Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect Associate > IAM & S3 > Flashcards

IAM & S3 Flashcards

1
Q

Users

A

End users such as people, employees of an organization, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Groups

A

A collection of users. Each user in the group will inherit the permissions of the groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Policies

A

Policies are made up of documents, called Policy documents. These documents are in a format called JSON and they give permissions as to what a User/Group/Role is able to do.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Roles

A

You can create roles and then assign them to AWS Resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 File size

A

0 to 5 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the HTTP code for a successful upload to to S3?

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What do S3 Objects consist of?

A
  1. A key, value pair key = name of the object value = bytes 2. Version ID 3. Metadata - data about data you’re storing 4. Subresources; Access Control Lists Torrent
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does data consistense work for S3?

A
  1. Read after Write consistency for PUTS of new Objects. Meaning you can see something immediatly after you post it. 2. Eventual Consistency for overwrite PUTS and DELETES (can take some time to propagate). Meaning changes or deletions can take some time to reflect.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 Standard

A
  • 99.99% availabliity - 99. 11 9s durability. - stored redundantly across multiple devices in multiple facilities, and is designed to sustain to loss of 2 facilities concurrently. * milliseconds
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 - IA (Infequently Accessed)

A

For data that is accessed less frequently, but requires rapid access when needed. Lower fee than S3, but you are charged a retrieval fee. * milliseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 - One Zone - IA

A

For when you want a lower-cost option for infrequently accessed data, but do not require the multiple Availability Zone data resilience. * milliseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

S3 - Intelligent Tiering

A

Designed to optimize costs by automatically moving data to the most cost effective access tier, without performance impact or operation overhead. * milliseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

S3 Glacier

A

S3 Glacier is a secure, durable, and low-cost storage class for data archiving. You can reliably store any amount of data at costs that are competative with or cheaper than on-premises solutions. Retrieval times configurable from minutes to hours * minutes to hours retrieval time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 Glacier Deep Archive

A

S3 Glacier Deep Archive is Amazon S3’s lowest-cost storage class where a retrieval time of 12 hours is acceptable. * 12+ hours retrieval times. * hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How are you charged for S3?

A
  • Storage - Requests - Storage Management Pricing - Data Transfer Pricing - Transfer Acceleration - Cross Region Replication
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True of False. All S3 buckets are private by default.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How is encryption in transit achieved for S3?

A

SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How is encryption at rest achieved for S3?

A
  • S3 Managed Keys - SSE-S3 (Managed by Amazon) - AWS Key Management Service, Managed Keys - SSE-KMS (Managed by you and Amazon) - Server Side Encryption with Customer Provided Keys - SSE-C 1*. Server Side Encryption-S3 (S3) [Amazon] 2*. Server Side Encryption-KMS (Key Management Service) [Shared - You & Amazon] 3. Server Side Encryption-C (Customer) [You] 4. Client Side Encryption - You upload encrypted files
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

True of False. Once enabled, Versioning cannot be disabled, only suspended.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is MFA delete?

A

MFA delete is a capability that uses multi-factor authentication for deleting objects in S3. This provides an additional layer of security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

If you have different version of the same document are they all visible if you make the object public?

A

No. You’d have to make each version of the document public.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Where can you find Lifecycle rules?

A

In your S3 bucket under management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is S3 Object Lock?

A

You can use S3 Object lock to store objects using write once, read many (WORM) model. It can help you prevent objects from being deleted or modified for a fixed amount of time or indefinitely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

S3 Object Lock - Governance Mode

A

In governance mode, users can’t overwrite or delete an object version or alter its lock settings unless they have special permissions. With governance mode, you protect objects against being deleted by most users, but you can still grant some users permission to alter the retention settings or delete the object if necessary.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

S3 Object Lock - Compliance Mode

A

In compliance mode, a protected object version can’t be overwritten or deleted by any user, including the root user in your AWS account. When an object is locked in compliance mode, its retention mode can’t be changed and its retention period can’t be shortened. Compliance mode ensures an object version can’t be overwritten or deleted for the duration of the retention period.

26
Q

S3 Object Lock - Legal Holds

A

S3 Object Lock also enables you to place a legal hold on an object version. Like a retention period. a legal hold prevents and object version from being overwritten or deleted. However, a legal hold doesn’t have an associated retention period and remains in effect until removed. Legal holds can be freely place and removed by any user who has the s3:PutObjectLegalHold permission.

27
Q

Glacier Vault Lock

A

S3 Glacier Vault Lock allows you to easily deploy and enforce compliance controls for individual S3 Glacier vaults with a Vault Lock policy. You can specify controls, such as WORM, in a Vault Lock policy and lock the policy from future edits. Once locked, the policy can no longer be changed.

28
Q

What can you use S3 Object Lock for?

A

To store objects using a write once, read many (WORM) model.

29
Q

True of False. Object locks can be on individual objects or applied across the bucket as a whole.

A

True.

30
Q

What are the two modes of governance of Object Lock?

A

Governance Mode and Compliance Mode.

31
Q

What are S3 prefixes?

A

directories and sub-directories

32
Q

What is S3 Select?

A

S3 Select enables applications to retrieve only a subset of data from an object by using simple SQL expressions. By using S3 Select to retrieve only the data needed by your application, you can achieve drastic performance increases – in many cases, you can get as much as 400% improvement.

33
Q

What is Glacier Select?

A

Some companies in highly regulated industries – e.g. financial services, healthcare, and others – write data directrly to Amazon Glacier to satisfy compliance needs like SEC Rules or HIPPA. Many S3 users have lifecycle policies designed to save on storage costs by moving their data into Glacier when they no longer need to access it on a regular basis.

34
Q

What is AWS Organizations?

A

AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

35
Q

What are the advantages of Consolidate Billing?

A
  • One bill per AWS account - Very easy to track charges and allocate costs - Volume pricing discount
36
Q

What are the 3 different ways to share S3 Buckets across accounts?

A
  • Using Bucket Policies & IAM (applies across the entire bucket) Programmatic access only - Using Bucket ACLs & IAM (individual objects). Programmatic Access Only. - Cross-account IAM Roles. Programmatic AND Console access.
37
Q

True or False Versioning must be enabled on both the source and destination buckets for replication to work.

A

True

38
Q

True or False Files in an existing bucket are not replicated automatically.

A

True

39
Q

T/F. All subsequent files will be replicated automatically.

A

True

40
Q

Are delete markers replicated across S3 Buckets?

A

No.

41
Q

Are deleted individual versions markers replicated?

A

No.

42
Q

Cross Region Replication is at a ___ level.

A

high

43
Q

What is S3 Transfer Acceleration

A

S3 Transfer Acceleration utilises the CloudFront Edge Network to accelerate your uploads to S3.

44
Q

AWS DataSync (THINK: moving data from on premises to AWS)

A
  • used to move large amounts of data from on-premesis to AWS - Used with NFS and SMB compatible file systems. - Replication can be done hourly, daily, weekly - Install the DataSync agent to start the replication - Can be used to replicate EFS to EFS
45
Q

Edge Location

A
  • Where content will be cached.
46
Q

Origin

A

This is the origin of all the files that the CDN will distribute. This can be either: - an S3 Bucket - an EC2 Instance - Elastic Load Balancer - Route 53

47
Q

Web Distribution

A

Typically used for Web Sites.

48
Q

RTMP Distribution

A

Used for media Streaming

49
Q

T or F Edge location are READ ONLY.

A

False. You can write to edge locations as well.

50
Q

a signed URL is for…

A

individual files.

51
Q

a signed cookie is for…

A

multiple files.

52
Q

use signed URLs/Cookies when….

A

you want to secure content so that only the people you authorize are able to access it.

53
Q

What is snowball

A

a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of AWS.

54
Q

What is Snowmobile?

A

an Exabyte-scale data transfer service used to move extremely large amounts of data to AWS. You can transfer up to 100PB per Snowmobile, a 45 goot long ruggedized shipping container, pulled by a semi-trailer truck.

55
Q

What is Storage Gateway

A

AWS Storage Gateway is a service that connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between an organization’s on-premises IT environment and AWS’s storage infrastructure. The service enables you to securely store data to the AWS cloud for scalable and cost-effective storage.

56
Q

Name 3 types of Storage Gateways

A
  • File Gateway (NFS & SMB) - Volume Gateway (iSCSI) - store volumes - cached volumes - Tape Gateway - (Virtual Tape Library)
57
Q

File Gateway

A
58
Q

Volume Gateway

A
59
Q

Tape Gateway

A
60
Q

What is Athena

A

Interactive query service which enables you to analyse and query data located in S3 using standard SQL

  • Serverless, nothing to provision, pay per query / per TB scanned.
  • No need to set up complex ETL processes
  • Works directly with data stored in S3
61
Q

What is Macie

A

A security service which uses Machine Learning and Natural Language Programming to discover, classify and protect sensitive data stored in S3.

AWS Certified Solutions Architect Associate (12 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions