AWS S3 101 Flashcards

1
Q

S3 Description

A

Secure, durable, highly-scalable object storage.

Web service interface to store & retrieve any amount of data from anywhere on the web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Is S3 Object-Based?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Object-Based storage

A

S3 Storage
Not for file systems, booting
videos, flat-files, pictures, etc.
Flat files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Block-Based storage

A

EC2 storage

For file systems, booting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 File Size limits

A

0 bytes to 5 Terabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Is there unlimited storage?

A

yes

Amazon keeps adding storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 is a universal namespace

A

names must be globally unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Bucket Name Format

A

https: //s3-REGION.amazonaws.com/BUCKETNAME
https: //s3-eu-west-1.amazonaws.com/stevesbucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

HTTP response code for successful upload

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Data Consistency Model for S3 PUTS

A

Read after Write consistency for PUTS of new objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 has atomic updates

A

You get new data or old data.

Don’t get partial or corrupted data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

S3 is a key-value store

object based and objects consist of what?

A

Key - filename of object (salt if many files w/similar names)
Value - data of file
Version ID
Metadata
Subresources (2 types ACL’s and Torrent (bit torrent)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

S3 Availability, as-built

A

Built for 99.99%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 Availability, guaranteed by Amazon (SLA)

A

99.9%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

S3 Durability

A

eleven nines

99.999999999%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Lifecycle Management

A

Move data based on age to cheaper/slower/archival storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Does S3 support versioning?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Does S3 support Encryption?

A

Yes

Multiple methods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Two ways to secure data in S3

A

Access Control Lists

Bucket Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

S3 Storage Tier / Class: S3 Standard

A

99.99% Availability
eleven nines durability
stored redundantly across multiple devices in multiple facilities and can sustain loss of 2 facilities concurrently

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

S3 Storage Tier / Class: IA (infrequently accessed)

A
99.9% Availability
eleven nines durability
For data accessed infrequently but requires rapid access
Cheaper than S3
Charged retrieval fee
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

S3 Storage Tier / Class: RRS (Reduced Redundancy Storage)

A

99.99% Availability
99.99% Durability
Use for data that can be regenerated (thumbnails)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

S3 Storage Tier / Class: Glacier

A
99.9% Availability (after restore)
eleven nines durability
Archival only
Takes 3-5 hours to restore
Very cheap, has retrieval fee
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are you charged for with S3?

A
storage
requests
storage management pricing (tags)
data transfer pricing (moving data within S3, inter-region)
transfer acceleration
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

S3 Transfer Acceleration

A

enables fast, easy, secure transfer of files over long distances between users and an S3 bucket.

Utilizes global CLOUDFRONT edge locations, then gets routed to S3 over optimized path

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Data consistency model for S3 overwrite puts and deletes

A

Eventual Consistency for OVERWRITE PUTS and DELETES

can take some time because changes propagate across the redundant storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

S3 Version, do you pay for each stored version?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What happens when you delete an object that has versioning enabled

A

It puts a delete marker on the object, but doesn’t remove it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Can versioning be disabled?

A

No. Only suspended. Have to delete bucket to fully remove versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Does versioning integrate with lifecycle rules?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Does versioning integrate with lifecycle management?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Does cross-region replication require versioning?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Does cross-region replication require versioning?

A

yes

34
Q

Rules for transitioning to IA storage class

A

128Kb and 30 days after creation date

35
Q

Rules for archiving to Glacier storage class

A

30 days after going to IA.

If not using IA, can go immediately after going into S3

36
Q

Cloudfront edge location

A

where content is cached

37
Q

Cloudfront origin

A
origin of all files the CDN will distribute
Route 53
S3 bucket
EC2 instance
ELB
38
Q

Cloudfront Distribution

A

Name of the CDN, consists of collection of edge locations

39
Q

Web distribution

A

for websites

40
Q

RTMP distributions

A

media streaming

41
Q

Are edge locations read-only

A

no.

can write to them

42
Q

How long are objects cached on Edge location

A

depends on the TTL

default is 24 hours

43
Q

Are you charged for clearing cached objects at edge locations?

A

yes

44
Q

What are the access controls on new buckets?

