Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect Flashcards > AWS solutions architect flash cards > Flashcards

AWS solutions architect flash cards

1
Q

CORS (Cross Origin Resource Sharing)

A

Way to integrate applications. provides a way for a client web app loaded in one domain to interact with resources in another. For example, your app uses a public front library. CORS lets the client browser check third party servers to check if the request is legit before data transfers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Server Errors (e.g. 404)

A

4xx - Client
5xx - Server

400 - Bad Request (Generic)
403 - Access Denied
429 - Throttling
502 - Bad Gateway
503 - Unavailable Service
504 - Timeout

B.A.T B.U.T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Kinesis Data Streams

A

Kinesis - Scalable streaming

Data Streams:
Basic entity of Kinesis, 24 hour moving window of data. Multiple producers, multiple consumers, has shards (1mb ingestion, 2mb consumption).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Kinesis Firehose

A

ALLOWS PERSISTENCE - you write to S3 or another storage (Redshift,OpenSearch, 3rd party using Splunk)

Service to load data for data lakes, data stores, and analytics.

Transformation with lambda.

Reads from data streams, or have data passed to it directly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Kinesis Data Analytics

A

Takes from fire hose or data streams. destinations same as fire hose. SQL processing, good for real-time dashboards and metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Kinesis video streams

A

Ingests live video feeds.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Cognito

A

User pool:
Authentication. Users sign in through user pool or federate through identity provider (IdP)

Identity Pool:

Authorization. Allows you to offer access to temporary credentials. Cognito assumes IAM role in identity pool.

Congito - near unlimited, good with web apps.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Glue

A

Serverless, Extract-Transform-Load (ETL) service. Moves and transforms data between src and destination.

Crawls data, makes regional data catalogue (RDS, DynamoDB, S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

MQ

A

Merge of SNS and SQS, but using industry standards. Provides queues and topics.

NOT PUBLIC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Appflow

A

Exchange data between apps (connectors) using flows. Look for Saas keyword

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Macie

A

Amazon Macie is a security service that uses machine learning to automatically discover, classify and protect sensitive data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Lambda SnapStart

A

Use Lambda SnapStart for Java to reduce cold start time without provisioning additional resources or implementing complex performance optimizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Lambda concurrency.

A

concurrency is the number of in-flight requests that your function is currently handling. There are reserved and provisioned concurrency. Provisioned concurrency is useful for reducing cold start latencies for functions. Reserved concurrency is useful for ensuring that your most critical functions always have enough concurrency to work

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Aurora Capacity Units

A

ACU - About 2 gibibytes (GiB) of memory, corresponding CPU, and networking. With Aurora Serverless v2, your starting capacity can be as small as 0.5 ACU, and the maximum capacity supported is 128 ACU.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Cloudfront Distribution, Edge Location, and Regional Edge Cache

A

Unit of configuration
Local Cache of data
Larger version of edge location. Provides another caching layer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

process when a cache miss?

A

Edge Cache -> Regional Cache -> Origin fetch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

ACM

A

AWS certificates manager, integrates with CloudFront. It allows deployment of certificates onto supported AWS services such as CloudFront and ALB, NOT EC2.

ALB - THE CERT MUST BE IN THE SAME REGION

CLOUDFRONT - CERT IN US-EAST-1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Does cloudfront do write caching?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

When to USE NLB over ALB?

A

When to use NLB:

Static IP for whitelisting
Fastest performance
Unbroken encryption
Private link
Non-HTTP or non-HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

CloudFront Behaviours

A

A lot of important configuration for distributions. Origins are linked to behaviours, which are then linked to behaviours.

Every distribution has a default behaviour.

Have custom behaviours which are configured using a path pattern

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What do behaviours control?

A

caching controls and restrict viewer access.

22
Q

CloudFront TTL and invalidations

A

default TTL - 24 hr (defined in behaviours)
Set min and max TTL.

23
Q

TTL headers

A

Cache-Control max-age (seconds)
Cache-Control s-maxage (seconds)

above are the same thing.

Expires (Data and Time)

Custom Origin or S3 (via object metadata)

24
Q

Cache Invalidation

A

Performed on Distribution too all edge locations, takes time

25
Q

Viewer and Origin protocols

A

The SSL connections between the viewer and cloudfront distribution, and the cloudfront distribution and origin respectively. Both need PUBLIC certs. Self-signed won’t work,

26
Q

EMR

A

Amazon EMR is a managed cluster platform that simplifies running big data frameworks, such as Apache Hadoop and Spark

overhead - complex and require additional configuration, maintenance, and monitoring, etc .

27
Q

API GW

A
  • You pay only for the API calls you receive and the amount of data transferred out.
  • Enables you to build RESTful APIs and WebSocket APIs that are optimized for serverless workloads.
28
Q

SNS or SES for montitoring emails?

A

SNS

29
Q

Which services can backup directly to Glacier deep archive?

A

Datasync, Storage Gateway (at least)

30
Q

Routing types

A

Simple routing:
One record per name. e.g WWW record which is an A record (but each record can have multiple values). ONLY ONE WITH NO HEALTH CHECKS

Latency Routing:
Lowest Latency

Weighted Routing:
Choose how much traffic is routed to a resource if you have multiple resources associated with a domain name

Geoproximity Routing:
Bias (+ or - ), distance based.

Geolocation Routing:
tagged with country, continent, or default, doesn’t return closest record, only relevant ones. good for content restriction.

31
Q

Prerequisites for routing traffic to a website that is hosted in an Amazon S3 Bucket

A

Domain name and s3 bucket name are the same.

