CCP Flashcards

1
Q

Define Availability Zone

A

Global Infrastructure composed of one or more discrete data centers with redundant power, networking, and connectivity, and are used to deploy infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Types of Cloud Computing

A

Infrastructure, platform and software as a service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Infrastructure as a service

A
  • Provide building blocks for cloud IT
  • Provides networking, computers, data storage space
  • Highest level of flexibility
  • Easy parallel with traditional on-premises IT
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Platform as a Service

A
  • Removes the need for your organization to manage the underlying infrastructure
  • Focus on the deployment and management of your applications
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Software as a Service

A
  • Completed product that is run and managed by the service provider
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the five characteristics of cloud computing?

A
  • On-demand self service:
  • Users can provision resources and use them without human interaction from the service
    provider
  • Broad network access:
  • Resources available over the network, and can be accessed by diverse client platforms
  • Multi-tenancy and resource pooling:
  • Multiple customers can share the same infrastructure and applications with security and privacy * Multiple customers are serviced from the same physical resources
  • Rapid elasticity and scalability:
  • Automatically and quickly acquire and dispose resources when needed * Quickly and easily scale based on demand
  • Measured service:
  • Usage is measured, users pay correctly for what they have used
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 3 Pricing Fundamentals of AWS Cloud?

A
  • Compute:
  • Pay for compute time
  • Storage:
  • Pay for data stored in the Cloud
  • Data transfer OUT of the Cloud: * Data transfer IN is free
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the 4 points of consideration when choosing an AWS Region?

A
  1. Compliance with data and governance and legal requirements.
  2. Proximity to customers (latency)
  3. Available services and features within a Region
  4. Pricing.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Define Cloud Computing

A

On-demand availability of computer system resources, especially data storage (cloud storage), and computing power, without direct active management by the user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define IAM Roles

A

IAM entity that defines a set of permissions for making AWS service requests, that will be used by AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an IAM credential report?

A

IAM Credentials report lists all your account’s users and the status of their various credentials. The other IAM Security Tool is IAM Access Advisor. It shows the service permissions granted to a user and when those services were last accessed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are IAM Policies?

A

An IAM policy is an entity that, when attached to an identity or resource, defines their permissions.

Json documents to define users, groups, permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are EC2 Capabilities?

A
  • Renting virtual machines (EC2)
  • Storing data on virtual drives (EBS)
  • Distributing load across machines (ELB)
  • Scaling the services using an auto-scaling group (ASG)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is EC2 On Demand?

A
  • Pay for what you use:
  • Linux or Windows - billing per second, after the first minute * All other operating systems - billing per hour
  • Has the highest cost but no upfront payment
  • No long-term commitment
  • Recommended for short-term and un-interrupted workloads, where you can’t predict how the application will behave
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is EC2 Reserved?

A
  • Up to 72% discount compared to On-demand
  • You reserve a specific instance attributes (Instance Type, Region,Tenancy, OS) * Reservation Period – 1 year (+discount) or 3 years (+++discount)
  • Payment Options – No Upfront (+), Partial Upfront (++), All Upfront (+++) * Reserved Instance’s Scope – Regional or Zonal (reserve capacity in an AZ)
  • Recommended for steady-state usage applications (think database)
  • You can buy and sell in the Reserved Instance Marketplace
  • Convertible Reserved Instance
  • Can change the EC2 instance type, instance family, OS, scope and tenancy * Up to 66% discount
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is EC2 Savings Plan?

A
  • Get a discount based on long-term usage (up to 72% - same as RIs) * Commit to a certain type of usage ($10/hour for 1 or 3 years)
  • Usage beyond EC2 Savings Plans is billed at the On-Demand price
  • Locked to a specific instance family & AWS region (e.g., M5 in us-east-1)
  • Flexible across:
  • Instance Size (e.g., m5.xlarge, m5.2xlarge) * OS (e.g., Linux, Windows)
  • Tenancy (Host, Dedicated, Default)

one- or three-year hourly spend commitment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is EC2 Spot?

A
  • Can get a discount of up to 90% compared to On-demand
  • Instances that you can “lose” at any point of time if your max price is less than the current spot price
  • The MOST cost-efficient instances in AWS
  • Useful for workloads that are resilient to failure * Batch jobs
  • Data analysis
  • Image processing
  • Any distributed workloads
  • Workloads with a flexible start and end time
  • Not suitable for critical jobs or databases
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are EC2 dedicated host?

A
  • A physical server with EC2 instance capacity fully dedicated to your use
  • Allows you address compliance requirements and use your existing server- bound software licenses (per-socket, per-core, pe—VM software licenses)
  • Purchasing Options:
  • On-demand – pay per second for active Dedicated Host
  • Reserved - 1 or 3 years (No Upfront,Partial Upfront,All Upfront)
  • The most expensive option
  • Useful for software that have complicated licensing model (BYOL – Bring Your
    Own License)
  • Or for companies that have strong regulatory or compliance needs
    NOT FOR DISTRIBUTION © Stephane Maarek www.datacumulus.com
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are EC2 dedicated instances?

A
  • Instances run on hardware that’s dedicated to you
  • May share hardware with other instances in same account
  • No control over instance placement (can move hardware after Stop / Start)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are EC2 Security Groups?

