Random Flashcards
Whats the use of s3:EncryptionConfiguration?
Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.
What are Elastic Beanstalk configuration changes
- Immutable: launches a temporary Auto Scaling group outside of your environment. If an immutable environment update fails, the rollback process requires only terminating an Auto Scaling group
- Rolling: applies your configuration changes in batches
- Disabled
Service-Linked Roles
Does memcahed support encryption at rest?
No!
What are the Elastic Beanstalk deployment policy?
- All at once – The quickest deployment method. Suitable if you can accept a short loss of service
- Rolling – Avoids downtime and minimizes reduced availability, at a cost of a longer deployment time.
- Rolling with additional batch – Avoids any reduced availability, at a cost of an even longer deployment time
- Immutable – A slower deployment method, that ensures your new application version is always deployed to new instances, instead of updating existing instances.
- Traffic splitting – A canary testing deployment method.
- Blue/green
AWS OpsWorks
Organizations deploying applications with OpsWorks use the automation platforms Chef or Puppet to manage key operational activities like server provisioning, software configurations, package installations, database setups, scaling, and code deployments.
https://docs.aws.amazon.com/whitepapers/latest/overview-deployment-optio
What is a trust policy?
Trust policy – The trust policy defines which principals can assume the role, and under which conditions. A trust policy is a specific type of resource-based policy for IAM roles.
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::111122223333:root" }, "Action": "sts:AssumeRole" } ] }
CloudFormation mappings section
The optional Mappings section matches a key to a corresponding set of named values. For example, if you want to set values based on a region, you can create a mapping that uses the region name as a key and contains the values you want to specify for each specific region. You use the Fn::FindInMap intrinsic function to retrieve values in a map.