global infrastructure Flashcards

1
Q

What IS Global Infrastructure?

A

Global Infrastructure is globally distributed hardware and data centers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Global Infrastructure: Building Blocks

A
  1. Regions (25)
  2. Availability Zones (81)
  3. Direct Connection Locations (108)
  4. Points of Presence (275+)
  5. Local Zones (11)
  6. Wavelength Zones (17)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Regions: basic def

A

Regions are geographically distinct locations consisting of one or more Availability Zones.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Every region is independent from other regions in terms of these 3 things:

A
  • Location
  • Power
  • Water Supply
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Most important region (and why)

A

US-East 1 (North Virginia)

  • New services available here first.
  • All billing appears here.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Regions: basic characteristics

A
  • Each region generally has 3 AZs. Some new users could be limited to 2
  • Cost varies by region
  • Not all services available in all regions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

4 factors to consider when choosing a region

A
  • What is the regulatory compliance associated with this region.
  • What services are available in that region?
  • Cost?
  • Distance to end users.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How is a service associated with a Region?

A

AWS Management Console is scoped by a specific Region.

This implicitly determines where an AWS service is launched.

By contrast, Azure and GCP ask you to explicitly specify a region when launching a service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Regional vs Global services

A

Some AWS services operate across regions. For these services, the selected Region will be Global.

EG: Amazon S3, CloudFront, Rout53, IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Availability Zones: Defn.

A

An Availability Zone (AZ) is a physical location made up of one or more datacenters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How is High Availability achieved?

A

Run workloads in at least 3 AZs. This is why Amazon tries to have at least 3 AZ/Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How are AZs designated?

A

a, b, (eg us-east-1a)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Subnet need info

A

subnets are related to AZs. Need more details about that. Perhaps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Fault Tolerance: What is a Fault Domain

A

A fault domain is the section of a network that is vulnerable to damage if a system fails. Anything outside the Fault Domain would NOT be effected by the system failing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Fault Tolerance: What is a Fault Level

A

A fault level is a collection of fault domains. EG us-east-1 (Region) is a fault level made up of 2 fault domains (us-east-1a and us-east-1b).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Fault Tolerance: Examples of Fault Domains

A
  • Each AZ is designed as an independent failure domain.
  • specific servers in a rack
  • entire rack in a datacenter
  • entire room in a datacenter
  • entire datacenter building
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Fault Tolerance: Best strategy for High Availability

A

Partition your application across multiple AZs. AZs are isolated from concurrent failure with respect to:

  • power outages
  • lightning
  • tornadoes
  • floods
  • earthquakes
18
Q

Backbone of AWS is nickname for 2 things:

A

The AWS Global Network

EC2

19
Q

AWS Global Network: conceptulaized as

A

A private expressway.

20
Q

AWS Global Network: _________ can act as on/off ramps for AWS Global Network.

A

Edge Locations

21
Q

AWS Global Infrastructure: What uses Edge Locations as on-ramps? (i.e. to reach from one Region into another)

A
  • AWS Global Accelerator
  • AWS S3 Transfer Allecelation
    *
22
Q

AWS Global Infrastructure: What uses Edge Locations as off-ramps

A

Amazon CloudFront (CDN) to provide Edge storage and compute near end user.

23
Q

AWS Global Infrastructure: Role of VPC Endpoints

A

Ensure my resources stay within the AWS Network (off the public internet).

24
Q

Points of Presence (PoP): def, examples

A

Pop is an intermediate location between an AWS Region and the end user.

Could be a datacenter or collection of hardware.

Examples:

  • Edge Locations
  • Regional Edge Caches
25
Q

Points of Presence (PoP): 2 levels of cacheing:

A

CLOSEST: Edge Location: Datacenter that holds cache of popular data to speed delivery to end user.
INTERMEDIATE: Regional Edge Location: Holds much larger cache of less-popular files.

26
Q

PoP: Tier 1 Network def

A

A network that can reach every other network on the internet without purchasing IP transit or paying for peering. TODO, what does THAT mean?

AWS AZs are all redundantly connected to multiple tier-1 transit providers.

27
Q

What AWS Services use PoP to speed content delivery or upload?

A

Amazon Cloudfront is a Content Delivery Network (CDN) service. I point to CloudFront, and it figures out which Edge Location to use to speed data xfer.

Amazon S3 Transfer Acceleration. I generate a special URL that can be used by end users to upload files to a nearby Edge Location. From there it can move fast within the AWS Network to reach S3.

AWS Global Accelerator. can find optimal path from end user to my web-servers. Deployed within Edge Locations. User traffic goes to the Edge Location, not all the way to my web server. Boosts my web server performance without duplicating the web server in different regions.

28
Q

AWS Direct Connect: What is it? What are the 2 connection options?

A

A (very fast) dedicated connection between my local infrastructure (my own VMs) and AWS.

  1. Lower bandwidth (50MBps to 500MBps)
  2. Higher bandwidth (1GBps to 10GBps)
29
Q

AWS Direct Connect: Good for, not so good for

A

Helps reduce network costs

Helps increase bandwidth

Provides consistent network experience

NOT necessarily secure (would require AWS VPNs for that).

30
Q

AWS Direct Connection Location: defn

A

Direct Connect Locations are trusted partnered datacenters that you can establish a dedicated high speed low-latency connection from your on-prem to AWS.
EG: The Allied Data Centers 250 Front Street in Toronto.

31
Q

AWS Local Zones: defn, example name, use

A

Datacenters located very close to densely populated area to provide single-digit millisecond low latency performance (eg 7ms) for that area.

EG: us-west-2-lax-1a in Los Angeles.

Only specific AWS Services are available on Local Zones.

32
Q

AWS Local Zones: How to access

A

Local Zones look like an AZ, but you have to opt in to use it.

33
Q

AWS Local Zones: Purpose

A

Support highly-demanding applications sensitive to latencies:

  • Media and Entertainment
  • Electronic Design Automation (semiconductor design)
  • Ad-Tech (automated advertising campaigns)
  • Machine Learning
34
Q

AWS Wavelength Zones: Def, how to use

A

Edge-computing on 5G Networks.

Apps have ultra-low latency being as close as possible to users.

How to use:

  1. create a subnet tied to a Wavelength Zone
  2. Launch VMs to edge of the targeted 5G Network
35
Q

AWS Global Infrastructure: What is Data Residency?

A

The physical or geographical location where an organization or cloud resource resides.

36
Q

AWS Global Infrastructure: What are Compliance Boundaries?

A

A regulatory compliance (legal requirement) by a government or organization that describes where data and resources are allowed to reside.

Controls are put in place to insure data stays in Canada (eg).

37
Q

AWS Global Infrastructure: What is Data Sovereignty?

A

The jurisdictional control or legal authority that can be asserted over data because its physical location is within jurisdictional boundaries.

38
Q

AWS Global Infrastructure: How can we meet data location requirements?

A
  1. AWS Outposts: Physical rack of servers. Expensive!
  2. AWS Config: Policy as Code service. I create rules. I get alert or possible auto-remediation if policy is broken.
  3. IAM Policies: Can be written to deny access to regions via Service Control Policy (SCP).
39
Q

AWS for Government: GovCloud: What is FedRAMP

A

Federal Risk and Authorization Management Program. A US government-wide program that provides a standardized approach for security and authorization.

40
Q

AWS for Government: What is GovCloud

A

AWS GovCloud Regions where FedRAMP workloads can be run.

Can be used to host sensitive controlled unclassified information.