chapter 8 Flashcards
What is the difference between durability and availability in S3?
Durability is the likelihood that an object won’t be lost over the course of a year.
Availability is the percentage of time an object will be accessible during the year.
What are the requirements you need to understand to select the best S3 storage class given cost, compliance, and availability?
STANDARD has the highest availability at 99.99 percent, replicates objects across at least three zones, and is the most expensive in terms of monthly storage cost per gigabyte.
ONEZONE_IA has the lowest availability at 99.5 percent and stores objects in only one zone, and its monthly per-gigabyte storage cost
What are the different options for getting data into and out of S3?
You can upload or download an object by using the S3 service console, by using the AWS CLI, or by directly accessing the object’s URL.
AWS Storage Gateway lets your on-premises servers use industry standard storage protocols such as iSCSI, NFS, and SMB to transfer data to and from S3.
AWS Snowball and Snowball Edge allow secure physical transport of data to and from S3.
When do you use bucket policies, user policies, and access control lists in S3?
Use bucket policies or ACLs to grant anonymous access to objects, such as webpages or images you want made public.
Use user policies to grant specific IAM principals in your account access to objects.
What are the differences between S3 and Glacier?
S3 offers highly available, real-time retrieval of objects.
Retrieving data from Glacier is a two-step process that requires first requesting an archive using the Expedited, Standard, or Bulk retrieval option and then downloading the archive once the retrieval is complete.
How do you use encryption, versioning, and object life cycle configurations in S3?
Offers server-side and client-side encryption to protect objects at rest from unauthorized access.
Versioning helps protect against object overwrites and deletions.
Object life cycle configurations let you delete objects or move them to different storage classes after they reach a certain age.
What are the three virtual machine types offered by AWS Storage Gateway?
File gateways offer access to S3 via the NFS and SMB storage protocols.
Volume gateways and tape gateways offer access via the iSCSI block storage protocol, but tape gateways are specifically designed to work with common backup applications.