Core Services - Detailed Flashcards

1
Q

What is a VPC

A

VPC stands for Virtual Private Cloud. APC allows you to create a secure private network in the AWS cloud where you launch your resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the main components of a VPC?

A

NACL, Router, Route Table, Internet Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an NACL?

A

NETWORK ACL, Access control lists (ACLs) ensure the proper traffic is allowed into the subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a Router and a Route Table?

A

A Router and a Route Table define where network traffic is routed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an Internet Gateway?

A

An Internet Gateway allows public traffic to the internet from a VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a VPC like?

A

A VPC is like a fence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does an internet gateway do?

A

It allows traffic to the public internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does peering do?

A

It allows you to connect 2 VPCs together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an AZ

A

An AZ stands for availability zone. AZs consist of one or more physically separated data centres, each with redundant power, networking and connectivity, housed in separate facilities

An AZ has one or more discrete data centers but the exact number in each is not disclosed by AWS

An AZ contains the servers you’re renting and it’s where you deploy your applications
An AZ is associated with a single region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Route 53

A

Route 53 is a DNS service that routes users to applications. It performs health checks on AWS resources and supports a HYBRID MODEL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Direct Connect

A

Direct Connect is a dedicated physical network connection from your on-premises data center to AWS. It supports a HYBRID MODEL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is site-to-site VPN

A

Site-to-site VPN creates a secute connection between your internal networks and your AWS VPCs. It supports a HYBRID MODEL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is API Gateway

A

API Gateway allows you to build and manage APIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a virtual private gateway?

A

Virtual Private Gateway is the VPN connector on the AWS side

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a customer gateway?

A

Customer Gateway is the VPN connector on the client side

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Name the available AWS databases

A

RDS, Aurora, DynamoDB, DocumentDB, ElastiCache, Neptune

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Name the AWS Analytics Services

A

Redshit, Athena, AWS Glue, Kinesis, EMS, Data Pipeline, QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is Redshift

A

Redshift is an analytics service. Redshift is a scalable data warehouse solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Athena?

A

Athena is a query analytics service for Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is AWS Glue?

A

AWS Glue prepares your data for analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Kinesis?

A

Kinesis is an analytics service that allows you to analyze data and video streams in real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is EMR?

A

EMR (Elastic Map Reduce) allows you to process large amounts of data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Data Pipeline?

A

Data pipeline is an analytics service that helps you move data between compute and storage services running either on AWS or on-premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is QuickSight?

A

QuickSight is an analytics service that helps you visualize data using dashboards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the Machine Learning services in AWS?

A

Rekognition, Comprehend, Polly, SageMaker, Translate, Lex

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Rekognition

A

Rekognition is a machine learning service that allows you to automate your image and video analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is Comprehend?

A

Comprehend is a natural-language processing (NLP) service that finds relationships in text.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Polly?

A

Polly turns text into speech

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is SageMaker?

A

SageMaker is a machine learning service that helps you build, train and deploy machine learning models quickly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is Translate?

A

Translate is a machine learning service that provides language translation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Lex?

A

Lex is a machine learning service that helps you build conversational chatbots. Alexa uses Lex.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Access control list (ACL)

A

A firewall/security layer on the subnet level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Buckets

A

root-level “folders”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Auto scaling

A

Automates the process of adding or removing EC2 instances based on traffic demand for your application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

CloudFront

A

Content delivery network (CDN) that allows you to store your content at “edge locations” located all around the world, allowing customers to access your content more quickly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

CloudTrail

A

Allows you to monitor all actions taken by IAM users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

CloudWatch

A

Service that allows you to monitor various elements of your AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Consolidated billing

A

Allows you to view, manage, and pay bills for multiple AWS accounts in one user interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

DNS server

A

A database of website domains and their corresponding IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

DynamoDB

A

NoSQL database service that does not provide other NoSQL software options

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

EBS

A

Elastic Block Store (EBS) - Provides persistent block storage volumes for use of EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

EC2

A

Elastic Compute Cloud (EC2): A virtual computer, very similar to a desktop/laptop computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

ELB

A

Elastic Load Balancing (ELB): Evenly distributes traffic between EC2 instances that are associated with it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

ElastiCache

A

Data caching service used to help improve the speed/performance of web applications running on AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Elasticity

A

The ability of a system to increase and decrease in size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Fault tolerance

A

Property that enables a system to continue operating properly in the event of the failure of one or more components

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Firewall

A

A type of software that either allows or blocks certain kinds of internet traffic to pass through it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Folder

A

Any “subfolder” created in a bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

High availability

A

Refers to systems that are durable and likely to operate continuously without failure for a long time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

IAM users

A

Individuals who have been granted access to an AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

IAM

A

Identity and Access Management (IAM): Service where AWS user accounts and their access to various AWS services are managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Lambda

A

Lambda: Serverless computing that will replace EC2 instances, for the most part

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Object availability

A

Percent over a one-year time period that a file stored in S3 will be accessible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Object durability

A

Percent over a one-year time period that a file stored in S3 will not be lost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Object lifecycle

A

Set rules to automatically transfer objects between storage classes at defined time intervals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Object sharing

A

Ability to make any object publicly available via a URL link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Object versioning

A

Automatically keep multiple versions of an object (when enabled)

60
Q

Organizations

A

Allow you or your company access to manage billing and access to multiple AWS accounts in one user interface

61
Q

Principle of least privilege

A

Giving a user only the rights/access to the AWS services and resources they need to do their job and nothing more

62
Q

Publishers

A

Human/alarm/event that gives SNS the message that needs to be sent

63
Q

RDS

A

Relational Database Service (RDS): SQL database service that provides a wide range of SQL database options to select from

64
Q

RedShift

A

Data warehouse database service designed to handle petabytes of data for analysis

65
Q

Roles

A

How different AWS services are granted permission to communicate and share data

66
Q

Route 53

A

Where you configure and manage web domains for websites or applications you host on AWS

67
Q

Scalability

A

The ability of a system to easily increase in size and capacity in a cost-effective way

68
Q

Security group (SG)

A

Firewall/security layer on the server/instance level

69
Q

Shared responsibility model

A

Defines what you and AWS are responsible for when it comes to security and compliance

70
Q

SNS

A

Simple Notification Service (SNS): AWS service that allows you to automate the sending of email or text messaging notifications based on events that happen in your AWS account

71
Q

S3

A

Simple Storage Service (S3): Online bulk storage service you can access from almost any device

72
Q

Storage class

A

Represents “classification” assigned to each object in S3 (standard, RRS, S3-IA, Glacier)

73
Q

Subnet

A

A subsection of a network and generally includes all the computers in a specific location

74
Q

Subscriptions

A

Endpoints to which a topic sends messages

75
Q

Topics

A

How you label and group different endpoints to which you send messages

76
Q

Trusted Advisor

A

Service that “advises” and helps you optimize aspects of your AWS account

77
Q

User credentials

A

IAM user’s username and password for logging in to AWS

78
Q

VPC

A

Virtual Private Cloud (VPC): A private subsection of AWS you control and in which you can place AWS resources

79
Q

List the 6 advantages of cloud computing

A
  1. Trade Capital Expense (CapEx) for variable expense
  2. Benefit from massive economies of scale
  3. Stop guessing capacity
  4. Increase speed and agility
  5. Stop spending money managing infrastructure and datacentres
  6. Go global in minutes
80
Q

List the 4 benefits of cloud computing

A

Think HEAD
High Availability
Elasticity
Agility
Durability

81
Q

What is the difference between CapEx and OpEx

A

Capital expenditures are a company’s major, long-term expenses while operating expenses are a company’s day-to-day expenses. Examples of CapEx include physical assets, such as buildings, equipment, machinery, and vehicles. Examples of OpEx include employee salaries, rent, utilities, and property taxes.

82
Q

What are the 3 common cloud computing models

A

Iaas - e.g. ec2, or a company hosting your website
Saas - e.g. A complete product run by the service or software provider - e.g. Gmail, Sagemaker
PaaS - e.g. A service provided by cloud providers that lets you develop without having to install anything - Cloud9, or a service provider giving you the tools to build a storefront website

83
Q

What are the 3 cloud computing deployment types

A

Private Cloud - ON-premises!, exists in your internal datacentre, doesn;t offer cloud computing advantages
Public Cloud - AWS - Advantages of cloud computing, you don;t have to mange the underlying hardware
Hybrid Cloud - Secure onprem data - direct connect to AWS where the apps run, or the intermediate position a company may be in as they migrate to the cloud, go through a cloud conversion

84
Q

What’s a driving force for choosing a parcticular region?

A

You want to use a region close to your customers for the best performance

85
Q

How can you protect the root user in your account?

A

MFA

86
Q

What privileges does the root user have?

A

All. You can even delete the account

87
Q

What are three ways you can access AWS services?

A

Management console, CLI (programatic access), SDK

88
Q

Name the core compute services

A

EC2
AMI
Lambda
Auto Scaling
ELB
Fargate
LightSail
AWS Outposts
AWS Batch

89
Q

What is ec2 and what can it be used for

A

Elestic compute. Allows you to rent and manage virtual servers in the cloud
750 compute hrs p/m on free tier plan
Use preconfigured template AMI to launch instance

REal world: deploy a database or a web application on ec2

EC2 Pricing options :
90
Q

How can you access your ec2 instance?

A

Acess via AWS management console, secure shell (SSH), ec2 instance connect (EIC) using IAM to control SSH access so you don’t need SSH keys, AWS systems mnager

91
Q

What is an AMI and how is it used?

A

Amazon Machine Image - A preconfigured template that you can use to launch an instance

92
Q

What is AWS Lambda?

A

Lambda is a serverless compute sevice that lets you run code without managing servers
Serverless compute - Run code

Function, scales automatically, serverless

93
Q

How can you trigger lambda?

A

SNS, Direct URL - get more info

94
Q

What is the Lambda execution timeout?

A
95
Q

What is the Lambda pricing model?

A

What is the free-tier Lambda pricing policy?

96
Q

What is the free-tier Lambda pricing policy?

A
97
Q

What additional compute services are there?

A
98
Q

What is AWS Fargate?

A

AWS Fargate
Serverless compute engine for containers
Allows you to manage containets like DOCKER
SERVERLESS

99
Q

What is Amazon LightSail?

A

Amazon Lightsail
Allows you to quickly launch all the resources you need for small projects

Simple screens for people with no cloud experience
Includes a virtual machine, SSD based storage, data transfer, DNS management, and a static IP
Provides a LOW, PREDICTABLE, MONTHLY FEE, as lows as $3.50

100
Q

What type of applications can Lightsail deploy

A

Deploy preconfigured applications, like WORDPRESSS websites, at the click of a button

101
Q

What is lightsail similar too?

A

(Similar to AWS Quick Starts)

102
Q

What is AWS Outposts?

A

Outposts allows you to run cloud services in your internal datacentre

Supports workloads that need to REMAIN ON-PREMISES due to latency or data sovereignty needs
AWS DELIVERS and INSTALLS servers in your internal data center
Used for a HYBRID experience
Have access to the CLOUD SERVICES and APIs to develop apps on-premises

103
Q

What is AWS batch?

A

Batch allows you to process large workloads in smaller chunks (or batches)
Runs hundreds and thousands of smaller BATCH PROCESSING jobs
DYNAMICALLY provisions instances based on volume

104
Q

What are the S3 storage services?

A

8 Services :
https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html

S3 Standard
S3 Standard IA (Infrequent Access)
S3 Intelligent Tiering

S3 One Zone-IA (Infrequent Access)
S3 Express One Zone

S3 Glacier Instant Retrieval
S3 Glacier Flexible Retrieval
S3 Glacier Deep Archive

105
Q

What type of storage is S3?

A
106
Q

How much can you store on S3?

A
107
Q

How do you get data into S3?

A
108
Q

What types of access is allowed for data in S3?

A
109
Q

At what level can security be set in S3?

A
110
Q

What type of location does S3 use?

A
111
Q

How can you track access to your S3 buckets and objects?

A
112
Q

What type of protection does S3 have?

A
113
Q

What are the 2 different aspects of data accessibility?

A
114
Q

What is durability?

A
115
Q

What is Amazon S3 standard’s durability level?

A
116
Q

What is storage availability in S3?

A
117
Q

What is S3 standards availability level?

A
118
Q

What are the S3 storage classes?

A
119
Q

What are s3 storage class and their availability levels

A
120
Q

What are the s3 storage classes protection levels?

