AWS Workflows Flashcards

1
Q

Target Tracking or Step Scaling

A
  • AWS recommends Target tracking over Step scaling.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Predictive scaling vs Dynamic scalling

A
  • Predictive uses ML

- Dynamic uses metrics like CPU Untilization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

NLB - Network Load Balancer

A
  • Layer 4 Routing
  • TCP/UDP
  • Ultra low latency
  • Static IPs in the VPC
  • Uses VPC Endpoint Services
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

ALB - Application Load Balancer

A
  • Layer 7 Routing
  • Http
  • Cross zone by default
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Auto Scaling Cooldown

A
  • Default 5 mins
  • Amount of time scaling waits before taking action
  • configurable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

WAF - Web Application Firewall

A
  • Rules to filter web traffic
  • Ips, http headers, body, customer urls, location
  • Plugs into ALB
  • used to block common exploits like SQL injection / Cross sight scrip
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

SQS - Simple Queue Service

A
  • Poll based messaging
  • used to decouple web tier and app tier
  • retention default 4 days ( 1min to 14 days)
  • Short and Long Polling
  • Message deleted on successful returns
  • inflight encryption
  • encryption at rest can be configured with KMS - not default
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

SQS - Hides the message before consumers can process

A
  • Delivery Delay
  • Default is 0
  • up to 15 mins
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

SQS - Locks message so other consumers can’t process it

A
  • Visibility Timeout
  • Locks message so other consumers can’t process it
  • Default is 30 seconds
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

SQS - Short Polling

A
  • Reads the queue if no messages disconnects

- Default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

SQS Long Polling

A
  • Connect and wait for messages
  • Must configure
  • Can reduce cost
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

SQS - Standard

A
  • Best effort ordering
  • Might get a message twice
  • Unlimited transactions per second
  • Lower cost
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

SQS - FIFO

A
  • Messages are ordered
  • No message duplicates
  • 300 messages per second
  • 3000 messages if batched
  • cost more
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

SQS - Dead Letter

A
  • Used to sideline message that won’t process
  • max receives before being added to DL
  • cloud watch alarms on DL
  • can setup to notify vi SNS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

SQS Message Size

A

256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

SQS Queue Depth

A
  • Can trigger more subscribers via cloud watch events
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

SNS - Simple Notification Service

A
  • Push service to subscribers
  • used to fan out to SQS
  • encryption
  • access policies
  • typical use case email alerts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

NLB with SSL

A
  • Passes through

- Terminates on service such as ec2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

ALB with SSL

A
  • Terminates on ALB

- New connection to Service

20
Q

How many messages per sec can a fifo aws support?

A

300 or 3000 if batching

Or

3000 or 30,000 with high throughput

21
Q

Protocols used by SNS

A

Http/https
JSON-email
SQS
SMS

22
Q

How do you update a launch configuration with a new ami?

A

You don’t. You create a new one and update the asg to use the new configuration

23
Q

Can an asg be modified once defined?

A

Yes

24
Q

Can you add running ec2 instances to an asg?

A

Yes

25
Q

Adding a target group with running instances to an asg fails. Why?

A

The max capacity configuration was exceeded

26
Q

How is cache enabled on api gateway

A

Create a cache for a stage and configure a ttl

27
Q

An asg has only one subnet with ec2 instances running after creating the infrastructure. Why?

A

Only one subnet was added to the asg

28
Q

How can alb support OIDC idp such as google and Facebook

A

Creat authentication action on listener rule that configures an aws cognitive pool

29
Q

Does sqs support encryption?

A

Yes
Default in flight
Rest with KMS not default

30
Q

Does SNS support encryption

A

Yes

31
Q

How can you limit excessive api usage from a single customer in API Gateway

A

Use a client throttle

32
Q

Internet facing ELB

A

Nodes have public IPs
Routes traffic to private
Needs 1 public subnet in each ax where elb is defined

33
Q

Internal facing ELB

A

Nodes have private IPs

Routes to private IPs

34
Q

ALB can target what resources

A

EC2
IP address
Lambda
ECS

35
Q

NLB can target what resources

A

EC2

IP address

36
Q

NLB nodes have what kind of IPs in each subnet

A

Elastic IP

37
Q

SQS type for request-response message pattern

A

SQS temporary queues - used for higher throughput

38
Q

Set of spot and optionally on demand instances launch to meet target demand

A

Spot fleet

39
Q

WAF supports rules on

A

WAF, security groups, shield

40
Q

Two classes of service. Process class a requests over class b requests using sqs?

A

Two sqs queues. Prioritize polling if the higher class

41
Q

What AWS service can assist with coordinating tasks across distributed application components?

A

SWF

42
Q

Lambda supports how many concurrent executions per aws account

A

1000

43
Q

What types of IPs are valid targets for an alb

A

Private

44
Q

Does SNS have a fifo version?

A

Yes

45
Q

Does SNS fifo guarantee order?

A

Yes