AWS Essentials Flashcards
What three things does an AWS account provide? Aside from those, what incidental protection does an account give an account holder?
A way to authenticate, authorize, and bill. An account automatically limits the blast radius for resources within a specific account.
What is a principal?
An entity which can log into an AWS account.
What does a principal need to do to interact with a system?
Authenticate.
What mechanism does AWS use to authenticate and authorize principals?
IAM
If a system has mitigated the effects of component failure and/or reduced the downtime required to recover after component failure, it can be said to be
Highly available
If a system can continue to function despite the failure of a critical component, it can be said to be
Fault tolerant
Which is easier to build and architect: a highly available system, or a fault tolerant system?
A highly available system is easier to build. Also less expensive.
What is the process by which a completely failed system protects critical system data to build a new system in the event of failure?
Disaster recovery
Do you need a DR plan if you’ve carefully crafted a HA or FT system?
Definitely.
When evaluating a DR solution, the term that identifies the maximum allowable timeframe between system failure and the restoration of the system to an operational state.
RTO - Recovery Time Objective
When evaluating a DR solution, the term that identifies the total amount of data you’ll lose based on time between failure and last successful backup.
RPO - Recovery Point Objective
If data is local to a resource and is lost when the resource is released, it can be considered
Ephemeral
If data exists in a secondary location as it’s passed between sources, it can be considered
Transient
If data exists in a durable location which can survive system starts, stops, restarts, or power events, it can be considered
Persistent
What’s an example of an ephemeral data store
Instance store volume, cache