General Flashcards

1
Q

6 Benefits of the Cloud

A
  1. Trade Capex for variable expense (OPEX)
  2. Benefit from massive economies of scale
  3. Stop Guessing Capacity
  4. Increase Speed and Agility
  5. Stop spending money running and maintaining data centers
  6. Go Global in minutes
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A service that checks applications for security vulnerabilities and deviations from best practices

A

Amazon Inspector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A service that provides intelligent threat detection for your AWS infrastructure and resources.

A

Amazon GuardDuty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term?

A

Savings Plans. Note Reserved instances do not require a commitment. Key word is consistent amount of compute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

ElastiCache

A

Amazon ElastiCache is a service that adds caching layers on top of your databases to help improve the read times of common request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EC2 Instance stores

A

Instance stores are ideal for temporary data that does not need to be kept long term. When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted.

EC2 Instance Store has a better I/O performance, but data is lost if: the EC2 instance is stopped or terminated, or when the underlying disk drive fails.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AWS Direct Connect

A

AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and VPC (virtual private cloud).

The private connection that AWS Direct Connect provides helps you to reduce network costs and increase the amount of bandwidth that can travel through your network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Virtual Private Gateway

A

A virtual private gateway enables you to establish a virtual private network (VPN) connection between your VPC and a private network, such as an on-premises data center or internal corporate network. A virtual private gateway allows traffic into the VPC only if it is coming from an approved network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon SageMaker

A

Amazon SageMaker is a service that enables you to quickly build, train, and deploy machine learning models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

DeepRacer

A

AWS DeepRacer is an autonomous 1/18 scale race car that you can use to test reinforcement learning models.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Availability Zone (AZ)

A

An AZ consists of one or more discrete data centers, each with redundant power, networking, and connectivity housed in separate facilities. Each AZ is isolated but the AZs in a region are connected through low-latency links.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS Cost Explorer

A

Easy to use interface that lets you visualize, understand and manage your AWS costs and usage over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

5 Characteristics of Cloud Computing

A
  1. On-demand Self Service
  2. Broad Network Access
  3. Multi-Tenancy and Resource Pooling
  4. Rapid elasticity and Scalability
  5. Measured Service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

IAM Roles

A

Some AWS service will need to perform actions on your behalf. To do so, you assign permissions to AWS services with IAM Roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Elastic File Share

A

Amazon EFS is a fully managed service that makes it easy to set up, scale, and cost-optimize file storage in the Amazon Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Glue

A

AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Fargate

A

Fargate allows you to launch Docker containers on AWS, and you don’t need to provision and maintain the infrastructure (=no EC2 instances to manage). It is serverless.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

AWS CloudFormation

A

AWS CloudFormation gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

WaveLength

A

AWS Wavelength is an AWS Infrastructure offering optimized for mobile edge computing applications. Wavelength combines the high bandwidth and ultra-low latency of 5G networks with AWS compute and storage services to enable developers to innovate and build a whole new class of applications.

20
Q

Cloud Development Kit (AWS CDK)

A

The AWS Cloud Development Kit (AWS CDK) is an open source software development framework to define your cloud application resources using familiar programming languages.

21
Q

CloudFormation

A

AWS CloudFormation provides a common language for you to model and provision AWS and third party application resources in your cloud environment. It allows you to deploy Infrastructure as a Code.

AWS CloudFormation templates are JSON or YAML-formatted text files. They are declarations of the AWS resources that make up a stack.

22
Q

Elastic Beanstalk

A

Elastic Beanstalk is a Platform as a Service (PaaS). You only manage data and applications. AWS Elastic Beanstalk makes it even easier for developers to quickly deploy and manage applications in the AWS Cloud

23
Q

CodeArtifact

A

AWS CodeArtifact is a fully managed artifact repository (also called code dependencies) service that makes it easy for organizations of any size to securely store, publish, and share software packages used in their software development process.

24
Q

CodeCommit

A

CodeCommit is a secure, highly scalable, managed source control service that makes it easier for teams to collaborate on code. It also provides software version control.

25
Q

CodeBuild

A

CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers, it is serverless.

26
Q

S3 Transfer Acceleration

A

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.

27
Q

Route53

A

Route 53 features are (non exhaustive list): Domain Registration, DNS, Health Checks, Routing Policy.

DOES NOT DO DDOS

28
Q

5 pillars of Well Architected Frameworks

A
  1. Operational Excellence
  2. Security
  3. Reliability
  4. Performance Efficiency
  5. Cost Optimization
29
Q

Origin

A

The server from which Amazon CloudFront gets your files

30
Q

CloudTrail

A

With CloudTrail, you can view a complete history of user activity and API calls for your applications and resources.

Events are typically updated in CloudTrail within 15 minutes after an API call was made. You can filter events by specifying the time and date that an API call occurred, the user who requested the action, the type of resource that was involved in the API call, and more.

31
Q

CloudTrail Insights

A

AWS CloudTrail Insights helps AWS users identify and respond to unusual activity associated with write API calls by continuously analyzing CloudTrail management events.

32
Q

CloudTrail

A

CloudTrail can record the history of events/API calls made within you AWS account, which will help determine who or what deleted the resource. You should investigate it first.

33
Q

VPC

A

virtual private cloud (VPC) is a virtual network dedicated to your AWS account. It is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS resources, such as Amazon EC2 instances, into your VPC.

34
Q

Directory Services (Microsoft Active Directory)

A

AWS Directory Service makes it easy for you to setup and run directories in the AWS cloud, or connect your AWS resources with an existing on-premises Microsoft Active Directory.

35
Q

Security Token Services (STS)

A

AWS Security Token Service (AWS STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users).

36
Q

Cognito

A

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily

37
Q

SSO (Single Sign on)

A

One log in to access multiple accounts. Integreted with AWS Organizations

38
Q

Inspector

A

Automated Security for EC2 instances

39
Q

SCP - Service Control Policies

A

Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization. An SCP spans all IAM users, groups, and roles, including the AWS account root user.

40
Q

Control Tower

A

AWS Control Tower offers the easiest way to set up and govern a new, secure, multi-account AWS environment. It establishes a landing zone that is based on best-practices blueprints, and enables governance using guardrails you can choose from a pre-packaged list.

41
Q

Elastic Transcoder

A

Amazon Elastic Transcoder is media transcoding in the cloud. It is used to convert media files from their source format into versions that will play back on devices like smartphones, tablets, and PCs.

42
Q

AppStream

A

Amazon AppStream 2.0 is a fully managed non-persistent application and desktop streaming service that provides users instant access to their desktop applications from anywhere.

43
Q

Device Farm

A

AWS Device Farm is an application testing service that lets you improve the quality of your web and mobile apps by testing them across an extensive range of desktop browsers and real mobile devices; without having to provision and manage any testing infrastructure.

44
Q

Sumerian

A

Amazon Sumerian is a managed service that lets you create and run 3D, Augmented Reality (AR) and Virtual Reality (VR) applications. You can build immersive and interactive scenes that run on AR and VR, mobile devices, and your web browser.

45
Q

WorkSpaces

A

Amazon WorkSpaces is a fully managed, secure cloud desktop service. You can use Amazon WorkSpaces to provision either Windows or Linux desktops in just a few minutes and quickly scale to provide thousands of desktops to workers across the globe.

46
Q

CloudEndure

A

Disaster Recovery to recover your servers into AWS

Continuous block-level replication of your servers