Main Flashcards
In AWS, how do you protect pushes/merges from unauthorized users to the master branch (using Code Commit).
IAM Policy With Explicit Deny
A collection of build commands and related settings, in YAML format, that CodeBuild uses to run a build.
buildspec.yml
In CodeCommit, how do you authenticate users over https?
- Create IAM User
- Setup HTTP/SSH connection to CodeCommit through IAM user
- Authenticate through Git
How do you protect branches from unwanted commits?
IAM Policy With Explicit Deny
T/F: Code Commit contains several triggers and configurable notifications that can call SNS topics and Lambda functions in response to various activity within your repository.
T
The timeout range for AWS Code Build (How long a build can run before being marked failed)?
5 minutes to 8 hours
buildspec.yml: env
This optional parameter of the buildspec.yml file allows for variable declaration, parameter-store, exported variables, secrets-manager, et.al.
buildspec.yml: phases
This parameter of the buildspec.yml file allows you to designate commands that will occur during the install, pre_build, build, and post_build stages of the build/test.
buildspec.yml: artifacts
This parameter of the buildspec.yml file allows you to save various files after a build is done (S3).
buildspec.yml: cache
This parameter of the buildspec.yml file is used to store files which can speed up deployment during subsequent builds/tests.
buildspec.yml: finally
This parameter of the buildspec.yml file will allow you to designate commands to run even if prior commands fail.
buildspec.yml: override
You can specify env variables in buildspec.yml OR you can add them as environment variables ___________ when configuring a new build operation (from the console).
What two services can you utilize/integrate with your code build deployment to encrypt your environment variables during a build?
Parameter Store, Secrets manager
T/F: Code Build allows you to encrypt artifacts before your upload them to S3 (natively within Code Build)
T
How can you view your previous Code Build history if the docker container that was spun up to build your application has been terminated post-build?
Cloudwatch Logs
Single Target Deployment Strategy
Is exactly what it sounds. All resources go to one single server.
All at Once Deployment Strategy
Like Single Target Deployment Strategy but with multiple targets.
Minimum in-service Deployment Strategy
Deployment happens in multiple stages keeping the minimum number of services live before deploying the new version of the application
Rolling Deployment Strategy
X Number of deployments happen, then the next X number of deployments happen, etc
Blue Green Deployment Strategy
Add matching separate environment to existing environment then point domain to new environment. Once we can confirm the new (or green) environment is working, blue then shuts down.
Canary Deployment Strategy
Like Blue Green deployment, but it slowly adds users to the new deployment environment.
Cloudformation Parameters
Variables in Terraform essentially. Variables to pass through at runtime.
Cloudformation Mapping
Key value pairs that change per environment (for example) that are automatically determined. These defer from parameters because these values can not be passed into the build at runtime by a user/program.
Cloudformation Resources
Where your actual resources are declared
Cloudformation Outputs
Results from the template. Think ‘data’ from Terraform
Intrinsic Function !FindInMap
Get mapping of a variable. Example:
Properties:
ImageId: !FindInMap
- RegionMap
- API64Intrinsic Function !Base64
Returns base64 representation of the input string
