AWS Services and Use Cases Flashcards
Low-latency ingestion, buffering and processing of streaming data in real-time, from a 1000s of sources.
Amazon Kinesis Data Streams
Prioritise work in SQS queues, based on criteria.
Use separate queue and configure application layer to poll fro priority queue.
Sender-consumer model, must account for failure of message processing.
Amazon SQS (Simple Queue Service), with dead letter queue to collect failed messages.
Encrypting an existing DB that is not encrypted.
Create snapshot of existing DB. Create an encrypted copy from the snapshot, then create a new instance of the DB from the encrypted snapshot.
Low latency experienced on read queries to a DB.
Amazon Aurora Global DB, one master in primary region where data is mastered and up to 5 read only in secondary Regions.
Content on CloudFront needs restricting depending on country.
Use CloudFront Geo Restriction feature. Whitelist or blacklist countries.
Intelligently route traffic for lowest latency and provide fast regional failover.
AWS Global Accelerator, uses AWS global network to route TCP and UDP traffic to healthy application endpoint in the closest region to the user, reducing latency.
Cost effectively reduce latency for content delivery in certain regions.
Use CloudFront price class feature to determine where in the world the content will be cached.
Copy data from NFS (Network File System), SMB (Server Message Block), AWS Snowcone, S3, AWS EFS (Elastic File System) and Amazon FSx (Windows File Server).
AWS DataSync alongside AWS Direct Connect, for enhances security and reliability.
Instances in private subnet, user requires access to the instances.
Create an ALB (Application Load Balancer and associate public subnets in the AZs as the private subnets. This way instances become targets for Load-Balancing and are accessible from the internet.
Restrict access on S3 via CloudFront. Don’t want to change URL.
Signed Cookies on CloudFront, for providing/restricting access to multiple files and don’t want to change URL.
Restrict access to documents in S3 to a specific VPC.
Create an S3 access point and configure it to only allow a specific VPC.
Write-Once-Read-Many requirement on S3 Objects.
Enable S3 Object Lock. Helps prevent object from being deleted or overwritten.
ETL use case for moving data between data stores.
AWS Glue
Optimise Aurora DB workloads and redirect different types of queries to high capacity and low capacity instances.
Create custom endpoints, depending on traffic