S3 Flashcards
What is Snowball?
Snowball Is a secure portable device used to transfer huge amount of data in & out of AWS.
What is S3 Availability?
99.99%
How to securely store objects in a bucket?
To securely store objects in a S3 bucket we have to use “Encryption at rest”.
What is Governance Mode
In governance mode User cant overwrite or delete a version or alter lock settings without special permissions.
How AWS implement Transfer Acceleration?
Transfer Acceleration is implemented using aws CloudFront service through edge locations.
What is Cross Region Replication in S3
Cross region replication means transfer of s3 object from one region to another.
In what scenario we can use S3 Standard tire
In S3 Standard Tier Data stored will be frequently accessed.
Data is be stored redundant on multiple facility to withstand 2 facility loss.”
What is S3 object Lock
S3 Object Lock achieve WORM based storage model.
S3 Object Lock prevent objects from delete / overwrite for a fixed amount of time or indefinitely.
What are the two S3 Object Lock Modes:
Governance Mode
Compliance Mode
Can we move one file version to another s3 tier?
Yes; S3 life cycle mgt support Versioning ; we can transfer certain files version to another s3 tier.
What is Storage Gateway?
Storage gateway connect on-premise IT application with AWS Storage.
In what scenarios we can use S3-IA
In S3 IA Data stored will be infrequently accessed.
Data is be stored redundant on multiple facility to withstand 2 facility loss.”
what is the max size of s3 object
5 TB
What is CloudFront - Distribution
Cloud front distribution is a CDN - Collection of Edge Location
Can we see who accessed s3 objects?
yes s3 can maintain access log for who access the objects.
What is AWS Organizations?
AWS Organization is an Account Management service.
It helps us combine multiple AWS accounts into an organization.
if new bucket is created; does every one have access?
No; In new bucket Block public access will be enabled by default.
What is S3 Byte range Fetches?
S3 Byte range Fetches allows you to download huge files from S3.
It downloads huge files parallelly by specifying byte range.
This improves download performance to a greater extent.
If there is any failure it would be only specific byte range.”
What is Compliance Mode
In compliance mode Even Root User cant overwrite or delete a version or alter lock settings.
What is min retrieval time for S3 Glacier?
For S3 glacier Min retrieval time is 1 min to 1 hr
What are the S3 limitations on KMS?
We use AWS KMS service to encrypt S3 object at rest; We call AWS KMS service every time during upload/download.
AWS KMS service has max request limits per second at regional level.
Like 5500,10000 & 30000 etc.
You cant increase request limits.”
In what scenarios we can use S3 Glacier
S3 Glacier is Used for cheap data archive
What is CloudFront - Origin
Cloud front origin is the Source location of file that CDN distribute;
Origin can be S3 Bucket, EC2, Elastic Load Balancer or Route 53”
How to restrict public access for all objects in a bucket?
To restrict public access we have to use “Block Public Access” option at bucket level.
What is Glacier Vault Lock
Glacier Vault Lock allows you to place compliance controls for individual Glacier object
What is Management Account?
In AWS Organization Management Account manages billing & payment of multiple member accounts.
It does not have any access to any service
In what scenarios we can use S3 Glacier Deep Archive
S3 Glacier Deep Archive is Used for much cheaper data archives.
What is S3 Prefixes?
S3 Prefixes are similar to a directory names.
This enables you to group similar objects together in a bucket.
If you read from 2 folder; you can achieve 11000 request per second.
If you read from 4 folder; you can achieve 22000 request per second.”