CloudFront Flashcards

1
Q

Features:
- Content Delivery Network (CDN)
- Improves read performance, content is cached at the edge
- Improves users experience
- 216 Point of Presence globally (edge locations)
- DDoS protection (because worldwide), integration with Shield, AWS Web Application Firewall

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an origin?

A

Location where content is stored, and from which CloudFront gets content to serve to viewers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Four features of S3 bucket origin?

A
  • For distributing files and caching them at the edge
  • Enhanced security with CloudFront Origin Access Control (OAC)
  • OAC is replacing Origin Access Identity(OAI)
  • CloudFront can be used as an ingress (to upload files to S3)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Four custom origins, that are HTTP servers.

A
  • Application Load Balancer
  • EC2 instance
  • S3 website (must first enable the bucket as a static S3 website)
  • Any HTTP backend you want
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Features:
- Global Edge network
- Files are cached for a TTL (maybe a day)
- Great for static content that must be available everywhere

A

CloundFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Features:
- Cross Region Replication: Must be setup for each region you want replication to happen
- Files are updated in near real-time
- Read only
- Great for dynamic content that needs to be available at low-latency in few regions

A

S3 Region Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

CloudFront is a ……,which is to cache content …..,

whereas S3 Cross-Region Replication is to….. an entire bucket into another…….

A

CDN, all around the world, replicate, region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Where is the cache located?

A

At each CloudFront Edge Location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does CloudFront identify each object in the cache?

A

Cache Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You want to maximize the Cache Hit ratio to minimize requests to the origin?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How can you invalidate part of the cache?

A

Use the CreateInvalidation API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You want to cache as much stuff as possible in your edge locations?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is CloudFront Cache Key?

A

A unique identifier for every object in the cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudFront Cache Key can have additional elements then the default ones?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How can you add other elements(HTTP headers, cookies, query strings) to the Cache Key?

A

CloudFront Cache Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Are all HTTP headers, cookies, and query strings that you include in the Cache Key automatically included in origin requests?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What happens when Cache policy HTTP header is None?

A
  • Don’t include any headers in the Cache Key (except default)
  • Headers are not forwarded (except default)
  • Best caching performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What happens when Cache policy HTTP header is Whitelisted?

A
  • only specified headers included in the Cache Key
  • Specified headers are also forwarded to Origin
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Cache Policy Query Strings is None?

A
  • Don’t include any query strings in the Cache Key
  • Query strings are not forwarded
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cache Policy Query Strings is Whitelist?

A
  • Only specified query strings included in the Cache Key
  • Only specified query strings are forwarded
21
Q

Cache Policy Query Strings is Include All-Except?

A
  • Include all query strings in the Cache Key except the specified list
  • All query strings are forwarded except the specified list
22
Q

Cache Policy Query Strings are All?

A
  • Include all query strings in the Cache Key
  • All query strings are forwarded
  • Worst caching performance
23
Q

Cache Policies based on HTTP Headers?

A

-None
-WhiteList

24
Q

Cache Policies based on Query Strings?

A
  • None
    – Whitelist
    – Include All-Except
    – All
25
Q

What allows specifying values that you want to include in origin requests without including them in the Cache Key (no duplicated cached content)

A

Origin Request Policy?

26
Q

Origin request policy grants ability to add CloudFront …… and …… to an origin request that were not included in the viewer request.

A

HTTP headers, Custom Headers

27
Q

Purpose of CloudFront Cache Policy?

A

Controls how CloudFront caches your content at edge locations.

28
Q

Purpose of CloudFront Origin Request Policy?

A

Controls what information CloudFront includes in requests to your origin.

29
Q

Origin Request Policies can be include in…?

A
  1. HTTP Headers
  2. Cookies
  3. Query Strings
30
Q

CloudFront won’t know about a back-end origin update until the TTL has expired?

A

True.

31
Q

How can you bypass the TTL and force and entire or partial cache refresh?

A

Perform a CloudFront Invalidation

32
Q

When will CoundFront know that the back-end origin has been updated?

A

After the TTL has expired causing a refresh.

33
Q

With Cache Behaviors you can…… different settings for a given …… pattern

A

Configure,URL path

34
Q

With Cache Behaviors you can …….to different kind of origins/origin groups based on the …….or ……..pattern

A

route, content type, path

35
Q

When adding additional Cache Behaviors, the ………. is always the……. to be processed and is always /*

A

Default Cache Behavior, last

36
Q

EC2 instances must be……., otherwise the edge locations ………… our EC2 instances because there’s no ……..connectivity in CloudFront.

A

public, will not be able to access, private VPC

37
Q

What is Geo Restriction?

A

Restrict who can access your distribution based on location.

38
Q

Use case:
You want to distribute paid shared content to premium users over the world.

A

Use CloudFront Signed URL / Cookie

39
Q

Features:
- Includes URL expiration
- Includes IP ranges to access the data from
- Trusted signers (which AWS accounts can create signed URLs)

A

Can be included to policy attached to CloudFront Signed URL / Cookie?

40
Q

What is a Signed URL for?

A

Grants access to individual files (one signed URL per file)

41
Q

What is a Signed Cookie for?

A

access to multiple files (one signed cookie for many files)

42
Q

Features:
- Allow access to a path, no matter
- Account wide key-pair, only the root can manage it
- Can filter by IP, path, date, expiration
- Can leverage caching features

A

CloudFront Signed URL

43
Q

Features:
- Issue a request as the person who pre-signed the URL
- Uses the IAM key of the signing IAM principal
- Limited lifetime

A

S3 Pre-Signed URL

44
Q

What are Origin Groups for?

A

To increase high-availability and do failover

45
Q

How do Origin Groups work?

A

There is one primary and one secondary origin

If the primary origin fails, the second one is used

46
Q

What is Field Level Encryption?

A

Protects user sensitive information through application stack

47
Q

What does Field Level Encryption work?

A

Adds an additional layer of security along with HTTPS

encrypted at the edge close to user

48
Q

How can you get real-time requests received by CloudFront sent to Kinesis Data Streams

A

Real Time Logs

49
Q

What allows you to Monitor, analyze, and take actions based on content delivery performance

A

Real Time Logs