RandomNuggets Flashcards

1
Q

SQL

Too many connections error

A

ERROR 1040

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Scale UP

A

Increase instance size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Scale UP

A

Increase max instances up to Max # of open shards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Scale Up

A

Increase # shards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3

Encrypt all objects uploaded by their app to S3 with

A

SSE-S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

S3

Header used by SSE-S3

A

x-amz-server-side-encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Encryption

Encrypt plaintext data with a data key
then
encrypt the data key with a top-level plaintext master key.

A

Envelope Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Requests

2 eventually consistent read requests are equal to

A

One STRONG read request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Deployments

Deploy new version to all EXISTING only

No new EC2

A

All at once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Deployments

New version in batches to Existing - no new resources

A

Rolling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

CloudWatch

Collects system metrics and log files from EC2 and on premises servers

A

CloudWatch Agent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

X-Ray

Trace and analyze user requests as they travel through API-Gateway to underlying services.

A

X-Ray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

DynamoDB streams

Life expectancy is like a fly’s

A

24 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Dev Tools

CodeCommit is like

A

Git

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Dev Tools

Code Build is like

A

Jenkins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Dev Tools

Automates code deployment to instances - EC2

A

Code Deploy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Authentication

A directory in Amazon Cognito

A

User pool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Shards

Two eventually Consistent

A

1 Read

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Role

To assume a role an app calls AWS STS and passes the ARN of the role to use.

A

AssumeRole

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Scale

Vertical

A

Scale Up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Scale

Horizontal

A

Adding More of what you have

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Security

These are STATEFUL

A

Security Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Security

All outbound traffic

A

permitted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

File

File system used with EC2

A

Elastic File System

EFS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Networking

Network device attached to EC2 to accelerate learning apps and High Performance Computing (HPC)

A

Elastic Fabric Adapter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Lambda

zipp archives

Distribution mechanism for libraries, custom run times and other dependencies

A

Layers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Lambda

Trigger and executer

A

Trigger

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Lambda

Compute model

A

Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Lambda

Stores code in S3 and encrypts it

A

At rest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Lambda

Package code and dependencies in a deployment package

A

Function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Lambda

Log streams are monitored by

A

CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Lambda

To create lambda function

A

Upload deployment package

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Lambda

Basic function settings

A

Description

Memory Usage

Execution timeout

Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Lambda

If variables need to reference more than 1 function

A

Parameter Store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Authentication

Rotates keys or variables automatically

A

Secrets Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Lambda Edge

Run lambda functions to custom content that is delivered by CloudFront

A

LambdaEdge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Lambda. with *CloudFront

AFTER *
BEFORE. *
AFTER. *
BEFORE. *

A

Receives Request
Forwards Request
Receives Request
Forwards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

ECS: Deployment

Service scheduler replacing current running version of container with latest # of tasks and or removed from service is controlled by deployment and config

MiN/MAX

A

Rolling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

ECS: Deployment

Verify new deployment of a service before send prod traffic to it and must be configured to use ALB or NLB

A

Blue Green with AWS Code Deploy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Task Placement Strategy

Least available amount of CPU or Memory

A

Binpack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Task Placement Strategy

Place tasks randomly

A

Random

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Task Placement Strategy

Evenly based on specified values - default is spread across AZs

A

Spread

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Task Placement Strategy

The types can be

A

Combined

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

S3

For object > 5 GB - 5TB

A

Use Multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

S3

Pull out ONLY the data that you need from an object

A

S3 Select

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

CloudWatch

Metrics are by default

A

5 mins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

CloudWatch

Can be

A

1 min

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

S3

Event histories recorded in S3 are recorded in

A

CloudTrail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

S3

To make objects publicly readable

A

Get Object Permission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

S3

Asynchronous copying of objects across buckets in different AWS regions

A

Cross Region Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

S3

Cross Region Replication requirement

A

Source and Destination have versioning enabled

Different regions

S3 must have permission to replace from source to destination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

EFS

To access EFS in a VPC you create one or more

A

Mount targets in VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

EFS

Automatically mount your file system using mount helper

A

fstab

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Database

Atomicity/Consistency/Isolation/Durability

A

ACID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Aurora

Minimum storage

A

10 GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Database

One or more DB instances and cluster volumes that manage data for them

A

DB Cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Database

Virtual database storage volume that spans multiple AZs with each AZ have a copy of the DB cluster

A

Cluster Volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Cluster

Primary read/write ops and performs all data mods to cluster volume

A

Primary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Aurora

Each Aurora DB cluster has

A

One primary database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Aurora

Same storage volume as Primary DB

A

Aurora Replica

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Aurora Endpoint

Current primary DB instance for DB cluster

A

Cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Aurora Endpoint

One available aurora replica for DB cluster

used for Read-Queries

A

Reader

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Aurora Endpoint

Set of DB instances you choose when you connect aurora

A

Custom

performs load balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Aurora Endpoint

Specific DB instance within an aurora cluster

A

Instance

65
Q

Aurora Integrity

Maintains 6 copies of data across

A
  1. AZs
66
Q

Aurora Instance Type

Memory Optimized

A

xxx

67
Q

Aurora Instance Type

Burstable Performance

A

xxx

68
Q

Monitoring

When changes occur

A

RDS Events

69
Q

Monitoring

Metrics in real time for OS

A

RDS Enhanced Monitoring

70
Q

Monitoring

Monitor RDS DB instances load - for troubleshooting

A

RDS Performance Insights

71
Q

DynamoDB

Allows you to query data in tables using ALTERNATE KEYS in addition to queries against the primary key

A

Secondary Index

72
Q

DynamoDB

How many secondary indexes can be created on a table

A

1 or more

73
Q

DynamoDB

Partition key and sort key different from those on table

A

Global Secondary Index

Up to 20

74
Q

DynamoDB

Same partition key as table and DIFFERENT sort key

A

Local Secondary Index

75
Q

DynamoDB

Stream records are organized into

A

Shards

76
Q

DynamoDB Streams

Use with Lambda to create

A

Triggers

77
Q

Lambda

Code that executes automatically whenever an event of interest appears in a stream

A

Trigger

78
Q

DynamoDB Type

1 value - num, string, binary, boolean and null.

A

Scalar

Primary Keys

79
Q

DynamoDB

Doc type can represent a complex structure with nested attributes like in a JSON doc, list or map

A

Document Type

80
Q

DynamoDB

Set Type

A

Multiple scalar values

81
Q

DynamoDB

Returns most up to data information

A

Strongly Consistent

82
Q

DynamoDB

One Read Capacity unit

A

2 eventually consistent

up to. 4KB in size

83
Q

DynamoDB

1 write per second up to 1 KB

A

Write Capacity Unit

84
Q

DynamoDB

Prevents app from consuming too many capacity units

A

Throttling

85
Q

DynamoDB

HTTP 400 (Bad Request) Provisioned Throughput Exceeded Exception

A

Throttled Request

86
Q

Expression

Items within query results should be returned (all others are discarded)

A

Filter Expression

87
Q

Query

Single query operation can return max of

A

1 MB

88
Q

Query

Limit number of items that it returns

A

Query Operation

89
Q

Query

Reads every item in a table or secondary index

A

Scan

90
Q

Policy Element

ARN to identify resource of policy

A

Resource

91
Q

Policy Element

Allow or Deny keyword

A

Action

92
Q

Policy Element

Allow or Deny effect

A

Effect

93
Q

Policy Element

User that policy is attached too

A

Principle

94
Q

Authentication

Customers can sign into identity provider then obtain temporary security credentials from AWS Security Token Service - STS

A

Web Identity Federation

95
Q

CloudWatch

An alarm is a

A

Single metric

96
Q

CloudWatch

Monitor, store and access log files from CloudTrail or other service

A

CloudWatch Logs

97
Q

CloudWatch

Match events and route them

A

CloudWatch Events

98
Q

CloudTrail

Share logs between accounts on the trail of apes

A

CloudTrail Log Monitoring

99
Q

Response

Microsecond response times - eventually consistent data

A

DAX

100
Q

ELB

7th layer

A

Application Load Balancer

101
Q

ELB

4th layer

A

Network Load Balancer

102
Q

ELB

Time out value

A

60 Seconds

103
Q

Route53

Public Hosted Zones are

A

Domain Names

104
Q

Route53

Resource record sets that route traffic to resources

A

Records

105
Q

Route53

Route traffic to S3 buckets, CloudFront distributions and other AWS resources

A

Alias Records

106
Q

Route53

Info about your domain traffic

NAME: domain name or subdomain

TYPE: traffic route

Value

A

What records contain

107
Q

Route53

Consecutive times endpoint must fail to respond to requests

A

Failure Threshold

108
Q

Route53

Container for records information on how to route traffic

A

Hosted Zones

109
Q

Route53

Translate domain names into IP addresses so that computers can communicate with eachother

A

Name Servers

110
Q

Route53

Method of routing traffic from unhealthy resources to healthy ones

A

DNS Failover

111
Q

Route53

Route internet traffic to single resource
you can specify multiple values

A

Simple Routing Policy

112
Q

Route53

Route based on the LOCATION of users

A

Geolocation

113
Q

Route53

Route traffic based on the location of resources and can route traffic to areas of bias.

A

Geoproxiimity

114
Q

Route53

Resources in multiple locations and you want to route traffic that provides best latency.

A

Latency

115
Q

Route53

Respond with up to 8 records selected at random

A

Multi-value Answer

116
Q

Route53

Route traffic to multiple

A

Weighted

117
Q

Route53

Information about the routing configuration you want to create.

A

Traffic Policy

118
Q

Route53

Resolver

A

Regional

119
Q

Route53 Resolver

endpoint specified by VPC

A

Inbound

120
Q

Route53 Resolver

endpoint that forwards queries

A

Outbound

121
Q

Route53

All records have same

Name
Type
Routing policy

Used when

A

you want all resources available a majority of the time

122
Q

Route53

Use when you want a primary resource or group available all of the time and you want a secondary resource or group or resources on standby

A

Active-Passive Failover

123
Q

VPC

Range of IP addresses

A

Subnet

124
Q

VPC

Subnet connected to internet

A

Public

125
Q

VPC

Subnet protected with security groups and nacls

A

Private

126
Q

VPN

Connection requires a concentrator

A

Virtual Private Gateway

127
Q

VPC

This is located in customers data center

A

Customer Gateway

128
Q

VPN

Moveable from virtual private gateway to AWS Transit Gateway

A

AWS Site-to-Site Virtual Private Network (VPN)

129
Q

VPC

Privately connect VPC to supported AWS services - does NOT leave AWS network

A

Private Link

130
Q

VPC

Connection between YOUR VPC and a VPC in ANOTHER account that enables routing between them with overlapping CIDR blocks

A

VPC Peering

131
Q

VPC

10.0.0.0/16

A

Primary CIDR block

132
Q

ACL

Allows all traffic to flow in and out of associated subnets

A

Default

133
Q

ACL

Captures information about IP traffic going to and from NICS in your VPC - in CloudWatch logs

A

Flow Logs

134
Q

Security Group

Level

A

Instance

135
Q

Security Group

Automatically Allowed

A

Stateful

136
Q

Security Group

What does it do with rules

A

Evaluate them

137
Q

Security Group

What does this apply to

A

EC2

138
Q

Security Groups

When applied

A

When launching or at a later time

139
Q

NACL

Level

A

Subnet

140
Q

NACL

Rule disposition

A

Allow or Deny

141
Q

NACL

Explicitly Allowed

A

Stateless

142
Q

NACL

How are rules processed

A

In order

143
Q

NACL

Associated with

A

All instances in the subnets associated with it.

144
Q

IPV

Egress only

A

IPV6

145
Q

VPC

Enable instances in private subnets to connect to the internet BUT prevent internet from accessing the instances and can support up to 55,000 connections

A

NAT Gateway

146
Q

VPC

Uses Hub and Spoke

A

Transit Gateway

147
Q

IAM

If you are the only person who works on an account

A

Create User

148
Q

IAM

If others need to work in account that you are using that requires no other identity mechanism

A

Create User

149
Q

IAM

If you use EC2 you should create

A

A Role

150
Q

IAM

If you have an app on your mobile phone that makes requests to AWS

A

Create Role

151
Q

IAM

If you have users authenticating in your corporate network and you want to federate then

A

Creat Role

152
Q

Policies

Attached to multiple users, groups and roles

A

Managed

Stand-Alone

153
Q

Policies

Imbedded directly into a single user, group or role.

A

Inline

154
Q

Policies

Permission policies you attach to AWS resources such as S3

A

Resource Based

155
Q

Policies

Resource based attached to roles that define which principle can assume them

A

Trust Policy

156
Q

IAM Best Practice

Do not use this for day to day

A

Root account

157
Q

IAM Best Practice

Create individual ones for each human being

A

User

158
Q

IAM Best Practice

For permissions use these

A

Groups