Deck 1 Flashcards

1
Q

S3 object size

A

From 1 byte to 5 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 bucket URL format

A

https://S3-.amazonaws.com/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

S3 response when upload successful

A

HTTP 200 response

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

S3 Data consistency model

A

Read after write for PUTS

Eventual consistency for overwrite PUTS and DELETES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 objects consist in…

A
Key
Value (sequence of bytes)
Version ID
Metadata
Subresources (ACL, Torrent)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Things to take in account when naming S3 objects

A

First 16 characters determine node where S3 stores the file

Add randomness to the file name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 availability and durability

A

Availability 99,99%

Durability 99,999999999% (11 nines)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 storage tiers

A

S3 (default, 99,99% availability 99,999999999% durability)
Infrequent Access (cheaper storage fee, retrieval fee 99,9% availability 99,999999999% durability )
Reduced Redundancy Storage ( 99,99% availability 99,99% durability)
Glazier (Archival, really cheap, 3-5 hours to restore)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Is it possible to remove S3 versioning?

A

No, only disable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How much space is occupied when S3 versioning is enabled?

A

The sum of all versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to restore a deleted file with versioning enabled in S3?

A

Delete the delete marker

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Is it possible to use lifecycle management in conjunction with versioning?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How many days should you wait before deleting an object from Glacier?

A

Glacier is designed to store objects for at least 90 days. Costs incur for 90 danys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is an edge location in CloudFront?

A

Location where content will be cached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is an origin in CloudFront?

A
Origin of all files that the CDN will distribute.
Can be:
-S3 bucket
-EC2 instance
-ELB
-Route 53
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a distribution in CloudFront?

A

Name given to the CDN.

Consists in a collection of edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Types of distributions in CloudFront

A
  • Web distribution

- RTMP (media streaming)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Is it possible to write to an edge location?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What determines the amount of time an object is cached in CloudFront?

A

TTL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is it possible to clear cached objects in CloudFront?

A

Yes, but you will be charged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Is it possible to restrict access to contents in CloudFront?

A

Yes, you can use signed URLs or signed cookies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How to set up access to an S3 bucket?

A

ACL

Bucket Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Where can you store access logs for an S3 bucket?

A

Another bucket

Another AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Ways of encrypting data in S3

A
  • In transit:
  • -SSL/TLS
  • At rest:
  • -Server side encryption:
  • –SSE-S3 (S3 managed keys)
  • –SSE-KMS (AWS Key Management Service managed keys)
  • –SSE-C (Customer provided keys)

–Client side encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Types of Storage Gateway

A
  • Files Gateway (NFS)
  • Volumes Gateway(iSCSI)
  • -Stored volumes
  • -Cached volumes
  • Tape Gateway (VTL)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What you can do with Snowball?

A

Export data from S3

Import data to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is S3 transfer acceleration?

A

Accelerates uploads to S3 using edge locations.

User uploads to edge location and data is uploaded to S3 through AWS backbone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What do you need to enable S3 cross region replication?

A

Enable versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

S3 lifecycle management actions permitted

A
  • Transition from standard to IA (128kb and 30 days after creation)
  • Archive to glacier (30 days after transfer to IA)
  • Permanently delete
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Snowball types

A

Snowball
Snowball edge
Snowmobile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is Import / Export?

A

Allows you to send disks with data to AWS.

Deprecated (currently Snowball)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is S3 multipart upload?

A

Allows you to accelerate uploads by uploading multiple parts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Are you charged for the whole hour when a spot instance is terminated?

A

If the Spot instance is terminated by Amazon EC2, you will not be charged for a partial hour of usage.
However, if you terminate the instance yourself, you will be charged for any hour in which the instance ran.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

EC2 instance families

A

DRMCGIFTPX

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

EC2 instance types

A

on demand, spot, reserved, dedicated hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

EBS types

A
General purpose 
Provisioned IOPS
Throughput optimized (no boot)
Cold (no boot)
Magnetic standard
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Is it possible to connect an EBS volume to multiple EC2 instances?

A

No, you should use EFS instead

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Is it possible to encrypt an EBS root volume from an AWS AMI?

