Practice Exam 3 Flashcards
In EB, what is file which can be included at the root of your application source bundle to specify the environment name, solution stack and environment links?
env.yaml
How to get rid of users SESSION DATA stored in a DynamoDB table?
Use TTL, itโs free!
How is the traffic shifted to the new version when using the linear deployment configuration in CodeDeploy?
The traffic will be shifted in equal increments with an equal number of minutes between each increments.
How do you calculate the total sampled requests per second by X-Ray?
reservoir size + ( (incoming requests per second - reservoir size) * fixed rate)
When do you usually use the GetSessionToken API?
When you want to use MFA to protect programmatic calls to specific AWS API Operations like EC2 StopInstances
What does AWS WAF stand for?
AWS Web Application Firewall
How to get more granular timing information in X-Ray segments?
Use subsegments
What does the x-amz-server-side-encryption-customer-algorithm header specifies?
The encryption algorithm, the value must be โAES256โ
What does the x-amz-server-side-encryption-customer-key header specefies?
The 256-bit, base64-encoded encryption key for Amazon S3 to use to encrypt or decrypt your data
What does the x-amz-server-side-encryption-customer-key-MD5 header specefies?
The base64-encoded 128-bit MD5 digest of the encryption key according to RFC 1321
(Amazon S3 uses this header for a message integrity check to ensure the encryption key was transmitted without error)
Each subnet in your VPC must be associated with a ___________
route table
How many route tables can a subnet be associated with at a time?
Only one
Can you associate multiple subnets to the same route table?
YES
Can AWS Lambda compute platform use in-place deployment type?
No
How can you increase/decrease the capacity of a Kinesis stream?
By splitting/merging shards
What are Lambda layers?
ZIP archive that contains libraries, a custom runtime, or other dependencies
What do Lambda layers allow you to do?
Use libraries in your function without needing to include them in your deployment package
How many layers can a function use at a time?
Up to 5
What is the max size of an unzipped Lambda function code + all of its layers?
250MB
What is the minimum amount of concurrent execution that the unreserved concurrency pool in Lambda enforces?
100
What is an โIAM principalโ in AWS?
Person or application
What does the GetTraceSummaries API returns?
List of trace IDs of the application
What does the BatchGetTraces API returns?
List of traces specified by ID
What is a DynamoDB item atomic counter?
A numeric value that increments on every UpdateItem call
What happens with inferred segments assigned to AWS services but those are instrumented and provide their own segments?
The inferred segments get replaced by the segments received from the instrumented services.
What do X-Ray inferred segments allow to see?
All of your downstream dependencies even if they donโt support tracing, or are external
Can you define arbitrary subsegments to instrument specific functions or lines of code in your application?
Yes!
What does X-Ray uses to generate inferred segments?
Subsegments
What are AWS and AWS_PROXY integrations used for in API Gateway?
Integrating with Lambda function
What is the AssumeRoleWithWebIdentity API used for?
Returning a set of temporary security credentials for federated users who are authenticated through public identity providers such as Amazon, Facebook, Google, or OpenID
What is the AssumeRoleWithSAML API used for?
Returning a set of temporary security credentials for users who have been authenticated via a SAML authentication response
Does GetFederationToken support MFA?
No
Is โx-amz-server-side-encryptionโ header used in SSE-C?
No
Why do you have to delete the SG of the RDS db in the EB environment in order to delete it?
Because the SG is dependent on the env, so if the SG is still being used, the env canโt be deleted
Does AssumeRoleWithSAML support MFA?
No
When can you define a task placement strategy?
When running a task or creating a new service
