Everything Flashcards

idk i just want flashcards

1
Q

IaaS

A

Infrastructure as a Service - Most control, most setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

PaaS

A

Platform as a Service - Middle ground of IaaS and SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

SaaS

A

Software as a Service - Least control, least setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Regions

A

Cluster of Data Centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Availability Zone

A

Each region has between 3-6, completely isolated from each other.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Shared Responsibility Model

A

Customer is responsible for security IN the cloud, Amazon is responsible for security of the cloud

Customer Ex: Customer data, access management (IAM), firewall configs, encryption, etc.)
Amazon Ex: Software (compute, storage, db, networking), regions, edge locations, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

IAM

A

Identity Access Management. How you control users in your AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Groups

A

Collection of users. Users can belong to multiple groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Policies

A

Policies are applied to users/groups that dictates what they can/can’t do

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS Management Console

A

Web interface to manage AWS services and resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Command Line Interface (CLI)

A

Alternative to AWS Management Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS Software Dev Kit (SDK)

A

Language specific API’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Access Key

A

~= Username

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Secret Access Key

A

~= Password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

IAM Best Practices

A

One AWS user = one person
Assign perm’s to groups, not individuals
Strong pswd policy + MFA
Access keys for CLI/SDK. Don’t share them!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EC2

A

Resizable virtual serves in the cloud. Allows for customers to have serverless architecture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Instance Types

A

General Purpose
Compute Optimized
Memory Optimized
Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Security Groups

A

Control traffic in/out of EC2 instances (Like firewalls)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Important Ports

A

21 - FTP
22 - SSH, SFTP
80 - HTTP
443 - HTTPS
3389 - RDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Reserved Instances

A

Bought for 1 or 3 years, long-term. Better discounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

On-demand Instances

A

Good for short work loads, predictable pricing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Convertable Reserved Instances

A

Like reserved, but can change instance type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Spot Instances

A

Cheap instances that can be taken over by others willing to pay more. Cheapest, but unreliable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Dedicated Host Instances

A

Booking an entire instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

EBS (Elastic Block Store) Volume

A

Block storage for EC2 Instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

EBS Snapshots

A

Backup of an EBS Volume. Also how you ‘restore’ (move) EBS Volumes to other regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

AMI (Amazon Machine Image)

A

Customization of an EC2 instance. Add own software, config, OS, monitoring, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

EC2 Image Builder

A

Automate creation of virtual machines or container images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

EC2 Instance Store

A

Temporary storage for EC2, data lost on stop or terminate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

EFS (Elastic File System)

A

Scalable, shared file storage for EC2. Managed network file system, can be mounted to 100’s of EC2 instances ACROSS AZ’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

FSX

A

Windows native shared file system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Vertical Scalability

A

Increase size of an instance (non-distributed systems) Building tall in Civ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Horizontal Scalability

A

Increasing the amount of instances (distributed systems) Building wide in Civ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Elasticity

A

‘Auto-scaling’ to scale based on usage. Matching performance w/ needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

ELB (Elastic Load Balancer)

A

ELB directs traffic to available instances downstream to increase performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

4 Types of load balancers

A
  1. Applications (Layer 7)
  2. Network (Layer 4)
  3. Gateway (Layer 3)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

ASG (Auto Scale Groups)

A

Automatically scales EC2 Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

ASG Scaling Strategies

A
  1. Manual
  2. Target Tracking - ‘Want average ASG CPU @ 40%’
  3. Simple/Step - ‘If (x>7) add 2 units
  4. Scheduled - Increase capacity @ certain time
  5. Predictive - Uses machine learning to predict future traffic spikes/dips
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

S3

A

Scalable object storage for data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

S3 Buckets

A

Store objects (files) in buckets (directories/folders) on S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

S3 Objects

A

Files in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

S3 Security

A

IAM Policies for users
Bucket policies or ACL (Access control lists) for resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Bucket Policies

A

JSON Based
resource - what bucket to apply to
effect - allow/deny actions
principal - bucket to apply policy to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

S3 Versioning

A

Save versions of files that are changed in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

CRR (Cross-Region Replication) and SSR (Same-Region Replication)

A

Replicates object across/within region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

S3 Storage Classes

A

6 Classes (Use cases listed for each)
1. General Purpose - Big data analytics, content distribution
2. Infrequent Access - Backups. Rapid access when needed
3. One Zone Infrequent - Secondary Backups
4. Glacier - Data accessed once per quarter
5. Glacier flexibile retrieval - idk
6. Glacier Deep Archive - Infrequent Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Server-Side Encryption

A

Server encrypts file after receiving it (on by default)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

IAM Access Analyzer for S3

A

Monitor bucket access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Snow Family

A

Portable devices to migrate data from on-premise locations to AWS.
Snowcone - Smaller
Snowball Edge - Bigger

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Relational DB’s

A

SQL. Links between DB’s.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Non-Relational

A

No-SQL. Built for specific data models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

RDS

A

Relational DB for SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Aurora

A

Cloud optimized for PostgreSQL and MySQL. More cost effective than RDS (proprietary)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

ElastiCache

A

Managed in-memory caching service to make RDS databases run faster. Reduces load on main DB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

DynamoDB

A

NoSQL. Fully managed w/ replication across 3 AZ’s w/ extremely low latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Redshift

A

SQL. Managed data WAREHOUSE for big data analytics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

EMR (Elastic MapReduce)

A

Uses HADOOP to utilize clusters of EC2 instances to analyze data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Athena

A

Serverless query service for S3 data using SQL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Quicksight

A

Create dashboards on data for user insights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

DocumentDB

A

Implementation for MongoDB (NoSQL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Neptune

A

Used for graph db’s. (Ex: Wikipedia, social networking, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Timestream

A

Time series DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Amazon QLDB

A

Ledger for recording financial transactions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Managed Blockchain

A

Hyperledger & Ethereum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Glue

A

ETL Service (prepare data for loading)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

DMS

A

DB migration service, migrate DB’s to other DB’s.
Note: If you’re migrating a linux machine that has a DB on it, you wouldn’t use DMS. Instead, use application migration service. (You’re migrating the Linux machine that HAS a DB, but not a DB itself)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Docker

A

Software dev tool to package apps to run on any OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

ECS (Elastic Container Service)

A

Launch docker containers on AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Fargate

A

Launch docker containers w/o needing to provision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

ECR (Elastic Container Registry)

A

Store docker images to be run by ECR/Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

EKS

A

Kubernetes service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Lambda

A

For executing individual functions. Pay per request & compute time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

API Gateway

A

For if you want to build a serverless HTTP API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Batch

A

Fully managed batch processing server (Batch = function has a start and an end, not continuous)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Light sail

A

Pretty much easy option for people who don’t wanna learn AWS. Servers, storage, DB’s, networking, all centralized. For quick projects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

Cloudformation

A

Automatically creates AWS infrastructure from your own templates. Infrastructure as code

77
Q

CDK (Cloud Development Kit)

A

Way to write cloud infrastructure in a familiar coding language

78
Q

Beanstalk

A

Developer centric view for putting all components together (EC2, ASG, ELR, RDS)

79
Q

CodeDeploy

A

Automated deployment of applications to EC2 instances

80
Q

CodeBuild

A

Compile, test, run, and output code on cloud for artifacts.

81
Q

CodePipeline

A

Orchestrates steps to have code automatically pushed to production

82
Q

CodeArtifact

A

Storing and retrieving artifacts (dependancies)

83
Q

SSM (Systems Manager)

A

Help manage EC2 and on-premise servers at scale

84
Q

Session Manager

A

Start secure shell w/o needing SSH for Ec2/On-prem servers

85
Q

Route 53

A

Scalable DNS and domain name registration servers. Good for reducing latency/routing connections

86
Q

Cloudfront

A

CACHING. Improves read performance by caching content globally on edge locations

87
Q

S3 Transfer Acceleration

A

Increase transfer speed. File –> Edge location –> S3 Bucket

88
Q

Global Accelerator

A

No caching, all content is passed through. Makes requests faster

89
Q

Outposts

A

AWS infrastructure extension to on-premise environments

90
Q

Local Zones

A

Smaller ‘AZ’ like zones, lets you connect to niche areas. Ex: Boston in US-EAST-1

