A

1) Returns a single object from a list of objects by index

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3: Eventual Data Conistancy

A

1) State reads possible
2) Lowest read latency
3) Highest read throughput

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 Performance: GET Intensive workloads

A

1) Use Cloud Front
- Distributes content with lower latency & high transfer rate
- Cache objects
- Fewer direct request to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cognito Sync

A

1) Sync data across mobile devices and the web

2) Client libraries cache data locally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

DynamoDB: ALL

A

Projection Type

1) All attributes are projected (biggest index - least performant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

SWF: Workers

A

1) Process that performs an activity that is part of the workflow
2) Workers poll SWF for new tasks that they need to perform
3) After receiving a task, the worker will process the task however it is instructed to do so, then report back to SWF
4) Workers CAN consist of a server (code being executed), a human worker can also be used to process as task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

DynamoDB: Features

A

1) Can be used with (via) the AWS console or API
2) Flexible data model with attributes and items
3) Supports different levels of consistency (eventually & strongly)
4) Conditional updates and concurrency control (automatic counter)
5) Pay for what you use
6) Integrates with monitoring
7) Integrates with AWS Big Data (EMR & Redshift)
8) Integrates with other services through “streams”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

SNS: Managing Access

A

1) Access is controlled with policies
2) SNS has it’s own IAM permissions system
3) You can control:
- Who is allowed to publish a topic
- Who is allowed to subscribe to a topic
- and under what conditions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

S3: ACLs

A

1) Used for both buckets & objects
2) Grant read/write permissions to other AWS accounts
3) You cannot grant conditional permissions
4) you cannot explicitly deny permissions
5) An object ACL is the only way to manage access to objects not owned by the bucket owner
6) Uses XML format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

S3: URL

A

1) Every hosted bucket receives it’s own URL

.S3-website-.amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

SQS: Core Features

A

1) Redundant infrastructure
2) Multiple writes & reads
3) Queues can be configured
4) Access Control
5) Delay queues (0-15 seconds)
6) PCI compliant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Cloud Formation: Mappings

A

1) Lets you map keys to values

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

DynamoDB: Partition Key

A

1) A type of primary key
2) Also known as a “hash attribute”
3) Simple primary key composed of an attribute
4) Used to retrieve data
5) Must be unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Intrinsic Functions: Ref

A

1) Returns a resource or value based on a logical name or parameter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Error 409

A

Error 409 = Conflict

1) S3 Bucket already exist
2) Bucket is not empty (when trying to delete)
3) Bucket name already taken

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

SQS: Message Lifecyle

A

1) Component “1” sends message “A” to a queue, and then the message is redundantly distributed across SQS servers
2) When component “2” is ready, it retrieves the message from SQS. While message “A” is being processed it remains in the queue, but “Visibility Timeout”
3) Component “2” deletes the message from the queue during that “Visibility Timeout” or it will get deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

SNS: Access Control Policies

A

1) The AWS account owner had the only permissions by default
2) ALLOWS override default DENIES
3) Explicit DENIES override ALLOWS
4) Order of policies does NOT matter
5) Can grant access to another account API call “AddPermission”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

S3: AWS Limits/Restrictions

A

1) AWS account can have up to 100 S3 buckets
2) No limit on the number of objects
3) Bucket name must:
- Be a min of 3 characters and a max of 63
- Can only contain lowercase letter, numbers, periods & hyphens
- Must start with a letter or number
- Periods & hyphens cannot follow each other
- Can’t be an an IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

DynamoDB: Primary Key

A

1) Is a unique identifier for each ITEM in a table

2) No two items can have the same key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

S3: Restoring Version Objects

A

1) Any earlier version can be restored by:
- Copying a previous version into the same bucket will restore it as the current version
- Permanently deleting the current version
- Copying an earlier version GETs the version and PUTs it in the bucket, giving it a new ID (the new ID is used as current version)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

DynamoDB: Queries

A

1) Allows you to find items using ONLY primary key-values from a table OR secondary index
2) more efficient then SCAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

DynamoDB: INCLUDE

A

Projection Type

1) Only specified attributes are projected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

AMI API: “RegisterImage”

A

1) Occurs during the FINAL process of creating an AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Error 404

A

Error 404 = Not found

1) Bucket does not exist
2) Key does not exist

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

SNS Message Data: TopicARN

A

ARN = Amazon Resource Name

1) ARN fro the topic that this message was published to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Federation (mobile apps)

A

1) Use
-Facebook
-Amazon
-Google
To authenticate mobile app users and then grant access to temp resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

SQS API: “ChangeMessageVisibility”

A

1) Changes a messages Visibility Timeout
2) Adds specified time to current remaining time

*Note: Visibility Timeout can be 0-12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Amazon Cognito

A

1) Creates unique identity for users
2) Authenticates identities with identity providers
3) Supports unauthenticated identities (anonymous)
4) Saves mobile user data
5) Uses credentials obtained to sync data with Cognito sync

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

SNS Message Data: Subject

A

1) Subject Parameter

2) Optional parameter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

SNS Message Data: Message

A

1) Message value specified when the notification was published to the topic
2) A string that describes the message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

S3: Versioning

A

1) Allows multiple versions of an object
2) Protects against unintended overwrites and deletions
3) Automatically archives objects
4) Versioning is at the BUCKET LEVEL
5) Configured via console or SDK
6) “off” by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

SNS Message Data: MessageID

A

1) Universally Unique Identifiers (UUID)

2) Same ID must be used for retries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

S3: Bucket Policies

A

1) Resource-based policy
2) Created via JSON
3) Can grant other AWS accounts or IAM users permissions for the bucket/object
4) SHOULD be used to manage cross-account permissions for all S3 permissions
5) Limited to 20kb in size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

DynamoDB: Scans (negatives)

A

1) The larger the data set in the table, the slower the performance of a scan
2) The more filters on the scan, the slower the performance
3) Return only filtered results
4) Only eventually consistent reads available

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

SQS: Advantages

A

1) Components are loosely coupled (decoupled) for high availability, reliability, and scalability
2) Protects against losing data on application failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

DynamoDB: Exceeding Throughput

A

1) Request exceeding the allocated throughput may be throttled
2) With Global Secondary Indexes, all indexes must have enough Write Capacity OR the write might get throttled (even if the write doesn’t effect index)
3) You can monitor throughput in the AWS Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

SNS: Topics

A

1) Channel used to send messages and subscribe to notifications
2) Names MUST be unique
3) Names are limited to 256 characters
4) All letters, numbers, hyphens and underscores allowed in name
5) Topics and messages are stored redundantly on multiple servers and data centers

54
Q

SQS API: “GetQueueURL”

A

1) Gets a queue’s URL

2) Instead of manually hardcoding a queue’s URL, we can retrieve it with an API call

55
Q

SWF (definition)

A

1) Is a task coordination and state management service for cloud applications

Features:

a) Distributed
b) Highly scalable
c) Work with both on-premise and cloud applications
d) A workflow execution can last up to 1 year
e) A workflow can consist of human events
f) Guarantees order in which activities/tasks occur

56
Q

SQS API: “ReceiveMessageWaitTimeSeconds”

A

1) Enable long polling on a queue (change default)

2) If value > 0

57
Q

S3: Static Web Hosting

A

1) Host static html files
2) Specify index file
3) specify custom erro file
4) Supports domains and redirects
5) Gives a default URL
6) redirects from www.example.com to example.com
7) Route53 integration fro custom domains
8) Bucket names must match domain name

58
Q

Identities (STS)

A

A user or “identity” within a service (like facebook, google)

59
Q

DynamoDB: Keys_ONLY

A

Projection Type

1) Only the index and primary keys are projected (smallest index, more performant)

60
Q

DynamoDB: Global Secondary Indexes

A

1) Partition Key and Sort Key can both be different from those on the table
2) Had it’s own provisioned throughput

61
Q

S3 Encrypting: Protecting Data In-Transit (client-side master key)

A

1) Master Keys and unencrypted data are NEVER sent to AWS
2) On Upload:
-S3 client generates random data key and encrypts
-Uploads a “material description” as part of metadata
On Download:
-Client downloads encrypted object
-The metadata tells client which master key to use
-Using that key, client decrypts the data key
-Data key used to decrypt object

62
Q

S3: Choosing a region

A

Choose a region for:

1) Optimized latency
2) Minimize cost
3) Address regulatory requirements

*NOTE: Objects stay in a region UNLESS explicitly transfered

63
Q

Federation

A

1) Grant temp access to users on a corporate network without having to create IAM creds for each user
2) A list of domain users with a separate list of users in another domain (facebook, LDAP, google)

