Chapter 1 Introduction to AWS Cloud Api

Question 1

What is AWS SAM Local?

Answer 1

Tool which allows you to test serverless functions locally

Question 2

What is SAM

Answer 2

‘Serverless Application Model’: an open source framework for building serverless applications. You build templates for Lambda and deploy them via CloudFormation

Question 3

How does AWS use access keys when forming an HTTP header?

Answer 3

It will use access key credentials to create time based signature string. This is called the AWS Signature Version 4 signing process.

Question 4

Default object replication consists of…

Answer 4

replicating objects across at least 3 AZs within a region

Question 5

Considerations when choosing regions not based on service availability or latency

Answer 5

“De Bo Punches”

1. Data residency (compliance/regulation)
2. Business Continuity (select 2 regions in close proximity for disaster recover)
3. Price (price implications)

Question 6

How to define an IAM role? What are its constituent parts?

Answer 6

Via a ‘trust policy’. This consists of

1. Effect (i.e. ‘allow’)
2. Principal (i.e. the specific aws service(s) which assum role)
3. Action (action performed against a aspecifc aws resource)

Question 7

Describe anatomy of a STS token

Answer 7

It consists of a self contained access key id, secret access key, session token, and expiration date

Question 8

Can an IAM user be a a principal within an trust policy?

Answer 8

Yes

Question 9

What are a couple of scenarios in which use of IAM Users (not roles) would be acceptable?

Answer 9

For code running on local development laptop or on prem server

Question 10

ARN scheme

Answer 10

Partition (aws.)
Service
Region
AccountID
Resource

Question 11

IAM policies behavior when both deny and allow exist for same API action

Answer 11

default to deny

Question 12

do IAM policies expire?

Answer 12

no

Question 13

When IAM user makes API call, his long term credentials are valid in which context? AZ, Region, all regions?

Answer 13

across all regions

Question 14

Through which means does an IAM role have the authorization to perform an action?

Answer 14

STS token

Question 15

The principals who have access to assume an IAM role are defined in which document?

Answer 15

IAM Trust Policy

Question 16

_____ define what API actions can be performed with the credentials from the role

Answer 16

Access Policies

Question 17

T/F: Users’ long term credentials are valid across regions

Answer 17

true