Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SAA > Governance > Flashcards

Governance Flashcards

1
Q

What is AWS Organizations?

A

Service for governance of multiple AWS Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are 5 main features of Organizations?

A
  1. Consolidated Billing
  2. Service Control Policies
  3. CloudTrail Logging Account
  4. Easily Create/Destroy AWS Accounts
  5. Share Reserved Instance Capacity across accounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is special about a SCP?

A

It has the final say when applied, even on a root account.

Will be applied to all resources in account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can SCP give permissions?

A

No they do not give permissions (allows in SCP only give the potential to make calls), only takes them away

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What should you do if you want to have centralized logs and ensure they can’t be edited or deleted?

A

Use Organizations to create a logging account, and a SCP attached to the account to restrict changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a SCP?

A

A policy that ensure guardrails are adhered to in AWS accounts by limiting user permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Resource Access Manager?

A

Way to easily share resources between AWS Accounts in the same Organization or intra-Organization like sharing a VPC Subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Cross Account Role Access?

A

Enables temporary access between accounts to prevent needing duplicate IAM Accounts/users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does Cross Account Role Access consist of?

A

Create a role that allows a trusted entity from an account id to assume, and attach policies to this role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is AWS Config?

A

Inventory management and control tool. Can let you know what infastructure is in your account, rules to ensure they conform and auto remediate, see history of changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does AWS Config use to remediate?

A

It uses Automation Documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When should you use AWS Config?

A

When the exam mentions using a standard that needs to be managed across accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can you share the default VPC using Resource Access Manager?

A

No you cannot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Resource Access Manager consist of?

A

Share a resource like vpc subnet, with a particular aws account id, and specify the actions the principal can take on the shared resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the 3 types of AWS Actiive Directory?

A
  1. Managed Microsoft AD
  2. AD Connector
  3. Simple AD
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Managed Microsoft AD?

A

An entirely AWS managed AD, full featured in the Cloud

17
Q

What is an AD Connector?

A

Tunnel between on-prem AD and AWS where you can leave your AD on-prem, but still authenticate using AD within AWS

18
Q

What is Simple AD?

A

Linux Samba AD, standalone AD, not fully featured

19
Q

What is AWS Cost explorer?

A

Tool that lets you visualize and see where your cloud costs are, build reports and can be done by e.g. resource tags

20
Q

What are 3 types of reports Cost Explorer can give you?

A
  1. By time
  2. By service
  3. By filter e.g. tags or categories or region
21
Q

What must you do for Cost Explorer to filter by tags?

A

You must opt in for each tag as a cost allocation tag in billing portal

22
Q

What can Cost Explorer do other than report and visualize?

A

It can create a forecast of spending

23
Q

What is AWS Budgets?

A

Tool for planning cloud costs, track spending, create alerts

24
Q

What are the 4 budget types?

A
  1. Cost budgets
  2. usage budgets
  3. reservation budgets - underutilizing RI’s?
  4. savings plan budgets? - is what we doing covered by savings plan?
25
Q

What can you do with AWS Budgets once an alert is triggered?

A

You can have AWS Budgets take an action as a result of an alert when spend approaches a threshold.

26
Q

What is AWS Inspector?

A

Managed tool for auditing best practices, and provides you recommendations for 5 areas

27
Q

What are the 5 areas that AWS Trusted Advisor looks at?

A
  1. Cost optimization
  2. Fault Tolerance
  3. Performance
  4. Security
  5. Service Limits
28
Q

What should you setup with AWS Trusted Advisor?

A

You should setup alerts to let someone know something is wrong like SNS

29
Q

Does AWS Trusted Advisor fix problems for you?

A

No it does not, you will need to setup EventBridge with Lambda to do that

30
Q

WHat is the cost of Trusted Advisor?

A

It is free, but more useful checks require a support plan

AWS SAA (20 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions