Cloud Practioner Flashcards
Users
Mapped to physical user, has a password for AWS console
Groups
Contains users only
Policies
JSON document that outlines permissions for users and groups
Roles
For EC2 instances or AWS services
Security
MFA + password policy
Access key
Access CLI or SDK
Audit
IAM credentials reports and IAM Access Advisor
EC2 instance (Elastic Cloud Compute)
AMI (OS) + instance size (CPU + RAM) + storage + security groups + EC2 user data
Security groups
Firewall attached to the EC2 instances
EC2 user data
Script launched at the first start of an instance
SSH
Start a terminal into our EC2 instance (port 22)
EC2 instance role
Linked to IAM roles
Purchasing options
- On-demand
- Spot
- Reserved (standard, convertible, and scheduled)
- Dedicated host
- Dedicated instance
EBS Volumes
- Network drives attached to one EC2 instance at a time
- Mapped to availability zones
- Can use EBS snapshots for backup/transferring EBS volumes across AZs
AMI (Amazon Machine Image)
Create ready to use EC2 instances with our customizations
EC2 instance store
High performance hardware disk attached to our EC2 instance
Lost if our instance is stopped or terminated
EFS (Elastic File System)
Network filing system, can be attached to 100s of instances in a region
High availability
Running your app or system in at least 2 availability zones
Scalability
An application or system can handle greater loads by adapting
- Vertical scaling: increasing the size of an instance
- Horizontal scaling: increasing the number of instances or systems for your app
Elasticity
There is some auto scaling so the system can scale based on the load
Agility
New IT resources is only one click away
ELB (Elastic Load Balancer)
Distributes traffic across backend EC2 instances and Supports health checks
3 types:
- application LB: HTTP L7
- network LB: TCP L4
- classic: outdated
ASG (Auto Scaling Groups)
Implemented elasticity for your apps across multiple AZs.
Scale EC2 instances based on the demand and replaces unhealthy instances
Buckets VS objects
Globally unique name, tied to a region
S3 security
IAM policy, S3 bucket policy, S3 encryption