S3 Flashcards

1
Q

What is Amazon S3

A

Amazon Simple Storage Service - provides object storage through a web service interface.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

List use cases for S3

A
Backup and storage
Disaster Recovery
Archive 
Hybrid Cloud storage 
app hosting 
Media hosting 
Data lakes and big data analytics 
Software delivery
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a file called in Amazon S3

A

objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a directory called in amazon S3

A

buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When making a name for a bucket in amazon S3 does the name have to be globally unique across all regions all accounts ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Where are buckets defined at

A

at the region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe the naming conventions for buckets

A
No uppercase
no underscore
3-63 characters long 
Not an ip
Must start with lowercase letter or number
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a key in Amazon S3

A

The full path to an object (files)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Describe the parts of a key

A

PREFIX + object name

s3://my-bucket/ my_folder/another/folder/my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the maximum size of an object

A

5TB (5000GB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

In Amazon S3 what is metadata

A

List of text key / value pairs - system or user metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In Amazon S3 what is a tag

A

Unicode key /value pair - up to 10 - useful for security / lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Describe S3 User-based security policy

A

IAM policies - which API calls should be allowed for a specific user from IAM console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Describe Resource-Based Security policy in Amazon S3

A

Bucket policies - bucket wide rules from the S3 console - allows cross account
Object Access Control list (ACL) - finer grain
Bucket Access Control List ( ACL) - less common

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When can an IAM principal access an S3 object if

A

the user IAM permissions allow it OR the resource policy Allows it
AND there’s no explicit DENY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you encrypt objects in Amazon S3

A

using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are S3 bucket poilicies

A
Json based policy 
resources: buckets and objects 
Actions: Set of API to Allow or Deny
Effect:Allow / Deny 
Principal: The account or user to apply the policy to
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When should you use S3 bucket for a policy

A

Grant public access to the bucket
Force objects to be encrypted at upload
Grant access to another account (Cross Account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Describe amazon S3 websites

A

S3 can host static websites and have them accessible on the www

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Define how a Amazon S3 website URl format would look like

A

.s3-website-.amazonaws.com
OR
.s3-website..amazonaws.com
/\
|

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

If you get a 403 error code while trying to get to a website within S3 what should you do first

A

Make sure the bucket policy allows public reads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Describe versioning

A

Enabled at the bucket level
best practice to version your buckets
Protects against unintended deletes (ability to restore a version)
easy roll back to previous
Any file that is not versioned prior to enabling versioning will have version :null:
Suspending versioning does not delete the previous versions

23
Q

In Amazon S3 why would you want to have access logs

A

For audit purposes

24
Q

What kind of information will you find in an Access log for S3 buckets

A

Any request made to S3 from any account, authorized or denied, will be logged into another S3 bucket

25
Q

What is Cross-Region Replication (RR)

A

every object uploaded to an S3 bucket is automatically replicated to a destination bucket in a different AWS region that you choose

26
Q

What is Same region Replication (SRR)

A

Automatically replicates data between buckets within the same AWS Region

27
Q

Why would you use CRR for

A

Compliance, lower latency access, replication across accounts

28
Q

Why would you use SRR

A

Log aggregation, live replication between production and test acconts

29
Q

Define durability in Amazon S3

A

How often you will lose a file
High durability = (99.999999999, 11 9’s) of objects across multiple AZ
If you store 10,000 000 objects with Amazon S3 you can on average expect to incur a loss of a single object once every 10,000 years

30
Q

What is availability in amazon S3

A

Measure how readily available a sservice is
S3 standard has 99.99%, which means it will not be available 53 minutes a year
Varies depending on storage class

31
Q

Decribe S3 Standard - General Purposes

A

99.99% availability
Used for frequently accessed data
Low latency and high throughput
Sustain 2 concurrent facility failures

32
Q

When should use S3 standard - General purpose storage

A

Big data analytics, mobile and gaming apps, content distribution

33
Q

Describe S3 Infrequent Access (IA)

A

Suitable for data that is less frequently accessed, but requires rapid access when needed
99.9% availibility
Lower cost compared to amazon S3 standard, but retrieval fee
Sustain 2 concurrent facility failures

34
Q

When should you use S# - infrequent Access (IA)

A

As a data store for disaster recover, backups

35
Q

Describe S3 Intelligent-Tiering

A

99.9% availability
Same low latency and high throughput performance of S3 standard
Cost-optimized by automatically moving objects between two access tiers based on changing access patterns
resilient against events that impact an entire availabilty zone

36
Q

Describe S3 One Zone - infrequent Access (IA)

A

Same as IA but data is stored in a single AZ
99.5% avail
Low latency and high throughput performance
Lower cost compared to S3-IA (by 20%)

37
Q

When should you use S3 One Zone

A

Storing secondary backup copies of on-premise data, or storing data you can recreate

38
Q

Describe Amazon Glacier and Glacier Deep Archive storage

A

Low cost object storage (in GB/Month) meant for archiving/ backup
Data is retained for the longer term (years)
Various retrieval options of time + fees for retrieval

39
Q

What is S3 object lock

A

an Amazon S3 feature that allows you to store objects using a write once, read many (WORM) model.

40
Q

What is Glacier Vault Lock

A

to lock your vault with a variety of compliance controls
Lock the policy for future edits (Can no longer be changed )
Helpful for compliance and data retention

41
Q

Describe S3 encryption

A

Server-side encryption - File is encrypted after the server receives it
Client-side encryption - File is encrypted before it reaches server

42
Q

What is amamzon responsible for in S3

A

Infrastructure
config and vulnerability analysis
Compliance validation

43
Q

What are you responsible for in S3

A
Versioning 
Bucket policies 
replication setup 
Logging and Monitoring 
S3 storage classes 
Data encryption at rest and in transit
44
Q

What is an AWS Snow Family

A

Highly secure, portable devices to collect and process data at the edge, and migrate data into and out of aws
Offline devices to perform data migrations

45
Q

When should you use AWS Snow family

A

If it takes more than a week to transfer over the network

46
Q

Describe AWS Snow cone

A

Storage capacity 8 TB usable
Migration Size Up to 24 Tb, online and offline
Data sync agent Pre installed

47
Q

Describe AWS Snowball edge

A

80 TB usable
Up to petabytes, offline
Up to 15 nodes

48
Q

Describe Snowmobile

A

More than 100 PB

Up to exabytes, offline

49
Q

What is edge computing

A

a distributed computing paradigm that brings computation and data storage closer to the sources of data

50
Q

Describe Snow Family Edge computing Snowcone

A

2 cpus, 4gb of memory

USB-C poer using a cord or the optional battery

51
Q

Describe Snow Family Edge computing Snowball edge Compute optimized

A

52 vCPU, 208 GIB of Ram
Optional GPU
42TB usable storage

52
Q

Describe Snow Family Edge computing Snowball edge Storage optimized

A

Up to 40 CPUs , 80 gib of ram

Object storage clustering available

53
Q

What is hybrid cloud

A

Part of infrastructure on and premise and other part on the cloud

54
Q

What is aws Storage gateway

A

Bridge between on-premise data and cloud data in S3