64
Q

SNS Message Data: Type

A

1) Type of the message
(i. e. notifications are type “notifications”)
- Sub confirmation
- Notification
- Unsub confirmation

65
Q

DynamoDB: Projected Attributes

A

1) Attributes copied from the table to the index, in addition to the primary key attributes and index key attributes

66
Q

Intrinsic Function: “FindInMap”

A

1) Returns the value of a key from a specified mapping

67
Q

Cloud Formation: Parameters

A

1) Values you can pass in right before template creation
2) Allows you to customize templates
3) Can have DEFAULT as well as ALLOWED values

68
Q

Security Token Service (STS)

A

1) Allows you to grant a trusted user tempting access and limited access to AWS resources

69
Q

Error 403

A

Error 403 = Forbidden (no access)

1) Access denied
2) Caused by Role, security group/ACL issue

70
Q

DynamoDB: WRITE THROUGHPUT with Local Secondary Indexes

A

1) Adding, updating, or deleting an ITEM in a table also cost write capacity to perform the action on the local index
2) new ITEM/Update ITEM = one write operation in the index
3) If you change the value of an indexed key attribute = two writes
4) Delete = one write

71
Q

SQS API: “SendMessage”

A

1) Send message to a queue

2) Can be used to set the message “delay”, as well as message attributes, and the message body

72
Q

Cross Region Resource Sharing (CORS)

A

1) Sharing/Accessing resources stored in one bucket with another
2) MUST be enabled (disabled by default)

73
Q

SNS: Mobile Push Notifications

A

1) SNS provides the ability to send notifications directly to apps on mobile devices
2) Notifications sent to a mobile device can appear in the app as:
- Message alerts
- Badge updates
- Sound alerts

74
Q

Intrinsic Functions: FN::Join

A

1) Concatenates elements, separated by a specific delmiter

75
Q

DynamoDB: READ THROUGHPUT with Local Secondary Indexes

A

1) Use the same read/write capacity from parent table
2) IF you read only index keys and projected attributes, then calculations are same as table (calculate using the size of the index entry)
3) IF queried attributes are NOT projected attributes or keys, we get extra latency and read capacity cost
* NOTE: You use read capacity from the Index and every Item from the table

76
Q

Cloud Formation: Description

A

1) Helps clearly differentiate between templates

77
Q

DynamoDB: Grating Temporary Access

A

1) IAM roles
2) Web Identity federation (enterprise or web)
3) Amazon Cognito

Example: Mobile app needs to store user info

78
Q

DynamoDB: Secondary Indexes

A

1) Lets you query data using alternate keys (flexibility)
2) Can provide better performance
3) There are GLOBAL & LOCAL secondary indexes
4) Up to five (5) global & local per table

79
Q

SWF: Activity Task

A

1) A task assigned to a worker such as encode a video OR check inventory

80
Q

S3 Performance (limits)

A

1) Burst (#of request per second)
IF > 300 put/list/delete
IF > 800 get
THEN contact AWS to prepare/avoid limit issues

2) Consistent high number of request per second
IF > 100 put/list/delete
IF > 300 get
Then follow best practice guidelines to avoid overwhelming the I/O capacity of a partition

81
Q

DynamoDB: Essentials

A

1) Can scale up/down without downtime or performance degradation
2) You control performance through read/write capacity
3) Conditional updates & Concurrency Control
4) Change read/write at any time

82
Q

S3: Versioning (when enabled)

A

1) Existing objects are unchanged
2) Added objects are given unique version IDs
3) ID set by AWS, cannot manually set or change IDs

83
Q

SNS Message Data: SigningCertURL

A

1) The URL to the certificate that was used to sign the message

84
Q

DynamoDB: Essentials

A

1) Can scale up/down without downtime or performance degradation
2) You control performance through read/write capacity
3) Conditional updates & Concurrency Control
4) Change read/write at any time

85
Q

S3: Versioning (when enabled)

A

1) Existing objects are unchanged
2) Added objects are given unique version IDs
3) ID set by AWS, cannot manually set or change IDs

86
Q

SNS Message Data: SigningCertURL

A

1) The URL to the certificate that was used to sign the message

87
Q

SQS Limitations

A

1) Message Size: 256kb of text (any format)

