Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect - Associate > Databases > Flashcards

Databases Flashcards

1
Q

What is RDS?

A

Relational Database Service

  • Managed by AWS
  • SSH not available
  • Automated backups, OS patching and provisioning
  • Read replicas available
  • Multi AZ
  • Storage backed by EBS (gp2 or io1)
  • no way to audit underlying instance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the types of RDS?

A
  • Postgres
  • MySQL
  • MS SQL Server
  • Oracle
  • Maria
  • Aurora (AWS proprietary)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the RDS backup types?

A
  • Daily full backups (during maintenance window)
  • Every 5min Transaction log backups
  • Backups automatically retained for 7 days (max 35 days)
  • DB snapshots (manually triggered by user retained for as long as you want)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are RDS read replicas?

A

A copy of a database with read only access (i.e. SELECT)

  • up to 5 read replicas per DB
  • can be within AZ, Cross AZ, or Cross Region
  • Asynchronous replication, so eventually consistent
  • can be promoted to their own DB
  • cost to replicate across AZs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are characteristics of Multi-AZ RDS?

A
  • Synchronous replication
  • One DNS name for failover standby (High Availability)
  • Automatic failover
  • Not used for scaling
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What kind of encryption is available for RDS?

A
  • At Rest encryption
  • In-flight encryption
  • Backup/snapshot encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is At Rest encryption?

A

Ability to encrypt at launch time the master and read replicas with AWS KMS(AES-256)

  • master DB must be encrypted before read replicas can be encrypted
  • Transparent Data Encryption (TDE) available for Oracle and SQL Server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is In-flight encryption?

A

Ability to encrypt the data as it flows into the RDS

  • uses SSL certificates to encrypt the data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How are RDS backups encrypted?

A

Only snapshots of encrypted databases will automatically be encrypted. Un-encrypted snapshots will remain un-encrypted.

  • Note: you can copy an un-encrypted snapshot to an encrypted database
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the steps for encrypting an RDS?

A
  1. Create a snapshot of the un-encrypted database
  2. Copy the snapshot with encryption enabled
  3. Restore the database from the encrypted snapshot
  4. Migrate applications to the new database and delete the old one
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the RDS Security options?

A
  • Encryption
  • Network Security (security groups and IP control)
  • IAM policies
  • IAM-based authentication for PostgreSQL & MySQL only (uses authentication token with life of 15 min)
  • No SSH
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the RDS Security responsibilites?

A

We are responsible for…

  • IP & Port restrictions via security group inbound rules
  • Database user creation & permission or manage through IAM
  • Public or Private access designation
  • parameter groups or only SSL connection configuration

AWS is responsible for…

  • Database patching
  • OS patching
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Aurora?

A

A proprietary AWS database cloud optimized technology

  • can have up to 15 read replicas
  • failover is instantaneous (High Availability native)
  • supports Postgres & MySQL database drivers
  • automatically grows in increments of 10GB (max 64TB)
  • pay per second, costs 20% more than RDS, but more efficient
  • automated patching with zero downtime
  • advanced monitoring
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What kind of fault tolerance is available for Aurora?

A
  • up to 6 copies of your data across 3 AZs
  • Self healing with peer to peer replication
  • storage is striped across 100s of volumes
  • one instance (master) take writes
  • Failover for master in less than 30 seconds
  • supports Cross Region Replication
  • can restore to any point in time without using backups
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the Aurora Security options?

A
  • At Rest encryption using KMS
  • In-flight encryption
  • IAM token authentication
  • No SSH
  • Security Groups
  • Backup/snapshot encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Global Aurora?

A

A cross region Aurora database.

  • 1 primary region for read/write
  • up to 5 secondary regions for read only
  • up to 16 read replicas per secondary region
  • promoting a secondary region for DR takes less than 1 minute
17
Q

What is ElastiCache?

A

In-memory database for read intensive workloads.

  • Fully managed by AWS (OS maintenance, optimizations, setup, configuration, monitoring, backups and failover)
  • must have an invalidation strategy to make sure only most current data is used
18
Q

What are the ElastiCache types?

A

Redis :

  • Multi-AZ with auto failover
  • read replicas to scale
  • Data durability using AOF persistance
  • Backup and restore features

Memcached:

  • Multi-node for partitioning of data (sharding)
  • non persistent
  • no backup and restore
  • multi-threaded
19
Q

What are the ElastiCache Security options?

A
  • supports SSL in-flight encryption
  • NO IAM authentication
  • IAM policies only for API-level security
  • Redis Auth token
  • Memcached SASL based authentication
  • Security Groups
20
Q

What are the available ElastiCache patterns?

A
  • Lazy Loading where all the data is cached (can become stale)
  • Write Through adds or updates data in cache every time data is written to database
  • Session store where data is temporarily stored for that session in cache
21
Q

How can i instantiate an database instance quickly?

A

Restore from snapshot

22
Q

What is DynamoDB?

A

A fully managed, highly available, no SQL database with replication across 3 AZs.

  • Made up of tables with a primary key
  • Each table can have infinite number of items
  • Each item has attributes that can be added over time
  • Max item size is 400KB
  • Data Types include string, number, binary, boolean, null, list, map, string set, number set, binary set.
  • Can coordinate insert, update, delete actions across multiple tables using transactions (up to 10 unique items or 4MB data)
    *
23
Q

What are the advantages of DynamoDB?

A
  • Scales to massive workloads (Provisioned or On Demand)
  • Handles millions of request/sec and trillions of rows
  • Can use 100s of TB of storage
  • Integrated with IAM for security, authorization and admin
  • Enable event driven programming with DynamoDB Streams
  • Low cost and auto scaling
  • Point in time restore (like RDS)
  • Can launch a local copy of DB on your own computer for development purposes.
24
Q

What is RCU/WCU?

A

RCU is Read Capacity Units, WCU is Write Capacity Units. The are provisioned for the DynamoDB to manage throughput. Throughput can be exceeded temporarily by using ‘burst credits’ earned. If there are no ‘burst credits’ available you will get a ProvisionedThroughputException.

25
Q

What is DAX?

A

DAX is a DynamoDB accelerator which provides seamless cache for DynamoDB without application rewrite.

  • Provides microsecond latency for cached reads & queries
  • Solves Hot Key problem for too many reads
  • 5min TTL for cache by default
  • Up to 10 nodes in cluster
  • Multi AZ
  • Secure Encryption at rest with KMS, VPC, IAM, CloudTrail…
26
Q

What are Dynamo Streams?

A

A means to capture Create, Update & Delete actions on one or more tables in a DynamoDB and then react to changes in real time, create analytics, create derivative tables/views or insert data into ElasticSearch. This can be used to replicate data across regions and retains data for 24 hours.

27
Q

What kind of security is available for DynamoDB?

A
  • VPC endpoints
  • Full access control through IAM
  • Encryption at rest using KMS
  • Encryption in transit using SSL/TLS
28
Q

What is Amazon DMS?

A

A migration tool that converts data from Mongo, Oracle, MySQL, S3 etc into DynamoDB tables.

AWS Certified Solutions Architect - Associate (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions