AWS Fundamentals Flashcards
AWS Public Service
Accessed using public endpoints
AWS Private Service
runs within a VPC only things in the VPC or what is connected to the VPC can access the service
AWS Regions Capabilities
full compute , storage Data base , AI and Analytics
Aws Edge Location
local distribution point storing data is main use
mainly for fast data transfer closer= faster
AWS Region
- geographic separation - isolated fault domain
- Geopolitical separation - Different governance
- Location control - Performance
- services can be placed in multiple availability zones to make them resilient
Globally Resilient
service operates globally it’s one single product and it’s data is replicated across multiple regions(IAM & Route53)
Region Resilient
operates in a single region with one set of data per region. replicates data in multiple AZs in that region
AZ resilient
services that are run in a single availability zone prodded to failure if there are problems in that AZ
How many Default VPC can you have per region?
one per region - can be removed and re-created
Default VPC CIDR for AWS
default VPC CIDR is always 172.31.0.0/16
How is the network default VPC divided between the regions?
/20 subnet in each AZ in the region
subnet assign public IPv4 addresses
How is traffic control in the Default VPC?
- Internet Gateway(IGW), security group(SG) and NACL
- subnet assign public IPv4 addresses
Elastic Compute Cloud (EC2)
- IAAS -provides Virtual machines → instances
- private service by default - use VPC networking
- AZ resilient - instance fail if AZ fails
- Different instance sizes and capabilities
- on-Demand Billing - per second
- Local on-host storage or Elastic block store (EBS)
Virtual Private Clouds(VPC)
- Virtual network inside AWS
- A VPC is within account 1 and 1 region
- Private and isolated unless you decide otherwise
- you can only have 1 default VPC per region (configured by AWS by default)
- you can have many custom VPC per region
Virtual Private Clouds(VPC)
- Virtual network inside AWS
- A VPC is within account 1 and 1 region
- Private and isolated unless you decide otherwise
- you can only have 1 default VPC per region (configured by AWS by default)
- you can have many custom VPC per region
Virtual Private Clouds(VPC)
- Virtual network inside AWS
- A VPC is within account 1 and 1 region
- Private and isolated unless you decide otherwise
- you can only have 1 default VPC per region (configured by AWS by default)
- you can have many custom VPC per region
Running EC2 instance Charges
- CPU
- Memory
- Disk
- Networking
Stopped EC2 instance Charge
- disk (via EBS storage)
Terminated EC2 instance
your not charged for anying
Amazon Machines Image (AMI)
Ami’s can be create from an EC2 instance or can be user to create a EC2 instance
What are the 3 things that make up an AMI ?
- permissions
- Root volume
- Block Device Mapping
EC2 Block Device mapping
Links the volumes to determine if it’s a boot volume and which is a data volume