A

security tool can you use to control traffic in and out of EC2 Instances

  • Security groups are acting as a “firewall” on EC2 instances
  • They regulate:
  • Access to Ports
  • Authorised IP ranges – IPv4 and IPv6
  • Control of inbound network (from other to the instance)
  • Control of outbound network (from the instance to other)
  • Can be attached to multiple instances
  • Locked down to a region / VPC combination
  • Does live “outside” the EC2 – if traffic is blocked the EC2 instance won’t see it
  • It’s good to maintain one separate security group for SSH access
  • If your application is not accessible (time out), then it’s a security group issue
  • If your application gives a “connection refused“ error, then it’s an application error or it’s not launched
  • All inbound traffic is blocked by default
  • All outbound traffic is authorised by default
  • 22 = SSH (Secure Shell) - log into a Linux instance
  • 21 = FTP (File Transfer Protocol) – upload files into a file share
  • 22 = SFTP (Secure File Transfer Protocol) – upload files using SSH
  • 80 = HTTP – access unsecured websites
  • 443 = HTTPS – access secured websites
  • 3389 = RDP (Remote Desktop Protocol) – log into a Windows instance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is EC2 Compute Optimized?

A

Compute Optimized EC2 instances are great for compute-intensive workloads requiring high performance processors, such as batch processing, media transcoding, high performance web servers, high performance computing, scientific modeling & machine learning, and dedicated gaming servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is EFS?

A

Amazon EFS is a fully managed service that makes it easy to set up, scale, and cost-optimize file storage in the Amazon Cloud.

EFS is ideal for storing dynamic files, such as code, configuration, logs, and databases, that require frequent updates or complex operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is EC2 Image Builder?

A

EC2 Image Builder is an automated pipeline for the creation, maintenance, validation, sharing, and deployment of Linux or Windows images for use on AWS and on-premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is EFS?

A

Elastic File System.
* Managed NFS (network file system) that can be mounted on 100s of EC2
* EFS works with Linux EC2 instances in multi-AZ
* Highly available, scalable, expensive (3x gp2), pay per use, no capacity planning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is EBS

A

Elastic Block Storage. * An EBS (Elastic Block Store) Volume is a network drive you can attach
to your instances while they run
* It allows your instances to persist data, even after their termination
* They can only be mounted to one instance at a time (at the CCP level)
* They are bound to a specific availability zone
* Analogy: Think of them as a “network USB stick”
* Free tier: 30 GB of free EBS storage of type General Purpose (SSD) or
Magnetic per month

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is FSx?

A

Amazon FSx makes it easy and cost effective to launch and run popular 3P file systems that are fully managed by AWS. It comes in two offerings: FSx for Windows File Server (used for business applications), and FSx for Lustre (used for high-performance computing).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is AMI?

A

An Amazon Machine Image (AMI) is a supported and maintained image provided by AWS that provides the information required to launch an instance. You must specify an AMI when you launch an instance. You can launch multiple instances from a single AMI when you require multiple instances with the same configuration. You can use different AMIs to launch instances when you require instances with different configurations.

An AMI includes the following:

One or more Amazon Elastic Block Store (Amazon EBS) snapshots, or, for instance-store-backed AMIs, a template for the root volume of the instance (for example, an operating system, an application server, and applications).

Launch permissions that control which AWS accounts can use the AMI to launch instances.

A block device mapping that specifies the volumes to attach to the instance when it’s launched.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is AMI? Tutorial Definition.

A
  • AMI = Amazon Machine Image
  • AMI are a customization of an EC2 instance
  • You add your own software, configuration, operating system, monitoring…
  • Faster boot / configuration time because all your software is pre-packaged
  • AMI are built for a specific region (and can be copied across regions)
  • You can launch EC2 instances from:
  • A Public AMI: AWS provided
  • Your own AMI: you make and maintain them yourself
  • An AWS Marketplace AMI: an AMI someone else made (and potentially sells)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

EBS Volumes can be attached to how many instances?

A

EBS Volumes can be attached to only one EC2 Instance, but EC2 Instances can have multiple EBS Volumes attached to them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is EC2 Instance Store?

A

An instance store provides temporary block-level storage for your instance. This storage is located on disks that are physically attached to the host computer. Instance store is ideal for temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content. It can also be used to store temporary data that you replicate across a fleet of instances, such as a load-balanced pool of web servers.

EC2 Instance Store has a better I/O performance, but data is lost if: the EC2 instance is stopped or terminated, or when the underlying disk drive fails.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is An EBS Snapshot?

A

EBS Snapshots are used to backup data on your EBS Volumes at a point in time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Define High Availability?

A

High Availability means applications running at least in two AZs to survive a data center loss.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is a network load balancer?

A

A Network Load Balancer can handle millions of requests per second with low-latency. It operates at Layer 4, and is best-suited for load-balancing TCP, UDP, and TLS traffic with ultra high-performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is Vertical Scaling?

A

Vertical scaling means increasing the size of the instance. Changing from a t3a.medium to a t3a.2xlarge is an example of size increase.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is an ASG?

A

An Auto Scaling Group (ASG) can automatically and quickly scale-in and scale-out to match the changing load on your applications and websites.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the 4 kinds of Load Balancers?

