Basics Flashcards
6 Advantages of Cloud Computing
- No upfront costs, pay as you consume
- Economies of Scale
- No need to guess capacity.
- Speed. Only a few clicks to increase size
- No paying for physical data centers
- Global with ease.
Types of Cloud Computing
- Software as a Service (SaaS)
- Office 365, Gmail etc - Platform as a Service (PaaS)
- Heroku etc - Infrastructure as a Service (Iaas)
- AWS, Azure, GCP
Cloud Deployment Models
Cloud - For Startups
Hybrid - For Banks
On-Premise - For Gov and other super sensitive areas like hospitals
What is GovCloud
A region or regions that only allows customers that pass a screening process, and are operated by US citizens on US soil. For government information
The four EC2 Pricing Models
- On-Demand
- Spot
- Reserved Instances (RI) (aka savings plan)
- Dedicated
What is the EC2 pricing model with the least commitment?
On-Demand. It is low-cost and flexible. Pay per hour. Short-term.
Which EC2 pricing model is the best long-term value?
RI. Stead and predictable. Can resell unused RI in the RI Market Place. 1 or 3 year. Payment options. Class offerings (different options for flexibility)
Which EC2 pricing model offers the biggest savings?
Spot. These are discounted because AWS isn’t using them for a regular customer, but once they are needed, AWS can terminate them from you. f
Which EC2 pricing model is the most expensive?
Dedicated. You have dedicated hardware to yourself.
What are the 4 AWS Support Plans?
- Basic - Free
- Developer - $20 /month
- Business - $100 /month
- Enterprise - $15,000/month
Of the 4 AWS Support Plans, which ones have third party support?
Business and Enterprise
Of the 4 AWS Support Plans, which ones have Tech Support via chat or phone 24/7
Business and Enterprise
Of the 4 AWS Support Plans, which ones have a personal concierge and TAM (Technical Account Manager)
Enterprise
Of the 4 AWS Support Plans, which ones have only 7 trusted advisor checks?
Basic and Developer
In the AWS Support Plans, what are the response times for General Guidance?
<24 Hours (All but Basic plan)
In the AWS Support Plans, what are the response times for System Impaired?
<12 Hours (All but Basic plan)
In the AWS Support Plans, what are the response times for Production System Impaired
<4 Hours (Business and Enterprise Only)
In the AWS Support Plans, what are the response times for Production System Down?
<1 Hour (Business and Enterprise Only)
In the AWS Support Plans, what are the response times for Business-Critical System Down?
<15 Minutes (Enterprise Only)
What does the AWS Basic support plan have included?
Email support only for Billing and Account
What are the 5 categories a Trusted Advisor can help you with?
- Cost Optimization
- Security
- Performance
- Fault Tolerance
- Service Limites
What is the AWS Networking Hierarchy?
AWS Account>Region>VPC>Availability Zone>Subnets&Security Group>Services (EC2, RDS etc)
What are the database services?
DynamoDB - NoSQL key/value database
DocumentsDB - NoSQL Document database. MongoDB compatible
RDS (Relational Database Service)
- Aurora - MySQL and PSQL database, fully managed
- Aurora Serverless - only runs when you need it, like lamda
Neptune - managed graph database
Redshift - columnar database, petabyte warehouse
ElastiCache - Redis or Memcached database
What is provisioning?
The allocation or creation of resources and services to a customer
What are some AWS Provisioning services?
Elastic Beanstalk OpsWorks CloudFormation AWS QuickStart AWS Marketplace
AWS Computing Services
EC2 (Elastic Compute Cloud) ECS (Elastic Container Service) Fargate EKS (Kubernetes as a Service) Lamda Elastic Beanstalk AWS Batch
AWS Storage Services
S3 - Simple Storage Service
S3 Glacier - Like S3, but cheaper and much slower
Storage Gateway - Hybrid cloud storage with local caching
EBS (Elastic Block Storage) - virtual harddrive in the cloud you attach to EC2 instances
EFS (Elastic File Storage) - file storage that can attached to multiple EC2 instances at the same time
Snowball - Physically migrate lots of data via a computer suitcase 50-80 TB
- Snowball Edge - better version of snowball 100TB
- Snowmobile - Shipping container, pulled by a semi trailer 100PB
Business Centric Services
Amazon Connect - Call center
WorkSpaces - virtual remote desktop
WorkDocs - Content creation and collaboration service
Chime - online meetings and video conferencing
WorkMail - business email
Pinpoint - marketing, sending targeted email, sms, etc
SES - Simple email service
QuickSight - connect multiple datasources quickly and visualize data in the form of graphs
Enterprise Integration Services
Direct Connect - dedicated gigabit network connection from your premises to AWS
VPN - secure connection to your AWS network
Storage gateway - hybrid storage service that enables you to use your on premises apps to use AWS
Active Directory - enables your directory-aware workloads and AWS resources to use managed Active Directory in the AWS Cloud
AWS Logging Services
CloudTrail - logs all API calls. Know who did what with the AWS services. (who can we blame?)
CloudWatch - collection of multiple services
- CW Logs - performance data about AWS service
- CW Metrics - time ordered set of data points
- CW Events - trigger event based on condition
- CW Alarms - triggers notification based on metrics
- CW Dashboard - create visualizations based on metrics
Shared Responsibility Model
Customers are responsible for security IN the cloud (data, config).
AWS is responsible for security OF the cloud (hardware, operation of managed services, global infrastructure)
AWS Compliance Programs
Things like HIPPA and PCI
https://aws.amazon.com/compliance/programs/
AWS Artifact
No cost, self service portal for on-demand access to AWS compliance reports
Amazon Inspector
How to prove an EC2 instance is harden. (hardening is the act of eliminating as many security risks as possible). Runs a security benchmark.
AWS WAF
WAF = Web Application Firewall. Can be attached to either CloudFront or an Application Load Balancer. Protects web apps from attacks covered in the OWASP top 10 most dangerous attacks. Can write your own rules or buy a ruleset
AWS Shield
Managed DDoS protection. The standard level is free for all customers and automatically enabled when you route your traffic through route 53 or CloudFront
Shield Advanced is 3000 a year and is used for protection against larger/more sophisticated attacks. Not available for all AWS services like standard is.
https://aws.amazon.com/shield/getting-started/
Penetration Testing
Authorized simulated cyber-attack on a computer system to evaluate security of the system.
GuardDuty
A threat detection service that monitors for suspicious activity.
Key Management Service (KMS)
A managed service that makes it easy for you to create and control the encryption keys used to encrypt your data
- KMS is a multi-tenant HSM (hardware security model)
- Many AWS services are integrated with KMS
- KMS uses envelope encryption
Amazon Macie
Macie is a fully managed service that continuously monitors S3 data access activity for anomalies, and generates detailed alerts when it detects risk of unauthorized access or inadvertent data leaks.
Security Groups vs NACLS
Security Groups - Firewall at instance level. Denies everything unless you say otherwise
NACLs - Firewall at subnet level. You say what is allowed and what isn’t allowed.
AWS VPN
Lets you establish a secure and private tunnel from your network or device to the AWS global network
- Site to Site: connect on-premises network or branch office site to VPC
- Client VPN: connect users to AWS or on-premises networks
Cloud * Services (similar names, different services)
- Cloud Formation: infrastructure as code
- Cloud Trail: logs all api calls (who did what)
- Cloud Front: Content distribution network. Creates a cached copy of your website and copies to servers located near those trying to download your site
- Cloud Watch: Collection of multiple services like logs, metrics, events, alarms, dashboard
- Cloud Search: Search engine you can add