AWS Solutions Architect Associate 2025 Flashcards
AWS accounts and root users have a one or many to one or many relationship?
One to one. Each AWS account has one root user.
True or false, AWS accounts can have multiple users
True, only one root user though
How do I restrict the permissions of the root user of an AWS account?
It’s not possible
Does creating an IAM policy give/deny permission to something?
No, it must also be attached to a user, group, or role.
an IAM user can have up to how many access keys?
two, so that you can move applications from an old key to a new one before deleting the old one
How is redshift spectrum different from redshift?
Redshift spectrum can query files directly from S3, as opposed to needing to load it into a cluster
Can an NACL rule specify a security group as an inbound source?
No, NACL rules use CIDR ranges. You would need a security group and security group rule.
Are security groups stateful?
Yes, they automatically allow return traffic
Are NACLs stateful?
No, there must be explicit rules for inbound and outbound. This means that ephemeral outbound ports must be explicitly allowed.
What is the difference between an Aurora cluster endpoint and reader endpoint?
Cluster endpoint is the writer endpoint
What is a transit gateway
A network transit hub that lets you interconnect VPCs and on-prem networks
Can you set a primary and secondary resource in an active-active route 53 failover?
No, because active-active uses all available resources all the time without a primary/secondary resource
When an RDS primary DB instance fails, is the failover handled via switching the IP address to the standby instance, or the canonical name record (CNAME) switching?
CNAME
What service would you use to extend on-premise storage?
AWS Storage Gateway
How can I prevent EBS root volumes from being deleted when instances are terminated in an autoscaling group?
Set DeleteOnTermination to false
Can I join an EFS file system to an active directory domain?
No, EFS only supports linux. You should use FSx for Windows File ServerW
Which has more operational overhead? Karpenter, or the native Kubernetes Cluster Autoscaler?
Cluster Autoscaler requires more manual configuration and tuning, so it has more operational overhead
You want to keep data in S3 Glacier, but need to be able to retrieve some of it in under 15 minutes in all circumstances. How can you do this?
use Expedited Retrieval to access it, and purchase provisioned retrieval capacity to ensure the request succeeds even during rare situations of unusually high demand.
What is Athena?
A way to query S3 using standard SQL
What service can I use to set up a data lake that stores data in s3?
lake formation
I need to share resources across AWS accounts / within an organization
Use AWS resource access manager
How do I enable Enhanced Monitoring on an EC2 instance?
You can’t, that’s an RDS feature
Which EC2 instance will an autoscaling group terminate first? One which has been running longest, or one launched from the oldest launch template
Oldest launch template. Longest running is never a factor.
In s3 can you enable object lock but disable object versioning?
no, object lock forces object versioning on a bucket
How do you turn off object lock?
You can’t, once you turn on object lock for a bucket it is on forever