A

private

45
Q

2 methods to secure buckets

A

Bucket Policies

Access Control Lists

46
Q

Can you configure S3 buckets to create access logs?

A

yes. Send them to another bucket

47
Q

Server side encryption (SSE) options

A

S3 managed keys: SSE-S3. Amazon managed keys. Uses AES 256

AWS KMS: SSE-KMS
Like SSE-S3 but more options, more expensive
Provides audit trail of key usage

Customer Provided keys: SSE-C

48
Q

File Gateway

A

Uses NFS

For storing flat files on S3

49
Q

Volume Gateway - Stored Volumes

A

iSCSI storage. Block based storage
Presents your apps with disk volumes using iSCSI
1GB - 16TB volume size
Entire dataset stored on-site and asynchronously backed up to S3
Data can be stored as EBS snapshots

50
Q

Volume Gateway - Cached Volumes

A

iSCSI storage. Block based storage.
1GB - 32TB volume size
Entire dataset stored on S3.
most frequently accessed data cached on site.

51
Q

Gateway Virtual Tape Library (VTL)

A

Used for backups

iSCSI presentation to backup programs

52
Q

Snowball Standard

A

Storage
Starts at 50TB
AES-256

53
Q

Snowball Edge

A

Storage and compute (can run Lambda)

mini version of AWS data center

54
Q

Snowmobile

A

100 Petabytes, in 40 foot trailer

55
Q

S3 transfer acceleration

A

people upload to edge location, then it goes to S3

56
Q

S3 transfer acceleration

A

people upload to edge location, then it goes to S3
Uses unique URL
like bucketname.s3-accelerate.amazonaws.com

57
Q

How to speed uploads to S3

A

use multipart upload

58
Q

How to speed uploads to S3. Allows larger files.

A

use multipart upload

59
Q

Default amount of buckets per account

A

100

60
Q

Do individual objects inherit the bucket’s tags?

A

No

61
Q

What can you use MFA delete for in S3 versioning?

A

changing version state of your bucket

permanently deleting an object version

62
Q

Are existing files in a bucket replicated automatically?

A

No.

All subsequent files replicate automatically

63
Q

Are delete markers replicated?

A

yes

64
Q

Can you replicate to multiple buckets?

A

No

65
Q

Are individual versions or delete markers replicated?

A

No

66
Q

Can you use Use Signed URLs or

Signed Cookies to restrict access to cloud front or S3?

A

Yes

67
Q

Can ACL’s apply to individual objects as well as buckets?

A

yes

68
Q

Client Side encryption options

A

encrypt data yourself and upload to S3

69
Q

AWS Storage Gateway

A

local software appliance that connects local IT environment to AWS storage

70
Q

General Info on Volumes Gateway

A

Uses iSCSI
Block Based Storage
Could use for running Operating systems, databases, etc.

71
Q

URL Format for static website in S3

A

yourbucketname.s3-website-yourregion.amazonaws.com

72
Q

S3 Rate “limits”

A

100 PUT / LIST / DELETE requests per second

300 GETS per second

S3 will autoscale but if you expect more than 300 and 800, contact support to prepare for workload

73
Q

When to use S3 performance recommendations?

A

(for routinely > 100 requests per second)

74
Q

What workloads do you use appropriate key names for, to ensure better performance?

A

mixed GET, PUT, DELETE or Get Bucket requests

75
Q

What workloads do you use Cloudront CDN for, to improve perfomance?

A

when workload is mostly GET requests

76
Q

What do you do with file names (key names) to improve performance?

A

Give files random names to avoid sequential key names

ie salt them with a hex hash prefix

77
Q

Why do sequential file names cause performance problems?

A

They can all get stored in the same index, and rapid operations can overwhelm that particular disk IO

Randomizing them spreads out the workload

78
Q

IAM Policies

Type of Access Control for accounts and users

A

AWS Account-Level Control - NO

User-Level Control - YES

79
Q

ACL’s

Type of Access Control for accounts and users

A

AWS Account-Level Control - YES

User-Level Control - NO

80
Q

Bucket Policies

Type of Access Control for accounts and users

A

AWS Account-Level Control - YES

User-Level Control - YES