2) Up to 120,000 “in-flight” messages

88
Q

SQS API: “SetQueueAttributes”

A

1) Sets/Changes an attribute

Example: Attribute.Name:VisabilityTimout
-Sets the default queue visibility timeout

89
Q

SQS: “VisibilityTimeout”

A

1) It is used to block other components from processing a message
2) You can choose what the timeout is, and you can extend it
3) Can be controlled via SQS API
4) Limits: 0-12 hours

90
Q

Identity Store (list)

A

1) Facebook
2) Active-directory
3) Google
4) Amazon

91
Q

SNS Message Data: UnsubscribeURL

A

1) URL that you can use to unsubscribe

92
Q

API Credentials with ACCESS KEYS

A

1) Used to sign request
2) Used by:
- AWS SDKs
- AWS CLI
3) Can be disabled & deleted, but not retrieved
4) Can be temporary
5) useful when connecting from outside of AWS (like your computer or application)

93
Q

S3: Consistent Reads

A

1) No state reads
2) Potential higher read latency
3) potential lower read throughput

94
Q

Cloud Formation: RollBack

A

1) If a Stack fails to create a resource, by default a stack will “rollback”
2) Removal of all created resources after a failed creation, or after cancelling creation
3) Rollback CAN be disabled via API

95
Q

SQS Short Polling

A

1) Returns results immediatly, even if the queue is empty

2) It only checks a subnet of servers, which can cause false empty responses

96
Q

S3: Bucket Permissions

A

1) Resource based policies
2) Specify who is allows to access
3) What the user can do with those resources
4) AWS gives full permission to the owner of a resource (bucket, object)
5) Resource owners grant access to others, even cross-account
* NOTE: The bucket owner paying the bills can deny access/modify objects regardless of who owns them

97
Q

DynamoDB: Keys (facts to know)

A

1) Primary key = partition key = “hash attribute”

2) Sort key = “range attribute”

98
Q

SNS Message Data: Timestamp

A

1) The time (GMT) when the notification was published

99
Q

SQS Message Retention Period

A

1) Amount of time a message will “live” in a queue if it is NOT deleted
2) 1 minute - 14 days

100
Q

DynamoDB: Provisioned Throughput

A

1) Flexibility to change read & write capacity:
- table creation
- or at any time after without downtime/degradation
2) Automatically allocates machine resources
3) Ability to reserve capacity

101
Q

SNS Message Data: Signature

A

1) Base64-encoded “SHA1 with RSA” signature
- Message
- MessageID
- Subject
- Type
- Timestamp
- TropicARN values

102
Q

Error 400

A

Error 400 = bad request

103
Q

SQS “ReceiveMessageWaitTime”

A

1) If set to > 0, long polling in enabled
2) It is the maximum amount of time a long polling call will wait for a message to become available before returning empty
3) Limits: 0-20 seconds

104
Q

AMI API: “DescribeImages”

A

1) API call to describe an AMI

105
Q

Multi-Part Upload (benefits)

A

1) Can upload independently, in any order, and in parallel
2) If any part fails to upload, you can retransmit that part
3) You can pause/resume uploads
4) You can upload objects as they are being created
5) Object is reassembled after calling “CompletMultiPartUpload” API

106
Q

Cloud Formation: Meta Data

A

1) JSON objects that provide details about the template

107
Q

DynamoDB: Conditional Writes

A

1) Is Itempodent
2) Helps coordinate writes
3) Checks for condition before proceeding with operations
4) Supported for PutItem, DeleteItem, UpdateItem
5) Specify conditions in “ConditionExpression”: Can contain attribute names, conditional operations, and build-in functions
6) A failed conditional write returns “ConditionalCheckFailedException”

108
Q

DynamoDB: Limits (api)

A

1) Up to 10 ReadTable, UpdateTable, and DeleteTable actions running simultaneously
2) A single BatchGetItem can get a max of 100 Items (must be < 16mb in size)
3) A single BatchWriteItem can contain up to 25 PutItems OR DeleteItems request (16mb)
4) Query and Scan results set is limited to 1mb of data per call.
* NOTE: LastEvaluatedKey in the response can be used to retrieve more data

109
Q

SNS (definition)

A

1) It is a pub-sub service for messaging
2) Publishes messages to subscribe via Topics
3) Scalable & highly reliable
4) Supported through console, API & SDK

