Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Aws Developer > Mixed > Flashcards

Mixed Flashcards

1
Q

Iam

A 
Identity federation
PCI payment card industry 
Password rotation
Temp access
Multi factor authentication
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Policies

A

Assigned to role, group or user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When a user created we get

A

Access key id

Secret access key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Password policy

A

Life cycle management

Complexity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True or false: Link to log in through iam is customizable?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Role

A

Can be assigned to an Iam user in another account
An aws resource
Application running on the resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

True or false: ec2 is region based

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

5 types of ec2 pricing models

A 
On demand
Reserved 
Spot
Dedicated
Saving plan
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

On demand ec2 pricing model

A

Pay per hour or sec depending on the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Reserved ec2 pricing model

A

1 or 3 years of prepaid and commitment
Called RI
For predictable load
RI, convertible RI and scheduled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Convertible RI vs RI vs Scheduled

A

Convertible you can change the power or type of ec2 as long as you are spending the same amount or higher
Scheduled, you scheduled for a certain time

Convertible up to 54% off
RI up to 72%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Spot ec2 pricing model

A

You bid on it and whenever it matches your bidded price, it assigns you the ec2
If you stop, you gotta pay for the resource, if aws stops you, you don’t pay for the rest of the hour
It’s for tasks that interruption doesn’t matter

Can be used for calcs, parallel computing
Up to 90% discount

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Dedicated ec2 pricing model

A

License and compliance
On demand or reserved
Reserved up to 70% off

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Saving plan pricing model

A

Not just for ec2
Not region based
Dedicated to 1 to 3 years and pay 72% percent off
You can change the type, the region,…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Ssh port

A

22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Http port

A

Port 80

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

True or false: Making ec2 we can decide what happens if we shut down the insurance. Shall it be terminated or stopped

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Different types of ec2 instances

A 
General purpose 
Micro
Compute Optimized
Fpga
Gpu
Machine learning
Memory optimized 
Storage optimized
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

General Purpose instance

A

For general purposes, start with T1, T2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Micro insurance

A 
Instance for testing or low i/o throughput and low network performance 
First 750 h is free for the first year
1 virtual cpu
Less than one gig memory
Cheapest
Starts with m
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Compute optimized instant type

A

Starts with C
It has the highest rate of Cpu to memory
Good for apps needed analysis and high performance apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Fpga instance

A

Hardware accelerated instance
Good for parallel computing and finance
Starts with F

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Gpu instance

A

Good for graphics
Starts with G
ImGe rendering and media processing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Machine learning instance

A

Good for machine learning, language processing
Uses ASIC (application specific integrated circuit)
Custom build cpu
Chip is called inference
Starts with Inf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Memory optimized instance type

A

Cheapest Ram per G
Starts with Z, X or R
For DB applications and memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Storage optimized insrance

A 
Start with H, I or D
Good apps need higher io or storage capacity 
I3 is good for nosql
D3 is for warehouse
Directly attach storage blocks to ec2
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

True or false: ebs is region based

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Whats Ebs

A

Disk on the cloud
Availability zone sensitive
Replicate themselves into other zones, to avoid single point of failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Different types of EBS

A 
General purpose 
Provisioned iops
Provisioned iops 2
Throughput optimized HHD
Cold HHD
Magnetic Storage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

General purpose ebs

A

It’s for development or not latency sensitive
3 iops per g
Max iops 16000
Burst 3000 iops

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Provisioned iops

A

SSD
50 iops per g
Max 64000 iops per g
Good for io intensive apps - DB or Io sensitive

Durability: 99.9%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Iops SSD 2 EBS

A

500 iops per G
64000 iops per G max
Higher durability 99.999%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

HHD - throughout optimized ebs

A 
Good for big data, data warehouse and log files 
Cannot be boot
Good for Low frequency accessed data
40 mb per sec per T
Burst 250 mb per sec per T
Max 500 mb per sec per T
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Cold HHD Ebs

A 
Good for archive
Can’t be boot
The cheapest 
12 mbs per T
Burst 80 mbs per T
Max 250mbs per T
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

True or false: encrypted EBS image is always encrypted

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

True or false: Changing ebs type or zone or adding a new ebs takes time time to take effect

A

False - it’s immediate and requires no down time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Different kind of load balancer

A

Application load balancer
Network load balancer
Classic load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Application load balancer

A

Later 7
SSL / TLS level
Application aware
Routes the traffic to specific page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Network load balancer

A 
Layer 4
Most expensive 
Routs TCP traffic pretty fast
Can handle a mil per sec
Fast speed used for extreme performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Classic load balancer

A

Both layer 4 and 7 (x forward and sticky seasion)
Hard to debug 504 error. Which level is the error
Not as smart as other load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

How to find ip address when using load balancer

A

X-forwarded-for-header

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is 504 error

A

Means the gateway has timed out

Application is not responding within the timeout time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Https port

A

443

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

True or false: Load balancer target can be all Availability Zones

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

True or false: Adding roles to an instance or changing policies assigned to a role requires a reboot to take effect

A

No, no need to reboot. It takes effect immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is Aurora?

A

Amazon relational DB

It doesn’t support free tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

OLAP VS OLTP

A

Olap is for extensive data analysis. Data warehouse.
Redshift is an olap

Oltp: for small frequent queries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Different kind of cache supported by elasticache

A

Memcache

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Widely adapted memory object cache

A

Memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Which elasticache engine supports complicated data structures

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Which elasticache engine supports multi az

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Redis

A

Open source, in memory Key value Cache engine
It supports multi az, and data lists and other data types
Redis clusters are stateful entities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Memcache

A

Object caching system

Widely adapted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What elasticache engine to use if primary goal is object caching?

