AWS Services Flashcards

1
Q

Inspector

A

Inspects EC2 Instances

Network Assessments - Agentless
Host Assessments - With Agen (Installed on OS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Macie

A
  • Discovers & protects sensitive data in AWS

Think personal info. (PII)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

GuardDuty

A

Threat detection

Analyse logs uses machine learning to detect threats.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Macie

A

Uses ML to find and protect sensitive data - PII

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

GuardDuty

A

Uses ML to analyse logs to detect an attack.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

WAF - Web App Firewall

A

Web Exploits - Layer 7. App Load Balancer, API GW, CloudFront

Think SQL Injection & Cross-Site Scripting - XSS

Blacklist threats - Geo Match - Rate-based rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

SSM Parameter Store

A

Store config & secrets. Can use KMS. CloudFormation Intergration.

Think encrypt parameters in Lambda.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Neptune

A

Graph database

Common uses-
Social Networking - Think likes & Comments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Step Functions

SWF - Simple WorkFlow

A

SF
State Machine, Workflow, Orchestrate Lambda funct. - Think Step Functions.

SWF - Now legacy unless external signals and child processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AppSync

A

Store and sync data across web app and mobile apps

Uses GraphQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Transit Gateway

A

Connects VPC’s and On-Prem networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

PrivateLink

A

Expose service to VPC e.g. MSP serving app in their VPC to customers VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Resource Access Manager - RAM

A

Share AWS resources with other AWS accounts

Share VPC
AWS Transit GW
Route53 Resolver Rules
Licence Manager Configs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudTrail

A

Log events and API calls. Think audit, compliance and governance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EventBridge

A

NextGen CloudWatch Events

Event Bus - AWS Events - CloudWatch Events

Partner Event Bus - Saas Providers can send events i.e. ZenDesk, DataDog

Custom Events - Custom application events.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Glue

A

ETL - Extract Transform Load

Data from S3/RDS to Glue for ETL then to RedShift Data Warehouse

17
Q

OpenSearch/Elastic Search

A

Search any field for partial matches in databases

18
Q

Secrets Manager

A

Store Secrets - Force rotation of secrets.

Integrated with RDS using KMS

19
Q

DataSync

A

More large amounts of data from on-prem to AWS

The agent needs to be installed.

20
Q

EMR - Elastic MapReduce

A

Analyse and process big data - Hadoop Clusters

21
Q

Global Accelerator

A

Uses AWS network route to the application, reduces latency and hops to the destination

Uses AnyCast IP to work

22
Q

SQS Long Polling

A

Enabled at queue lvl or API lvl using WaitTimeSeconds

Must be set to more than 0 and less than 20

23
Q

AWS Config

A

Assess, Audit, Evaluate AWS resources.

e.g. Is there unrestricted SSH access to my security groups?

Per Region basis

Can have notifications sent to SNS

24
Q

CloudWatch Metrics

A

EC2 Default - 5 mins
Detailed - 1 min

Custom Metrics -

RAM, Disk Metrics, In-Depth CPU, NetStat. Processes, Swap Space - Can be installed with SSM

25
Q

SSD Uses & HDD Uses

A

SSD - small random I/O operations

HDD - large sequential I/O operations

26
Q

Can EBS volumes be edited on the fly?

A

Yes

27
Q

Geolocation Routing Policy vs Geoproximity

A

Geolocation - routes traffic based on the location of the users

Geoproximity - routes based on the location of resources

28
Q

Simple, Step, Target Tracking & Scheduled Scaling

A

Simple - Relies on a metric e.g. CloudWatch alarm for CPU usage over 80%, must wait for the checks and cooldown to complete before scaling further.

Step - Improves simple, scaling happens in stages. It can continue to scale as it triggers more alarms.

Target Tracking - Allows specifying a scaling metric value that the ASG needs to stick to e.g. set the CPU limit to 80% and it will scale out AND in to keep it running at 80%

Scheduled - Set times in the day to scale in and out - Predict demand