Ch. 2 Content - Cloud Concepts Flashcards

1
Q

What are the 6 advantages of Cloud?

A
  1. Trade CAPEX for Variable Expense.
  2. Massive economies of scale.
  3. You don’t guess about needed capacity.
  4. Increased speed and agility.
  5. Cut costs on maintaining infra. and/or DCs.
  6. You can go Global in minutes.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 3 types of Cloud Computing?

A

IaaS
PaaS
SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 3 types of Cloud Computing deployments?

A

Public
Private
Hybrid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Region v. Availability Zone v. Edge Location

A

Region - physical geo-location that consists of 2+ AZ’s.
AZ - one or more DCs in close proximity (power/connectivity/compute).
Edge - AWS endpoints that cache content and make up the CDN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the AWS Subscription Plans?

A
  1. Basic - FREE
  2. Developer - $29/mo (12-24 hour SLA only during business hours); mainly used for testing.
  3. Business - $100/mo (24x7 support with 1-hour SLA); production use of AWS.
  4. Enterprise - $15K/mo (direct TAM coverage); mission critical biz apps running in AWS.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is IAM (Identity Access Management)?

A

This is a global service that allows for role based access to certain functions or features within AWS; basically “RBAC”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 3 different ways to access/interact with the AWS platform?

A
  1. Console
  2. CLI (programmability)
  3. SDKs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Group?

A

A place to store all your users. The users in a specific group will inherit all the permissions that are outlined for the group (Developers, Sys Admin, HR, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do users in a Group get granted access?

A

To set permissions, you attach a policy (via JSON) with key value pairs.

Key = name of object
Value = the associated data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is S3? What size can the individual data points be within S3?

A

Simple Storage Service - provides IT teams and Developers very secure/scalable Object-Based storage to run their services on.

Made for FLAT files (unstructured data) - videos, text files, pictures i.e things that aren’t dynamically changing.

Files can be 0 bytes to 5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some S3 Bucket attributes?

A
  1. Names for buckets must be unique as they are Universal.
  2. You would NOT want to install an operating system in one of these.
  3. You can almost immediately Read after a Write to an S3 bucket.. When deleting however it might take a bit of time (where you still see the old object).
  4. You can assign buckets to specific regions, but when you view from the console it’s always a global view.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is S3 Cross-Region Replication

A

You can replicate data automatically to back-up S3 buckets in different regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is S3 Transfer Acceleration?

A

Instead of users in different regions uploading to a single S3 bucket, they upload to Edge Locations which then send that data over the AWS backbone to the S3 bucket (much faster and more efficient).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the six S3 Storage Classes? Give examples for each.

A
  1. S3 Standard - 11 x 9’s availability; data stored in multiple devices in multiple facilities. Can withstand the loss of 2 x facilities.
  2. S3 IA (infrequent access) - data accessed less frequently but requires rapid access when you need it.
  3. S3 One Zone IA - very low coast for IA data; single AZ zone.
  4. S3 Intelligent Tiering - uses ML to move your data to the most cost-efficient tier.
  5. S3 Glacier - low cost data archiving; retrieval times can be set for minutes up to hours.
  6. S3 Glacier Deep Archive - lowest cost option; retrieval time is minimum 12-hours.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is CloudFront? What does it do?

A

Amazon’s CDN network that delivers web content/web pages to users based on their geo-location, the origin of the webpage, and Edge delivery server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a CloudFront Edge Location?

A

Locations where content is cached. Files get cached for “x” length of time specified by a TTL (typical TTL is 48 hours). These are not READ only, but you can WRITE to them too.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is a CloudFront Origin? What are some examples of an Origin?

A

The origin of all the files that the CDN will distribute.

These can be:

  • S3 bucket
  • EC2
  • Elastic Load Balancer
  • Route 53.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is a Distribution? What are the two types of Distributions?

A

The name given to the CDN (that does the distributing of the files). Amazon’s CDN (CloudFront) consists of a collection of Edge locations.

  1. Web Distribution - used for websites. These are STATIC when created in S3 (i.e no connection to a DB for dynamic content)
  2. RTMP - used for media streaming (not common anymore)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is an Elastic Compute Cloud (EC2)?

A

Server hosts or bare-metal severs running in the cloud. This allows you to procure compute power in minutes and scale up/down as needed very easily.

This is an actual physical server running in the Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the four options for procuring an EC2 instance?

A
  1. On-demand - pay a fixed rate by the hour for resources.
  2. Reserved - reserve capacity ahead of time at a discounted price compared to the hourly/on-demand charge.
  3. Spot - bid the price you want to pay; when it becomes available at that price your resources will be provisioned.
  4. Dedicated hosts - physical EC2 that’s dedicated for just you. You can cut costs by reusing existing server-bound licenses.
21
Q

What is “FIGHTDRMCPXZ”

A

An acronym that spells out the valid EC2 instances/options.

22
Q

What is Amazon EBS? What is an EBS comprised of?

A

Elastic Block Store - easy to use/deploy, highly scalable block-storage solution.

These are the virtual HDD or SDD disks that an EC2 uses (virtual server in the cloud).

23
Q

What are the two options for EBS?

A

SSD and Magnetic. Each have two options within.

24
Q

What are the SSD options for EBS?

A

SSD 1 - General purpose SSD (called GP2); low price, good performance; wide range of workloads.

SSD 2 - Provisioned IOPS SSD (called IO1); highest performance SSD; low-latency/critical workloads.

25
Q

What are the Magnetic options for EBS?

A

MAG 1 - Throughput Optimized (called ST1); low cost HDD option used for frequently accessed workloads; throughput intensive workloads.

MAG 2 - Cold HDD (SC1); lowest cost HDD; designed for less accessed workloads (like a File server).

26
Q

What are common ports used by AWS?

A

o SSH - port 22
o RDP - port 3389
o HTTP - port 80
o HTTPS - port 443

27
Q

What are Security Groups?

A

Virtual FWs in the cloud that permit/deny traffic based on ports.

You have to open up ports to use them.

28
Q

True/False - you want to store credentials in your EC2 instances?

A

FALSE - You don’t want to store your credentials within your EC2 instance(s). If an EC2 gets hacked, then people will have full access to your AWS account.

It’s better to use key IDs and Secret Access Keys instead that are tied to Roles. Roles are applied universally so they’re enforced across your entire environment.

29
Q

What is a Role?

A

Level of permission assigned to a user when accessing AWS (like logging into an EC2). You can always add more policies to a specific role for restricting/adding access (very easy to manage).

Map the Role to an IAM - Roles are universal.

30
Q

What are the three types of Load Balancers?

A

o App LB - L7; routing traffic based on app type/class; DPI

o Network LB - used when you need extreme performance and/or have static IP addresses.

o Classic LB - used for test & dev; very old and will likely be retired soon.

31
Q

What are the two types of Databases Amazon builds their solution around?

A
  1. Relational DBs - These are the DBs that have been around the longest - there are fixed rows/columns that affect each other.
  2. Non-relational DBs - These are much newer and consist of “key value pairs” that don’t affect each other. These have much greater flexibility on what you can query/more complex queries.
32
Q

What is Amazon’s Relational DB Offer?

A

Aurora

33
Q

What is Amazon’s Non-Relational DB Offer?

A

DynamoDB

34
Q

What is Data Warehousing?

A

A separate DB (not your primary) that uses a different architecture from an infrastructure and DB perspective and is made for advanced/complex queries, Biz intelligence, and online analytics & processing.

Amazon’s solutions is called RedShift.

35
Q

What is Elasticache?

A

A web service that AWS provides that makes it easy to deploy/operate/scale an in-memory cache in the cloud. This is great for web applications that are accessed at a very high-volume (think of “favorites” on amazon.com)

36
Q

What is Amazon’s Graph DB called?

A

Neptune.

37
Q

What is Autoscaling?

A

Allows you to build out/scale multiple EC2 instances behind a load balancer automatically.

38
Q

What is Amazon’s DNS solution? When would it be used?

A

Route 53 - used when you register a domain name (DNS operates on port 53). This is a global service.

39
Q

What is Elastic Beanstalk?

A

A service that allows you to quickly create the infra. needed to support the code that you upload. Beanstalk will automatically handle all he provisioning/LBs/scaling/etc. that is required by the app based on the code that you upload

The service is FREE but the underlying resources that get provisioned are not free.

  • great for customers that have NO experience in AWS
  • limited on what it can provision; NOT programmable
40
Q

What is AWS CloudFormation?

A

A FREE service that allows you to create templates (via JSON) that describe/outline all the AWS resources that you want –> EC2s, RDS DBs, LBs, etc.
AWS will then handle all the configuring/provisioning of these resources for you so that you don’t have to go in and individually create everything and try to figure out what’s dependent on what (underlying resources that get provisioned are not free).

  • similar to Beanstalk but for people that know/have experience with AWS.
  • not limited on what it can provision; fully programmable
41
Q

What are Global Services in AWS (5)?

A
o IAM
o Route53
o CloudFront
o SNS
o SES
42
Q

What are On-Premise services in AWS (6)?

A

o Snowball
o Snowball Edge
o Storage GW
o CodeDeploy - used to deploy apps on-premise
o Opsworks - used to deploy apps on-premise
o IOT Greengrass

43
Q

What is CloudWatch?

A

A service that’s used to monitor the performance of your AWS environment, applications within AWS, and also your EC2s (default timer for events is 5 minutes, but you can toggle down to 1-minute).

Also monitors the underlying physical hosts/servers - CPU, memory, disk, etc.

44
Q

What is AWS Systems Manager?

How is it deployed?

What is it used for?

A

A feature that can be used to manage fleets of EC2 instances and VMs. When deploying an EC2, you add a small piece of SW that will connect the EC2 up to Systems Manager which allows you to run commands across all the EC2’s at once.

Can use for upgrades, updates, patching, changes, etc. to the whole EC2 fleet.

45
Q

What is the AWS Global Infrastructure made up of?

A

Regions (24+)
Availability Zones (70+)
Edge Locations

46
Q

What are the three different ways to restrict Access to S3 buckets?

A
  1. Bucket policies - applies to all files within the S3 bucket.
  2. Object Policies/ACL - applies to individual files within the bucket.
  3. IAM policies - applies to specific users & Groups. Ex - HR/Finance/etc.
47
Q

What is Amazon’s Data Warehousing solution called?

What is it used for?

A

Red Shift - Amazon’s DB used for data warehousing, which is a separate DB (not your primary DB) designed for very complex queries. Removes the burden from the primary DB.

Biz intelligence, online processing, complexity.

48
Q

What are the two services offered in Amazon’s RDS (relational DB) solution?

A

Relational DB Service (RDS) - the two key features are:
1. Multi-AZ - disaster recovery. If you lose 1 x AZ then RDS will automatically failover to the other AZ.

  1. Read Replicas - copies of the production DB. You can point your EC2s to read data from your Red Replicas (up to 5 copies) instead of the production DB so the primary/production DB has max performance i.e you only WRITE to the primary DB.
49
Q

What are attributes of DynamoDB?

A

This is Amazon’s non-relational DB. If someone needs NoSQL, non-relational DB for performance. Typically this has a greater impact on your DB performance because a query is pulling in much more data.

These DBs are based on KEY VALUE PAIRS (key = name, value= data)

Used for Biz Intelligence queries/use cases.