Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

My AWS Cards > Overview of AWS > Flashcards

Overview of AWS Flashcards

1
Q

What are the six advantages of Cloud Computing?

A
  1. Variable expense rather than capitol expense (Pay for what you need, rather than an upfront expense for everything you might need).
  2. Economies of Scale (AWS has hundreds of thousands of customers on their cloud infrastructure, meaning they can achieve better economies of scale, which translates to lower aggregate expenses of customers than if they operated data centers themselves).
  3. Stop having to guess capacity needs (AWS is easy to scale, meaning that if your needs exceed your current capacity, you can easily scale up resources in a very short amount of time).
  4. Increase speed an agility (Make resources available to developers in just minutes).
  5. You do not have to spend money and time maintaining data centers (focus on what your business does best, rather than infrastructure).
  6. Go global in minutes (using AWS’s global network, you can deliver content and resources globally with the flip of a switch).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What Kinds of EC2 Instances are there?

A

General Purpose: A good balance of compute, memory, and networking resources. They are good for application servers, gaming servers, enterprise applications, and small to medium databases.

Compute optimized: Focus on compute power. Good for gaming, scientific modeling, high performance computing.

Memory Optimized: Good for high performance Databases.

Accelerated Computing: Use Hardware Accelorators. good for floating point number calculations, Graphics processing, Data Pattern Matching.

Storage Optimise: good for applications that require high performance localized storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Types of EC2 Pricing

A

On Demand: Pay for the duration that you instance runs for.

Amazon EC2 Savings Plus: Low prices in exchange for a committment to use a consistent amount of compute resources over a 1-3 year period.

Reserved Instances: Best for steady state usages. You commit to a 1 or 3 year term.

Spot instances: Request spare capacity for up to 90% off the on demand price. AWS can reclaim the instance anytime, if they need it.

Dedicated Hosts: for meeting certain compliance requirments. You will not share resources with other instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Types of EC2 Auto Scaling and parameters.

A

Amazon EC2 Auto Scaling enables you to automatically add or remove Amazon EC2 instances in response to changing application demand.

Dynamic Scaling responds to demand.

Predictive Scaling automatically schedules the right number of amazon EC2 instances based on predicted demand.

Minimum capacity, is the number of instances that launch immediately when creating an auto scaling group.

Desired capacity, will be the default number of instances if different from minimum capacity.

Maximum capacity sets a hard limit on how many instances you can have in the group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Load Balancer

A

A tool that distributes traffic to different EC2 instances. It can scale with EC2 auto scaling groups.

It can serve as a single point of contact between front end and back end instances, as they scale up and down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Amazon Simple Queue Service

Amazon Simple Notification Service

A

SQS: send, store, receive messages between software components at any volume. This is without losing messages or requiring other services to be available.

SNS: Shares messages through a publish / subscribe model. Create a topic, and then subscribers to that topic will receive messages that are published to that topic. Subscribers can be endpoints like SQS queues, HTTP Web hooks, or even end uses, using SMS, Email and others.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AWS Lamda

A

Serverless compute service. Upload code to a “Lamda Function” and set a trigger. When that that trigger happens the code is run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon Elastic Container Service

Amazon Elastic Kubernetes Service.

Amazon Fargate

A

Container orchestration tools.

Containers carry code or applications with the dependencies and configuration settings to allow them to run.

ECS: Highly Scalable Container Manager. Comparable with Docker.

EKS: Fully managed service that allows you to run Kubernetes on AWS. Kubernetes is maintained by a volunteer community.

Fargate: A serverless compute engine for containers. Works with both ECS and EKS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS Edge Locations

A

You can cache resources in edge locations using Amazon Cloudfront, to be able to deliver them to customers in regions distant from the region your servers are deployed in.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS Elastic Beanstalk

A

You can set code and desired resources in a template which can be automatically executed to deploy your environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Cloudformation

A

Allows you to treat your infrastructure as code. Build a environment by writing lines of code which can be executed in any Amazon region to have a consistent way of automatically deploying resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Factors to consider when selecting a region.

A

Data governance and regulations.

Proximity to customers.

Resource availability.

Cost.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

VPC

A

Virtual Private Cloud. Used to group resources in a virtual network with defined traffic and security rules.

You can provision your resources into subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Internet Gateway

Virtual Private Gateway

AWS Direct Connect

A

An internet gateway allows public traffic into and out of your VPC.

A VPC component that allows private traffic into the network from defined sources over the public internet.

Direct Connect allows you to establish a private fiberoptic connection between your data center and your VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Network Acess Control List

A

A list of rules for what can enter and leave a subnet. This is a stateless security check, which checks all traffic passing through.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Security Group

A

A set of rules about what which IP addresses can access which ports on a individual instance. A security group can be applied to multiple instances. This is a stateful security check, which will remember allowed traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon Elastic Block Storage

A

Create Virtual Hard Drive called EBS volumes. They are seperate from instances, and are persistent. You can take backups called snapshots from EBS volumes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Instance Store Volume

A

Block storage attached to the host that an instance is running on. This will be deleted if you stop and start your instance, because it will be started on a different host with different built in storage. Only use in situation that you can lose the data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Amazon S3

A

Simple Storage Server. You can store and retrieve unlimited amounts of data in buckets. You can version data, set access permissions, and place data into multiple tiers of accessibility. You can create lifecycle policies, which will autimatically move data between tiers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Amazon S3 Storage Classes

A

S3 Standard: for frequently accessed data. Stores data in a minimum of three availability zones.

