Deployment and operations management Flashcards

1
Q

What are the 4 types of deployment?

A

1) Rolling deployment
2) A/B testing (A/B deployment)
3) Canary release
4) Blue/Green deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 3 steps in a rolling deployment?

A

1) Create a new launch configuration with the updated AMI (can’t do this to the existing servers)
2) Start terminating old EC2 instances
3) When the new servers come up they now have version 2 of the launch config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When is an A/B testing deployment useful? and how do you do this?

A

When you want to test a new format a website. Use Route traffic to route a % of traffic to new version e.g. 10% then move to 100% over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a canary release deployment?

A

When you release one EC2 instance with the new update and watch to see how it performs before rolling it out to other instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a blue/green method of deployment?

A

When you run both the old version and the new version of an application. You can always revert back to the original application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the main benefit of using a Blue/green deployment method?

A

allows you to achieve an immutable infrastructure, where you do not make changes to your application after it’s deployed, but you redeploy a together. This makes it easy to roll back.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 5 methods of achieving a Blue/Green deployment with different services…

A

1) Update DNS with Route53 to point to a new ELB or instance
2) Swap autoscaling groups already primed with a new version of instanced behind an ELB
3) Change autoscaling group launch configuration to use the new AMI version and terminate old instances (and create new ones)
4) Swap the environment URL of Elastic beanstalk
5) Clone stack in AWS Opsworks and update the DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Name 3 scenarios where a blue/green deployment method would NOT be appropriate…

A

1) When the data-store schema is too tightly coupled to the code changes (schemas need to be forward and backwards compatible)
2) when the upgrade requires special routines to be run during deployment
3) When you are using an off the shelf product

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Define Continuous Integration…

A

Where you merge code changes back to a main branch as frequently as possible with automated testing as you go.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define Continuous delivery…

A

Where you automate your release process to the point you can deploy at the click of a button

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Define Continuous deployment…

A

Where each code change that passes all stage of a release process is released to production with no human intervention is required… you automate the entire chain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the primary object of CI and CD?

A

To create small, incremental compartmentalised improvements and features to reduce deployment risk and tried to limit negative impact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What has to be strong for CI?

A

Your testing game gotta be STRONG

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS CodeCommit?

A

AWS hosted git repo

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What AWS code build?

A

Helps to compile, test and create deployment packages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS code deploy?

A

Helps to deploy deployment packages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is AWS code pipeline?

A

An orchestration service that allows is to do all of the code creation, testing, deployment….

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is AWS X-ray?

A

A service to help in the debugging of distributed apps or serverless apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is AWS CodeStar?

A

A service that leverages all of the CI/CD tools (AWS code* services) to define templates to make them more ‘turn key’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Elastic Beanstalk?

A

An orchestration services that makes it easy to push-button deploy scalable web landscapes. Creates an easy deployment model, but not great if you need control or flexibility.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the 6 deployment options available within Elastic Beanstalk? (defines as well)

A

1) All at once- A new application version is deployed to existing instances all at once, potentially resulting in downtime.
2) Rolling- Once by one, the new application version is deployed to existing instances in batches
3) Rolling with additional batch- Launch new version of instances prior to taking any old version instances out of service
4) Immutable- Launch a full set of new version instances in a separate auto-scaling group and only cuts over when health check is passed
5) Traffic splitting- Percent of client traffic is routed to new instances for purpose of “canary” testing
6) Blue/Green- The CNAME DNS entry is changed when a new version is fully IP leaving the old version in place until new version is fully verified

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which Elastic Beanstalk deployment method has the shortest and the longest deployment time?

A

Shortest- all in one

longest- Blue/Green

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which is the only Elastic Beanstalk method that could result in downtime?

A

All in one method

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is CloudFormation?

A

Infrastructure as code service, to define a AWS environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What language are CloudFormation templates written in?

A

YAML or JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is a CloudFormation template?

A

Template- The JSON or YAML text file that contains instructions for building out the AWS environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is a CloudFormation stack?

A

The entire environment described by the template and created, updated and deleted as a single unit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is a CloudFormation Change Set?

A

A summary of proposed changes to your stack that will allow you to see how those changes might impact your existing resources before implementing them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is a stack policy?

A

A stack policy is designed to protect resources within your stack from being unintentionally deleted or updated e.g. deny a production database from being shut down.

30
Q

How can you add a stack policy?

A

Via the CLI or console

31
Q

How can you add a stack policy to an EXISTING stack?

A

Only via the CLI

32
Q

Can a stack policy be removed once applied?

A

Nope, but it can be modified

33
Q

Name 5 CloudFormation best practices…

A

1) Use AWS provided helper scripts- to install software on EC2 instances and start services
2) Use CloudFormation to make changes to your landscape rather than doing directly to the resource
3) Make use of change sets to identify potential trouble spots in your updates
4) Use stack policies to explicitly protest sensitive portions of your stack
5) Use version control systems such as code commit or github to track changes to templates

34
Q

What is ECS (5 points)?

A

1) AWS-specific platform that supports Docker containers
2) Considered simpler to learn and use
3) Leverages AWS services like Route53, ALB and CloudWatch
4) Tasks are instances of containers that are run on underlying compute but are more or less isolated
5) Limited extensibility

35
Q

What is EKS? (5 points)

A

1) Compatible with upstream K8s so it is easy to lift and shift
2) Considered to be more feature rich
3) A hosted k8 platform that handles many things internally
4) Containers are called pods, they can have shared access to each other
5) Extensible via a wide variety of third party community add-ons

36
Q

What are the 2 launch types available with ECS?

A

1) Amazon EC2-you provision this and responsible for the pool, more granular control
2) Amazon fargate- Automatically provisions underlying infrastructure

37
Q

What is API-gateway?

A

A managed HA service for front-end REST APIs. Can be used in the backend with Lambda. Deployed via CloudFront.

38
Q

What is AWS config? provide an example…

A

Allows access, audit and evaluates configurations of your AWS resources. Create a baseline of various configurations and setting and then can track any variations against these baselines. e.g. Is backup enabled on RDS? Are EBS volumes encrypted?

39
Q

What is AWS Opsworks stacks?

A

Stacks are collections of resources needed to support a service or application. A layer concept, with each layer representing a different component of an application e.g. EC2 instances, RDS, ELBs…

You can create a stack and clone these, but only within the same region

40
Q

What is AWS systems manager?

A

A centralised console and toolset for a wide variety of system management tasks. Designed for managing a large fleet of systems e.g. 10,000s of EC2s…

41
Q

What is the SSM agent?

A

AWS System Manager agent- is installed on AMIs by default and is used to collects information for the AWS system manager

42
Q

What are the 10 services that AWS systems manager provides for AWS services? define and example….

A

1) Inventory- collects OS, application and instance metadata about instances e.g. which servers have HTTP 2.2.x or earlier
2) State manager- Creates states that represent certain configurations are applied to instances (grouping) e.g. keep track of of which instances have been updated to the current version of Apache HTTP server
3) Logging- Cloudwatch log agent e.g. stream logs of webservers
4) Parameter store- Shared secure storage for config data e.g. store RDS credentials and retrieve upon boot
5) Insights dashboard- Account level view of cloud trail, config e.t.c e.g. single viewpoint for any exceptions on config compliance
6) Resource groups- group resource through tagging- e.g. create a dashboard of all assets belonging to our production landscape
7) Maintenance windows- Define schedules to instances to patch, update apps, run scripts e.g. Defile hours 00:00 to 02:00 to patch
8) Automation- Automating routine maintenance tasks and scripts e.g. stop DEV and QA instances over the weekend
9) Run command- run commands and scripts without logging in or via SSH
10) Patch manger- Automates the process of patching instances e.g. apply a security patch in the next maintenance window

43
Q

What does the patch manager baseline achieve?

A

Auto approves and applies patches of “critical” or “security updates” to servers. This can be automated e.g. apply patches after they have been available for 7 days…

44
Q

What is an AWS system manager document? (SSM document)

A

They enable you to define actions that the system manager can perform. These are in JSON or YAML.

45
Q

What are the 3 types of system manager documents?

A

1) command document
2) policy document
3) automation document

46
Q

What ASM function is the command document type used with and what is its purpose?

A

Run commands use command documents to execute commands. State manager uses command documents to apply a configuration.

47
Q

What ASM function is the policy document type used with and what is its purpose?

A

Used with state manger. Policy documents enforce a policy on your targets.

48
Q

What ASM function is the Automation document type used with and what is its purpose?

A

Automation function. Uses automation documents when performing common maintenance and deployment tasks e.g. updating and AMI

49
Q

What is Amazon Workspace?

A

A full windows or linux desktop as a service that you remote into

50
Q

What is Amazon appstream?

A

Encapsulates specific applications and allows you to access those apps via a web browser

51
Q

What is Amazon workdocs?

A

Online document storage and collaboration platform. Supports version management, sharing documents and collaborative edits.

52
Q

What AmzonMail?

A

Fully managed email and calendar as a service

53
Q

What is Amazon WorkLink?

A

Provides secure access to internal web applications for mobile devices.

54
Q

What is Alexa for business?

A

A way to deploy Alexa functionality and skills internally at your enterprise e.g. Alexa… is this conference room free?

55
Q

What are the 3 domains of the AWS ML landscape? and who are the target users? examples?

A

1) AI services- easy to use no ML knowledge- Amazon polly
2) ML services- ML developers and data scientist- Sage maker
3) ML Frameworks- ML researchers and academics- e.g. TensorFlow

56
Q

What is Amazon comprehend? and when would you use it?

A

what- NLP that finds insight within text

when- sentiment analysis of social media posts

57
Q

What is Amazon forecast? and when would you use it?

A

what- combines time-series data with other variables to deliver highly accurate forecasts
when- forecast seasonal demand e.g. tie colour

58
Q

What is Amazon Lex? and when would you use it?

A

what- Build conversational interfaces that can understand the intent and context of natural speech

when- create a customer service chatbot to automatically chance routine requests

59
Q

What is Amazon personalise? and when would you use it?

A

what- Recommendation engine as a service based on demographics and behaviour data
when- provide potential upsell products at checkout

60
Q

What is Amazon Polly? and when would you use it?

A

What- text-to-speech service supporting multiple accents and voices
when- Provide dynamically generated personalised voice response for inbound callers

61
Q

What is Amazon rekognition? and when would you use it?

A

what- Image and video analysis to parse and recognise objects, people, activities and facial expressions
when- provide an additional level of authentication through facial recognition of employees

62
Q

What is Amazon textract? and when would you use it?

A

What- extracts text, content and metadata from scanned documents
when- automatically digitise paper forms

63
Q

What is Amazon transcribe? and when would you use it?

A

what- speech-to-text as a service

when- automatically create transcripts of recorded presentations

64
Q

What is Amazon translate? and when would you use it?

A

what- translate text to and from many different languages

when- Dynamically create localised web content for uses based on their geography

65
Q

Is “options” a valid CloudFormation template sections?

A

Nope

66
Q

Does ECS or EKS support 3rd party add ons?

A

EKS only

67
Q

What is a disposable upgrade method?

A

Where you create a new AMI and add it to a new launch configuration. You then update the existing autoscaling group.

68
Q

Is file storage a component of ECS?

A

Nope, storage is handled by EBS volumes attached to EC2 and not by ECs itself

69
Q

Which resource would you use to get a software licence key from a 3rd party application via an API call?

A

AWS::cloudformation::CustomResource

70
Q

Does Opsworks support on-prem Linux based systems?

A

Yes

71
Q

Can you close an opsworks stack to another region?

A

No

72
Q

How does continuous delivery differ from continuous deployment?

A

Continuous delivery includes a manual check before release to production.