AWS_Udemy Flashcards
In the context of IAM what are users?
End users (think people)
In the context of IAM what are groups?
a collection of users under the same set of permissions
In the context of IAM what are roles?
grant permission to entities that you trust which are not a part of the AWS account.
In the context of IAM what are policies?
a document that defines one or more permission
what keys are used to programatically control AWS?
access key ID and secret access key ID
when logging into the console what pieces of authentication will you use?
username and pasword
4 examples/ situaions where you’d apply roles
- IAM user from another account. 2. Application code running on AWS instance that needs to perform actions on AWS resources. 3. An AWS service that needs to act on resources in your account to provide it’s features. 4. Users from a corporate account who use idendity federation with SAML.
in the context of IAM what are power users
access to all AWS services except for management of groups and users within IAM
What elements does an S3 object consist of?
Key, value, versionID, metadata (who owns the files), sub resources (accss control list and torrents)
what’s the value of the key in the context of an S3?
The name of the object
Whats contained in the value in the context of an S3 object?
The data that is made up of a sequence of bytes.
What are the different storage classes in s3
S3 standard, s3 standard IA, s3 zone iA, amazon glacier.
What’s the hireacrhy in terms of s3 storage classes from best to worst?
s3 standard (3 9 availability and 11 9 durability) > S3 IA (data accessed less frequenly but need rapidly when accessed) > s3 one zone IA > Glacier (archival only - takes 3-5 hours for retrival)
what all are you charged for in s3
storage (per gig), requests (number of people pulling data), if tagged (metadata), to transfer data between region (cross region replication), transfer accelaration (transmit files through amazon’s backbone network thereafter)
what are the three different pricing models for ec2
on-demand, reserved, spot, dedicated hosts