A
121
Q

When might you use each type of S3 storage class?

A
122
Q

What is S3 used for in the real world?

A
123
Q

What are the types of Ec2 scaling and what do they do?

A
124
Q

What are the benefits of autoscaling?

A
125
Q

what is the difference between autoscaling and load balancing?

A
126
Q

What types of load balances are there?

A
127
Q

What is a region?

A

A region is a physical location, a collection of AZs
You should setup resources in regions close to your users
Most resources are tied to a specific region

128
Q

What does AWS Lambda allow developers to do?

A

Lets developers concentrate on core business logic rather than worring about managing servers

129
Q

What is the default lambda timeout?

A

15 minutes

130
Q

What programming languages does lambda support

A

Java, Go, PowerShell, Node.js, C#, Python and Ruby

131
Q

Name the lambda features

A

Lambda features:
1. Supports popular programming languages liek Java, Go, PowerShell, Node.js, C#, Python and Ruby
2. You author code using your favourite development environment or via the console
3. Lambda can execute your code in response to events
4. Lambda functions have a 15 minute timeout

132
Q

What is the Lambda pricing model

A

Lambda Pricing model:
You are chanrged based on duration and number of requests
1. Compute Time
2. Request count
3. Always free - the free usgae tier includes 1 million free requests each month

133
Q

What is High Availability

A

Highly available systems are designed to operate continuously without failure for a long time. These systems avoid loss of service by reducing or managing failures.

134
Q

Elasticity

A

With elasticity, you don’t have to plan ahead of time how much capacity you need. You can provision only what you need, and then grow and shrink based on demand.

135
Q

What is Agility

A

The cloud gives you increased agility. All the services you have access to help you innovate faster, giving you speed to market.

136
Q

What is durability?

A

Durability is all about long-term data protection. This means your data will remain intact without corruption.

137
Q

What are the characteristics of an AZ

A

Physically separated
Connected through low-latency links
Fault tolerant
Allows for high availability

138
Q

What are the three main components of the AWS Global strategy?

A

Regions, AZs, Edge locations

139
Q

What are edge locations?

A

Edge locations - way more of them than there are Regions or AZs
They’re not used to run services like compute, instead they cache your web content
They’re like a mini-datacenter, but not used to launch services like EC2 instances, they’re used to CACHE your content which is made possible via CloudFront

Think EDGE/FRONTier -the edge in different places in a cowboy hat and outfit?

Edge locations reduce latency

An Edge Location is used to cache content for speedy delivery
Content delivery network (CDN) and Amazon CloudFront
Reduced latency
An edge location is like a mini datacenter but it doesn’t run your main infrastructure like EC2 instances

140
Q

What is wavelength zone in AWS?

A

Wavelength Zones are AWS infrastructure deployments that embed AWS compute and storage services within telecommunications providers’ data centers at the edge of the 5G network, so application traffic can reach application servers running in Wavelength Zones without leaving the mobile providers’ network.

141
Q

What is local zones in AWS?

A

AWS Local Zones are a type of AWS infrastructure deployment that place compute, storage, database, and other select services closer to large population, industry, and IT centers, enabling you to deliver applications that require single-digit millisecond latency to end-users.

142
Q

What are the different EC2 types?

A
143
Q

What is AWS Global Accelerator?

A
144
Q

What are the ec2 pricing options?

A

On-Demand
Spot
Reserved Instances
Dedicated Hosts
Savings Plans

145
Q

What are the differences between the ec2 pricing options?

A

On-Demand - Pay as you go, fixed price, billed
down to the second based on your instance type, no contract, pay for what you use, for unpredictable workloads.

Spot - 90% savings,cheapest option, let you take advantage
of unused EC2 capacity, request is fulfilled only
if the capacity is available, apps that can survive termination

Reserved Instances - commit to a specific instance type
in a certain region for 1 or 3 years, steady state usage, pay upfront, save up to 75% than on-demand,

Dedicated Hosts - for a physical server
that is fully dedicated to running your instances, use when you want to BYOL, regulatory/compliance requirements around tenancy, save yp to 70% off on-demand,

Savings plans - save up to 72%, savings shared across various computer services (ec2, lambda, fargate), commit to 1 or 3 years compute usage, can lower bill across multiple compute services,

146
Q
A