RDS Flashcards

1
Q

What’s the difference between an options group and a parameter group in RDS?

A

Options group specifies the use of specific features within the RDMS - such as TDE for oracle.

A parameter group defines the configuration of the DB itself, such as min and max resource settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

There are 6 databases supported by RDS. What are they?

A

MSSQL, Oracle, PostGRESQL, MySQL, Aurora, MariaDb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What storage type backs RDS?

A

EBS Storage - either GP2 or IO1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Over what time period do full backups of RDS occur? Over what time period are transaction logs taken?

A

Full backup occurs daily - 24hrs. Transaction logs are persisted every 5 minutes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How long are RDS automatic backups retained for?

A

7 Days by default up to 35 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can you ssh onto an RDS instance?

A

No., its a managed instance you won’t get access to the underlying OS or vm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are read replicas AZ or Region locked? How many replicas can you have for RDS (not Auroa)

A

No. Read Replicas can be within the same AZ, across AZ’s or across regions. You can have 5 read replicas within an AZ, spread across AZ’s or regions .

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For a read replica, is the replication synchronous or asynchronous? What is the consistency implication of this?

A

Asynchronous. Read replicas will be eventually consistent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the use case for a read replica?

A

Read heavy workloads which you don’t want to impact your master database - such as data analytics or reporting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Is there a network cost for a multi AZ read replica?

A

Yes. Data for read replicas crossing AZ’s will incur a cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the key use case difference between using read replicas and Multi-AZ RDS?

A

Read Replicas are for increasing performance for read related workloads. Multi-AZ is for DR.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What form of replication is used for a multi AZ RDS deployment? What must occur for a write to the master to be deemed successful?

A

Synchronous. For a write to the master to be successful, it MUST be replicated to the standby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

In event of a failure in the master for a multi-az RDS deployment, what happens?

A

Failover occurs automatically as the DNS CNAME record is updated to point to the standby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

For a multi AZ RDS deployment, how many DNS entries need to be exposed to your application to allow it to communicate with RDS?

A

Just one. In event of failure of the master, this DNS record is updated automatically to point to the secondary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Do you need to specify an instance class for an RDS instance

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many read replicas does MySQL RDS Support?

A

up to 5.

17
Q

What do you need to do to enable fail over in Aurora?

A

Nothing, fail over is automatic

18
Q

What is the typical recovery point objective (RPO) for RDS?

A

RPO for recovery with an RDS Single-AZ instance failure is typically 5 minutes

19
Q

If you take a manual snapshot of an RDS database, how long is the snap shot retained?

A

Indefinitely - until you delete it.

20
Q

When using read replicas do you need to update your application?

A

Yes, the connection string to the database will need to be changed

21
Q

When do you need to enable encryption at rest for RDS

A

Encryption must be defined at launch time/creation

22
Q

What service is responsible for RDS encryption and what is the scheme

A

AWS KMS - aes256

23
Q

If the master database in an RDS setup is not encrypted - can you encrypt the read replicas?

A

No. Read replicas CANNOT be encrypted if the master is not encrypted

24
Q

Which RDS database type requires rds.forceSSL=1 via an options group to enable SSL encryption in flight?

A

Postgres

25
Q

Which RDS database requires you to enable ssl via ALTER USER ‘encrypted_user’@’%’ REQUIRE SSL; or GRANT USAGE ON . TO ‘encrypted_user’@’%’ REQUIRE SSL;

A

MySQL

26
Q

How do you encrypt an unencrypted RDS database?

A

You need to take a snapshot of the RDS instance and then create an encrypted copy of that snapshot. You can then use that snapshot to to restore the database and update your applications to use the encrypted DB.

27
Q

Would you deploy an RDS instance in a private or public subnet?

A

Private

28
Q

How would you limit access to you RDS database to only a specific set of EC2 instances?

A

With security groups.

29
Q

How do you define who can MANAGE and RDS database? How do you limit access to the database to certain EC2 instances and how do you define access to who can LOGIN or query the database? What is the exception?

A

IAM roles define who can manage the database. Security groups define which instances can access the RDS instance, and traditional user names and passwords defined in the DBMS define who can login and execute queries.

The exception is that IAM can also be used to authenticate to MySQL and Potgres which also allows ssl encryption in transit.

30
Q

When you snapshot an RDS database, is there any downtime or performance impact on either single or multi-az RDS deploys?

A

There is no downtime. But Creating this DB snapshot on a Single-AZ DB instance results in a brief I/O suspension that can last from a few seconds to a few minutes. On multi-AZ IO is not suspended on the primary as the snapshot is taken from the secondary.

31
Q

For AWS Aurora, what sort of storage architecture is used (NOT storage type) and what is the advantage of this?

A

Aurora uses a storage cluster volume to store data and this is accessible to all the db engines. The advantage is that replication is very quick as each replica doesn’t need to pull the data down and store it on its own volume.

32
Q

For an aurora , how many copies of data are maintained across how many AZ’s?

A

Aurora replicates 6 copies of your data across 3 Availability Zones

33
Q

In an aurora global database, do reads and writes occur across all regions and how many regions are there

A

There is 1 primary region and up to 5 secondary regions. Reads only occur over the secondaries, and writes only occur on the primary.

34
Q

What does RDS enhanced monitoring allow?

A

RDS enhanced monitoring allows you to monitor OS stats for the RDS instances in real time.

35
Q

I have an on premise SQL server database that I am looking to migrate to an RDS MySQL implementation. What two tools in AWS allow me to achieve this and what do they do?

A

The database migration service will allow a heterogeneous migration of databases. Because they are different schemas, the AWS schema conversion tool will be needed to migrate functions, stored procs and views between the two. If something can’t be automatically transformed AWS SCT will flag it for intervention