Governance/Migration Flashcards
What is Organizations?
allows you to create multiple AWS accounts and control them from a single location rather than having to jump from account to account
What is best practice regarding logging over multiple AWS accounts?
Have one account aggregate all the logs (Cloudtrail supports this)
Can Organizations create and destroy AWS accounts?
Yes
Can reserved instances be shared across accounts?
Yes
If you want consolidated billing, what should you use?
Organizations
If you want to set limits to what certain AWS accounts can do, what should you use?
Service Control Policies (SCP) in Organizations
Can SCP’s be applied to the root account?
yes
What is AWS RAM?
A free service that allows you to share AWS resources with other accounts and within your organization
If you don’t want to duplicate copies in different accounts but want to share resources, what should you use?
AWS RAM
When should you use AWS RAM vs VPC peering?
VPC peering is better for across regions, RAM is better for same region
What is cross-account role access?
temporary access to other accounts that is easily controlled
How often should roles be used in order to grant users access to certain resources or accounts?
All the time
How should temporary employees get access to resources?
Through roles
What is Config?
An inventory management and control tool
If you need the ability to be alerted whenever a rule is violated, what should you use?
Config
If you need to enforce standards, what you should you use?
Config
If you want to track deleted AWS resources, what should you use?
Config
What is Directory Service?
a fully managed version of active directory
What is AD Connector?
A tunnel between AWS and your on premises AD
What is Simple AD?
Standalone directory running in AWS
What is Cost Explorer?
an easy to use tool that allows you to visualize your cloud costs?
By what categorization is the common way to get reports from Cost Explorer?
resource tags
If you need to predict money spent for the upcoming month, what should you use?
Cost Explorer
What is AWS Budgets?
allows organizations to track ongoing spending and create alerts to let users know when they’re spending close to thier limit.
What are the 4 types of budgets you can create with Budgets?
Cost, Usage, Reservation, and Saving plans
What is AWS Cost and Usage Reports?
CUR is a service that gives a comprehensive cost and usage report
How often does AWS update the CUR?
daily
Can you use CUR’s within Organizations?
Yes
Where do CUR’s get stored?
S3
If you want a detailed or daily usage report, what should you use?
Cost Usage Report
What is AWS Compute Optimizer?
A service that analyzes the utilizations of AWS resources and provides reports and graphs to help you decide the best way to optimize resource usage
What must you do to get Compute optimizer?
Opt in
What are savings plans?
Ways to get deals on AWS compute, similar to RI’s
What is trusted advisor?
a fully managed best practice auditing tool