A

Application Load Balancer (HTTP / HTTPS only) – Layer 7
* Network Load Balancer (ultra-high performance, allows for TCP) – Layer 4
* Gateway Load Balancer – Layer 3
* Classic Load Balancer (retired in 2023) – Layer 4 & 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

The goal of an Auto Scaling Group (ASG) is to:

A
  • Scale out (add EC2 instances) to match an increased load
  • Scale in (remove EC2 instances) to match a decreased load
  • Ensure we have a minimum and a maximum number of machines running
  • Automatically register new instances to a load balancer
  • Replace unhealthy instances
  • Cost Savings: only run at an optimal capacity (principle of the cloud)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Auto Scaling Groups – Scaling Strategies

A
  • Manual Scaling: Update the size of an ASG manually
  • Dynamic Scaling: Respond to changing demand
  • Simple / Step Scaling
  • When a CloudWatch alarm is triggered (example CPU > 70%), then add 2 units
  • When a CloudWatch alarm is triggered (example CPU < 30%), then remove 1
  • Target Tracking Scaling
  • Example: I want the average ASG CPU to stay at around 40%
  • Scheduled Scaling
  • Anticipate a scaling based on known usage patterns
  • Example: increase the min. capacity to 10 at 5 pm on Fridays
  • Predictive Scaling
  • Uses Machine Learning
    to predict future traffic
    ahead of time
  • Automatically
    provisions the right
    number of EC2
    instances in advance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What does an Elastic Load Balancers (ELB) do?

A
  • Distribute traffic across backend EC2 instances, can be Multi-AZ
  • Supports health checks
  • 4 types: Classic (old), Application (HTTP – L7), Network (TCP – L4), Gateway (L3)

spreads load across multiple downstream instances

handles failure of downstream instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What are the S3 storage classes?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Glacier Instant Retrieval
  • Amazon S3 Glacier Flexible Retrieval
  • Amazon S3 Glacier Deep Archive
  • Amazon S3 Intelligent Tiering
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is Aws Storage Gateway?

A

AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is the AWS Snow Family?

A
  • Highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is Snowball Edge

A
  • Physical data transport solution: move TBs or PBs of data in or out
    of AWS
  • Alternative to moving data over the network (and paying network
    fees)
  • Pay per data transfer job
  • Provide block storage and Amazon S3-compatible object storage
  • Snowball Edge Storage Optimized
  • 80 TB of HDD capacity for block volume and S3 compatible object
    storage
  • Snowball Edge Compute Optimized
  • 42 TB of HDD or 28TB NVMe capacity for block volume and S3
    compatible object storage
  • Use cases: large data cloud migrations, DC decommission, disaster
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is Snowcone/Snowcone SSD

A

AWS Snowcone & Snowcone SSD
* Small, portable computing, anywhere, rugged & secure,
withstands harsh environments
* Light (4.5 pounds, 2.1 kg)
* Device used for edge computing, storage, and data
transfer
* Snowcone – 8 TB of HDD Storage
* Snowcone SSD – 14 TB of SSD Storage
* Use Snowcone where Snowball does not fit (spaceconstrained
environment)
* Must provide your own battery / cables
* Can be sent back to AWS offline, or connect it to
internet and use AWS DataSync to send data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

AWS Snowmobile

A
  • Transfer exabytes of data (1 EB = 1,000 PB = 1,000,000 TBs)
  • Each Snowmobile has 100 PB of capacity (use multiple in parallel)
  • High security: temperature controlled, GPS, 24/7 video surveillance
  • Better than Snowball if you transfer more than 10 PB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What are Access Keys used for?

A

Access Keys are used to sign programmatic requests to the AWS CLI or AWS API.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Where are objects stored in Amazon S3?

A

Buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is Storage Gateway?

A

S3 hybrid solution to extend on-premises storage to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What do you use a S3 bucket policy for?

A
  • Grant public access to the bucket
  • Force objects to be encrypted at upload
  • Grant access to another account (Cross
    Account)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What are Lifecycle Rules?

A

Lifecycle Rules can be used to define when S3 objects should be transitioned to another storage class or when objects should be deleted after some time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

what is snowball edge storage optimized?

A

Snowball Edge Storage Optimized devices are well suited for large-scale data migrations and recurring transfer workflows, as well as local computing with higher capacity needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What is snowball edge compute optimized?

A

smaller than storage optimized:

  • 104 vCPUs, 416 GiB of RAM
  • Optional GPU (useful for video processing or machine learning)
  • 28 TB NVMe or 42TB HDD usable storage
  • Up to 40 vCPUs, 80 GiB of RAM, 80 TB storage
  • Object storage clustering available
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What are the S3 Storage Classes?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Glacier Instant Retrieval
  • Amazon S3 Glacier Flexible Retrieval
  • Amazon S3 Glacier Deep Archive
  • Amazon S3 Intelligent Tiering
  • Can move between classes manually or using S3 Lifecycle configurations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What is S3 Standard – General Purpose?

A
  • 99.99% Availability
  • Used for frequently accessed data
  • Low latency and high throughput
  • Sustain 2 concurrent facility failures
  • Use Cases: Big Data analytics, mobile & gaming applications, content
    distribution…
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is S3 Storage Classes – Infrequent Access?

A
  • For data that is less frequently accessed, but requires rapid access when needed
  • Lower cost than S3 Standard
  • Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
  • 99.9% Availability
    *suitable for less frequently accessed data, but with rapid access when needed, while keeping a high durability and allowing an Availability Zone failure
  • Use cases: Disaster Recovery, backups
  • Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
  • High durability (99.999999999%) in a single AZ; data lost when AZ is destroyed
  • 99.5% Availability
  • Use Cases: Storing secondary backup copies of on-premise data, or data you can recreate
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is Managed Blockchain?

A

Amazon Managed Blockchain is a fully managed service that makes it easy to create and manage scalable blockchain networks using the popular open source frameworks Hyperledger Fabric and Ethereum.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What is Redshift?

A

Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud.

  • Redshift is based on PostgreSQL, but it’s not used for OLTP
  • It’s OLAP – online analytical processing (analytics and data warehousing)
  • Load data once every hour, not every second
  • 10x better performance than other data warehouses, scale to PBs of data
  • Columnar storage of data (instead of row based)
  • Massively Parallel Query Execution (MPP), highly available
  • Pay as you go based on the instances provisioned
  • Has a SQL interface for performing the queries
  • BI tools such as AWS Quicksight or Tableau integrate with it
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is Amazon Athena?

A
  • Serverless query service to analyze data stored in Amazon S3
  • Uses standard SQL language to query the files
  • Supports CSV, JSON, ORC, Avro, and Parquet (built on Presto)
  • Pricing: $5.00 per TB of data scanned
  • Use compressed or columnar data for cost-savings (less scan)
  • Use cases: Business intelligence / analytics / reporting, analyze &
    query VPC Flow Logs, ELB Logs, CloudTrail trails, etc…
  • Exam Tip: analyze data in S3 using serverless SQL, use Athena
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is AWS Glue?

A

AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is Amazon Aurora?

A

Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open source databases. It is a proprietary technology from AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What is AWS Database Migration?

A

AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is Amazon EMR?

A
  • EMR stands for “Elastic MapReduce”
  • EMR helps creating Hadoop clusters (Big Data) to analyze and process
    vast amount of data
  • The clusters can be made of hundreds of EC2 instances
  • Also supports Apache Spark, HBase, Presto, Flink…
  • EMR takes care of all the provisioning and configuration
  • Auto-scaling and integrated with Spot instances
  • Use cases: data processing, machine learning, web indexing, big data…
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What is Elasticache?

A

Amazon ElastiCache is a web service that makes it easy to deploy and run Memcached or Redis protocol-compliant server nodes in the cloud. ElastiCache caches are in-memory databases with high performance, low latency. They help reduce load off databases for read intensive workloads.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is a Glue Data Catalog?

A

A central repository to store structural and operational metadata for data assets in AWS Glue?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

What is RDS?

A

Amazon Relational Database Service (Amazon RDS) is a SQL managed service that makes it easy to set up, operate, and scale a relational database in the cloud. It is suited for OLTP workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What is DynamoDB?

A

Amazon DynamoDB is a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale. DynamoDB offers built-in security, continuous backups, automated multi-Region replication, in-memory caching, and data import and export tools.

  • Fully Managed Highly available with replication across 3 AZ
  • NoSQL database - not a relational database
  • Scales to massive workloads, distributed “serverless” database
  • Millions of requests per seconds, trillions of row, 100s of TB of storage
  • Fast and consistent in performance
  • Single-digit millisecond latency – low latency retrieval
  • Integrated with IAM for security, authorization and administration
  • Low cost and auto scaling capabilities
  • Standard & Infrequent Access (IA) Table Class
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What QLDB?

A

Amazon QLDB is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a central trusted authority. Amazon QLDB tracks each and every application data change and maintains a complete and verifiable history of changes over time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is Neptune?

A

Amazon Neptune is a fast, reliable, fully-managed graph database service that makes it easy to build and run applications that work with highly connected datasets. It can be used for knowledge graphs, fraud detection, recommendations engines, social networking, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What is quicksight?

A

Amazon QuickSight is a fast, cloud-powered business intelligence (BI) service that makes it easy for you to deliver insights to everyone in your organization. You can create and publish interactive dashboards.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is Document DB?

A

Amazon DocumentDB (with MongoDB compatibility) is a fast, calable, highly available, and fully managed document database service that supports MongoDB workloads.

71
Q

What is Dynamo DB Accelerator?

A

Amazon DynamoDB Accelerator (DAX) is a fully managed, highly available, in-memory cache for Amazon DynamoDB that delivers up to a 10 times performance improvement—from milliseconds to microseconds—even at millions of requests per second.

72
Q

What is AWS Lambda?

A

AWS Lambda is a compute service that lets you run code without provisioning or managing servers.

73
Q

What is Fargate?

A

Fargate:
* Run Docker containers without provisioning the infrastructure
* Serverless offering (no EC2 instances)

74
Q

What is ECR?

A
  • ECR: Private Docker Images Repository
75
Q

What is ECS?

A
  • ECS: run Docker containers on EC2 instances but you must provision and manage instances

Elastic container service

76
Q

What is lightsail?