110
Q

SWF: Decision Task

A

1) Tells the decider that the state of the workflow execution has changed
2) Allows the decider to determine what the next activity is to be performed
3) Decision tasks occur whenever the state of the workflow changes (“task completed”)

111
Q

S3: Objects (facts & numbers)

A

1) Size: 0 bytes - 5 TB
2) Objects larger than 5 GB require multi-part upload API
3) Multi-part uploading is recommended for ALL files larger than 100mb
4) Objects can be encrypted before being saved to disk- AND decrypted when downloaded

112
Q

SNS: Publishers

A

1) The owner who creates a topic and controls access to it

You can publish from:

a) CLI
b) Your application (http)
c) SDKs
d) Other AWS Services

113
Q

Cloud Formation: Outputs

A

1) Outputs values that you would like to see from console or API call

Example: Return bucket name you just created

114
Q

S3: Encryption (options)

A

1) Protect data “in-transit”
- Use SSL or client side encryption

2) Protect data at rest
- Request AWS S3 to encrypt data

115
Q

SNS Message Data: SignatureVersion

A

1) Version of the SNS signature used

116
Q

DynamoDB: Limits (size)

A

1) 265 tables per region (increase on request)
2) Partition key length: 1 byte - 2048 bytes
3) Sort key length: 1 byte - 1024 bytes
4) Item size: 400kb including attribute name & value

117
Q

SQS: Dead Letter Queues

A

1) Queues that other queues can send messages to when those messages could not be successfully processed
2) You can then analyze those messages

118
Q

DynamoDB: Partition & Sort Key

A

1) A type of primary key
2) Also known as a “Range attribute” key
3) Composite primary key composed of TWO attributes (partition key & sort key)
4) Two items can have the same partition key, but must have different sort keys

119
Q

SNS: Message Data

A

1) JSON formatted key-value pairs
2) Allows developers to grab the message date and parse it
3) POSTs to http/s end points with specific headers
4) Allows developers to verify the authenticity of the message

120
Q

SNS: Items in a Message Body (list)

A

1) Message
2) MessageID
3) Signature
4) SignatureVersion
5) SigningCertURL
6) Subject
7) Timestamp
8) TopicARN
9) Type
10) UnsubscribeURL

121
Q

Cloud Formation: Conditions

A

1) Check values before deciding what to do
2) Allows you to create different resources in the same template depending on the condition value

Example: Create different environments for production or dev

122
Q

SQS API: “DeleteMessage”

A

1) Deletes a message

123
Q

Identity Broker

A

1) A service that allows you to take an identity from “point A” and federate it to another identity at “point B”

124
Q

DynamoDB: Scans (if you must use)

A

1) You can reduce the “page size” of an operation with the “limit” parameter, to limit how much data you try to retrieve at the same time
2) Avoid scan on mission critical tables
3) Program your application logic to retry any request that receives a response code saying you exceeded provisioned throughput (or increase your throughput)

125
Q

SQS Long Polling

A

1) Long Polling doesn’t return a response until there is a message in the queue
2) It checks every server to avoid false empty responses
3) Should be used whenever possible as it can reduce cost and false empty responses

126
Q

DynamoDB: Essentials

A

1) Fully managed NoSQL SB
2) Can scale up/down without downtime or performance degradation
3) Manage data, NOT hardware/software
4) Built in monitoring
5) Consistent & fast performance:
- stored on fast SSDs
- You control performance through read/write capacity
- Can spread load across servers & tables
- Replicated across multiple-AZ’s in a region

127
Q

Cloud Formation: AWSTemplateFormatVersion

A

Specifies which template you want to use

128
Q

Cross-Account Access

A

1) Allows an IAM user in one account access resources in another account

129
Q

Error 500

A

Error 500 = Internal Server Error

130
Q

Intrinsic Functions: FN::GetAZ

A

1) Gets the AZ for a specific region

131
Q

DynamoDB: Queries (benefits)

A

1) Returns the ITEM matching the primary key search
2) Much more efficient because it searches only indexes
3) Returns all attributes of an ITEM, OR only the ones you want
4) Is eventually consistent by default (but you can request consistent)
5) Can use conditional operations and filters to return precise results

132
Q

Permanently Deleting (S3 versioning)

A

1) Must specify and ID

2) AWS will then set the next ID # to the “current” version

Linux Academy (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions