RDS: Relational Database Service Flashcards

1
Q

What does the ACID database transaction model focus on?

A

Consistency.
A = Atomic
C = Consistent
I = Isolated
D = Durable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does the BASE database transaction model focus on?

A

Availability.
BA = Basically Available
S = Soft State
E = Eventually Consistent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What type of transaction model does RDS use?

A

ACID.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the ACID transaction model (and thus, RDS) limit?

A

Scaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does RDS provide “as a service”?

A

Database Server as a Service (DBSaaS). It’s not just a database as a service; you can have multiple databases on one instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What types of administrator access are disallowed on RDS?

A

Operating system access and SSH access (except in RDS Custom).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a Subnet Group as it relates to RDS?

A

A Subnet Group specifies the subnets that RDS can use and run in.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can you configure RDS with a public IP address?

A

Yes, but it is not recommended.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What provides storage for RDS instances?

A

Dedicated EBS storage per RDS instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When using multi-AZ RDS, what type of replication takes place between the Primary and the Standby?

A

Synchronous replication. Data is replicated to the Standby immediately.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

In RDS, what type of replication takes place between the Primary and Read Replicas?

A

Asynchronous replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where are RDS backups stored?

A

In an AWS-managed S3 bucket. You cannot see the backups in S3, only in the backup manager.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

On which instance are RDS backups run on?

A

The Standby instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What factors determine the cost of an RDS instance?

A
  1. Instance Size and Type
  2. Multi-AZ or not
  3. Storage type and amount used
  4. Data transferred
  5. Backups and Snapshots
  6. Licensing, if applicable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

In RDS, when a failure occurs on the Primary, how does AWS promote the Standby?

A

By changing the Database CNAME to point to the Standby instead of the primary.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many RDS Standby replicas are available in Multi-AZ - Instance mode?

A

Only one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How does Multi-AZ - Cluster mode differ from Multi-AZ - Instance mode?

A

Cluster Mode uses a MAXIMUM of two Reader instances in separate AZs whereas Instance Mode uses a single Standby instance.

Cluster Mode allows reads from the Reader instances whereas Instance Mode does not allow reads from the Standby instance (except for backups).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When is data considered “committed” in RDS Multi-AZ - Cluster Mode?

A

When at least one reader finishes writing the data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What type of replication is used for Reader instances in RDS Multi-AZ - Cluster mode?

A

Synchronous replication.

20
Q

Where does the Cluster Endpoint point in RDS Multi-AZ - Cluster Mode?

A

At the Writer instance. This allows reads, writes, and administration.

21
Q

Where does the Reader Endpoint point in RDS Multi-AZ - Cluster Mode?

A

At any available reader. This includes Reader instances and the Writer instance.

22
Q

What do you use the Instance Endpoint for in RDS Multi-AZ - Cluster Mode?

A

Testing and troubleshooting a specific instance. Don’t use it for normal database operations as it doesn’t switch over if there is an instance failure.

23
Q

In RDS Multi-AZ - Cluster Mode, where is data written?

A

Data is written to local storage (fast) and then flushed to EBS.

24
Q

At what level are Snapshot taken for RDS?

A

The full RDS instance. All databases on that instance are backup in the Snapshot.

25
Q

What type of backup are RDS Snapshots?

A

Incremental.

26
Q

What type of automation is available for RDS Snapshots?

A

None. They must be manually run (or via a script) and Snapshots must be cleaned up/deleted manually (or via a script).

27
Q

What type of backup are RDS Automated Backups?

A

Incremental.

28
Q

What is the schedule for RDS Automated Backups?

A

An incremental backup occurs once per day and transaction logs are backed up every five minutes.

29
Q

What is the retention window for Automated Backups?

A

0-35 days.

30
Q

Where are RDS Automated Backups and Snapshots restored to?

A

A new RDS instance with a new address. Applications must be updated to use the new address.

31
Q

What is a shortcoming of restoring an RDS database from an Automated Backup or Snapshot?

A

It takes a long time, meaning you’ll have a bad Recovery Time Objective (RTO).

32
Q

Where can RDS Read Replicas exist?

A

In the same Region or cross Region.

33
Q

How many direct Read Replicas are allowed per RDS instance?

A

Five. Each Read Replica can also have its own Read Replicas, but this increases data propagation lag.

34
Q

How do Read Replicas improve Recovery Time Objective (RTO)?

A

You can quickly promote a Read Replica to the Primary, assuming the issue was failure. If data corruption is the issue, the Read Replica is likely also corrupted.

35
Q

What type of data transit security is available on RDS?

A

SSL/TLS is available and can be made mandatory.

36
Q

How does RDS handle encryption-at-rest?

A

By supporting EBS volume encryption using KMS. This is handled by the host and EBS.

37
Q

Can encryption-at-rest be removed on RDS databases?

A

No.

38
Q

What additional encryption-at-rest services are available in RDS?

A

Encryption can be handled by the database engine.

RDS MSSQL and RDS Oracle support Transparent Data Encryption (TDE).

RDS Oracle also supports integration with CloudHSM to further protect encryption keys.

39
Q

How can you enable IAM Authentication for RDS?

A

By attaching a Policy to IAM Users or Roles that maps that IAM Identity onto the local RDS user. The user can then generate access tokens that grant access to the database based on the policy mapping.

40
Q

How can you enable authorization using IAM for RDS?

A

You can’t. Authorization is controlled by the database engine; permissions are assigned to the local database user. IAM can be used to authenticate, but not to authorize.

41
Q

What is RDS Custom?

A

When using MSSQL or Oracle, you can connect to your database server with SSH, RDP, or Session Manager. This allows you to customize some parts of the database that you wouldn’t normal have access to.

42
Q

What is RDS Proxy?

A

It provides a pool of database connections so that applications don’t have to constantly open and close database connections.

43
Q

What does the Database Migration Service (DMS) do?

A

DMS migrates data from one database to another. One of the database endpoints MUST be in AWS. DMS runs on a Replication Instance and performs replications tasks to move data from the source database to the target database.

44
Q

What are the three ways data can be moved using the Database Migration Service (DMS)?

A
  1. Full load - a complete migration of existing data
  2. Full load + Change Data Capture (CDC) - a complete migration that also captures ongoing changes
  3. CDC-only - capture changes when a different tools was used to do an initial database migration.
45
Q

When would you use the Schema Conversion Tool (SCT)?

A

When converting from one database engine to another, or when using S3 as an intermediate data store. You can also use it when using a Snowball device.

46
Q

When should you not use the Schema Conversion Tool (SCT)?

A

When migrating between databases that have the same database engine.