S3 Infrequent Access: Similar to S3 Standard but with a lower storage price and higher retrieval price.

S3 One Zone Infrequent Access: Similar to regular infrequent access but with a lower price and only stores data in a single availability zone.

S3 Intelligent tiering: Best for data with unknown of changing access patterns, but requires a small monthly monitoring fee.

S3 Glacier: Low cost storage for archiving. Slow retrieval with times from minutes to hrs.

S3 Glacier Deep Archive: Lowest cost storage. Can retrieve data in 12 hrs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Amazon Elastic File System.

A

A Linux file system storage which automatically scales for storage needs, can have multiple instances reading and writing to it, and is a regional resource. Any instance within a region can access it.

22
Q

Amazon Relational Database Service (Amazon RDS)

Amazon Aurora

A

RDS: A managed service which allows you to run relational databases on the cloud. It automates Harware provisioning, setup, patching, and backups. IT is available with Aurora, Postgre SQL, MySQL, MariaDB, Oracle Database, Microsoft SQL Server.

Aurora: is a managed relational Database, and is compatable with MySQL, and PostgreSQL. It is fast, and stores data across at least three availability zones.

23
Q

Amazon DynamoDB

A

A serverless, key-value Database. You create Tables. Automatically scales storage, and creates redundancy. It is very fast with a millisecond response times. It is a non-relational database.

24
Q

Amazon Redshift

A

A managed Data Warehousing service. Data Warehousing is good for backwards looking analytics of massive data sets.

25
Q

Aws Data Migration Service.

A

Migrate Databases between or to AWS instances. The source DB remains functional during migration.

Homogenous Migrations for source and target the same.

Hetrogenious Migrations for source and target different. This is two step, where you first convert the DB using AWS Schema conversion tool, and then migrate the data to the target.

Can also do development and test migrations for tests without interrupting use.

Can also use it to continuous replication for backup and disaster recovery.

26
Q

Shared Responsibility Model

A

Both AWS and customers are responsible for aspects of the security. They are responsible for everything they create and put in AWS.

Customers are responsible for security "in the cloud" while AWS is responsible for security "of the cloud". AWS is responsible for things like:
    Physical security of data centers
    Hardware and software infrastructure
    Network infrastructure
    Virtualization infrastructure
27
Q

IAM

IAM user

IAM Groups

IAM Roles

A

IAM = Identity and Access Management

IAM user = a user profile that you assign specific permissions for within aws.

IAM Groups = you can create a group with a specific set of permissions, and assign users to it.

IAM roles = a set of permissions that can be granted to a user for a limited amount of time.

28
Q

AWS organizations

A

A way of consolidating multiple AWS accounts in a central location.

They can be broken down into Organizational Units, to control access to resources for sub units in your business.

29
Q

AWS Artifact

A

A service which provides on-demand access to AWS security and compliance reports and online agreements.

30
Q

Customer Compliance Center

A

In the Customer Compliance Center, you can read customer compliance stories to discover how companies in regulated industries have solved various compliance, governance, and audit challenges.

You can also access compliance whitepapers and documentation on topics such as:

AWS answers to key compliance questions
An overview of AWS risk and compliance
An auditing security checklist
31
Q

AWS Shield

A

AWS Shield is a service that protects applications against DDoS attacks.

Two Levels of service.

Standard: Protects against resources from common kinds of attacks for no cost.

Advanced: Paid service which protects against advanced attacks and provides detailed attack diagnostics.

32
Q

AWS Key Management Service

A

You can use AWS KMS to create, manage, and use cryptographic keys. You can also control the use of keys across a wide range of services and in your applications.

33
Q

AWS WAF

A

Web Access Control: a web application firewall that lets you monitor network requests that come into your web applications.

34
Q

Amazon Inspector

A

Amazon Inspector helps to improve the security and compliance of applications by running automated security assessments. It detects deviations from security best practices.

35
Q

Amazon GuardDuty

A

a service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment.

36
Q

Amazon Cloud Watch

Alarms

Dashboard

A

A web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.

Alarms: Automatically performs actions if the value of a parameter goes above or under a threshold.

Dashboard: Provides almost real-time metrics in a single location.

37
Q

AWS Cloudtrail

Cloudtrail Insights

A

Cloudtrail records API calls for your account. Saves logs securely in S3 buckets.

Insights, can be configured to autimatically detect unusual API activities on your account.

38
Q

AWS Trusted Advisor

A

An autimated web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.

It compares your environment against best practices in 5 areas

Cost Optimisation
Performance
Security
Fault Tolorance
Service Limits

It will offer different amount of information based on the level of support you have purchased.

39
Q

AWS Free Tier

A

AWS Lamda is always free up to 1 million free requests, and 3.2 million seconds of compute time each month.

