Other Advance Flashcards
What is organization Root in aws organization?
A root is a top-level parent node in the hierarchy of an organization that can contain organizational units (OUs) and accounts. The root contains every AWS account in the organization.
What is organization unit in aws organization?
An organizational unit (OU) is a logical grouping of accounts in your organization, created using AWS Organizations. OUs enable you to organize your accounts into a hierarchy and make it easier for you to apply management controls.
In AWS organization can we have iam users in all member accounts?
it’s recommended to have only one aws account dedicated for uses and use role to access resources on other aws accounts.
What is management account in aws organization?
AWS account which create the aws organization is called management account
What is Role switch in AWS Organization?
Role switch allow you to switch access between aws accounts with in aws organization
Do we need to create role manually to perform role switch in existing aws accounts?
Yes
Do we need to create role manually to perform role switch for new aws accounts?
No it will be created by aws
What is Resource Access Manager?
RAM share AWS resources between AWS Accounts
Can we share all aws services using RAM?
No only supported service can be shared using RAM
RAM is a free service?
Yea
Does AWS rotate AZ names ?
Yes
us-east-1a in my account is same as us-east1a in your account?
No AWS rotate AZ names…accounts will have different AZ location for same name
If AWS rotate AZ Names what gives you consistent AZ reference?
AZ ID is consistent across multiple aws accounts
In RAM who share the resources?
Owner account
In RAM who has full ownership of resources?
Owner account
In AWS RAM what are principals?
Principals are the AWS accounts whom we can share the resources
If we share resources using RAM to a AWS account inside ORGANIZATION do we need to accept manually?
accepted automatically with in the organization.
If we share resources using RAM to a AWS account outside ORGANIZATION do we need to accept manually?
Manual acceptance is required for non organization AWS accounts or sharing is disabled with AWS organization
Using RAM can we share VPC With other AWS accounts?
Yes
If we Shared VPC using RAM can a VPC owner modify resources created by other aws accounts?
No
Who is the owner of resources created in shared VPC using RAM?
Aws accounts which created the resources are the owner
If we Shared VPC using RAM can a VPC owner access resources created by other aws accounts?
No
In AWS RAM can you see what resources are shared with other AWS accounts?
No
In RAM can participate account see resources available in other participants accounts?
No
In RAM can RAM owner account see resources launched in participating accounts?
No
Where does workspace store identity?
Directory service
Which service in aws provide desktop as a service?
Amazon Workspace
Amazon workspace is similar to ?
Citrix/Remote Desktop hosted in AWS
Amazon workspace support which OS?
Windows & Linux
Does AWS workspace support customer image for Remote Desktop?
Yes
What are the pricing options available for Workspace?
Hourly & Monthly
Do we have any other hidden cost for workspace?
Yes base infrastructure cost
What is the requirement to implement workspace?
We need directory service like Simple AD or AD or AD connector for authentication and user management
Where does Workspace networking operates?
Workspace use ENI in a VPC
How does workspace connect to on premise infrastructure?
Workspace use VPN or Direct Connect to access on premise infrastructure
Can windows workplace access FSx and EC2 windows resources?
Yes
Where does workspace store data?
EBS
How workspace encrypted data at rest?
KMS
Where does workspace store user identities?
Directory service
Is Work space is HA?
No
Does AZ failure affect workspace?
Yes
Workspace runs in which VPC?
AWS Managed VPC
Customer connect aws workspace using?
Workspace client app
Does workspace gets injected to customer managed VPC?
Yes
How workspace connect with internet ?
It use NAT Gateway to connect internet
What is authentication and streaming gateway in workspace?
It runs workspace in aws managed VPC and validate identity with Directory service and inject workspace to customers managed VPC and stream it to clients using workspace client app
