AWS Fundamentals Flashcards
List 7 server categories of AWS Cloud computing?
- Compute - e.g EC2, Lambda
- Networking - e.g. VPC, AWS Direct Connect
- Storage - e.g. S3 (Simple Storage Service),EBS(Elastic Block Service)
- Analytics - e.g Athen, Redshift
- Development - e.g Cloud 9 , Code Commit
- Security - e.g. IAM , Amazon Macie
- Database - e.g RDS, DynamoDB
Name 6 advantages of Cloud computing?
- Increase speed and agility
- Trading capital expense for operational expense
- Stop guessing capacity
- Benefit from massive economies of scales
- Focus on your developing your applications vs managing hardware
- Scale easily
What are the 4 Benefits of Cloud computing?
- High Availability - Low failure rate
- Elasticity - Scale environment easily (Shrink and Grow) as when required
- Agility - Innovate faster through leveraging existing services
- Durability - Long-term data storage protection.
Define 3 Cloud Computing Models?
- Infrastructure as service (Iaas) e.g. EC2
- Software as a Service (SaaS) e.g. Sagemaker, Gmail
- Platform as a service (PaaS) e.g. AWS Cloud 9, Hiroki platform
Define 3 Cloud deployment models?
- Private cloud (on premises datacenter)
- Public Cloud (AWS, AZURE - benefit from Economics of Scale)
- Hybrid Cloud (Combination of Public and Private) e.g. Through the use of AWS Direct Connect
What is an AWS Region?
- It’s a physical location where AWS has data centres.
- A region contains multi Availibility Zones
What are the AWS Region Characteristics?
- Fully independent and Isolated (from other regions)
- Resource and Service Specific
What are AWS Availability zones?
Availability zones consists of one or more separated data centres, each with redundant power, networking and connectivity, housed in separate facilities.
e.g. Region: N.Virginia
Availability Zones:
- US-EAST-1A
- US-EAST-1B
- US-EAST-1C
- US-EAST-1D
- US-EAST-1E
- US-EAST-1F
What are Edge Locations?
Edge locations cache content to fast delivery to your users. It’s made possible through AWS CloudFront. It’s recudes latency (Low Latency is good).
NB: Latency: Is the time that passes between a user request and resulting response.
What is AWS Management Console?
AWS Management console allows users to access AWS account and manage applications running in the account from a web broswer.
What is AWS Command Line Interface (CLI)?
The AWS Command Line Interface (CLI) allows you to access AWS Account through a terminal or command window.
What is a AWS Root User?
Root User is automatically created when you create an AWS account.
NB: Root User should be protected with Multi-Factor Authentication (MFA)
What is the Shared Responsibility Model?
In the public cloud, there is a shared security responsibility between you and AWS.
- AWS’s responsibility: Security of the Cloud
- Your Responsibility: Security in the Cloud
What is AWS’s responsibility “Security Of The Cloud”?
AWS is responsible for protecting and securing their infrastructure.
- AWS Global Infrastructure: AWS is responsible for its global infrastructure elements: Regions, edge locations, and Availability Zones.
- Building Security: AWS controls access to its data centers where your data resides.
- Networking Components:AWS maintains networking components: generators, uninterruptible power supply (UPS) systems, computer room air conditioning (CRAC) units, fire suppression systems, and more.
- Software: AWS is responsible for any managed service like RDS, S3, ECS, or Lambda, patching of host operating systems, and data access endpoints.
What is Your responsibility “Security In The Cloud”?
You are responsible for how the services are implemented and managing your application data.
- Application Data: You are responsible for managing your application data, which includes encryption options.
- Security Configuration: You are responsible for securing your account and API calls, rotating credentials, restricting internet access from your VPCs, and more.
- Patching: You are responsible for the guest operating system (OS), which includes updates and security patches.
- Identity and Access Management:You are responsible for application security and identity and access management.
- Network Traffic: You are responsible for network traffic protection, which includes security group firewall configuration.
- Installed Software: You are responsible for your application code, installed software, and more. You should frequently scan for and patch vulnerabilities in your code.
What is the Well-Architected Framework?
The 5 pillars of the Well-Architected Framework describe design principles and best practices for running workloads in the cloud.
- Operational Excellence
- Security
- Reliability
- Perfomance Efficiency
- Cost Optimization
NB: https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html?did=wp_card&trk=wp_card
