Cloud based Architecture Design of Conventional Applications Flashcards
Network Service Planning
When you deploy workloads to the cloud, you need to consider:
Isolation, Scalability and Connectivity
If VPC’s in the same region need to communicate, use:
VPC peering connections or VPC endpoints.
For VPC’s in different regions use
cloud connect or vpn
If VPC’s need to communicate with on premise data centers use:
direct connect or vpn.
what questions do you need to ask yourself when creating vpcs?
how many vpcs will I need, what region should they be created in and how do I define my subnets?
True or false: if an enterprise deploys services in different environments (development, test and production) create a single vpc.
False. Create multiple vpcs instead of a single one.
VPCs are logically isolated using _________________ technology
tunneling
Only supports packet filtering based on three tuple: protocol, port and destination IP address.
Security group
The network ACL supports packet filtering based on 5 tuple: __________,____________, ___________, _____________, ___________
protocol, source port, destination port, source IP address, and destination IP address.
true or false: If you request a VPC peering connection with a VPC of another account, the connection takes effect only after the peer account accept the request. If you request a VPC peering connection with a VPC of your own, the system automatically accepts the request and activates the connection.
True
VPCEP provides two types of resources:
VPC endpoint services and VPC endpoints.
_______________refer to cloud services or your private services that can be configured in VPCEP to provide services to users.
VPC endpoint services
_______________are channels for connecting VPCs to VPC endpoint services.
VPC endpoints
the key components of Direct Connect are
a connection, virtual gateway, and virtual interface.