O'Reilly Missed Questions Flashcards
Security Group
Stateful firewall. By default, allows all outbound traffic. Always permissive. Designed for EC2 Instances.
Network Access Control Lists (NACLs)
Stateless firewall. By default, allows all inbound and outbound. Can permit or deny. Designed for entire subnets.
Transit Gateway
Connect individual VPCs together via the gateway in a hub-and-spoke model. Simplifies peering networks
Glacier standard retrieval
3-5 hours
Glacier expedited retrieval
1-5 minutes (up to 250mb)
Glacier bulk retrieval
5-12 hours
Glacier deep standard retrieval
12 hours
Glacier deep bulk retrieval
48 hours
Macie
Uses machine learning and pattern matching techniques to detect and alert you to any sensitive data, such as PII, stored in Amazon S3
WAF
Protects your content from common web exploits and bots. Control using Web ACLs.
CloudHSM
Dedicated hardware security module that allows you to generate and manage keys in the cloud
KMS
Create and manage customer master keys (CMKs), which are stored and used to encrypt and decrypt your AWS data
SQS standard queue
Supports a nearly unlimited number of API calls per second, and are designed for messages to be delivered at least once
SQS FIFO queue
Supports up to 300 API calls designed to preserve the order of your messages, as well as ensuring only one-time delivery with no duplicates
IaaS
A service that gives you access to configure underlying virtual compute, storage, and network resources to host your application
PaaS
A service that abstracts the underlying infrastructure, allowing you to focus on your application code deployment process
SaaS
A service that hosts and delivers a complete application via a public network, with no access to any underlying infrastructure
Application load balancer
Acts as a single point of entry for the incoming requests and distributes the traffic among targets in a target group. Can also route based on listener rules. 7th OSI layer