A

Amazon Lightsail is designed to be the easiest way to launch and manage a virtual private server with AWS. Lightsail plans include everything you need to jumpstart your project – a virtual machine, SSD- based storage, data transfer, DNS management, and a static IP address – for a low, predictable price. It can be used to create a simple web application, a website or a dev/test environment.

77
Q

What is Docker?

A

Docker is a software development platform that allows you to run applications the same way, regardless of where they are run. It can scale containers up and down within seconds.

78
Q

How would you best describe “event-driven” in AWS Lambda?

A

Happens when needed

79
Q

What is AWS batch?

A

AWS Batch enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS. AWS Batch dynamically provisions the optimal quantity and type of compute resources (e.g., CPU or memory-optimized instances) based on the volume and specific resource requirements of the batch jobs submitted.

80
Q

What is Code Star?

A

CodeStar is used to quickly develop, build, and deploy applications on AWS.

Deployments & Managing Infrastructure at Scale

81
Q

What is Elastic Bean Stalk?

A

Elastic Beanstalk can be used to monitor and to check the health of an environment.

81
Q

What is Elastic Bean Stalk?

A

Elastic Beanstalk can be used to monitor and to check the health of an environment.

Deployments & Managing Infrastructure at Scale

82
Q

What is Elastic Bean Stalk?

A

Elastic Beanstalk can be used to monitor and to check the health of an environment.

83
Q

What is Code Deploy?

A

AWS CodeDeploy is a service that automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises.

Deployments & Managing Infrastructure at Scale

84
Q

What is Code Deploy?

A

AWS CodeDeploy is a service that automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises.

85
Q

What is Code Pipeline?

A

AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates. It is not used to store or collaborate on code.

Orchestrates the different steps to have code automatically pushed to production.

Deployments & Managing Infrastructure at Scale

86
Q

What is Code Commit?

A

AWS CodeCommit is a secure, highly scalable, managed source control service that makes it easier for teams to collaborate on code. It also provides software version control.

Deployments & Managing Infrastructure at Scale

87
Q

What is AWS Systems Manager (SSM)

A
  • Helps you manage your EC2 and On-Premises systems at scale
  • Another Hybrid AWS service
  • Get operational insights about the state of your infrastructure
  • Suite of 10+ products
  • Most important features are:
  • Patching automation for enhanced compliance
  • Run commands across an entire fleet of servers (patching systems at scale)
  • Store parameter configuration with the SSM Parameter Store
  • Works for Linux, Windows, MacOS, and Raspberry Pi OS (Raspbian)

Deployments & Managing Infrastructure at Scale

88
Q

What is AWS Opsworks?

A
  • Chef & Puppet help you perform server configuration automatically, or
    repetitive actions
  • They work great with EC2 & On-Premises VM
  • AWS OpsWorks = Managed Chef & Puppet
  • It’s an alternative to AWS SSM
  • Only provision standard AWS resources:
  • EC2 Instances, Databases, Load Balancers, EBS volumes…
  • In the exam: Chef or Puppet needed => AWS OpsWorks

AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.

Deployments & Managing Infrastructure at Scale

89
Q

What is AWS Cloud Development Kit (CDK)?

A
  • Define your cloud infrastructure using a familiar language:
  • JavaScript/TypeScript, Python, Java, and .NET
  • The code is “compiled” into a CloudFormation template (JSON/YAML)
  • You can therefore deploy infrastructure and application runtime code together
  • Great for Lambda functions
  • Great for Docker containers in ECS / EKS

Deployments & Managing Infrastructure at Scale

90
Q

What is CloudFormation?

A

AWS CloudFormation provides a common language for you to model and provision AWS and third party application resources in your cloud environment. It allows you to deploy Infrastructure as a Code.

Deployments & Managing Infrastructure at Scale

91
Q

What is Cloud 9?

A

AWS Cloud9 is a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser.

Deployments & Managing Infrastructure at Scale

92
Q

What is Elastic Beanstalk?

A
  • Elastic Beanstalk is a developer centric view of deploying
    an application on AWS
  • It uses all the component’s we’ve seen before:
    EC2, ASG, ELB, RDS, etc…
  • But it’s all in one view that’s easy to make sense of!
  • We still have full control over the configuration
  • Beanstalk = Platform as a Service (PaaS)
  • Beanstalk is free but you pay for the underlying instances

Deployments & Managing Infrastructure at Scale?

93
Q

What are AWS Cloud Formation Templates?

A

AWS CloudFormation templates are JSON or YAML-formatted text files. They are declarations of the AWS resources that make up a stack.

Deployments & Managing Infrastructure at Scale?

94
Q

What is Codestar?

A

CodeStar is used to quickly develop, build, and deploy applications on AWS with a unified user interface.

  • Unified UI to easily manage software development activities in one place
  • “Quick way” to get started to correctly set-up CodeCommit, CodePipeline,
    CodeBuild, CodeDeploy, Elastic Beanstalk, EC2, etc…
  • Can edit the code ”in-the-cloud” using AWS Cloud9

Deployments & Managing Infrastructure at Scale?

95
Q

What is codebuild?

A

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers, it is serverless.

95
Q

What is codebuild?

A

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers, it is serverless.

Deployments & Managing Infrastructure at Scale?

96
Q

What is Amazon MQ?

A
  • SQS, SNS are “cloud-native” services: proprietary protocols from AWS
  • Traditional applications running from on-premises may use open protocols
    such as: MQTT, AMQP, STOMP, Openwire, WSS
  • When migrating to the cloud, instead of re-engineering the application to use
    SQS and SNS, we can use Amazon MQ
  • Amazon MQ is a managed message broker service for rabbit MQ and Active MQ

Cloud Integrations.

97
Q

What is Amazon SQS?

A
  • Oldest AWS offering (over 10 years old)
  • Fully managed service (~serverless), use to decouple applications
  • Scales from 1 message per second to 10,000s per second
  • Default retention of messages: 4 days, maximum of 14 days
  • No limit to how many messages can be in the queue
  • Messages are deleted after they’re read by consumers
  • Low latency (<10 ms on publish and receive)
  • Consumers share the work to read messages & scale horizontally

Amazon Simple Queue Service (Amazon SQS) is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS moves data between distributed application components and helps you decouple these components.

Cloud Integrations

98
Q

What is Amazon SNS?

A

a fully managed pub/sub messaging service that makes it easy to set up, operate, and send notifications from the cloud, using a push-based system?

  • The “event publishers” only sends message to one SNS topic
  • As many “event subscribers” as we want to listen to the SNS topic notifications
  • Each subscriber to the topic will get all the messages
  • Up to 12,500,000 subscriptions per topic, 100,000 topics limit

Cloud Integrations

99
Q

What is Amazon Kinesis?

A

Amazon Kinesis makes it easy to collect, process, and analyze real-time, streaming data so you can get timely insights and react quickly to new information. Kinesis offers four services: Data Firehose, Data Analytics, Data Streams, Video Streams.

Cloud Integrations

100
Q

What are Amazon CloudWatch Alarms?

A
  • Alarms are used to trigger notifications for any metric
  • Alarms actions…
  • Auto Scaling: increase or decrease EC2 instances “desired” count
  • EC2 Actions: stop, terminate, reboot or recover an EC2 instance
  • SNS notifications: send a notification into an SNS topic
  • Various options (sampling, %, max, min, etc…)
  • Can choose the period on which to evaluate an alarm
  • Example: create a billing alarm on the CloudWatch Billing metric
  • Alarm States: OK. INSUFFICIENT_DATA, ALARM

Cloud Monitoring

101
Q

What is AWS X-Ray?

A

AWS X-Ray is a service that collects data about requests that your application serves, and provides tools that you can use to view, filter, and gain insights into that data to identify issues and opportunities for optimization.

AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture.

Cloud Monitoring

102
Q

What is AWS Health Dashboard?

A

AWS Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you.

Cloud Monitoring.

103
Q

What is Cloudwatch?

A

Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, and set alarms.

Cloud Monitoring

104
Q

What is AWS Cloudtrail?

A

AWS CloudTrail is a web service that records activity made on your account and delivers log files to your Amazon S3 bucket. AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.

Cloud Monitoring

105
Q

What is AWS Cloudguru?

A

Amazon CodeGuru is a developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code.

Cloud Monitoring

106
Q

What are AWS Cloudwatch logs?

A

A single, highly scalable service that centralizes the logs from all of your systems, applications, and AWS services that you use.

Cloud Monitoring

107
Q

What is a NAT Gateway?

A

AWS managed service that allows your instances in your private subnets to access the internet while remaining private.

VPC and Networking

108
Q

What is NACL

A

Network access control list. a firewall which controls traffic from and to subnet. can have allow and deny rules. are attached at subnet level. rules only include ip addresses.

VPC and Networking

109
Q

What is Transit Gateway?

A

Transit Gateway connects thousands of VPC and on-premises networks together in a single gateway.

AWS Transit Gateway connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub. This connection simplifies your network and puts an end to complex peering relationships. Transit Gateway acts as a highly scalable cloud router—each new connection is made only once.

VPC and Networking

110
Q

What is VPC Peering?

A

VPC Peering connection is a networking connection between two VPCs using AWS’ network.

VPC and Networking

111
Q

What is a VPC?

A

A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. It is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS resources, such as Amazon EC2 instances, into your VPC.

VPC and Networking

112
Q

What is AWS Direct Connect?

A

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated private network connection from your premises to AWS.

VPC and Networking

113
Q

What is an internet gateway?

A

An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet.

VPC and Networking

114
Q

What type of data is on RDS?

A

Data at rest means data stored or archived on a device.

Security and Compliance

115
Q

What is Amazon Macie?

A

Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS, such as personally identifiable information (PII) or intellectual property.

Security and Compliance

116
Q

What is AWS detective?

A

Amazon Detective makes it easy to analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities.

Security and Compliance

117
Q

What is WAF?

A

AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources.

Security and Compliance

118
Q

What is AWS Artifact?

A

AWS Artifact is your go-to, central resource for compliance-related information that matters to you.

Security and Compliance?

119
Q

What is Config?

A

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources.

Security and Compliance

120
Q

What is ACM?

A

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

SSL/TLS stands for secure sockets layer and transport layer security. It is a protocol or communication rule that allows computer systems to talk to each other on the internet safely

Security and Compliance

121
Q

What is AWS Security Hub?

A

AWS Security Hub provides you with a comprehensive view of your security state within AWS and your compliance with security standards and best practices.