A

Memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What elasticache engine to use if primary goal is simplicity?

A

Memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What elasticache engine to use if primary goal is running large caching nodes and multi threaded performance?

A

Memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What elasticache engine to use if primary goal is expanding your cache horizontally?

A

Memcache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What elasticache engine to use if primary goal is using advanced data types?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What elasticache engine to use if primary goal is using leaderboards or sorting and ranking data sets?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What elasticache engine to use if primary goal is persistence of the key?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What elasticache engine to use if primary goal is running on multiple availability zones?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What elasticache engine to use if primary goal is having pub sub capability?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

If DB is under stress and load is read only mostly what we should do to help?

A

Caching - elasticache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Def port for connecting to DB is

A

3306

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

To open RDS port to an ec2 what needs to be done?

A

Open inbound rules to ex2 sec group - port 3306

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

True or false: When RDS is created, you only get endpoint url not ip address

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Rds backup types:

A

Automatic - by def on
Retention time is 0 to 35 days - def is 7 says
You can back up to any time of the day
When rds instance is deleted, backup is deleted
Back up being saved on S3 - free s3 with tge size of backup
Time of getting backup is changeable

Manual
Manually triggered
Doesn’t del the back up when rds instance deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

How to restore from rds backup

A

Create a new instance from the backup. That gives you a new endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

True or false: you can encrypt an unencrypted rds instance

A

False - you have to get a snapshot, create a new instance and make that encrypted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

How an rds instance get encrypted

A

At rest - using KMS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

True or false: once an rds instance is encrypted, the backup (automated and manual) is encrypted too

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Encryption at rest is supposed for what RDS types

A

Sql, mysql, Aurora, mariadb, postgres, oracle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Read replica vs elasti cache

A

Elasticache, data can get old, only available if it’s been seen before. While replica, data gets updates on replicas more frequently.
If you have many frequently changing dara, replica is better.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Difference between milti az and read replica for rds

A

Multi az is for disaster recovery
Read replica is for performance
Multi az is sync
Read replica is async

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Multi az for rds

A

It means data is being replicated in different availability zones in case one fails the other takes over
Endpoint never changes but ip changes. That’s why we deal with endpoint
It can be turned kn from the beginning or when changing an rds instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

Read replica

A

We can have up to 5 replicas
Good for heavy read loads
Update happens async
We can have read replica of multi az
We can have multi az of read replica
Read replica can turn into a real db. If we have too many or need a copy of db
Not available for sql and oracle
Replicas can be in different regions and zones
Automatic back shall be on when using read replica
Read replica can be encrypted even if the main version of rds is not encrypted
Copies are read only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

True or false: read replicas are read only

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

True or false: read replicas are only in one region and zone

A

False. Can be in multiple regions and zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

True or false: to have a read replica encrypted the main copy must be encrypted

A

False.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

True or false: you must have auto backup on if want to have read replica in

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

How many read replica can we have

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

True or false: Multi az is for performance improvement of rds

A

False only for disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

True or false: read replicas get updated immediately

A

False- it happens async

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

Is s3 bucket object based or block based?

A

Object. Ebs is block based.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

True or false: s3 is only used for objects not for os or db

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

True or false: high availability and disaster recovery is built in s3 bucket

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

S3 bucket file size range? And max size it can handle in one upload

A

0-5 t

5 g

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Size range for Multi part upload for S3

A

5meg to 5 t

Recommend for over 100meg

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

Api response after successfully uploading a file into s3

A

200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

True or false: s3 is not scaleable and has storage limit

A

False

It’s scalable and it has unlimited storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

S3 bucket, reading models

A

Eventually consistent- put (update) and del

Read after write consistent- put for new file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

S3 availability and durability

A

Availability 99.9 guarantied built for 99.99

Durability 9.9 (11X)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

Access control vs bucket policy

A

Access control- individual files

Bucket policy for the whole bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

Different kinds of S3 bucket

A

S3 Durability 99.9 x11 Availability: 99.99
S3 IA - the same D A: 99.9 - paid retrieval
S3 one zone IA - Availability: 99.5 Durability the same - 20% cheaper
S3 glacier - archive - retrieval configurable mins to hours 99.99
S3 intelligent tiering - it decides based on 30 days frequency of access - same D, A: 99.9
.0025 usd for for managing a 1000 files
S3 deep archive glacier - min 12 h retrieval- the cheapest - A:99.99
Outposts - on premise local access
Redundancy reduced - when data can be retrieved easily

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

Charges involved with s3

A 
Access requests
Storage space
Moving files 
Tagging - storage management
Transfer acceleration
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

True or false: S3 can have access log and versioning enabled

A

True- you can see who called apis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

We made a file public on s3 but still not accessible what can be wrong

A

You need to allow public access on policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

Encryption on S3

A

In transit - ssl tls transport layer

At rest
Aes 256 - Sse - aws is responsible for key management and protection
Kms - kms does the key management and generation
Sse-c client key is being used for encryption

Client side client does the encryption and send the data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

S3 request header for encryption

A

X-amz-server-side-encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Expect in s3 bucket request

A

Don’t send the msg is header is rejected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

What’s the s3 bucket url format

A

S3-region-amazonaws.com/ bucketname

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

What’s CORS

A

For cross origin resource sharing
When you want to give access of a resource in two different buckets
Under permission you need to give access to the website url - endpoint
Stops Cross scripting attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

S3 website url format

A

Bucketname-s3-website-region-amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

Cdn vs content acceleration

A

Content acceleration uses cdn edges to expedite uploading files into s3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

What’s cdn

A

Content delivery network
There are edges in different regions and zones
Edges are readable and writeable
Distribution is a group of edges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

What’s distribution and how many types we have?

A

Group of edges

Web distribution for web content
Rtmp real time messaging protocols for steaming and adobe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

True or false: we can have different resources per cdn edge

A

True - load balancer, ec2, s3, route 53 and tour own server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

True or false: after activating cdn, you should remove direct access to the resource

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

What’s ttl and is it changeable

A

Ttl is expiration date for cdn content

You can manually request the edges to refresh the data, but costs you money

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

How many edges in how many countries

A

More than 100 in 25 counties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

What to do if we want to have restricted access

A

Setup cdn to Use signed url - signed cookies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

Can cdn have it’s own domain

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

Waf

A

Web firewall application
Works like firewall- application layer layer 7. Avoids sql injection and ddos
Block cross scripting attack
Blocking IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

Cdn default and max ttp

A

24 h and 365 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

Whbe to optimize performance of s3 by cdn?

A

If more than 5500 get or 3500 put / list /del it’s time to use cdn to optimize

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

What’s lambda

A

Serverless computing service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

What languages lambda supports

A 
C#
Java
Go
Python
Node.js
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

Lambda pricing model

A

Requests: First 1 mil requests are free
After .20 per mil

Duration of execution - per G per secrounds up to 100ms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
119
Q

Example of serverless services

A

S3, lambda, dynamodb, api gateways

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
120
Q

True or false: lambda is region-based but can work globally

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
121
Q

True or false: Xray is for debugging lambda system

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
122
Q

True or false: api gateway can have def url or custom

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
123
Q

Does aws support ssl certificate

A

Yes, and it’s free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
124
Q

Does api connects to cloudwatch

A

Yes, to log calls and stuff

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
125
Q

Does api gateway has caching?

A

Yes and ttl.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
126
Q

What security mechanisms can you use for api gateway

A

Aws Iam
Open
Open with key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
127
Q

Does api have versioning?

A

Yes it does. Latest label is for the last one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
128
Q

True or false: after creating an api we need to deploy it

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
129
Q

True or false: we can’t have versioning in lambda

A

False

Each version of lambda function has a label and a unique Arn.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
130
Q

True or false: lambda functions are immutable

A

True. Meaning any change must happen on new version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
131
Q

True or false: lambda functions can be run concurrently

A

True
There is a limit per account per region. 1000 per reg per acc
If you go over, 429 error is returned
Toomanyrequestsexception

You can go with reserved concurrency, but to make sure a function always get it’s own required number. Not a good idea though because it cannot go above that number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
132
Q

What’s reserved concurrency for lambda functions

A

It means we have a certain capacity out of 1000 assigned to a specific func to ensure it always runs. Not good cause it makes the function limited to that number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
133
Q

If we want to do ab testing on lambda what’s the process

A

We can’t use latest. We need ti create two versions and then name them with aliases then do ab testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
134
Q

Lambda and vpc what do we need for setting up the connection

A

We need to setup eni (elastic network interface)

We need security group and private subnet ip
- - vpc-config subnetid=xyz,security-group=secgro

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
135
Q

What is step In lambda

A

It’s used to trigger the function, log and visualize the info and what happens and it can do sequential, branching or parallel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
136
Q

What’s xray

A

It’s added to code for logging all interactions between resources, and logs all api calls and all responses to log all the info.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
137
Q

What do we need to integrate with xray on our server or system

A

Xray sdk and daemon
Sdk for gathering info and sending them to daemon
Daemon for queuing them and send batching them them back to aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
138
Q

X-ray is configurable with what services?

A

Ex2 or on promises on ec2 or your system
Elastic Beanstalk - on ec2
Container - separate container is needed for xray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
139
Q

Annotations on logging

A

Extra data we can send along with a request. They are key pairs, can be used with filter expression to fund the data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
140
Q

Can we import batch of Apis

A

Yes, apis are importable in case we are moving to aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
141
Q

Can you change the max number of concurrent lambda functions?

A

Yes through support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
142
Q

How can you upload api file into aws

A

Swagger 2

Openapi v2 and v3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
143
Q

What’s the highest number of api call?

A

5000 concurrent
10000 per sec
If it goes over 428 error will be returned

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
144
Q

What to do if we have old soap requests? For legacy systems

A

You can configure api gateway as a soap web service pass through

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
145
Q

To creat a new api what’s the api call

A

Post - with swagger in payload - and endpoint configs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
146
Q

What’s the api call for updating / replacing

A

Put api and swagger in the payload.

Mode query param, You can decide if you want to replace or update existing api.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
147
Q

What’s dynamo db

A

Fast and flexible nosql db

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
148
Q

Where do the dynamo db collections sit?

A

Ssd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
149
Q

How dynamo db avoids single point of failure?

A

The underlying hardware supporting dynamo is speared through 3 regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
150
Q

What are dynamo db consistency model?

A

Strongly consistent

Eventually consistent - consistency reaches within a sec - good for read performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
151
Q

Different types of primary key in dynamo db

A

Partition key - hash func to define physical partition

Composite key - partition key and sort key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
152
Q

How to control access on dynamo db

A

Iam role
Iam condition to give partial access to the table
LeadingKeys param is used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
153
Q

Is partition key value in dynamo db collection changeable?

A

No

154
Q

Different indexes on dynamo db

A

Local secondary index - created when table is being created - cannot change - it has the same partition key - sort key is different

Global secondary- it can he added or changed later - it has a different partition key as well as sort key

155
Q

Languages supported by dynamo db document

A

Hml, xml, and json

156
Q

Query cs scan

A

Query returns all the results that we can filter - scan returns based on criteria- projection expression

157
Q

Are Query results showing up ascending or descending?

A

Ascending - if we want to change the order we have to make scanindexforward false

158
Q

Can we change the results order on scan

A

No, only query result order is changeable

159
Q

How to improve performance of dunamodb

A

Decrease the size of the results for each page
Call queries rather than scan
Use large queries n higher number rather than small

160
Q

Api to get items - query

A

Getbatchitem

161
Q

How can you improve scan speed on dynamo db

A

By making the process parallel. Parallel scanning can happen by changing the config however if another process is already doing it, you should avoid
By def scanning happens sequential. Meaning 1m then another 1m.

162
Q

Dynamo db capacity unit:

A

1k per sec for writing

4k for reading strongly consistent
4k *2 for reading eventually consisten

163
Q

Dynamo db pricing models

A

Provisioned - specific capacity unit

On demand - pay as you use. Good when using serverless, or you have unpredictable spike

164
Q

What’s dax

A 
Dynamo db specific cache. Fully managed in memory cache
Micro sec performance over 1 mil request
10x performance 
Write through cache
Eventual consistent 
If we want strongly it’s not good
165
Q

True or false: dax is good if we want strongly consistent read from caching

A

False - it’s eventual consistent

166
Q

True or false: dax is cluster based

A

True

167
Q

True or false: memcache is cluster based

A

False

168
Q

Strategies for caching:

A

Lazy loading
When user requests, if the data doesn’t exist, it will be retrieved.
Advantage:
unnecessary, unused data won’t be saved in db

Disadvantages:
Data can get old - need ttl
Read penalty - cache miss

Write through
It writes every time we write new data or update data
Advantages:
Data is new always updated
User can tolerate wait on write rather than read

Disadvantages:
Not used data gets saved
When data is deleted, db doesn’t know to replace. 
We must use lazy load a long with it 
Write penalty
169
Q

True or false: memcache support multi az

A

False - that’s why it’s not good if we care about not losing data

170
Q

What does atomic transaction mean in acid

A

Means either all transactions happen, or none

171
Q

What the period for data to be delete from db after ttl reaches

A

48 hours

172
Q

Ttl is good for

A

Log data
Session data
Temp data

173
Q

What’s ttl unit

A

Epox - unix posix

From jan 1 1970

174
Q

What’s dynamodb stream api

A

It’s timebased item level modifications - del, add update…

It’s great for serverless system and for trigger based systems
It has it’s own domain endpoint
By def, primary key is recorded
Logs are encrypted at rest

175
Q

True or false: dynamodb stream api is good for serverless services

A

True. Good for triggering system

176
Q

How long dynamodb stream api log is saved encrypted

A

24 h

177
Q

What is Provisionthroughputexceeded

A

When you send too many read or write requests to dynamodb

178
Q

How dynamodb sdk or our app deals with provisionthroughputexceeded

A

Either we use sdk, it keeps sending and decreases the sending rate.

Or our application exponential back off. Meaning every time it gives 2x sec delay
If it keeps failing for 1 min, it exceeds the throughput capacity

179
Q

Is exponential backoff only for dynamodb

A

No, any service that the app uses sdk. The sdk does that

180
Q

What to do if dynamo db is stressed?

A

If too many writes, look at throughput capacity - you can contact support to increase
If read, use elasticache or dax

181
Q

What’s CMK

A

Customer master key which is used for encrypting envelop key / dara key

182
Q

Whats data / envelope key

A

It’s used for encrypting the data

183
Q

True or false: Deleting a key on kms would del the key immediately?

A

False. It has 1 week grace time

184
Q

You can schedule key deletion between how many days?

A

7 days to 30 days.

Key has to be disabled before

185
Q

What does cmk have?

A 
Alias 
Description 
State
Date
Content
186
Q

True or false: cmk cannot be exported

A

True

187
Q

True or false: if you want to export the cmk key, you need to use hsm.

A

True - it’s a dedicated hardware, it’s way more expensive than cmk

188
Q

What’s the first service of aws

A

Sqs

189
Q

True or false: sqs is auto scaleable

A

True

190
Q

Is sqs pull based or push bases?

A

Pull based

191
Q

True or false: if a resource processing a message from sqs dies, msg goes back to sqs so another one takes over?

A

True

192
Q

Max msg size for sqs

A

256 k - if bigger msg saves on s3

193
Q

What’s sqs visibility timeout

A

30sec by def can be increased to 12 h

194
Q

Sqs retention period (keep the msg)

A

1 to 14 days def 4 d.

195
Q

Sqs data poling type

A

Long polling- no empty response - waits till msg is in

Short polling if bo msg, returns null. Def option - not good for saving money

196
Q

Different type of sqs

A

Standard

  • not guaranteed receiving order
  • msg can get delivered multiple times
  • no limitation on the number of msg per min
Fifo
Good for banks
Max 300 per sec
Order guaranteed 
One time delivery guaranteed
197
Q

What do you subscribes to when using sns

A

Topic

198
Q

True or false: sna can fan out msges to multiple methods.

A

True

199
Q

Pricing for sns

A

.5 for 1 mil sns requests
.06 100k http notifications
2 for 100k email
.75 over 100 sms

200
Q

What is sqs delay queue

A

For delaying messages. 0 sec to 50 min (900 sec)

201
Q

Does changing delay value on sqs, affect the existing messages?

A

For standard no

For fifo yes

202
Q

What size of the sqs msg is large that needs to be saved on s3

A

256 k to 2G

203
Q

What do we need to handle large messages on sqs

A

Sqs extended lib for java
Sdk for java
S3 bucket

204
Q

Ses

A

Simple email system - for sending emails or receiving emails
Incoming email are being delivered to S3 bucket
Can be used to activate lambda or sns

205
Q

Sns vs ses

A

Sns is for receiving
Ses for receiving and sending
Sns for fanning out to large number of different recipient
They both can trigger lambda
Sns needs subscription to a topic
Ses only email address needed
Sns for all different services ses only email

206
Q

Kinesis

A

It’s a streaming data service

Gathers and analyze data from different resources

207
Q

Different kinds of kinesis?

A

Kinesis steaming
Kinesis firehose
Kinesis analytics

208
Q

What’s the retention for kinesis stream?

A

24 hours by def. can change up to 7 days

209
Q

What is shard on kinesis?

A

Data record holder - provides fixed unit of capacity. Can change the capacity by resharding

210
Q

Kinesis stream

A

It’s for streaming data - we have video streaming too
It has shreds which father the data records. consumers which analyze the data and eventually storage to save or cache the data.
Realtime analysis

211
Q

What does kinesis consumer have

A

Kinesis client lib and data record processor
Processor processes the data
And client lib decides the number of processor needed, recognizing shards when resharding happens and keep track of them

212
Q

What is the ratio of kinesis shard / dara record vs record processor

A

They are equal. However that doesn’t mean number of consumers have to be the same.

213
Q

What decides the number of kinesis record processor?

A

Number of shards. Number of consumers is bases on the cpu power. When cpu power is high, we can have multiple record processors on each.
The important point is that, number of records has to be equal on consumers

214
Q

True or false: number of shards can be less than number of consumers

A

False - worst case it’s equal.

215
Q

True or false: number of record processor can be different on multiple kinesis consumers

A

False

216
Q

Firehose kinesis

A

It’s the most automated version of kinesis
No worries about shard and consumer
Data is being analyzed semi real time and then saved to s3 or elastisearch. From S3 it can go to redshift

217
Q

Kinesis analytics

A

It lets you run queries on data existing on kinesis stream or firehose.
The result goes in s3, elastisearch and redshift

218
Q

Elastisearch

A

It’s for storing, searching and analyzing huge volume of data

219
Q

Different beanstalk deployment policies

A 
All at once
Rolling
Rolling with additional batch
Immutable
Traffic splitting
220
Q

Beanstalk roll at once deployment policy

A

Deploy in batches - one batch goes down for an update. Not good for mission critical
Failure, you need to roll back

221
Q

Beanstalk immutable deployment policy

A

Meaning create a new batch in a new auto scaling group and have it updated with new revision. Then kill the old one once passed the health check

222
Q

Beanstalk split traffic deployment policy

A

Means immutable style only config enable canary testing. A/b testing

223
Q

What scripting language beanstalk support

A

Json and yaml
It has to be put in .config file under
.ebextension folder. Under root. E

224
Q

Wha are ways of integrating rds with elastic beanstalk

A

Set it up with the stack on eb. That’s not good. The rds will be dependent to beanstalk lifecycle. Once eb is removed rds is removed

Other way would be creating externally and using security group and network info, connect to the beanstalk.

225
Q

What’s file gateway?

A

It’s like a file system to be mounted on s3 bucket

226
Q

Where to we save the params

A

Parameter store

227
Q

Aws waf vs shield

A

Shield are for dds attack

While waf is for application firewall

228
Q

Macie

A

It’s for data loss prevention and protecting sensitive data

It uses machine learning

229
Q

What’s the max long poll timeout?

A

20 sec

230
Q

Code integration tool

A

Code commit

231
Q

Code deployment tool

A

Code pipeline

232
Q

Code delivery tools

A

Code build and code deploy

233
Q

True or false: codecommit works with https and ssh and ut can work wuth sns fir notifications

A

True true

234
Q

Code deploy methods:

A

Inplace update:
The instance will be stopped, new version gets installed
Great for first time
Bad for capacity sensitive systems

Blue green:
A new set of instances in a new sec group will be installed.
Green color is the new set
Pay extra short term for the second term
Load balancer switches from blue to green

235
Q

Deploy appspec file

A

It’s for codedeploy
It includes param for deploy
Yaml or json if lambda is the target
Or yaml only on ec2

236
Q

Code deploy Appspec file format

A

Version
Os
Hook
Files - scripts

237
Q

Code depoly spec file

A

Appspec.yml has to be placed in root

238
Q

Code deploy config file hook category

A 
Before blocking traffic
Block traffic
After blocking traffic 
Application stop
Download the files
Before install
Install 
After install
Application start
Health check
Before allowing traffic 
Allowtraffic
Afterallowtraffic
239
Q

What accesses needed for code deploy

A

Create iam for ec2 accessing s3

Create a role codecommit accessing ec2

240
Q

What’s ecs

A

Elastic container service

241
Q

True or false: for code deploy we beed to have codedeploy agent on our system?

A

True

242
Q

Ecs features

A

Scaleable
Maintainable
Fault tolerance

243
Q

Container parts

A

Virtual kernel
Code
Libs

244
Q

Ecr

A

Elastic container register

Image registey

245
Q

Ecs platforms

A

On ec2
Or
Fargate Serverless

246
Q

Steps to create docker on aws

A

Create a cluster
Create image repo to hold on images

Docker build -t, docker tag, docker push
Create task definition
Create service

247
Q

Codebuild specfile

A 
Buildspec.yml
Format:
Pre-build
Build
Post-build

Has to be in root

248
Q

Can you update buildspec from codebuilt through aws website?

A

Yes, either buildspec.yml or on the insert console

249
Q

If codebuild fails what shall we check?

A

Console and cloud watch

250
Q

Can we Deploy docker through elasticbeanstalk?

A

Yes either one docker or multiple through cluster

251
Q

What format of file is used for cloud formation and where the file is being saved?

A

Json and yml it grsts saved on s3

252
Q

True or false: Aws to create resources based on cloud formation template calls apis

A

True

253
Q

True or false: the result of cloud formation is called stack

A

True

254
Q

What in a cloud formation file is mandatory

A

Resources

255
Q

What’s the usage of transform in cloud formation

A

Using external scripts or s3 files

256
Q

Output in cloud formation template

A

It’s for spitting out output for another stack

257
Q

What’s the process of deleting a stack

A

Del stack through console and then del the s3 template file

258
Q

What’s sam

A

Serverless application model - cloud formation for serverless
Such as lambda, dynamo db, s3 and apis

259
Q

How to build and deploy sam package?

A

Sam package to convert cloud formation yml file to Sam friendly format
Sam deploy

260
Q

What to add to cloud formation template to define Sam

A

Transform: aws::serverless-…

Resources:
Type: aws:: serverless::function

Handler: index.handler holds the function

261
Q

Nested stacks

A

Created stack from another stack

It allows reuse of cloudformation stack template

262
Q

How can we reuse a cloud formation

A

Nested stack

263
Q

True or false:

When we want to refer to an ec2 when creating a container, we have to use tags

A

True

264
Q

Nested stacks template parts:

A

Templateurl: mandatory
Timeout: by def no timeout. But timeout is for how long the cf wait until it stops.
Notifications ARN: SNS
Parameters: what needs to be passed to CF

265
Q

By def, if cloud formation stack creating fails what happens and what are the options

A

Def: full Roll back

Keep until it’s created.

266
Q

Nested stack indicator

A

Type: aws::cloudformation::stack

267
Q

Cloudformation template parts

A 
Version
Description 
Metadata
Parameter
Transform
Conditions
Mapping
Resources
268
Q

What’s the index.handler on cloudformation templatefor Sam

A

It’s for the function for the serverless lambda functions

269
Q

What is Web identity federation

A

Let user login with social media, then get a token and exchange the token with temp creds

270
Q

What’s Cognito

A

Enables web identity federation for mobile app
Syncs user dara between apps
Acts as an identity broker
Maps a token to an iam role
User doesn’t need to keep the user pass locally

271
Q

User pool and identity pool on cognito

A

User pool let’s user signup or sign in using social media

Identity pool let’s user exchange token with aws creds

272
Q

How does cognito keeps the user data synced between different devices

A

By sending silent push notifications - sns

273
Q

Different kinds of iam policies

A

Managed policies - not changeable, managed by aws, recommended policy, can be shared between users, roles and groups

Customer policies - managed by customer

Inpine policies- only for a single user, group or role. Once that’s deleted, the policy goes away

274
Q

What is Assumerolewithidentity

A

It’s an api provided by STS (security token service) - it is used with web and creates temp token for signed in users
Api returns ARN which can be used when referring ti temp creds, also creds that include access key id, security access key, expiration date and sec token

275
Q

Cross account access

A

When you are one one account and want ti give access to another account - iam can be used

276
Q

What’s the process on giving access to another user in another account

A

Create a policy and assign the policy to a role that can be used in another account

In other account. Create a user, assign that user to a group. Add a new policy to let the group members use the role. Policy: assumerole

277
Q

Cloudwatch

A

To watch cpu, disk (just the throughput not consumption) network and status check for ec2 instance

278
Q

What’s the standard frequency of doing cloudwatch monitoring?

A

5 min, paid 1 min

279
Q

How long cloudwatch log is retained?

A

Indefinitely unless you changed

280
Q

Can we pull cloudwatch logs after deleting the resource

A

Yes

281
Q

Dan we have alarms for cloudwatch

A

Yes, we can use sns to trigger lambda or send sms

282
Q

Can cloudwatch be used on premises?

A

Yes it can. Ssm agent and cloudwatch agent are needed

283
Q

How do you pull cloudwatch logs

A

Getmerticsstatistics api or other third party apis

284
Q

Different between cloudwatch vs cloudtrail and config

A

Cloudwatch is for performance
Cloudtrail is for monitoring api calls - who provisioned what… and config is for checking history of permissions and configs such as security groups- state of aws

285
Q

Xxx is a sever error, what’s the first digit if the error is client error vs server error?

A

Server error starts with 5 while client starts with 4.

286
Q

What’s max lambda timeout?

A

900 sec, 15 min

287
Q

What tool shall you use if you want to figure which iam policies are granting too much access?

A

Iam policy simulator

288
Q

What’s s3 replication

A

It’s for automatically and async copying object across aws s3 buckets. It can be on the same region or different region or even a different account
You need to provide a destination bucket and iam role to write on the bucket

Versioning must be enabled 
You can replicate within the same storage class or a different storage class
289
Q

What does sit in .ebextensions?

A

Custom variables

290
Q

How to upload and deploy lambda code?

A

Zip and upload through lambda console
Zip and put in s3 and have lambda download from there
Copy and paste the code in the editor
Write cloudformation template and deploy environment along with your code
Lambda is not supported by beanstalk

291
Q

Lambda can be triggered by async and sync. What services call that sync

A 
Load balancer
Cognito
Lex 
Alexa
Api gateway
Cloudfront
Kinesis
292
Q

What if lambda code needs libs that aren’t standard and available

A

Make a deployment package of code and libs, upload in s3 bucket and then lambda or direct to lambda if less than 50 M

293
Q

What is cloud9

A

It’s a cloud based integrated ide that let’s you write code and debug

294
Q

What’s codestar

A

For code develop, build and delivery

295
Q

Permissions for a lambda func connects to a resource in a vpc

A
  • configure sec group allowing the lambda access the resource
  • giving exec permission role for letting lambda to create eni (elastic network interface)
  • setup lambda to connect to subnet used by ec2
296
Q

What’s the best option for saving session data / session state?

A

Dynamo db and elasticache - it’s flexible.
Ec2 is not scaleable for session data
Lambda can’t save session state.

297
Q

How to calc number of read writes for byte if i have RCU or WCU

A

Just multiply rcu to 4k and 2 * 4k for read and wcu to 1k

298
Q

What’s the formula for wcu and rcu

A

Wcu = number of writes * size of item / 1

Rcu = number of reads / 2 (if eventual) * size of item / 4

299
Q

Docker build and tag cmds

A

Docker push $repourl:latest

Docker build -t $repourl:latest .

300
Q

What are web containers

A

Passenger, puma and tomcat

301
Q

Elasticbeanstalk supports what languages

A

Java, node, pho… web containers and docker container with multiple config

302
Q

What’s the way of rolling back for inplace code depoly

A

Redeploy the prev version of the code to the nodes

303
Q

What service allows you to run applications without knowing the structure

A

Elasticbeanstalk

304
Q

What service let’s you improve network availability and performance

A

Global accelerator

305
Q

True or false: cloudfront lets you improve speed if you use it along with api gateway to assist with geo disprate calls

A

True

306
Q

What’s iam policy simulator usage

A

You can test and troubleshoot iam and resiurce policies attached to them. You can test which actions are allowed or denied.

307
Q

What’s NAT

A

Network address translation
It’s for letting resources inside the vpc to access outside, at the same time it prevents the internet from accessing or connecting with instances inside

308
Q

True or false:

What’s internet gateway

A

It provides direct access / connectivity to the public internet
Thus it makes the subnet public

309
Q

Basion host vs host

A

Bastation host allows inbound access to authorized ips and users

NAT allows instances within vpc to go out to the internet

310
Q

Nsg

A

Network security group allows or denies network traffic on port 1433

311
Q

True or false: beat practice is creating rds db on provate subnet

A

True

312
Q

True or false: cognito is used for multi device log in, handling their sessions and limiting the number of devices on streaming services

A

True

313
Q

What’s cognito good for

A

Limiting the access by number of devices
Logging kn and identifying the users
Track when users access the site and their devices

314
Q

Why it’s good to have ssl installed on load balancer

A

Because it removes complexity of installing on all instances and easier to remove or disable
Removes the load off of ec2

315
Q

How to stop ppl uploading unencrypted file to s3 bucket

A

Add policy to only allowput operations with x-amz-server-side-encryption

316
Q

Tool to test if the policies work as expected

A

Iam simulator

317
Q

What is sticky session

A

Saving sessions on the nodes locally. When load balancer receives the request it routes it to proper web server that already have active session
It’s good because it sends the client back to the same web server.
It’s bad because if node crashes, session gone. Bad also because if we want to expand, number of node, still load balancer sends the requests to the same old web servers. That makes load balancing unequally spreading the load.

318
Q

What is distributed session management

A

Key value - in memory. Redis and memcache

Fast and scaleable. It adds network latency and cost are the drawbacks.

319
Q

What’s the api to gain access to a resource

A

Sts: assumerole returns temp creds to access

320
Q

How to decrease a website cost

A

Move to serverless is the most cost effective
Scale in when not needed
Adding cloudfront increases the cost

321
Q

Who on Elastic beanstalk is responsible for applying patches and updates to platform

A

Aws

322
Q

In beanstalk, application and data sec repressibility is on ?

A

Developer

323
Q

On elasticbeanstalk. Responsibility for publishing platform policies abd retirement schedule is on

A

Aws

324
Q

On elasticbeanstalk responsibility for any component that’s required by ur app and that you downloaded is on

A

You

325
Q

If data us constantly saved on s3 and rds, what’s the most cost effective ec2 price modeling?

A

Spot

326
Q

You deployed something on lamda, it went wrong, how would you roll back?

A

Remap PROD aliad to point to prev version of ur func

327
Q

True or false: An ebs backed stopped and restarted without losing data

A

True

328
Q

True or false:

Using sqs extended lib, you can create an s3 bucket and move messages there

A

False

329
Q

What’s the sqs extended lib for

A

For adding msg tocs3, deleting, referencing, deciding if msg is 256k or not

330
Q

Ways to optimize ebs

A
  • increase throughout, through joining multiple volumes together in a RAID 0
  • for hdd, make sure do it on low traffic time
  • make sure ec2 instances are optimizable for use with ebs
331
Q

True or fskse: ami id is dependent on regions

A

True

332
Q

True or false: tags are universal namespace

A

False

333
Q

True or false: cloudformation stack can be used through different regions and different accounts

A

True

334
Q

True or false: Ami roles are valid across your account

A

True

335
Q

True or false: image in one region is not accessible in another region. U will have to copy. Id will change after copying

A

True

336
Q

Amazon inspector

A

It does automatic security assessments and find loopholes in specific resources specific to ec2

337
Q

True or false: config keeps track of environment changes based on the rules you define

A

True it’s a monitoring and governance tool

338
Q

True or false: saving data in s3 and json is serverless but not fast

A

True

339
Q

True or false: saving data on ec2 is not scaleable

A

True

340
Q

True or false: saving data i dynamo db is fast, scaleable and key value

A

True

341
Q

Fir greater scan and query flexibility you can creat up to how many local secondary indexes?

A

5

342
Q

True or false: route 53 distributes traffic across region s

A

True

343
Q

Different between application load balancer and classic load balancer?

A

Both support sticks session and layer 7 (http) laod balancing. The classic one doesn’t work as application aware lb. meaning, it can’t do routing
If we have micro services we need to have routing. Then application lb is better.

344
Q

True or false: rds cannot trigger lambda directly

A

True. It can send a msg to sns then sns can trigger lambda

345
Q

True or false: s3 cannot trigger lambda

A

False. It can trigger lambda

346
Q

True or false: cloudfront can trigger lambda

A

True

347
Q

True or false: cloudfront can trigger lambda

A

True

348
Q

True or false: cognito can trigger lambda

A

True

349
Q

To do portioning when saving 33 bucket

A

Use a a random key before date. Or random key prefix

350
Q

True or false: x ray is to find bottle necks of the app

A

True

351
Q

To create an auto scaling group what’s needed

A

Iam permission - role to be able to create auto scaling group - create ec2 instances and we need a template with required AMI content.

352
Q

How to manage access to api gateway

A

1- resource policies - to allow or deny access from a vpc, user or ip address to methods

2- aws iam role and policies - who can create and manage as well as who can invoke api or individual method

3- create and configure lambda authorizer - about who can invoke methods using tokens

4- cognito user pool - can create authentication and authorization solution for who can invoke the methods

353
Q

How can we listen to http request using lambda

A

Useapi gateway and confit it with proxy integration with lambda function

354
Q

What does api gateway lambda proxy integration do?

A

It lets a user to call a function from an api

355
Q

True or false:

Subnet within a vpc can communicate with no extra routing required.

A

True

356
Q

True or false: we don’t need public ip for subnet to communicate

A

True

357
Q

True or false:

Security groups block all network traffic by default

A

True

358
Q

True or false: mysql security groups not iam is responsible for controlling traffic

A

True -port 3306

359
Q

Dead letter sqs

A

Holds onto problematic messages for the sake of debugging

360
Q

When credentials need to be encrypted and rotated frequently the best practice is

A

Using iam role is good and they are based on sec tokens

361
Q

Difference between optimistic conditional write vs pessimistic and which one is proper for dynamo

A

Pessimistic locks the row and table. Not supported by dynamo Optimistic, doesn’t lock. Only ready to make sure it hasn’t changed. It’s good along with conditional writing. Supported ny dunamo

362
Q

True or false:

A sqs can subscribe for an sns topic

A

True

363
Q

Athena

A

Serverless interactive query tool makes it easy to analyze data in S3

364
Q

True or false: Elastic beanstalk is good for quickly developing environments including docker

A

True

365
Q

Opswork

A

Config management tool - It’s good for when you have multiple stacks and you want to use config tools

366
Q

To update a build file name or location for codebuild what to do

A

Change buildspec.app, update project or start build

Or update project would let you update the new location.

367
Q

Where does the logs from lambda go

A

Cloudwatch and it’s already automated

You can see invocation errors too

368
Q

Python writing into logs fir lambda

A

Stdout - stderr

369
Q

Aws inspector

A

Assesses security if applications deployed on aws. It checks for exposure , vulnerability and best practices

370
Q

What are Api stage variables oh http request

A

They are for having one api multiple stages

371
Q

What’s dynamo accelerator

A

Dax - in memory cache for dynamo only

372
Q

If you want to do blue green deployment what service to use

A

Code deploy and route 53

373
Q

What’s thr verion of a file if it’s uploaded before versioning activated?

A

Null. Otherwise 1

374
Q

S3 bucket permissions can be limited to a specific user from a website, how?

A

S3 bucket policy - get object permissions- referer key

375
Q

True or false: ttl on dynamo db is not enable by def and can be assigned to any attribute with any name

A

True

376
Q

When to use scan vs query on dynamo db

A

When you want all the rows use scan. It doesn’t matter if you want all the attributes- because projectionexpression does the job of filter columns.

377
Q

Get item vs query vs batchgetitem

A

Getitem requires both partition key and sort key

Query only requires partition key

Batchgetitem allows you send multiple partion keys to a request

378
Q

Lambda concurrency

A

Up to a 1000 lambda funcs can run concurrently. 900 of them can reserved to guarantee. In case some actions happens at the same time

379
Q

In lambda there is autopublishalias what does that do?

A

It creates a new alias, creat a new version, point the alias to it and point all event sources to this alias.
Good for fast switching

380
Q

Dynamodbcrudpolicy

A

It’s an aws managed policy, better than full access

381
Q

When to use dead letter queue with lambda

A

When lambda is overwhelmed and missing processing of data coming from stream

382
Q

In order a lambda to be communicating with an rds in a vpc subnet, what do we need to have

A

We need to have a role / lambdavpcaccessexecution role

Aws Developer (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions