CCP Flashcards
IAM Users
mapped to a physical user, has a password for AWS Console
IAM Groups
Containers users only
IAM Policies
JSON document that outlines permissions for users or groups
IAM Policies
Effect
Whether the statement allows or denies access (Allow, Deny)
IAM Policies
Principal
account/user/role to which this policy applies to
IAM Policies
Action
list of actions this policy allows or denies
IAM Policies
Resource
List of resources to which the actions applied to
IAM Security
MFA + Password Policy
AWS CLI
manage your aws services using a programming language
Access Keys
access AWS services using a programming language
IAM Audit Tools
-IAM Credentials Report (account-level)
-IAM Access Advisor (user-level)
Ports to know
SSH (Secure Shell) - log into Linux instance
Port 22
Ports to know
FTP (File Transfer Protocol) - upload files into a file share
Port 21
Ports to know
SFTP (Secure File Transfer Protocol) - uploading files using SSH
Port 22
Ports to know
HTTP - access unsecured websites
Port 80
Ports to know
HTTPS - access secured websites
Port 433
Ports to know
RDP (Remote Desktop Protocol) - log into a windows instance
Port 3389
What is a EC2 instance made of
AMI (OS) + Instance Size (CPU + RAM) + Storage + security groups + EC2 User Data
What is a security Group
Firewall attached to the EC2 instance
What is EC2 User Data
Script launched at the first start of an instance
EBS Volume
(Elastic Block Storage Volume)
-Network drives attached to one EC2 instance at a time
-Mapped to Availability Zones
-Can use EBS Snapshots for backups / transferring EBS volumes across AZ
AMI
(Amazon Machine Image)
Create Ready to use EC2 instances with our customizations
EC2 Image Builder
Automatically build, test, and distribute AMI’s
EC2 Instance Store
-High performance hardware disk attached to our EC2 instance
-Lost if our instance is stopped / terminated
EFS
(Amazon Elastic File System)
Network file system, can be attached to 100s of instanced ina region
EFS-IA
Cost optimized storage class for infrequent accessed files
FSx for Windows
Network File system for windows servers
FSx for Lustre
High performance computing linux file system
High Availability
Run instances for same application cross multi AZ incase of failure
Scalability
Ability to accommodate a larger load by making the hardware stronger (scale up), or by adding nodes (scale out)
Elasticity
Once a system is scalable, elasticity means that there will be some “auto-scaling” so that the system can scale based on the load. This is “cloud-friendly”: pay per use, match demand, optimize costs
Agility
(not related to scalability - distractor on exam) new IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes.
ELB
(Elastic Load Balancers)
-Distribute traffic across backend EC2 instances, can be Multi-AZ
-Supports health checkers
-3 types: Application LB (HTTP - L7), Network LB (TCP - L4), Classic LB (old)
ASG
(Auto Scaling Groups)
-Implement Elasticity for your application, across multiple AZ
-Scale EC2 instances based on the demand on your system, replace unhealthy
-Integrated with the ELB
S3 Buckets
-Globally unique name (across all regions all accounts)
-Created in a region
S3 Objects
-Objects (files) have a key
-The key is the FULL url path
-The key is composed of a prefix + object name
-There’s no concept of directories within buckers although the UI will trick you to think otherwise.
S3 security
IAM policy, S3 Bucket Policy (public access), S3 Encryption
S3 Websites
Host a static website on Amazon S3
S3 Versioning
multiple versions for files, prevent accidental delete
S3 Replication
same-region or cross-region, must enable versioning
S3 Storage classes
Standard, IA, IZ-IA, Intelligent, Glacier (Instant, Flexible, Deep)
SnowFamily
import data onto S3 through a physical device, edge computing
OpsHub
Desktop application to manage Snow Family Devices
Storage Gateway
Hybrid solution to extend on-premises storage to S3
Databases
Relational Databases OLTP SQL
(Online Transactional Processing)
RDS managed service for MySQL, MAriaDB, etc
Aurora (SQL) proprietary database optimized for cloud
Databases
Read Replicas
Scale the read workload of your DB
Can create up to 5 read replicas
Data is only written to main DB
Databases
Multi-AZ
Failover in case of AZ outage (High availability)
Data is only read/written to main database
Can only have 1 other AZ as failover
Databases
Multi-Region
MultiRegion (Read Replicas)
Disaster Recovery in case of region issue
Local performance for global reads
Replication cost
Databases
In-memory Database
ElastiCache
Databases
Key/Value Database
DynamoDB (serverless) & DAX (Cache for DynamoDB)
Databases
Warehouse OLAP
(Online Analytical Processing): Redshift SQL
Databases
Hadoop Cluster
EMR (Elastic MapReduce)
Databases
Athena
Query data on Amazon S3 (serverless & SQL)
Databases
QuickSight
Dashboards on your data (Serverless)
Databases
DocumentDB
“Aurora for MongoDB” (JSON - NoSQL database
Databases
Amazon QLDB
(Quantum Ledger Database)
Financial Transactions Ledger, like centralized blockchain
Databases
Amazon Managed Blockchain
Managed HyperLedger Fabric & Ethereum blockchains`
Databases
Glue
Managed ETL (Extract Transform Load) and Data Catalog service
Databases
DMS
Database Migration
Databases
Neptune
Graph database used websites like wikipedia, facebook
Docker
container technology to run applications
ECS
(Elastic Container Service)
run Docker containers on EC2 instances you provision and maintain
Fargate
-Run Docker containers without provisioning the infrastructure
-Serverless offering (no EC2 instances)
ECR
(Elastic Container Registry)
Private Docker Images Repository
Batch
run batch jobs on AWS across managed EC2 instances
Lightsail
-predictable & low pricing for simple application & DB stacks
-AWS for dummies
Lambda
Lambda is Serverless, Function as a Service, seamless scaling, reactive
Lambda Billing
(pay per call or pay per duration)
By the time run multiplied by the RAM provisioned
By the number of invocations
CloudFormation
(AWS only)
-Infrastructure as Code, works with almost all of AWS resources
-Repeat across Regions & Accounts
Beanstalk
(AWS only)
-Platform as a Service (PaaS), limited to certain programing languages or Docker
-Deploy code consistently with a known architecture
CodeDeploy
(Hybrid)
Deploy & upgrade any app onto servers
Systems Manager
(Hybrid)
patch, configure, and run commands at scale
OpsWorks
(Hybrid)
managed Chef and Puppet in AWS
CodeCommit
Store code in private git repository (version controlled)
GitHub for AWS
CodeBuild
Build & test code in AWS