Security and Compliance

122
Q

What is KMS?

A

AWS KMS is a managed service that enables you to easily create and control the keys used for cryptographic operations. It is managed by AWS.

Use AWS KMS to encrypt data across your AWS workloads, digitally sign data, encrypt within your applications using AWS Encryption SDK, and generate and verify message authentication codes (MACs).

Security and Compliance

123
Q

What is Inspector?

A

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. It helps you test the network accessibility of your Amazon EC2 instances and the security state of your applications running on the instances.

Security and Compliance

124
Q

What is AWS shield?

A

Shield is only used to safeguard running applications from DDoS attacks.

Security and Compliance.

125
Q

What is AWS Guard Duty?

A

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.

Security and Compliance

126
Q

What is Amazon Lex?

A

Amazon Lex is a service for building conversational interfaces into any application using voice and text. Lex provides the advanced deep learning functionalities of automatic speech recognition (ASR) for converting speech to text, and natural language understanding (NLU) to recognize the intent of the text, to enable you to build applications with highly engaging user experiences and lifelike conversational interactions.

Machine Learning

127
Q

What is Amazon Forecast?

A

Amazon Forecast is a fully managed service that uses machine learning to deliver highly accurate forecasts.

Machine Learning

128
Q

What is Amazon Recognition?

A

Amazon Rekognition makes it easy to add image and video analysis to your applications using proven, highly scalable, deep learning technology that requires no machine learning expertise to use.

Machine Learning

129
Q

What is Amazon Personalize?

A

Amazon Personalize is a machine learning service that makes it easy for developers to create individualized recommendations for customers using their applications.

Machine Learning

130
Q

What is Amazon Comprehend?

A

Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to find meaning and insights in text.

Machine Learning

131
Q

What is Amazon Translate?

A

Amazon Translate is a neural machine translation service that delivers fast, high-quality, and affordable language translation.

Machine Learning

132
Q

What is Amazon Sagemaker?

A

Amazon SageMaker is a fully managed service that provides every developer and data scientist with the ability to build, train, and deploy machine learning (ML) models quickly. SageMaker removes the heavy lifting from each step of the machine learning process to make it easier to develop high quality models.

Machine Learning

133
Q

What is Amazon Transcribe?

A

Amazon Transcribe is an AWS service that makes it easy for customers to convert speech-to-text.

Machine Learning

134
Q

What is Amazon Kendra?

A

Amazon Kendra is a highly accurate and easy to use enterprise search service that’s powered by machine learning.

Machine Learning

135
Q

What is Amazon Polly?

A

Amazon Polly is a service that turns text into lifelike speech.

Machine Learning

136
Q

What are EBS pricing factors?

A

Volume type, Provisioned storage volume, IOPS, etc.

added storage is added cost in GB/month

Pricing

137
Q

What is Compute Optimizer?

A

recommends resource configurations to reduce cost

Pricing

138
Q

What is Pricing Calculator?

A

Allows you to estimate cost of services on AWS

Pricing

139
Q

What are Cost Allocation Tags?

A

tag resources to create detailed reports

Pricing

140
Q

What is the Billing Dashboard?

A

High level overview + free tier dashboard

Pricing

141
Q

What are Cost and usage reports?

A

Most comprehensive billing dataset

Pricing

142
Q

What is Cost explorer?

A

view current usage and forecast usage

Pricing

143
Q

What are Billing Alarms?

A

track overall and per service billing

Only shows what you’ve been charged Vs budget that can show forecast

Budgets allow you to create filtered alarms

Pricing

144
Q

What are Budgets?

A

Track usage, RI, costs and get alerts. more advanced than billing alarms.

With AWS Budgets, set custom budgets to track your costs and usage, and respond quickly to alerts received from email or SNS notifications if you exceed your threshold.

Pricing

144
Q

What are Budgets

A

Track usage, RI, costs and get alerts. more advanced than billing alarms.

Pricing

145
Q

What is a Savings Plan?

A

easy way to save based on long term usage of AWS by committing a specific dollar amount

146
Q

What is a Cost Anomaly Detection?

A

detect unusual spends based on machine learning

147
Q

What is a Service Quota?

A

notify you once you’re close to a service quota threshold?

maximum number of service resources or operations that apply to an AWS account or an AWS Region. The number of AWS Identity and Access Management (IAM) roles per account is an example of an account-based quota.

Pricing

148
Q

What are the 4 payment models of AWS?

A
  1. Pay as you go
  2. Save when you reserve: minimize risks, predictable manage budgets, comply with long term requirements
  3. Pay less by using more: volume based discounts
  4. Pay less as AWS grows:

Pricing

149
Q

What are the computing payment models?

A
  1. On Demand instances. pay per second (linux/windows) or per hour
  2. Reserved Instance. up to 75% discount 1 or 3 year commitment. higher discount more that you pay upfront.
  3. Spot Instances. up to 90% discount compared to on demand hourly rate. bid for unused capacity.
  4. Dedicated host:on-demand or reserved 1 or 3 years.
  5. Savings Plan:

Pricing

150
Q

Lambda Pricing Model?

A

pay per call and duration.

Pricing

150
Q

Lambda Pricing Model?

A

pay per call and duration.

Pricing

151
Q

ECS Pricing Model?

A

EC2 launch type model, no additional fees, you pay for AWS resources stored and created in your application.

Pricing

152
Q

Fargate Pricing Model?

A

Pay gor Vcpu and memory resources allocated to your applications in your containers.

Pricing

153
Q

Storage Pricing S3?

A
  • Storage class: S3 Standard, S3 Infrequent Access, S3 One-Zone IA, S3 Intelligent Tiering, S3 Glacier and S3 Glacier Deep Archive
  • Number and size of objects: Price can be tiered (based on volume)
  • Number and type of requests
  • Data transfer OUT of the S3 region
  • S3 Transfer Acceleration
  • Lifecycle transitions
154
Q

Storage pricing EBS?

A
  • Volume type (based on performance)
  • Storage volume in GB per month provisionned
  • IOPS:
  • General Purpose SSD: Included
  • Provisioned IOPS SSD: Provisionned amount in IOPS * Magnetic: Number of requests
  • Snapshots:
  • Added data cost per GB per month
  • Data transfer:
  • Outbound data transfer are tiered for volume discounts
  • Inbound is free
155
Q

Storage pricing RDS?

A
  • Per hour billing
  • Database characteristics: * Engine
  • Size
  • Memory class
  • Purchase type: * On-demand
  • Reserved instances (1 or 3 years) with required up-front
  • Backup Storage:There is no additional charge for backup storage up to
    100% of your total database storage for a region.
  • Additional storage (per GB per month)
  • Number of input and output requests per month
  • Deployment type (storage and I/O are variable): * Single AZ
  • Multiple AZs
  • Data transfer:
  • Outbound data transfer are tiered for volume discounts * Inbound is free
    NOT FOR DISTRIBUTION © Stephane Maarek w
156
Q

Content Delivery – CloudFront

A

Amazon CloudFront is a content delivery network (CDN) service built for high performance, security, and developer convenience.

  • Pricing is different across different geographic regions
  • Aggregated for each edge location, then applied to your bill * Data Transfer Out (volume discount)
  • Number of HTTP/HTTPS requests
157
Q

What is AWS Savings Plan?

A
  • Commit a certain $ amount per hour for 1 or 3 years
  • Easiest way to setup long-term commitments on AWS
  • EC2 Savings Plan
  • Up to 72% discount compared to On-Demand
  • Commit to usage of individual instance families in a region (e.g. C5 or M5) * Regardless of AZ, size (m5.xl to m5.4xl), OS (Linux/Windows) or tenancy * All upfront, par tial upfront, no upfront
  • Compute Savings Plan
  • Up to 66% discount compared to On-Demand
  • RegardlessofFamily,Region,size,OS,tenancy,computeoptions * ComputeOptions:EC2,Fargate,Lambda
  • Machine Learning Savings Plan: SageMaker…
  • Setup from the AWS Cost Explorer console
  • Estimate pricing at https://aws.amazon.com/savingsplans/pricing/
158
Q

What is AWS Direct Connect

A

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS. It does not allow you to use your on-premises directory to connect to your AWS resources.

Advanced Identity

159
Q

What is AWS Directory Service?

A

AWS Directory Service makes it easy for you to setup and run directories in the AWS cloud, or connect your AWS resources with an existing on-premises Microsoft Active Directory.

Advanced Identity

160
Q

What is AWS IAM Identity center?

A

AWS IAM Identity Center is an AWS service that enables you to makes it easy to centrally manage access to multiple AWS accounts and business applications and provide users with single sign-on access to all their assigned accounts and applications from one place.

Advanced Identity

161
Q

What is Amazon Security Token Service (STS)?

A

AWS Security Token Service (AWS STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users).

Advanced Identity

162
Q

What is Amazon Cognito?

A

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

Advanced Identity

163
Q

What is the AWS Well Architected Tool?

A

The AWS Well-Architected Tool helps you review the state of your workloads and compares them to the latest AWS architectural best practices. It is based on the 6 pillars of the Well-Architected Framework (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability)

Architecting and eco-system

164
Q

What is AWS Trusted Advisor?

A

AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices (Cost Optimization, Performance, Security, Fault Tolerance, and Service Limits).

Architecting and eco-system

165
Q

What are performance efficiency design principles?

A

Performance Efficiency design principles include: democratize advanced technologies, go global in minutes, use serverless architecture, experiment more often, mechanical sympathy.

Architecting and eco-system

166
Q

What does the Amazon Partner Network (APN) Consist of?

A
  1. Technology Partners
  2. Consulting Partners
  3. Training Partners

Architecting and eco system

167
Q

What are principles of Reliability?

A

Testing recovery procedures, stopping guessing capacity, and managing changes in automation are design principles of Reliability.

Architecting and eco-system

168
Q

What are principles of Reliability?

A

Testing recovery procedures, stopping guessing capacity, and managing changes in automation are design principles of Reliability.

Architecting and eco-system

169
Q

What are the 6 pillars of a well architected framework?

A
  • 1) Operational Excellence: cloud formation, config
  • 2) Security:
  • 3) Reliability:auto scaling, cloud watch, config
  • 4) Performance Efficiency: autoscaling, lambda, ebs,
    5) Cost Optimization
  • 6) Sustainability