AWS Developer Associate - C02 (Set 3) Flashcards

1
Q

How would you set up the permissions for an AWS Lambda function that should be triggered by objects being uploaded to an S3 bucket?

A

Grant the S3 bucket permissions to invoke the Lambda function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Other than permissions, what needs to be set up on the Lambda side to connect a Lambda function to a DynamoDB Stream?

A

Create an event-source mapping on AWS Lambda to connect it to the DynamoDB Stream

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can an SNS filter policy be applied to a single receiver, or must it include the whole topic?

A

It can be applied to a single receiver.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a main difference between EFS and S3?

A

EFS has a file system, while S3 does not provide a file system, just object storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the best way that you can store database credentials for an EC2 instance to use on AWS?

A

Create a secret on AWS Secrets Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the best serverless option for a PostgreSQL database on AWS?

A

Amazon Aurora Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the default length of time Kinesis data streams store records?

A

24 hours by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Will AWS CodePipeline run automatically after making changes to the pipeline, or would you have to rerun it manually to get the changes?

A

You will have to rerun it manually. Unlike creating a pipeline, editing a pipeline does not rerun the most recent revision of it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the simplest way to deploy a serverless application with CloudFormation?

A

Using a Serverless ApplicationModel (SAM) template.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is AWS Elastic Beanstalk proxy server used for?

A

Serving static files from a set of directories from within your web application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is likely the solution if you get an error from Lambda similar to “Code storage limit exceeded”?

A

You need to reduce the size of your code storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In what section of a CloudFormation template can you deploy variable sized EC2 instances based on the environment (dev, test, prod..)?

A

The conditions section

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the main difference between AWS SSM Parameter Store and AWS Secrets Manager?

A

Parameter Store only allows one version of a secret to be active at any given time, while Secrets Manager allows multiple versions to exist at the same time when you are performing a secret rotation. Parameter Store is also cheaper as it incurs no additional cost.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the cli command “aws s3 presign…” do?

A

Generates a pre-signed URL for an S3 object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What parameter can you add to the CreateFunction or UpdateFunction request to automatically publish a Lambda function after creating/updating it?

A

The publish parameter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How can you save costs on an SQS queue that has a low volume of messages?

A

Enable Long polling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is an SQS LIFO queue?

A

It does not exist, SQS does not support LIFO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How can you increase throughput on an SQS Queue?

A

Use SQS batch actions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Would you use SQS or Kinesis Stream if you want to decouple components of an application?

A

SQS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Would you use SQS or Kinesis Stream if you want to allow multiple applications to consume the same stream concurrently?

A

Kinesis Stream

21
Q

Would you use SQS or Kinesis Stream if you want to configure individual message delay?

A

SQS

22
Q

Would you use SQS or Kinesis Stream if you need to scale transparently?

A

SQS

23
Q

What does the “describe-identity” API do?

A

It returns metadata related to the given identity.

24
Q

What does the “get-credentials-for-identity” API do?

A

It returns credentials for the provided identity ID using Cognito

25
Q

Do customers have to manually rotate their customer-managed keys in KMS?

A

No, KMS has automatic key rotation even for customer-managed keys

26
Q

Do customer-managed keys in KMS have automatic key rotation by default?

A

No, you would have to turn it on.

27
Q

T/F: After you call a re-sharding operation in Amazon Kinesis, you do not need to wait for the stream to become active again.

A

False: After you call a re-sharding operation, you need to wait for the stream to become active again

28
Q

When using SSE-C in S3, is it possible to have different encryption keys for different versions of the same object?

A

Yes, it is, but the user is then responsible for tracking which encryption key was used for which object’s version

29
Q

What type of encryption is used to encrypt data larger than 4KB?

A

Envelope Encryption

30
Q

What is the GenerateDataKey API call used for?

A

It returns a Data Encryption Key so that you can encrypt data larger than 4KB

31
Q

What type of key is used in Envelope encryption to encrypt objects larger than 4KB?

A

A Data Encryption Key

32
Q

What is the best solution to debugging a Lambda function?

A

AWS-Ray

33
Q

What does web identity federation allow your web application’s users to do?

A

Sign in with Amazon, Facebook, Google, or other well-known accounts

34
Q

How many MB/s can a Kinesis Data Stream shard ingest?

A

1 MB/s

35
Q

How many MB/s can a Kinesis Data Stream shard write?

A

2 MB/s

36
Q

How can you reduce duplicated work in creating a Lambda function with a basic function?

A

Use a shared Lambda layer from the AWS Serverless Application Registry

37
Q

Which EB automated deployment type will ensure app performance is unaffected by a new application version deployment?

A

Immutable

38
Q

What is AWS CDK?

A

AWS Cloud Development Kit accelerates cloud development by using IaC with common programming languages to set up the cloud environment, like TypeScript, Python and Java.

39
Q

What does an S3 CLI command start with?

A

aws s3api…

40
Q

What is the default Lambda function timeout?

A

3 seconds

41
Q

What is the default Lambda function memory?

A

128 MB

42
Q

With AWS CloudTrail, creating multiple trails in one region allows ______ to focus on one aspect of AWS operation.

A

Stakeholders

43
Q

If you have one or more objects with one million+ versions in an S3 bucket, PUT and DELETE requests will likely return what HTTP Error code?

A

HTTP 503-slow down

44
Q

What can you use to determine which objects in an S3 bucket may have millions of versions?

A

The Amazon S3 Inventory Tool

45
Q

What is Cache-Aside caching?

A

Cache-Aside is a lazy loading technique that only writes data to the cache after it is not found in the cache.

46
Q

What is Write-Through caching?

A

It stores data in the cache regardless of whether or not it has been read, as it is written to the cache at the same time it is written to the database.

47
Q

What is Write-Back caching?

A

Also called write-behind caching, it is a technique that is optimized for write-intensive workloads.

48
Q

What is Refresh-Ahead caching?

A

It enables users to configure expirations for items in a cache and refresh them in advance of the expiration time.

49
Q

What is the WaitTimeSeconds parameter associated with in SQS?

A

Long/Short polling