Deck 1 Flashcards
S3 object size
From 1 byte to 5 TB
S3 bucket URL format
https://S3-.amazonaws.com/
S3 response when upload successful
HTTP 200 response
S3 Data consistency model
Read after write for PUTS
Eventual consistency for overwrite PUTS and DELETES
S3 objects consist in…
Key Value (sequence of bytes) Version ID Metadata Subresources (ACL, Torrent)
Things to take in account when naming S3 objects
First 16 characters determine node where S3 stores the file
Add randomness to the file name
S3 availability and durability
Availability 99,99%
Durability 99,999999999% (11 nines)
S3 storage tiers
S3 (default, 99,99% availability 99,999999999% durability)
Infrequent Access (cheaper storage fee, retrieval fee 99,9% availability 99,999999999% durability )
Reduced Redundancy Storage ( 99,99% availability 99,99% durability)
Glazier (Archival, really cheap, 3-5 hours to restore)
Is it possible to remove S3 versioning?
No, only disable
How much space is occupied when S3 versioning is enabled?
The sum of all versions
How to restore a deleted file with versioning enabled in S3?
Delete the delete marker
Is it possible to use lifecycle management in conjunction with versioning?
Yes
How many days should you wait before deleting an object from Glacier?
Glacier is designed to store objects for at least 90 days. Costs incur for 90 danys
What is an edge location in CloudFront?
Location where content will be cached
What is an origin in CloudFront?
Origin of all files that the CDN will distribute. Can be: -S3 bucket -EC2 instance -ELB -Route 53
What is a distribution in CloudFront?
Name given to the CDN.
Consists in a collection of edge locations
Types of distributions in CloudFront
- Web distribution
- RTMP (media streaming)
Is it possible to write to an edge location?
Yes
What determines the amount of time an object is cached in CloudFront?
TTL
Is it possible to clear cached objects in CloudFront?
Yes, but you will be charged
Is it possible to restrict access to contents in CloudFront?
Yes, you can use signed URLs or signed cookies
How to set up access to an S3 bucket?
ACL
Bucket Policies
Where can you store access logs for an S3 bucket?
Another bucket
Another AWS account
Ways of encrypting data in S3
- In transit:
- -SSL/TLS
- At rest:
- -Server side encryption:
- –SSE-S3 (S3 managed keys)
- –SSE-KMS (AWS Key Management Service managed keys)
- –SSE-C (Customer provided keys)
–Client side encryption
Types of Storage Gateway
- Files Gateway (NFS)
- Volumes Gateway(iSCSI)
- -Stored volumes
- -Cached volumes
- Tape Gateway (VTL)
What you can do with Snowball?
Export data from S3
Import data to S3
What is S3 transfer acceleration?
Accelerates uploads to S3 using edge locations.
User uploads to edge location and data is uploaded to S3 through AWS backbone.
What do you need to enable S3 cross region replication?
Enable versioning
S3 lifecycle management actions permitted
- Transition from standard to IA (128kb and 30 days after creation)
- Archive to glacier (30 days after transfer to IA)
- Permanently delete
Snowball types
Snowball
Snowball edge
Snowmobile
What is Import / Export?
Allows you to send disks with data to AWS.
Deprecated (currently Snowball)
What is S3 multipart upload?
Allows you to accelerate uploads by uploading multiple parts
Are you charged for the whole hour when a spot instance is terminated?
If the Spot instance is terminated by Amazon EC2, you will not be charged for a partial hour of usage.
However, if you terminate the instance yourself, you will be charged for any hour in which the instance ran.
EC2 instance families
DRMCGIFTPX
EC2 instance types
on demand, spot, reserved, dedicated hosts
EBS types
General purpose Provisioned IOPS Throughput optimized (no boot) Cold (no boot) Magnetic standard
Is it possible to connect an EBS volume to multiple EC2 instances?
No, you should use EFS instead
Is it possible to encrypt an EBS root volume from an AWS AMI?
You can’t encrypt a root volume from a created AMI. Instead, you should use a 3rd party tool or create your own AMI and encrypt it during creation
Traffic allowed by default in SG
Inbound: None
Outbound: All
How many EC2 instances per SG?
Any number
Is it possible to attach an EBS volume to an instance I. A different AZ?
No
What to do in case you need more IOPS than an EBS volume can provide?
Create more than one volume an create a RAID 0 or 10.
Amazon discourages RAID 5.
How to take a consistent snapshot from a RAID?
Application consistent snapshot.
- Freeze filesystem
- Unmount array
- Stop EC2 instance
How to take a snapshot from an EBS root volume?
Stop the EC2 instance first
Is it possible to share an encrypted snapshot?
No
How to encrypt the snapshot of an encrypted volume?
It is encrypted automatically
How to encrypt a volume restored from an encrypted volume?
It is done automatically
Is it possible to stop an instance store backed instance?
No
What will happen with root volumes on termination?
By default, all will be deleted, but you can chose to keep EBS backed root volumes during creation
How to resolve the IP address of an ELB?
It is not possible, AWS gives you a DNS name
CloudWatch host level metrics enabled by default
- CPU
- Network
- Disk (read/write, not space consumption)
- Status checks
CloudWatch monitoring types and default interval
Default monitoring, enabled by default. No cost and 5 minute interval.
Detailed monitoring, not enabled by default. Has cost and 1 minute interval.
Is it possible to us a role in a different region?
Yes, roles are universal
Instance meta-data URL
http://169.254.169.254/latest/meta-data/
Define warm up and cool down periods
Warm up period: period for the instance to start participating to the metrics
Cooldown period: amount of time between autoscaling events
What is a placement group?
A placement group is a logical grouping of instances within a single Availability Zone. Placement groups are recommended for applications that benefit from low network latency, high network throughput, or both. To provide the lowest latency, and the highest packet-per-second network performance for your placement group, choose an instance type that supports enhanced networking.
Is it possible to expand a placement group to more than one AZ?
No
Is it possible to use the same name in more than one placement group?
No, name must be unique in your AWS account
Is it possible to launch any instance type in a placement group?
No, only in compute, GPU, memory or storage optimised instances
Is it possible to merge placement groups?
No
Is it possible to add an existing instance to a placement group?
No, but you can create an AMI from the instance and launch a new instance from the AMI into the placement group
Is it possible to delete an EBS snapshot used as root volume for a registered AMI?
No, you should deregister the AMI first
Is it possible to launch an AMI in a different region from where it is stored?
No, AMIs are regional. You can copy an AMI to other region using console, command line or EC2 API
How to obtain the IP address of an ELB?
ELBs don’t have predefined IPv4 addresses. You resolve to them using a DNS name
Differences between alias and CNAME
- Alias allow to resolve a zone apex
- AWS does not charge for alias resolution
Route53 routing policies
- Simple
- Weighted
- Latency
- Failover
- Geolocation
Route53 domain name number soft limit
50
What do you need in order to create a read replica in RDS?
Enable automatic backups