AWS Storage Flashcards

1
Q

what are the 7 Primary Storage Related Services in AWS?

A
  1. Amazon S3
  2. Amazon Glacier
  3. Amazon Elastic File System (EFS)
  4. Amazon Fix
  5. AWS Storage Gateway
  6. AWS Snow Family
  7. AWS DataSync
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is AWS Simple Storage Service (S3)?

A

An object storage service which provides inexpensive and reliable storage that can be integrated with operations ran within and external to AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an object storage service?

A

Provides a flat surface on which to store data and data metadata without managing the complexity of an underlying operating system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a block storage service?

A

Provides a chunked data management scheme using a file system and and underlying operating system to serve and retrieve data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you create folder structures within AWS S3?

A

Folders can be created in this block storage service by adding a “/” delineator to the file path of a desired file at the point of creation. You also need a prefix (folder name) before the delineator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the maximum file size for AWS S3?

A

Individual files in this object storage service may not be larger than 5 terabytes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the maximum bucket size for AWS S3?

A

There is no maximum total dataset size for this object storage service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS S3 Multipart Upload?

A

This tool provides a safe mechanism to upload large files into the object storage service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Amazon S3 Transfer Acceleration?

A

This tool routes uploads to AWS Object Storage services using a geographically proximate AWS edge location to improve performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the Primary Server Side encryption models for AWS S3?

A
  1. Server Side Encryption with AWS KMS Managed Keys
  2. Server Side Encryption with AWS S3 Managed Keys
  3. Server Side Encryption with Customer-Provided Keys
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS S3 Server Side Encryption with AWS KMS Managed Keys (SSE-S3)?

A

This is a platform where AWS uses AWS S3 Managed Keys, with the addition of an envelope key is added for additional security, along with a full audit trail tracking key usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is AWS S3 Server Side Encryption with AWS S3 Managed Keys (SSE-KMS)?

A

This is a platform where AWS uses its own enterprise standard keys to manage every step of the encryption and decryption process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS S3 Server Side Encryption with Customer-Provided Keys (SSE-C)?

A

This is a process which lets you bring your own keys for S3 to use when applying encryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS S3 SSE-S3?

A

This is Server Side Encryption with AWS S3 Managed Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS S3 SSE-KMS?

A

This is Server Side Encryption with AWS KMS Managed Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS S3 SSE-C?

A

This is Server Side Encryption with customer maintained keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is AWS S3 Client Side Encryption?

A

A platform for encrypting data prior to its transfer to S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How is AWS S3 Client Side Encryption Managed?

A

Client Side Encryption for S3 is managed using a KMS-Managed Customer Master Key. Which you provide through the AWS S3 encryption client.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How are AWS S3 Events logged?

A

By default, they are not logged. But if needed, they can be turned on. This is managed by deploying logs to a designated S3 Bucket

20
Q

What actions does AWS S3 Logging track?

A
  1. The Account and IP Address of the requestor
  2. The Source Bucket Name
  3. The Action requested
  4. The Time the request was issued
  5. The Response Status (including error code)
21
Q

What are the two standards of Durability for AWS S3?

A
  1. S3 and Glacier promise 11 nines of durability.
  2. S3 One-Zone-IA promises 9 nines of durability.
22
Q

What is AWS S3 Durability a measure of?

A

This is a measure of the integrity of files within AWS S3. Essentially a statistic which measures the percent chance that the files will not be corrupted or destroyed.

23
Q

What is AWS S3 Availability a measure of?

A

This is a measure of the ability to access files within AWS S3. Essentially a statistic which measures the percent chance that the files will be retrieved at any given time of request.

24
Q

What are the 4 standards for AWS S3 Availability?

A
  1. S3 Standard - 99.99% Available
  2. S3 Standard-IA 99.9% Available
  3. S3 One Zone-IA 99.5% Available
  4. S3 Intelligent-Tiering 99.9% Available
25
Q

What is Eventually Consistent Data?

A

The process by which AWS S3 replicates data across multiple locations, resulting in brief delays while updating or deleting existing objects while data propagates across the AWS S3 service.

This process does not affect new files.

26
Q

What is AWS S3 Object Versioning?

A

A process that allows access to previous editions of an object stored in an S3 bucket. These previous editions are stored indefinitely by default.

27
Q

What is AWS S3 Life Cycle Management?

A

A process that allows older S3 objects to be moved to slower performance bulk storage and then eventually deleted over time based off of frequency of object access requests.

28
Q

What is AWS S3 Access Control?

A

The permissions assigned to an S3 bucket, allowing the account that generated the bucket permission to objects, while limiting or denying other accounts and web requests.

29
Q

What are the three mechanisms for AWS S3 Access Control

A
  1. Access Control Lists
  2. S3 Bucket Policies
  3. Identity And Access Management (IAM) Policies
30
Q

What is an AWS S3 Access Control List?

A

A now deprecated tool for assigning permissions line by line to an AWS S3 bucket.

31
Q

What is an AWS S3 Bucket Policy?

A

A JSON formatted text document attached to an S3 bucket which defines who can and can not access an S3 bucket.

32
Q

What is an AWS S3 IAM Policy?

A

An extension of the AWS IAM roles and policies which provide users with inherited access to an AWS S3 bucket.

33
Q

What is an AWS S3 Pre-signed URL?

A

A URL which allows temporary access to an object in an S3 bucket that is otherwise private.

34
Q

What is AWS S3 Glacier?

A

A service for cheaper, long term storage than traditional S3 object storage. Generally considered archival storage.

35
Q

What are the 3 Tiers of AWS S3 Glacier?

A
  1. Glacier Instant
  2. Glacier Flexible
  3. Deep Archive
36
Q

What is S3 Storage Rotation?

A

As data becomes less frequently accessed, it is dynamically moved from one tier of storage to a less performative tier, and over time is moved into a deep archive, and potentially even deleted.

37
Q

What is Amazon Elastic File System (EFS)?

A

A service providing automatically scalable and sharable file storage accessible from Linux instances. Intended to be accessed within a VPC via NFS mounts on an EC2 Linux instance.

38
Q

What is Amazon FSx?

A

A collection of services which provide file network file storage for a variety of use cases

39
Q

What is AWS Storage Gateway?

A

A platform providing the ability backup and archive data within a local datacenter to cloud storage services. Appears on the network as a network attached tape drive array, and the data is stored in S3 or EBS. Can also be maintained in a local cache to make data locally available as well.

40
Q

What is AWS SNOW?

A

A platform which allows physical data transfer from a local data center to an AWS data center.

41
Q

What are the three tiers of AWS Snow?

A
  1. Snowcone
  2. Snowball
  3. Snowmobile
42
Q

What is AWS DataSync?

A

A platform providing a simple method to move on-premises data to an AWS Account. Can drop many kinds of data dynamically into any service within AWS.

43
Q

How many S3 buckets are allowed per account?

A

100 S3 Buckets

44
Q

What are the constraints of the AWS S3 Durability Promise?

A

Durability covers the physical infrastructure

45
Q

What is an S3 IAM Principal?

A

The S3 entity to which bucket access is assigned.

46
Q

What is the default life of a pre-signed S3 URL?

A

The pre-signed URL duration is 3,600 seconds (one Hour)

47
Q

How long does Deep Glacier Access Take?

A

Data retrieval should take no longer than 12 hours.