Dynmo DB allows 25 gb of free storage per month.

After that most services have a 12 month free period.

Some services have a short term trial.

40
Q

AWS Pricing Calculator

A

Pricing Calculator lets create an estimate for the cost of your use cases on AWS. You can organize your AWS estimates by groups that you define. A group can reflect how your company is organized, such as providing estimates by cost center. You can save these estimates.

41
Q

AWS Billing and Cost Management Dashboard

A

Allows you to:
Compare your current month-to-date balance with the previous month, and get a forecast of the next month based on current usage.

View month-to-date spend by service.

View Free Tier usage by service.

Access Cost Explorer and create budgets.

Purchase and manage Savings Plans.

Publish AWS Cost and Usage Reports.
42
Q

Consolidated Billing

A

Using AWS Organizations allows you to roll all expenses from multiple AWS accounts into a single itemized bill.

This allows you to take advantage of bulk pricing, even if you wouldn’t reach the necessary volume in any one account.

43
Q

AWS Budgets

A

Allow you to create budgets for service usage, costs, and instance reservations. you can create custom alerts for when your usage goes past a certain threshold.

44
Q

AWS Support tiers

A

Basic- Free for everyone. Access to whitepapers, documentation, and support communities. You can contact AWS for billing questions and service limit increases.

Developer- Also has access to best practice guidlines, Client side diagnostic tools, and block building architecture support, email access to customer support with a 24 hr max response time

Business- all aws trusted advisor checks, Direct phone access to cloud support engineers, Infrastructure level event management.

Enterprise- 15 minute sla for support, Technical Account Manager.

45
Q

AWS Marketplace

A

A curated digital catalog for third party applications that run on cloud infrastructure.

Allows you to quickly deploy third party solutions with tools that have already been optimized for AWS.

Flexible payment options through AWS.

46
Q

AWS Cloud Migration Framwork

Six core perspectives

A

Business Perspective- Ensures that IT aligns with business needs - use to create a strong business case for cloud adoption.

People Perspective - supports development of an organization-wide change management strategy - use to evaluate organizational frameworks and roles, new skill and process requirements. Training, staffing, and organizational changes.

Governance perspective - Align IT with business strategy.

Platform Perspective - includes principles and patterns for implementing new solutions on the cloud, and migrating on-premises workloads to the cloud.

Security Perspective - ensures that the organization meets security objectives for visibility, auditability, control, and agility.

Operations Perspective - helps you to enable, run, use, operate, and recover IT workloads to the level agreed upon with your business stakeholders.

47
Q

The six strategies of migration.

A

Rehosting - Not make changes–pick up the applications and move them to AWS

Replatforming - Shift applications to AWS without making and significant changes, but optimize them for the cloud environment.

Refactoring/re-architecting - Writing new code and starting new applications in order to expand or streamline your operations.

Retire - Stop using applications which are no longer needed. Use the migrations as a critical juncture to end the programs.

Retain - Applications which will be no longer needed, so there is no great need to move them because they will be ended soon.

Repurchase - Move from an application with a traditional license, to a equivalent application on the cloud with a pay-as-you-go license.

48
Q

AWS Snowcone

AWS Snowball

AWS Snowmobile

A

A collection of physical devices for transferring data into and out of AWS.

Snowcone - 2 CPUs, 4 GB of memory, and 8 TB of usable storage.

Snowball edge - Used for transfering data to AWS or for local computing needs.

Storage optimized - 80 TB HHD and 1 TB SSD

Compute optimized - 42 TB HHD

Snowmobile - A shipping container which can transfer 100 petabytes of data

49
Q

AWS AI applications:

A

Amazon Transcribe - Speech to text

Comprehend - Detect patterns in text

Fraud Detector - identify potentially fraudulent online activity

Lex - Build voice and textbots.

50
Q

Amazon Machine learning

A

Amazon SageMaker

51
Q

Amazon Well-Archetected Framwork

The five Pillars

A

Operational Excellence -is the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures.
Design principles for operational excellence in the cloud include performing operations as code, annotating documentation, anticipating failure, and frequently making small, reversible changes.

Security - The Security pillar is the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies.
When considering the security of your architecture, apply these best practices:
Automate security best practices when possible.
Apply security at all layers.
Protect data in transit and at rest.

Reliability- is the ability of a system to do the following:
Recover from infrastructure or service disruptions
Dynamically acquire computing resources to meet demand
Mitigate disruptions such as misconfigurations or transient network issues
Reliability includes testing recovery procedures, scaling horizontally to increase aggregate system availability, and automatically recovering from failure.

Performance efficiency - is the ability to use computing resources efficiently to meet system requirements and to maintain that efficiency as demand changes and technologies evolve.
Evaluating the performance efficiency of your architecture includes experimenting more often, using serverless architectures, and designing systems to be able to go global in minutes.

Cost optimization - is the ability to run systems to deliver business value at the lowest price point.
Cost optimization includes adopting a consumption model, analyzing and attributing expenditure, and using managed services to reduce the cost of ownership.

My AWS Cards (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions