Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certification Journey > AWS Services > Flashcards

AWS Services Flashcards

1
Q

Amazon Athena

works with what service?
use case?

A

Serverless Query service for S3 using SQL

Point it at your S3 buckets, define a schema, and search using SQL
Pay per query.
Don’t need to ETL.
Used for analytics. Cannot write.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Amazon Cloudsearch

A

Search Solution for Websites and Apps
Think adding a search bar to your website so users can search whatever you have there.

Features: 
Free text, Boolean, and Faceted search
Autocomplete suggestions
Customizable relevance ranking and query-time rank expressions
Field weighting
Geospatial search
Highlighting
Support for 34 languages
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon Elastic Search

A

Deploy and run ElasticSearch as a fully managed service, rather than buying all the infrastructure and licensing yourself.

Includes storing data, running searches, and hosting dashboards.

Does allow multi AZ configs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon EMR

A

EMR= Elastic MapReduce.
Big Data Platform and Analysis.
Basically, this is managed Hadoop.
Good for unstructured data!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Amazon Kinesis

Shard, Sequence Number, Partition Key, Firehose

A

Real time streaming data capture and analysis
Mnemonic: Kinesis = movement, like a stream: streaming data

Has Shards, Has Firehose. Cannot EBS as it does not use EC2 instances.

There is a stream (say, a stream from a physical security system). That stream will use partition keys as a way to index records (for example, a partition key for heat sensor, and for camera). Those partition keys are used to separate those records into Shards. Each record, has a sequence number created that is unique per shard (i.e. each shard as Sequence Number 1, 2, 3, 4, 5, etc).
Firehose sends streaming data to AWS storage services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Amazon Redshift

use case?
How to query?

A 
Used for analytics, not transactions.
Managed EC2 Data Warehouse Service. 
Uses SQL for queries
Good for structured data
AQUA = ADVANCED Query accelerator
Spectrum = run huge queries quickly
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon QuickSight

A

Serverless ML BI Dashboards

Is fully managed, serverless, and flexible.
Offers a pay-per-use model
Can ask BI questions in natural language.
Redshift caches repeat queries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon Data Exchange

A 
Subscribe to 3rd Party Data Sets like:
Square (the company) location of transaction data
Weather data 
Stock data
COVID data
IMDB movie data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon Data Pipeline

A

Transfer data on the AWS cloud by defining, scheduling, and automating each of the tasks.

Is a managed ETL (Extract-Transform-Load) service

Is NOT serverless; it manages the creation of EC2 and EMR instances to do work, and you pay for those.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Amazon Glue

A

Data discovery, enrichment and transfer
Is an ETL (Extract-transform-load) tool like Data Pipeline.
Is Serverless
Supports S3, RDS, Redshift, SQL, and DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Lake Formation

A

Set up Data Lakes quickly
Organizes data in S3, and sizes chunks for efficiency
Does some deduplication and normalization automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS Step Functions

A

Serverless Function Orchestration

Low-Code, visual workflow service for orchestrating AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Amazon AppFlow

A

Integrate 3rd party app data
fully managed integration service to securely transfer data between Software-as-a-Service (SaaS) applications like Salesforce, Zendesk, Slack, and ServiceNow, and AWS services like Amazon S3 and Amazon Redshift,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Amazon EventBridge

A

Serverless Event Bus

Takes in events from 3rd party sources, and sends them to AWS services like Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Amazon MQ

Diff from SQS?

A

Message Broker Service for Apache/Rabbit MQ

Should be used for legacy MQ apps migrating to AWS. All new apps should use SQS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Amazon SNS

Push or Pull-based?

A

Simple Notification Messaging System

Push-based: it pushes out messages. this means it can do stuff like invoke a Lambda function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon SQS

Is it pull-based or push-based.
max retention?

A

Simple Queue Service Inter Component Messaging
Enables Loose coupling of applications (fewer interdependencies)

It is pull-based. It is purely reactive: things get put into it and get pulled out of it, passively. This means that it can’t do stuff like invoke a Lambda function.

Max retention = 14 days

Max Message Size = 256KB

Has many queue types (e.g. FIFO, delay, dead-letter, temporary)

Can have duplicates unless FIFO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon AppSync

What do?
How managed?

A

GraphQL API Service

GraphQL is an API Query language that lets applications have a single endpoint to serve API requests for lots of kinds of stuff. EX: One API endpoint to get data from your RDS database, Lambda functions, and S3 storage.
https://graphql.org/

Is a fully managed service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

AWS Cost Explorer

A

Visualize and manage AWS costs

Allows costs to be grouped by all kinds of attributes, including custom “tags”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

AWS Budgets

A

Service to set and monitor both cost and usage budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

AWS Cost and Usage Report

A

reporting to analyse AWS usage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Amazon Managed Blockchain

A

Hyperledger & Ethereum Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Quantum Ledger DB (QLDB)

A

Fully managed financial ledger db

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Amazon EC2

Instance types: Spot, Scheduled Reserved instances, Reserved instances, On-Demand Instances

Spread/Partition/Cluster partition groups?

A

Secure, resizable Compute Instances (400+ options)

Spot: Only available when there is extra capacity. User must be flexible when they can be used.
Scheduled Reserved Instances: pick times to have reserved capacity
Reserved Instances: Reserve 24/7
On-Demand Instances: Pay-as-you-go. Flexible.

Partition Groups:
Cluster - as close together as possible in the AZ for performance
Partition - Separate nodes across hardware within the AZ
Spread - Same as partition, but limited to one server per group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

EC2 Autoscaling

Types?
What’s a target tracking policy?

A

Automated compute capacity scaling
There is a cool-down timer
can be triggerd by lots of stuff

types= Simple, Step, Scheduled
Target tracking policy autoscales to keep a

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Amazon LightSail

A

Easy virtual private server instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Elastic Beanstalk

A

Deploy & scale web apps (Java/Ruby/etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

AWS Lambda

Max execution time

A

Serverless Compute Functions

max runtime= 900 seconds (15 min)

Works well with API Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

ECR

A

Elastic Container Registry

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

ECS

How do Roles and Definitions work

A

Elastic Container Service to deploy/manage clusters & tasks

A definition definition specifies what docker image to use, and a bunch of other parameters, including Task Role
A Task role is an IAM role
Can only apply one role per task definition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

EK

A

Elastic Kubernetes Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

AWS Copilot

A

CLI to launch and manage containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

AWS Fargate

A

Serverless Compute Engine for ECS/EKS Containers

Runs containerized applications for you, without your needing to pay for or plan for infrastructure.

Only supports container images from ECR and Docker Hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Amazon Aurora

Replication?
Multi-region?
Fully Managed?
Define a size at startup?

A

MySQL and PostgreSQL compatible database service

Replicates up to 5 “Read replicas” in diff regions
Replicates up to 15 performance replicas in same region “Cluster”
CAN be multi-region, but not multi-master
IS fully managed
No upfront size configuration
Auto-scaling of storage

Aurora replicas are by default targets for reads, and standby for the primary.

35
Q

DynamoDB

What is Streams?
Cost models?
DAX?

A

KeyValue / Document Database / NoSQL

Global Tables = enable multi-region, multi-master database without configuring your own replication

Streams = list of item level changes. 24hr lifespan. integrates with lambda

Supports gateway endpoints but not interface endpoints?

Provisioned capacity: specified read/writes
On-demand capacity: charged based on how many reads/writes happen

Push-button Scaling

DAX = fully manged, highly available, in-memory cache

36
Q

Amazon Elasticache

redis
memcached

A

Scalable in-memory database

in memory caching provides low latency throughput

redis is persistent, feature rich, can do replication and high availability
memcached is not persistent, simple, not HA.

37
Q

Neptune

A

Graph database for highly connected data sets

38
Q

Amazon RDS

A

Relational Database (MySQL/Postgres/Maria etc)

39
Q

Timestream

A

Serverless time series db for IoT

40
Q

AWS VPC

A

logically isolated virtual private clouds

41
Q

API Gateway

A

Create and manage APIs

42
Q

AWS CloudFront

What is it?
Why use it?
Services it integrates with?

A

Fast content delivery network (CDN) service

Brings content closer to users for speed.
Can be used with S3, EC2, ELBs

43
Q

Amazon Route53

A

fast DNS service

44
Q

AWS PrivateLink

AKA?
first step?
types?

A

Allows other AWS accounts to access your VPC.
aka VPC endpoint services

First step is to set up an NLB

Interface endpoints: simple way to allow traffic into your VPC
Gateway Load Balancer endpoint: Allow traffic in AND load balance that traffic
Gateway Endpoints: Allow access to S3 and DynamoDB

NOT A TRANSIT GATEWAY
NOT A INTERNET GATEWAY

45
Q

AWS App Mesh

A

Service Mesh for inter compute instance comms.

You can use App Mesh with AWS Fargate, Amazon EC2, Amazon ECS, Amazon EKS, and Kubernetes running on AWS, to better run your application at scale.

46
Q

AWS CloudMap

A

Resource discovery for app usage

47
Q

AWS Direct Connect

A

Fast connection from your equipment (on-prem) to AWS.

Takes a long time to set up.

48
Q

AWS Global Accelerator

Compatible targets?

A

User traffic routing over the AWS network, rather than the internet.

uses anycast to enable failover without changing the public IP Address

Only works for EC2 and ELBs

With Global Accelerator, you are provided two global static public IPs that act as a fixed entry point to your application, improving availability. On the back end, add or remove your AWS application endpoints, such as Application Load Balancers, Network Load Balancers, EC2 Instances, and Elastic IPs without making user-facing changes. Global Accelerator automatically re-routes your traffic to your nearest healthy available endpoint to mitigate endpoint failure.

49
Q

AWS Transit Gateway

Diff: Direct Connect Gateway, Transit Gateway Connect, and peered Transit Gateway

A

Centralized VPC and on prem connectivity

???????wtf

50
Q

Elastic Load Balancing

A

Service to evenly distribute network traffic.

Can only target one “target type”, such as IP address, Instance ID, or Lambda.

Can work with on-premise using IP Address.

51
Q

Amazon S3

How accessed by other services?
Tiers: standard, S3-IT, S3-IA, S3-one zone IA, Glacier, Glacier deep archive, Outposts
Minimum data charges?
Minimum Storage Durations?
Default AZ replication?
What is Transfer Acceleration?
Static content over HTTPS?
A

Object storage service
Enables lifecycle management for data

Generally accessed via API
Tiers:
Standard: relatively high cost and fast. no cost to retrieve. Min 3 AZs in one region.

intelligent tiering: moves data to storage classes based on usage patterns

Infrequent Access: Begin paying retrieval fees, has minimum data size charge. Fast to access if needed, but cheaper if not accessed. 128kb min charge. 30 days min storage.

One-zone Infrequent Access: limited to one AZ.

Glacier: Minutes to hours to retrieve. 40 kb min charge. 90 days min storage charge.

Glacier deep archive: 12 hours retrieve. Min storage 180 days.

Outposts: S3 but on your premises. Use same APIs to access.

S3 static content can only be accessed on HTTPS

Transfer Acceleration improves UPLOADS to S3 using Cloudfront

52
Q

AWS EBS

Multi-AZ? Region?
modes?

A

Elastic Block Store, Persistent block
Is like a disk partition mounted to the OS.

PIOPS = higher IOPS
Gen Purpose

General Purpose SSD (gp2) = up to 16,000 IOPS, 250 MB/s. gp3 has 1000 MB/s throughput.

io1/io2 if you need more.

53
Q

AWS EFS

Is a version of what general tech?
Modes?
Scale?
Multi-AZ? Region?
Supported OSs?
A

Serverless Elastic File System
Is a version of an NFS (network file system)

EFS allows EC2 or ECS to use standard file system IO like with EBS, but is scalable to peta-bytes

Can be attached to several EC2 instances. Allows simultaneous access.

Max I/O mode = higher latency, but enables higher throughput. Is opposed to General purpose mode.

Supports multi-AZ, but not multi-regions, except by using Datasync

Does not support Windows EC2 instances

54
Q

FSx for Lustre

A

High performance file storage using Lustre

Used for HPC and is highly parallel and distributed.