A

You can’t encrypt a root volume from a created AMI. Instead, you should use a 3rd party tool or create your own AMI and encrypt it during creation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Traffic allowed by default in SG

A

Inbound: None
Outbound: All

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

How many EC2 instances per SG?

A

Any number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Is it possible to attach an EBS volume to an instance I. A different AZ?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What to do in case you need more IOPS than an EBS volume can provide?

A

Create more than one volume an create a RAID 0 or 10.

Amazon discourages RAID 5.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

How to take a consistent snapshot from a RAID?

A

Application consistent snapshot.

  • Freeze filesystem
  • Unmount array
  • Stop EC2 instance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

How to take a snapshot from an EBS root volume?

A

Stop the EC2 instance first

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Is it possible to share an encrypted snapshot?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

How to encrypt the snapshot of an encrypted volume?

A

It is encrypted automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

How to encrypt a volume restored from an encrypted volume?

A

It is done automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Is it possible to stop an instance store backed instance?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What will happen with root volumes on termination?

A

By default, all will be deleted, but you can chose to keep EBS backed root volumes during creation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

How to resolve the IP address of an ELB?

A

It is not possible, AWS gives you a DNS name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

CloudWatch host level metrics enabled by default

A
  • CPU
  • Network
  • Disk (read/write, not space consumption)
  • Status checks
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

CloudWatch monitoring types and default interval

A

Default monitoring, enabled by default. No cost and 5 minute interval.
Detailed monitoring, not enabled by default. Has cost and 1 minute interval.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Is it possible to us a role in a different region?

A

Yes, roles are universal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Instance meta-data URL

A

http://169.254.169.254/latest/meta-data/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Define warm up and cool down periods

A

Warm up period: period for the instance to start participating to the metrics
Cooldown period: amount of time between autoscaling events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is a placement group?

A

A placement group is a logical grouping of instances within a single Availability Zone. Placement groups are recommended for applications that benefit from low network latency, high network throughput, or both. To provide the lowest latency, and the highest packet-per-second network performance for your placement group, choose an instance type that supports enhanced networking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Is it possible to expand a placement group to more than one AZ?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Is it possible to use the same name in more than one placement group?

A

No, name must be unique in your AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Is it possible to launch any instance type in a placement group?

A

No, only in compute, GPU, memory or storage optimised instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Is it possible to merge placement groups?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Is it possible to add an existing instance to a placement group?

A

No, but you can create an AMI from the instance and launch a new instance from the AMI into the placement group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Is it possible to delete an EBS snapshot used as root volume for a registered AMI?

A

No, you should deregister the AMI first

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Is it possible to launch an AMI in a different region from where it is stored?

A

No, AMIs are regional. You can copy an AMI to other region using console, command line or EC2 API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

How to obtain the IP address of an ELB?

A

ELBs don’t have predefined IPv4 addresses. You resolve to them using a DNS name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Differences between alias and CNAME

A
  • Alias allow to resolve a zone apex

- AWS does not charge for alias resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Route53 routing policies

A
  • Simple
  • Weighted
  • Latency
  • Failover
  • Geolocation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Route53 domain name number soft limit

A

50

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What do you need in order to create a read replica in RDS?

A

Enable automatic backups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Maximum number of read replicas in RDS

A

5

70
Q

Is it possible to have a read replica from a read replica?

A

Yes, but latency problems can appear

71
Q

Is it possible to enable MultiAZ in a read replica?

A

No

72
Q

Differences scaling RDS and DynamoDB

A
  • RDS: hard to scale. Bigger instance or read replicas

- DynamoDB: Scales on the fly

73
Q

DynamoDB consistency models

A
Eventual consistency ( best read performance, default)
Strong consistency
74
Q

Dynamoy billing blocks

A

Blocks of:
Read:50 (cheap)
Write:10 (expensive)

75
Q

When is suitable to use ElastiCache?

A

Database with frequent reads and few changes

76
Q

What are the charges for the data transferred from RDS masters to replicas?

A

None

77
Q

If you are using Amazon RDS Provisioned IOPS storage with MySQL and Oracle database engines what is the maximum size RDS volume you can have by default?

A

6Tb

78
Q

Maximum provisioned IOPS capacity on an Oracle and MySQL RDS instance (using provisioned IOPS)

A

30,000 IOPS

79
Q

How many copies of your data do you have with Aurora?

A

6, 2 copies in 3 AZ

80
Q

How many copies can Aurora handle loosing?

A

3 copies without affecting reads

2 copies without affecting writes

81
Q

Types of Aurora replicas

A
Aurora replicas ( up to 15)
MySQL replicas ( up to 5)
82
Q

Redshift node configuration

A
  • Single node ( 160Gb)
  • Multinode:
  • -Leader node: manages client connections, receives queries
  • -Compute node:stores data, performs queries and computations (up to 128 compute nodes)
83
Q

Is it possible to expand a subnet to more than one AZ?

A

No

84
Q

How many IGW per VPC?

A

1

85
Q

Is it possible to perform transitive peering in VPC?

A

No, VPC peering is done through star configuration

86
Q

VPC allowed CIDR block ranges?

A

Between /16 and /28

87
Q

What is created by default when you create a VPC?

A

Route table
Network ACL
Security Group

88
Q

To which route table is associated a subnet when it is created?

A

Default

89
Q

What you should disable in a NAT instance?

A

Source/destination check

90
Q

What to do is NAT instance is the bottleneck ?

A

Increase instance size

91
Q

How to deploy a NAT instance in HA?

A
  • Two instances in different AZs

- Script to automate failover between them

92
Q

How many NACL per subnet?

A

1, when you associate a new NACL, old is removed

If not associated, it is associated with default NACL

93
Q

Traffic allowed by default in NACL

A

Default: all
Custom: any

94
Q

How many subnet per NACL?

A

Multiple

95
Q

How many VPC per region by default?

A

5

96
Q

How many subnet to provide HA?

A

Minimum of 2

97
Q

Difference NAT and bastion instances?

A

NAT to provide internet traffic to instances in private subnet
Bastion to manage instances in private subnet

98
Q

Does an instance in a public subnet have internet access by default?

A

No, you have to assign a public address or an EIP to the instance

99
Q

What AWS region(s) can I connect to via a DirectConnect connection?

A

Each AWS Direct Connect location enables connectivity to the geographically nearest AWS region. You can access all AWS services available in that region.
Direct Connect locations in the US can also access the public endpoints of the other AWS regions using a public virtual interface.

100
Q

How many types of block devices does Amazon EC2 support?

A
  • Instance store

- EBS

101
Q

What does Amazon EBS stand for?

A

Elastic Block Store

102
Q

What is SWF?

A

Simple WorkFlow Service.

Service to coordinate tasks

103
Q

Main differences between SQS and SWF

A
  • SQS has a retention period of 14 days, SWF up to 1 year for workflow executions
  • SQS message oriented API, SWF task oriented API
  • SWF ensures task is processed one time
104
Q

SWF actors

A
  • Starters
  • Deciders
  • Workers
105
Q

Maximum size of an SQS message

A

256kb of text in any format

106
Q

SQS order

A

Does not provide FIFO

107
Q

SQS visibility timeout

A

12 hours

108
Q

How many times a message will be delivered to SQS?

A

At least 1.

You should prepare your application so processing message more than one time does not generate errors or inconsistencies

109
Q

How is SQS billed?

A
  • 64kb chunks (each chunk is charged as a request. Example: 1 API call with 256kb payload is charged = 4 requests)
  • first 1 million SQS requests are free
  • $0,50 per million thereafter
110
Q

How many messages per request in SQS?

A

10

Maximum payload of 256kb

111
Q

SNS deliver methods

A
  • Push notification to mobile devices
  • SMS
  • Email
  • SQS
  • HTTP endpoint
  • Lambda
112
Q

Main difference between SQS and SNS

A

SQS is pull

SNS is push

113
Q

What does a “domain” refer to in Amazon SWF?

A

A collection of related workflows

114
Q

With which protocols does RDS support SOAP?

A

Only HTTPS

115
Q

What is bulk copy for SQL Server?

A

The SQL Server bulk copy feature is an efficient means of copying data from a source database to your DB instance. Bulk copy writes the data that you specify to a data file, such as an ASCII file. You can then run bulk copy again to write the contents of the file to the destination DB instance.

116
Q

In the Amazon RDS which uses the SQL Server engine, what is the maximum size for a Microsoft SQL Server DB
Instance with SQL Server Express edition?

A

10 Gb

117
Q

Attaching methods for ENIs

A

You can attach an elastic network interface to an instance when it’s running (hot attach), when it’s stopped (warm attach), or when the instance is being launched (cold attach).

118
Q

If you scale your provisioned storage capacity within the month…

A

…your bill will be pro-rated.

119
Q

Backup retention period duration?

A

You can set the backup retention period to between 1 and 35 days.

120
Q

What configuration should be used to ensure the highest network performance (packets per second), lowest latency, and lowest jitter?

A

Enhanced Networking enables you to get significantly higher packet per second (PPS) performance, lower network jitter and lower latencies. This feature uses a new network virtualization stack that provides higher I/O performance and lower CPU utilization compared to traditional implementations. In order to take advantage of Enhanced Networking, you should launch an HVM AMI in VPC, and install the appropriate driver.

121
Q

The Trusted Advisor service provides insight regarding which four categories of an AWS account?

A

Security
Fault tolerance
Cost optimizing
Performance

122
Q

Which login types does AWS STS web identity federation support?

A

AWS STS web identity federation supports Login with Amazon, Facebook, Google, and any OpenID Connect (OICD)-compatible identity provider.

123
Q

Instance types only available as Amazon EBS-backed

A

T2

C4

124
Q

Main difference between CloudWatch and CloudTrail

A

CloudWatch: monitoring
CloudTrail: logging

125
Q

Is it possible to move reserved instances from one region to another?

A

No

126
Q

AWS services related with big data

A
  • Kinesis: consume big data in real time (ex: social media)
  • EMR:big data processing
  • Redshift: BI
127
Q

What is a resource group?

A

Which resource groups you can group resources that share one or more tags

128
Q

VPC peering limitations

A

No multi region
No transitive
No CIDR overlapping

129
Q

Is it possible to authenticate in the AWS console using your AD credentials?

A

Yes, using SAML authentication

130
Q

Methodologies for encrypting data on S3?

A

SSE-KMS
SSE-S3
SSE-C

131
Q

4 pillars well architected framework

A

Security
Reliability
Performance efficiency
Cost optimisation

132
Q
What is needed before you can enable cross-region replication on an Amazon Simple
Storage Service (Amazon S3) bucket?
A

-Enable versioning on the bucket.
-Create an AWS IAM policy to allow Amazon S3
to replicate objects on your behalf.

133
Q

what you can and cannot change from an instance reservation?

A

You can change the instance type only within the same instance type family, or
you can change the Availability Zone. You cannot change the operating system nor the
instance type family.

134
Q

What can you do with dhcp option sets?

A

You can specify the domain name for instances within
an Amazon VPC and identify the IP addresses of custom DNS servers, NTP servers, and
NetBIOS servers

135
Q

What is a VPC endpoint?

A

Enables you to create a private connection between your Amazon VPC and another AWS service without requiring access over the Internet or through a NAT
instance, a VPN connection, or AWS Direct Connect. Endpoints support services within
the region only.

136
Q

The default time for an Amazon SQS visibility timeout is…

A

… 30 seconds

137
Q

The maximum time for an Amazon SQS visibility timeout is …

A

…12 hours

138
Q

What is proxy protocol?

A

You can identify the originating IP address of a client connecting to your servers using TCP load balancing. Client connection information, such as IP address and port, is typically lost when requests are proxied through a load balancer.

139
Q

What is Amazon CloudSearch?

A

Amazon CloudSearch is a managed service in the AWS Cloud that makes it simple and cost-effective to set up, manage, and scale a search solution for your website or application.

140
Q

Can the instances of s SG talk to each other?

A

Default SG - Yes

Other SGS - No

141
Q

What is erased when you delete an IAM user?

A

When you use the AWS Management Console to delete an IAM user, IAM automatically deletes the following information for you:

The user
Any group memberships—that is, the user is removed from any IAM groups that the user was a member of
Any password associated with the user
Any access keys belonging to the user
All inline policies embedded in the user (policies that are applied to a user via group permissions are not affected)
Any associated MFA device

142
Q

Can I delete a snapshot of the root device of an EBS volume used by a registered AMI?

A

Note that you can’t delete a snapshot of the root device of an EBS volume used by a registered AMI. You must first deregister the AMI before you can delete the snapshot.

143
Q

Pare meters retained when you promote a read replica

A

The new DB instance that is created when you promote a Read Replica retains the backup retention period, backup window period, and parameter group of the former Read Replica source.

144
Q

Public IP address remains associated when instance is stopped?

A

For instances launched in EC2-Classic, we release the private IPv4 address when the instance is stopped or terminated. If you restart your stopped instance, it receives a new private IPv4 address.

For instances launched in a VPC, a private IPv4 address remains associated with the network interface when the instance is stopped and restarted, and is released when the instance is terminated.

145
Q

If you add a tag that has the same key as an existing tag on that resource…

A

…If you add a tag that has the same key as an existing tag on that resource, the new value overwrites the old value.

146
Q

Are Reserved Instances available for Multi-AZ Deployments?

A

Yes

147
Q

When should I choose Provisioned IOPS over Standard RDS storage?

A

If you use production online transaction processing (OLTP) workloads.

148
Q

What is an instance profile?

A

An instance profile is a container for an IAM role that you can use to pass role information to an EC2 instance when the instance starts.

149
Q

How many active access keys we IAM user?

A

IAM permits users to have no more than two active access keys at one time.

150
Q

How to improve performance of API Gateway?

A

Use caching

151
Q

How to scale API Gateway?

A

It scales automatically

152
Q

How to prevent attacks in API Gateway?

A

Use throttling

153
Q

How to solve API Gateway error: “origin policy cannot be read at the remote resource”

A

Enable CORS

154
Q

Differences between Kinesis streams and Kinesis firehose?

A
Streams:
-uses shards
-data is sent to consumers first
Firehose:
-analizes dará automatically using lambda
155
Q

Can I encrypt connections between my application and my DB Instance using SSL?

A

Yes, this option is currently supported for the MySQL, MariaDB, SQL Server, PostgreSQL, and Oracle engines.

156
Q

Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine?

A

No

157
Q

If your DB instance runs out of storage space or file system resources, its status will change to_____ and your
DB Instance will no longer be available.

A

Storage-full

158
Q

Which Amazon storage do you think is the best for my database-style applications that frequently encounter
many random reads and writes across the dataset?

A

EBS

159
Q

How to expose a snapshot only to selected accounts?

A

SelectPrivate, enter the IDs of those AWS accounts, and clickSave.

160
Q

Define Query requests

A

Query requests are HTTP or HTTPS requests that use the HTTP verb GET or POST and a Query parameter named Action.

161
Q

Does AWS Direct Connect allow you access to all Availabilities Zones within a Region?

A

Yes

162
Q

Does Amazon SQS keep track of all tasks and events in an application?

A

No, with SQS, you must implement your own application-level tracking, especially if your application uses multiple queues.

163
Q

When editing permissions (policies and ACLs), to whom does the concept of the “Owner” refer?

A

The “Owner” refers to the identity and email address used to create the account AWS account.​​

164
Q

Once a VPC is set to Dedicated hosting, is it possible to change the VPC or the instances to Default hosting?

A

No, yvou must re-create the VPC.

165
Q

Is it possible to read Route53 internal resources from external sources?

A

Route53 has a security feature that prevents internal DNS from being read by external sources. The work around is to create a EC2 hosted DNS instance that does zone transfers from the internal DNS, and allows itself to be queried by external servers.

166
Q

Permissions to host a website on S3

A
  • Modify object ACL (no bucket ACL)

- Create bucket policy

167
Q

It is possible to have a read replica in a different region in RDS?

A

Yes, for MySQL, MariaDB and Postgres instances

168
Q

To access public resources in a remote region…

A

…you must set up a public virtual interface and establish a border gateway protocol (BGP) session.

169
Q

ASG default termination policy

A

AZ with more instances
Oldest LC
Instance nearer to next billing hour

170
Q

Is it compulsory to have AWS credentials in order to use WorkSpaces?

A

No, if AWS WorkSpaces is integrated with an AD

171
Q

Is WorkSpaces persistent?

A

Yes

172
Q

On WorkSpaces, all data on D:/ is backed up every…

A

12 hours