General Flashcards
Learn General Technical points
What 3 AWS services can be used to manage/automate code changes to AWS workloads?
AWS CodeCommit
AWS CodeDeploy
AWS CodePipeline
What does AWS Config do?
Allows you to record and evaluate changes to your resources
What 5 AWS services support detective work? (CCCSG)
Cloudtrail Cloudwatch Config S3 Glacier
What are the 3 steps to securing your 3 tier app?
Allow HTTP/HTTPS traffic to the web server
Allow only SSH traffic on App server
Allow only App Server access on Database server
What 3 services are good for a stateless architecture?
RDS
Elasticache
DynamoDB
What 4 services are good for a serverless architecture?
API Gateway
Lambda
S3
DynamoDB
What is Redis Auth used for?
Security
What are 3 acceptable sources for a security group?
Specific IP
CIDR block
Another Security Group id
Which load balancer provides a static IP address which can be whitelisted by clients?
Network Load Balancer
What is Cloudfront Origin Access Identity
A Special Cloudfront user associated with your distribution
What is a signed url?
A url with an expiration dat, used with Cloudfront for accessing S3
What is a better option over Cloudfront if the data changes often?
S3 Cross region replication
Is FTP, TCP or UDP?
TCP
What is RTO?
Recovery time objective - Time it takes for a service to recover
What is RPO?
Recovery Point Objective - Acceptable amount of data loss in time before disaster occurs
How does your application securely connect to RDS?
SSL, not encrypted keys
What 4 options be a Route53 alias?
S3 static site
ELB
Cloudfront
Elastic BEanstalk
What is the difference between an Availability Zone and a Region?
A Region is a specific geographical area
An Availability Zone is an isolated location within a region
What is the availability of S3, S3-IA and S3-RRS?
99.99%
What is the availability of S3 One-Zone IA?
99.5%
Are EC2 instances limited to 20 per region or AZ?
per region
What is Direct Connect?
A dedicated line between your on-premise data center and AWS that does not involve the internet.
What does Security Token Service do?
Grants user limited and temporary access to AWs resources using Federation
What are the 3 steps to setup STS to authenticate users against active directory?
Develop Identity Broker to communicate with LDAP and AWS STS
Make Identity Broker communicate with LDAP first, then AWS STS
Then provide App with temp access to resources.
Can I authenticate using active directory?
Yes, using SAML
What service is used to process large amounts of data for business intelligence?
Redshift
What service is used to process large amounts of data for big data?
Elastic Map Reduce
What are the 3 SWF Actors and what do they do?
Workflow starter initiates workflow
Decider Controls the flow of activity tasks
Activity Worker carries out tasks
What is an Elastic IP address?
A static IP address that can be moved from one server to another
What is the difference between High Availability and Fault Tolerance?
High Availability means the system is up and running but may perform in a degraded state.
Fault tolerance means the user is not impacted by any fault
What are IOPS?
Random access read/writes
What does a Virtual Private Gateway do?
Provides VPN access to on-site resources
What EBS volume types are good for random access
SSD for random access
What EBS volume types are good for sequential access?
HDD for sequential access
How can you encrypt credentials stored by a Lambda function?
Create a new KMS key and use it to enable encryption helpers
How do you calculate the total number of IP addresses of a given CIDR Block
Subtract the mask number from 32, then raise 2 to the power of the result:
/27 = 32 - 27 = 5
2^5 = 32
What is a Route Origin Authorization?
Its a document that authorizes Amazon to advertise an address range when you move your IP address to AWS.
What is Amazon DynamoDB Accelerator (DAX)?
In memory cache for DynamoDB
What are 2 possible ways to increase the write performance of a database hosted in an EC2 instance
Increase the size of the instance
Setup a standard RAID 0 configuration
How can you monitor an RDS instance?
Enable Enhanced Monitoring in RDS
What is Amazon Redshift workload management (WLM)?
It enables users to manage priorities so that short quick queries dont get stuck behind long-running queries
When an EBS snapshot is ongoing, what can/cannot be done?
EBS volume can be used as normal
What is Amazon MQ?
A managed message broker service for ApacheMQ to make it easy to migrate to the cloud