55
Q

FSx for Windows File System

A

AWS Windows file system

56
Q

AWS Backup

A

Policy driven data protection

57
Q

AWS Snow

A

Edge infrastructure for storage and compute

58
Q

AWS Storage Gateway

File Gateway

A

Hybrid on prem AWS storage
AWS gives you a storage appliance, basically.
Also available as a VM.
Store your data on-premise, but managed by AWS
Is low-latency, compared to web storage

File Gateways can be mounted to instances, but back up to S3

59
Q

CloudEndure

A

Disaster recovery service

60
Q

AWS DMS (Database Migration Service)

What migration targets are supported?

A

RDS: Aurora, MySQL, PostgreSQL, MariaDB, MS SQL Server, Oracle
Also supports non RDS targets: NoSQL
Works for on-Premise and Cloud databases, as long as you’re ending up on the cloud.

61
Q

AWS Datasync

A

A tool to simplify moving data.
Over the internet.
Can move data, or maintain copies in the cloud.

62
Q

AWS Batch

A

Batch computing service.

Dynamically provisions EC2 instances to do the operations.

63
Q

AWS Resource Access Manager

A

Part of AWS Organizations

Enables sharing resources with other AWS accounts or organizations

64
Q

Read Replicas in RDS

A

Creates read-only replica of a database, often in another region for availability.

Read-Replica limits in RDS are: 5

Cannot create an encrypted replica from an unencrypted master.

Read replicas in different regions from the master use a different encryption key.

65
Q

Elastic Fabric Adapter

A

Version of an ENA, but with more support for faster networking.

Has OS bypass support for lower latency

66
Q

Elastic Network Adapter

A

Network adaptor for high-bandwidth applications, when EC2 standard networking is not enough

67
Q

Elastic IP Address

A

A static public IP Address, with which you can do fancy things

68
Q

AWS CloudFormation

A

Automated tool to deploy AWS services, including EC2, VPCs, etc etc etc

69
Q

AWS Inspector

A

An automated security and compliance assessment (audit) tool.
Basically an audit tool

70
Q

AWS CloudWatch

Agent?

A

Monitoring and alarm tool
“Evaluation period” is the number of data points to look at when deciding alarm state.

Monitors by default: CPU, Disk, Network, Status

Has an Agent

71
Q

AWS ELB

types

A

Elastic Load Balancers distribute INCOMING traffic across multiple targets. Not outbound.

types = ALB, NLB, and GLB
Application Load Balancer, Network load Balancer, and Gateway Load Balancer

Billed by time.

72
Q

NAT Gateway

A

Turns IP addresses into other addresses, can be used to multiple servers connect to internet through one IP address.

Is used for OUTBOUND internet communication, cannot receive unsolicited requests, only return requests.

73
Q

IAM Access Key

A

Used for signing programmatic requests make to ASE

74
Q

AWS STS

A

Security Token Service

Enables requesting temporary, limited, privilege credentials for AWSM IAM users

75
Q

AWS Key Management Service

A

Create and manage cryptographic keys and control their use across a wide range of AWS services

FIPS 140-2 validated

76
Q

AWS Certificate Manager

A

Lets you provision, manage, and deploy SSL/TLS certificates for use with AWS services

77
Q

Signed URLs

What do they include?

A

“People with URL can access”, has expiration, can include IP range, technically includes some form of provider’s credentials.

There are also Signed Cookies.

78
Q

OAI

A

Origin Access Identity (OAI)

Special CloudFront User, can limit S3/CloudFront content distribution to OAI users.

Cannot be used to restrict access to a ELB or EC2

79
Q

AWS CloudHub

A

A way to connect multiple VPNs to your VPC, to connect various distributed networks.

80
Q

Amazon Cognito

A

Used for adding sign-up, sign-in, and access control for mobile apps

Supports SAML and OpenIDConnect

81
Q

CloudTrail

Multi-region or nah?

A

Audit tool for user activity and API usage

Set up “trails” to collect certain info

Can be multi-region

82
Q

AWS Organizations

SCP

A

Connects accounts to centrally manage them.

Can use service control policies to allow/deny access to services or actions.

83
Q

Security Groups

A

For servers not users.

AWS Certification Journey (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions