Exam1-Part2 Flashcards
DynamoDB Streams
an optional feature that captures data modification events in DynamoDB tables.
You can use DynamoDB Streams together with AWS Lambda to create a trigger, which is a code that executes automatically whenever an event of interest appears in a stream.
AWS Artifact
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).
Important note for EC2 metrics
CloudWatch does not collect memory utilization and disk space usage metrics right from the get go. You need to install CloudWatch Agent in your instances first to retrieve these metrics.
AWS Directory Service ad connector vs AWS Directory Service simple ad
the AWS Directory Service AD Connector is designed for integrating AWS resources with your existing on-premises AD, leveraging your AD infrastructure for authentication. On the other hand, AWS Directory Service Simple AD is a fully managed, cloud-based AD service within AWS, offering user storage and management capabilities directly in the AWS environment.
AWS RDS Proxy
It offers connection pooling, automatic scaling, and connection multiplexing for improved database performance. It allows establishing a pool of persistent connections, automatically scales connections based on demand, and multiplexes multiple client connections to optimize resource usage. Additionally, it provides enhanced security through IAM-based authentication and authorization, with support for AWS Secrets Manager for secure database credential management.
RDS Best Practices
- Monitor your memory, CPU, and storage usage.
- Scale up your DB instance when you are approaching storage capacity limits.
- Enable automatic backups and set the backup window to occur during the daily low in write IOPS.
- Convert from standard storage to either General Purpose or Provisioned IOPS storage, depending on how much of an increase you need.
- If you convert to Provisioned IOPS storage, make sure you also use a DB instance class that is optimized for Provisioned IOPS..
- If you are already using Provisioned IOPS storage, provision additional throughput capacity.
- If your client application is caching the Domain Name Service (DNS) data of your DB instances, set a time-to-live (TTL) value of less than 30 seconds.
- Test failover for your DB instance.
Aurora Endpoints
Using endpoints, you can map each connection to the appropriate instance or group of instances based on your use case. For example, to perform DDL statements you can connect to whichever instance is the primary instance. To perform queries, you can connect to the reader endpoint, with Aurora automatically performing load-balancing among all the Aurora Replicas. For clusters with DB instances of different capacities or configurations, you can connect to custom endpoints associated with different subsets of DB instances. For diagnosis or tuning, you can connect to a specific instance endpoint to examine details about a specific DB instance
Aurora Custom Endpoints
The custom endpoint provides load-balanced database connections based on criteria other than the read-only or read-write capability of the DB instances. For example, you might define a custom endpoint to connect to instances that use a particular AWS instance class or a particular DB parameter group. Then you might tell particular groups of users about this custom endpoint. For example, you might direct internal users to low-capacity instances for report generation or ad hoc (one-time) querying, and direct production traffic to high-capacity instances.
A company is using a combination of API Gateway and Lambda for the web services of the online web portal that is being accessed by hundreds of thousands of clients each day. They will be announcing a new revolutionary product and it is expected that the web portal will receive a massive number of visitors all around the globe.
How can you protect the backend systems and applications from traffic spikes?
Use throttling limits in API Gateway.
Amazon EC2 metrics
- CPU utilization
- Network utilization
- Disk performance
- Disk Reads/Writes
Amazon EC2 metrics that require Monitoring agent/CloudWatch Logs
- Memory utilization,
- disk swap utilization,
- disk space utilization,
- page file utilization,
- log collection
