AWS RDS Flashcards
What is RDS service?
It is a managed database service, supporting, MySQL Aroura Postgress Oracal MsSQL MariaDB
When it comes to users, what is the AWS RDS best practice?
We need a single user for each user accessing AWS RDS
I need to ensure my RDS instance is providing the best possible security for my data at rest, what are my options?
By default, encryption is enabled for mist all but not all instance sizes (smaller instance sizes do not have encryption)
When data is encrypted at rest, where are keys managed?
Volumes are encrypted using managed AWS keys.
When encryption is enabled on AWS RDS are logs encrypted?
Yes, logs are encrypted.
When I encrypt an RDS DB and take a snapshot, is the snapshot encrypted?
Yes
When encryption is enabled and I take a backup of the RDS database, will the backup be encrypted?
Yes
When I encrypt the RDS database, is the read replicas encrypted?
Yes
When I encrypt the RDS database, who manages the keys?
AWS KMS
When I encrypt the RDS database, are logs encrypted?
Yes
When I encrypt the RDS database, can I copy the encrypted snapshot to another region?
No because the keys are only in one region.
What is TDE in RDS?
For RDS MSSql and Oracle databases, the data is encrypted before it is written to the underlying storage device.
With TDE with RDS Oracle, do I need external key management?
Yes a KMS or CloudHSM
With TDE with RDS MSSQL, where is the encryption key stored?
It is managed by RDS after enabling TDE.
If I want to use SSL with RDS, what do I need to do?
Just set up the client to use SSL as RDS has SSL enables on server end by default.
What is MariaDB?
It is a fork of the MySQL DB.
Can I have read replicas for MSSQL and Oracal?
No this is not supported
I need to create a read replica in a seperate region for MariaDB, is this possible?
Yers, read replicas are supported in seperate regions.
When data is replicated to a read replica in a different region is the data replicated using azync data replication?
Yes, async is used.
Can I have multipal read repliicas for a single master instance?
Yes, 100%
If I wnat a small RPO and RTO for a MariaDB RDS instrance how can this be asily acheived?
Using a read replica, the read replica will only be a few seconds behind the master.
How can I scale queries for RDS MariaDB?
You can scale the queries by creating read replicas and pushing queries to the read replicas.
For MariaDB, how many read replicas can I have?
5
For MariaDB, what is the max size DB you can have?
32TB