91
Q

Active-Passive v. Active-Active

A

Active-Passive. 2 Regions. 1 active, 1 passive (no writes)

Active-Active. 2 Regions 2 Actives (both read and write)

92
Q

SQS (Simple Queue Service)

A

DECOUPLE. Serverless app to decouple applications

93
Q

Kinesis

A

Real-time big data streaming

94
Q

SNS

A

Send message to one SMS topic (hub) that then auto routes to right service

95
Q

MQ

A

Managed broker service to get traditional apps running on AWS. (Old weird stuff)

96
Q

Cloudwatch

A

Metrics for monitoring stuff like Cost, CPU Utilization, Status Checks, etc.)

97
Q

CloudWatch logs

A

Real-time monitoring of logs

98
Q

EventBridge

A

Scheduling cron jobs (scheduled scripts)

99
Q

CloudTrail

A

Logs and monitors AWS account activity for governance and security

100
Q

X-Ray

A

Visual analysis/tracing of applications for debugging

101
Q

CodeGuru

A

Automated code reviews and application performance recommendations

102
Q

Health Dashboard

A

Shows:
Service History (general info)
Your account (events that impacts you directly)

Can also aggregate data

103
Q

VPC (Virtual Private Cloud)

A

Private network to deploy resources

104
Q

NACL (Network access control list)

A

Filter traffic in/out of a SUBNET

105
Q

VPC Flow Log

A

Captures network traffic data for VPC monitoring and analysis

106
Q

VPC Peering

A

Connect two VPC’s to talk to eachother

107
Q

VPC Endpoints

A

Private connection between VPC and AWS services w/o using internet

108
Q

Site-to-site

A

Connect on premise VPN to AWS (less private, fast)

109
Q

Direct Connect (DX)

A

Physical connection to AWS (private, slow)

110
Q

Client VPN

A

Connecting personal computer to your private network

111
Q

Transit Gateway

A

Way to make a star topology instead of peering

112
Q

AWS Shield Standard

A

Managed DDoS protection for applications

113
Q

Other DDoS Protection

A

Shield Advanced, CloudFront, Route 53, WAF

114
Q

AWS Network Firewall

A

Protect entire VPC (layers 3-7)

115
Q

Firewall Manager

A

Managing VPC Security groups across multiple accounts

116
Q

ACM (Certificate Manager)

A

Provision/manage SSL/TLS certificates

117
Q

Secrets Manager

A

Secret managing in RDS

118
Q

Artifact

A

Support internal or external audits. Important for stuff like HIPPA

119
Q

Macie

A

Find/Protect sensitive data (PII, HIPPA, etc.)

120
Q

GuardDuty

A

Machine learning to analyze various logs to detect/protect (Continuous monitoring)INse

121
Q

Insepctor

A

Run automated security assessments on EC2, Lambda functions, or containers

122
Q

Config

A

Helps record configuration changes over time

123
Q

Security Hub

A

Aggregate alerts into one central hub

124
Q

Detective

A

Identify the ROOT of security incidents

125
Q

Access ANalyzer

A

Find out what resources are shared externally

126
Q

Rekognition

A

Detect people or objects in images/videos

127
Q

Polly

A

Turn text into speech

128
Q

Translate

A

Translate into different languagesLex

129
Q

Lex and Connect

A

Lex helps build chatbots. Connect invokes lambda functions for chatbots to use

130
Q

Comprehend

A

NLP (natural Language Proccessing)

131
Q

Sagemaker

A

Service to build a Machine Learning model

132
Q

Forecast

A

Uses machine earning to report future sales forecasts

133
Q

Kendra

A

Document searching to extract data from

134
Q

Personalize

A

build apps w/ personalized product recommendations

135
Q

Textract

A

Extract text from documents to give as data file

136
Q

Organizations

A

Allows management of multiple AWS accounts by linking them together into one Organization. Shared billing and pricing discounts

137
Q

Control Tower

A

Setup and govern multiple accounts w/ best practices

138
Q

AWS RAM (Resource Access Manager)

A

Share resources across accounts (ex: reserved instances not in use on one account are transferred to another)

139
Q

Service Catalog

A

Premade products that users can purchase

140
Q

Pricing Models (4)

A
  1. Pay as you go
  2. Save when you reserve
  3. Pay less by using more
  4. Pay less as AWS grows
141
Q

EC2 Pricing (Most to least expensive)

A

Dedicated –> On-Demand –> Reserved –> Spot

142
Q

Lambda Pricing

A

Pay per call & duration

143
Q

Compute Optimizer

A

Makes recommendations to reduce cost and inc. performance

144
Q

Pricing Calc

A

Estimate cost for desired architecture

145
Q

Billing Dashboard

A

See your bills

146
Q

Cost allocation Tag

A

Apply tags to resources to see cost by category

147
Q

Cost & Usage Report

A

Most comprehensive billing report

148
Q

Trusted Advisor

A

High level AWS account assessment for cost saving

149
Q

Support Plans (4)

A

Basic –> Business (24/7 support) –> Enterprise On-Ramp –> Enterprise (business critical support)

150
Q

STS (Security Token Service)

A

Create temporary, limited privilege credentials to access resourcesC

151
Q

Cognito

A

Way to manage users for a mobile/web app

152
Q

Identity Center

A

SSO (Single Sign On) for all AWS accounts in your organization

153
Q

Workspaces

A

Provision Windows or Linux desktops

154
Q

App Stream 2.0

A

Deliver applications through web-browswer

155
Q

AWS IoT Core

A

Connect IoT devices into AWS CloudE

156
Q

lastic Transcoder

A

Convert media files into other formats in S3

157
Q

AppSync

A

GraphQL

158
Q

Amplify

A

Develop and deploy fullstack web/mobile apps

159
Q

Application Composer

A

Visually design and build serverless apps

160
Q

Device Farm

A

Test mobile/desktop apps across multitude of devices

161
Q

Backup

A

Manage and automate backupsD

162
Q

Disaster Recovery

A

Backup and Restore

163
Q

Elastic Disaster Recovery

A

Recover DB’s, apps, etc.)

164
Q

DataSync

A

Incremental to move on premise to AWS

165
Q

Application Discovery

A

Plan migration to AWS

166
Q

Migration Evaluator

A

Data-driven business case to migrate to AWS

167
Q

Migration hub

A

Central location to collect data

168
Q

Fault Injection

A

Purposely try to fuck shit up to see if it still works

169
Q

Step functions

A

Build serverless visual workflow

170
Q

Ground Station

A

Control sattelites

171
Q

Pinpoint

A

Marking and communication service (SMS)

172
Q

Operational Excellence

A

Ability to run and monitor continusouyl

173
Q

Security

A

Ability to protect information

174
Q

Reliability

A

Ability to recover information

175
Q

Performance Efficency

A

Ability to meet desired requirements

176
Q

Cost Optimization

A

Ability to deliver at the lowest possible price

177
Q

Sustainability

A

Ability to minimize environmental impacts and optimize over-time

178
Q

Well-Architectured Tool

A

Way to check your architecture against the 6 pillars

179
Q

AWS CAF (Cloud Adoption Framework)

A

How to leverage AWS

180
Q

Business Perspective

A

Ensure cloud investments help company goals

181
Q

People Perspective

A

Bridge between technhology and business

182
Q

Governance Perspective

A

Orchestrate cloud strategies

183
Q

Platform Perspective

A

Build enterprise, scalable platforms

184
Q

Security Perspective

A

Achieve CIA (Confidentiality, Integrity, Availability)

185
Q

Right Sizing

A

Start small b/c scaling up is easier than down. Making sure your systems match what performance you need

186
Q

IQ

A

Quickly find a professional to help with your AWS projects (Like freelancing)

187
Q

Re:Post

A

Forms, like stackoverflow

188
Q

AMS (Managed Services)

A

Infrastructure and Application support by Amazon.