AWS-Tech Concepts Flashcards
What is an AWS Availability Zone?
An Availability Zone (AZ) is a logical group of one or more data centres with redundant power, networking and low-latency connectivity.
What is Cloud Computing?
Cloud Computing is the on-demand delivery of IT resources and applications, via the internet, with pay as you go pricing.
What is Cloud Formation
Cloud Formation is an AWS service that enables the creation of templates and automate the provisioning of environments.
What are characteristics of Elasticity ?
- scale resources up or down easily.
- quick deployment
- instantly scale up
- instantly shut down resources that are no longer required.
What is Fault Tolerance?
Is the property that enables a system to continue operating properly in the event of a failure of one or more of its components.
What is an AWS Region?
A geographical location in the world, that can contain 1 or more availability zones.
What is CloudFront?
Amazon CloudFront is a web service that accelerates distribution of content.
CloudFront delivers your content through a worldwide network of data centers called edge locations, located in high-populated areas.
What are Edge Locations?
Edge locations are Data centers located in highly populated areas where Amazon deploys it’s CDN - Cloud front and DNS service.
What services are run at the edge locations?
- Amazon Route 53
- Cloudfront
- AWS WAF
- AWS Shield
What are reserved instances ?
Purchased instances with a 1-3 year term at a significant discount.
What are Scheduled Instances ?
Purchased instances that are always available on the specified recurring schedule. 1 year term only.
What are spot instances?
Spot instances are unused instances in AWS, that customers can use intermitently.
The instance runs as long as possible, provided your price request is above the spot price.
This is ideal for workloads that can be interrupted.
What are dedicate instances ?
Dedicated Instances are EC2 Instances that run in a VPC, on hardware that’s dedicated to a single account (customer).
What are dedicated hosts?
pay for a physical host, single tenant.
What is a VPC ?
A VPC is a virtual private network, dedicated to your AWS account.
What is SSE ?
Server Side Encryption (SSE) * Amazon S3 Managed keys (SSE-S3) * KMS (SSE-KMS) (provides audit logs) * Customer-Provided Keys (SSE-C)
What is RRS ?
Reduced Redundancy Storage
What is the availability on RRS?
99.99%
What is the durability of RSS?
99.99%
What is the durability of S3?
99.999999999%
What is the availability on S3?
99.99%
What is the minimum files size on S3?
1 Byte
What’s the meaning of PCI-DSS?
Payment Card Industry - Data Security Standard
What is AWS Organizations?
AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.
How many ways are there to share S3 buckets accross accounts?
There are 3 possible ways, 2 programmatic only and one programmatic and console
What are 3 ways of sharing buckets accross accounts?
- Bucket Policies and IAM:
- applies to entire bucket
- Programmatic access only
- Bucket ACLs and IAM
- Individual Objects
- Programmatic access only
- Cross-account IAM Roles
- Programmatic and console.
What is a region ?
A region is a physical location in the world with 2 or more availability zones.
What is an Availability Zone ?
An Availability Zone is a discreet data centre, with redundant power, networking and connectivity. Two Availability zones that are within a few miles of each other are classified as the same availability zone.
What is an Edge Location ?
1)These are endpoint which AWS uses to cache content. 2) Cloudfront is the technology behind this. 3) This is a content delivery Network
What are best practices of the root account?
- Enable MFA
- Use a stron password
- Use it for billing purposes only
- Do not deploy resources into the paying account.
- Use Service Control Policies (SCP) on OU or on individual accounts.
What does SAML stands for?
Security Assertion Markup Language
What is SAML and how does AWS uses it?
SAML allows federated users to authenticate and use AWS resources.
In what language are policy documents written?
JSON
What can you do to prevent your billing from exceding X amount?
By setting a billing alarm, which uses an SNS notification.
- Log in to your account.
- Go to North Virginia
- Go to CloudWatch - > Billing
- Create an Alarm, set up your threshold
- Create a new SNS notification.
- Confirm your email