The domain name is a registered domain name.

32
Q

SWF

A

Simple Workflow Service - used for decoupling.

33
Q

Inspector vs guard duty

A

Shield is DDoS protection and also located “at the edge”.

GuardDuty is intelligent threat detection. That means without much configuration, it reads your CloudTrail, Config and VPC FlowLogs and notifies if something unexpected happened. That is usually for infrastructure.

Amazon Inspector is more for applications. It’s an automated security assessment service that helps improve the security and compliance of applications.

34
Q

Gateway endpoint vs interface endpoint

A

Both:
- to privately connect AWS services, not over the public internet

Gateway endpoint:

Used for connecting to public services such as S3 and DynamoDB.
Inside VPC, but not subnet
associated with a route table

Interface Endpoint:

Uses PrivateLink
an ENI with a private IP address
Inside a subnet
Associated with a SG

35
Q

EC2 placement strategies

A

Cluster – Packs instances close together inside an Availability Zone. This strategy enables workloads to achieve the low-latency network performance necessary for tightly-coupled node-to-node communication that is typical of high-performance computing (HPC) applications.

Partition – Spreads your instances across logical partitions such that groups of instances in one partition do not share the underlying hardware with groups of instances in different partitions. This strategy is typically used by large distributed and replicated workloads, such as Hadoop, Cassandra, and Kafka.

Spread – Strictly places a small group of instances across distinct underlying hardware to reduce correlated failures.

36
Q

Aurora endpoints

A

Cluster endpoint:

only one that can do writes. one cluster endpoint and one primary db instance

Reader endpoint:

one reader endpoint, LOAD BALANCING for read only connections.

Custom endpoint:

A set of DB instances you choose, you define which instances this endpoint uses, and what purpose the endpoint serves

Instance endpoint:

Specific DB instance within an aurora cluster. mainly use to diagnose or performance issues of one specific instance.

37
Q

DNS TTL

A

How long records can be cached for. We can store the record at a DNS resolver server to prevent searching the tree.

Authoritative - getting the rcord from the source that is trusted by DNS. get authoritative answer by talking to a name server that is authoratative for that particular domain.

TTL - Low values mean more queries against the name server, as we cache at the DNS resolver for less time, but longer TTL means more chance of the cached results being out of date.

38
Q

R53 Health Checks and Fail over

A

HTTP/HTTPS and TCP

Monitor:

  • CloudWatch alarm status
  • Health of other health checks
  • Specific resource health checks

Based on:
- Response time
- Number of failed health checks.

Failovers

  • Active-Active:

All records have the same name, type, routing policy. When you want all resources available majority of time.

  • Active-Passive:

primary resource group available majority of time, secondary to be standby.

can have single resource for primary + secondary or multiple resources for primary + secondary.

39
Q

Aurora HA and FT

A
  • When Aurora Replicas across AZ, primary DB synchronously replicated across AZ to Aurora replicas to provide redundancy.
  • Failover-promotes primary or new primary
  • Self-healing data blocks and disks.
  • Auto-backup - 1 to 35 day retention
40
Q

Monitoring RDS

A

Subscribe to Amazon RDS events to be notified when changes occur with a DB instance, DB cluster, DB cluster snapshot, DB parameter group, or DB security group.
Database log files

RDS Enhanced Monitoring — Look at metrics in real time for the operating system.

RDS Performance Insights monitors your Amazon RDS DB instance load so that you can analyze and troubleshoot your database performance.

Use CloudWatch Metrics, Alarms and Logs

41
Q

gp2

Volume size
Max. Throughput/Volume (MiBs)
Max IOPS/Volume (IOPS)
Performance attribute

A

Volume size:
1gb - 16tb

Max Throughput/Volume:
250 MiBs

Max IOPS/Volume:
16000

Performance attribute:
IOPS

42
Q

st1

Volume size
Max. Throughput/Volume (MiB/s)
Max IOPS/Volume (IOPS)
Performance attribute

A

Volume size:
500gb - 16tb

Max Throughput/Volume:
500 MiBs

Max IOPS/Volume:
500

Performance attribute:
MiB/s

43
Q

io1

volume size
Max. Throughput/Volume (MiB/s)
Max IOPS/Volume (IOPS)
Performance attribute

A

Volume size:
4gb - 16tb

Max Throughput/Volume:
1000 MiBs

Max IOPS/Volume:
64000

Performance attribute:
IOPS

44
Q

sc1

volume size
Max. Throughput/Volume (MiB/s)
Max IOPS/Volume (IOPS)
Performance attribute

A

Volume size:
500gb - 16tb

Max Throughput/Volume:
250 MiBs

Max IOPS/Volume:
500

Performance attribute:
MiB/s

45
Q

Data Lifecycle Manager

A

A service that automates the creation of Amazon EBS snapshots on a regular basis

46
Q

Cloudwatch agent

A

An agent/program that monitors the available swap space of your Amazon EC2 instances.

47
Q

Endpoint policy

A

A type of policy that controls which AWS principals (AWS accounts, IAM users, and IAM roles) can use the VPC endpoint to access the endpoint service.

48
Q

AWS Datasync

A

A service which improves the speed users transfer data from an on-premise data centre to AWS in a cost effective manner.

49
Q

OpenSearch Service

A

OpenSearch is a open source and Apache

Analytics suite, lots of use cases, real-time application monitoring, log analytics, and website search.

50
Q

Can you enable hibernation mode after you’ve created an EC2 instance?

A

NO

51
Q

Which SSE method provides an audit trail?

A

SSE-KMS

AWS Solutions Architect Flashcards (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions