Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SOA > EC2 - II > Flashcards

EC2 - II Flashcards

1
Q

EC2 data

A

User-data - user defined
Meta-data - intrinsic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Userdata processing on ec2

A

EC2 instance is a slave to the user data. It doesn’t interpret it, it just passes it on to system process responsible for executing it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Effects of a failed user-data

A

Ec2 Launch is not affected by a failed userdata. Instance will pass its System checks whether or not the userdata script executes successfully or fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How secured is a user-data?

A

Userdata is not secured. Any one that can access the instance can access its user data. Do not pass in sensitive data into it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

File size for ec2 user data

A

16Kb max. But can contain instructions to download infinite size of files for its job

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EC2 user Data Format

A

Base64

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Linux 2023 Instance metadata Command (Version2)

A

TOKEN= ‘curl -X PUT “http://169.254.169.254/latest/api/token’ -H “x-aws-ec2-metadata-token-ttl-seconds:21600”’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Linux 2023 Instance userdata Command (Version2)

A

TOKEN= ‘curl -X PUT “http://169.254.169.254/latest/api/token’ -H “x-aws-ec2-userdata-token-ttl-seconds:21600”’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Userdata using CloudFormation

A

Using CloudFormation, you must encode the user data to 64bits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Applications onEC2 access instance role via?

A

metadata

meta-data is attached to the instance profile(CLI, CF, SDK)

Inside the meta-data there’s an IAM tree, inside the IAM Tree there’s a role attached there. (*iam/security-credentials/role-name)

EC2 and STS Token ensures the credentials are constantly rotated to avoid expired data

Applications must always lias with metadata to ensure they re using the latest version of the rotated credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Best practice IAM Roles

A

Always use Roles instead of storing long term credentials.

Avoid Storing Long term credentials on your instance or Local Host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Instance Role

A

A Specific type of IAM Role is designed so it can be assumed by an EC2 Instance. When an Instance assumes a role, the instance and all its applications gain access to all the security credentials assigned in the role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

“AWS Configuration”

A

Avoid using AWS Configure option for instaling AWS CLI toolkit. Credentials are stored in the instance which is not secured. Instead, use EC2 Instance Role.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

IAM Role Types

A
  1. AWS Service
  2. Account
  3. Web Identity
    4 SAML 2.0 Federation
  4. Custom Trust Policy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

ec2-user

A

Alwys check to ensure that your Instance Connect is about to connect to an ec2-user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AWS CLI utility rules

A

Reference

https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#cli-configure-quickstart-precedence

17
Q

Effect of Deleting EC2 Instance Role from the IAM Console

A

Deleting an IAM Role does not remove the Role from the Instance. It will still be existing in the In the Instance Profile. . It MUST be Detached from the Instance

18
Q

Define IAM ROles

A

An IAM role is an identity you can create that has specific permissions with credentials that are valid for short durations. Roles can be assumed by entities that you trust.

19
Q

IAM Role Session Duration

A

=>3,600seconds - 12Hrs (Minimum of 1hr by default)

IAM users switching roles in the console are granted a role session duration up to this value. API or CLI users can use the DurationSeconds parameter to set a session duration up to this maximum.

By default, temporary security credentials are valid for 1 hour.

20
Q

Parameter st Instance metadata are always rotated and always valid. Thanks to ssm ore access

A

For every resource/identity requesting access to credentials in PM Store, Parameter store will always check with IAM and Kms for authentication.

21
Q

EC2 instance profile

A

An instance profile is a container for an IAM role that you can use to pass role information to an EC2 instance when the instance starts.

Any role is captured into instance profile which manages the role across instance applications

22
Q

Instance credentials expiry

A

Instance metadata are always rotated and always valid(**as long as the instance role is still attached **. Thanks to ssm

23
Q

Ssm parameter command

A

$aws ssm get-parameters –/parameterName-or-Path

24
Q

Cluster Placement and EC2 Host

A

All Instances within a cluster group are most likely running on the same host.

All Instances in a cluster placement are directly connected together in an upto 10GB/s bandwidth for single Stream data transfer rate against the normal 5GBps of normal bandwidth

Single Az,
Subsequent instances follow suit with the AZ of the first instance

25
Q

EC2 Placement Groups

A
  • Cluster - Pack instances close together
  • Spread - Keep instances separated
  • Partition - groups of instances spread apart
26
Q

Cluster Placement Latency

A

Lowest possible inter-instance Latency

Max packets per session(PPS)

This speed is proportional to the Instance in use
High-performance Networking instances
Enhanced Networking enabled

27
Q

Cluster Placement Cons

A

Offers little to no resilience

  • Host can fail
  • AZ can fail
    and
  • any failure goes down with the entire cluster
  • Advisable to use same instances and Launch them at same time
  • not available on all instance types
28
Q

Clustter Placement and HA

A

Cluster placement can not span AZs. It’s locked to a single AZ
However can span a paired AZ.

29
Q

Use case

A

High speed Low Latency workload
HPC

30
Q

Spread Placement can span AZ

A

Infrastructure Isolation(Each instance has its own rack, isolated networking and power supply)

Fault Isolation Advantage

Limited to 7 instances per AZ

Dedicated Host or Instances are not supported

31
Q

Spread Placement Use case

A

Physical instance distance is required

Blast radius separation within application.

Small number of critical instances that require isolation.
HA

32
Q

Partition Placement Group

A
  • Need for morethan 7 instances in a spread placement in an AZ that needs to be separated per fault domain.
  • Instances can be placed in a specific partition, or ec2 can automatically do placement arrangement
  • Multi AZ is available
  • For Huge Scale parallel processing systems
  • Offers visibility into the partition(helps topology-aware applications, eg Cassandra, HDFS,HBASE) they make intelligent data replication decisions.
33
Q

EC2 enhanced Networking

A

The Host becomes aware of the virtual layer over it and assigns to each instance its dedicated network resources.

Host’s NIC is virtually parallelized as against a serial(Single) NIC attending to all virtual instances on the Host.

34
Q

Enhanced Networking Pros

A

Higher IO
Higher bandwidth
Low Latency
High PPS
CPU load is ofloaded to ENI

AWS SOA (47 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions