Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Certified Assoc 2024 > S3 > Flashcards

S3 Flashcards

1
Q

AWS Bucket

A

Container for objects

Store unlimited number of objects in bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 key, S3 value

A

Name of the file
Binary of file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

URL Pattern to access objects in bucket

A

https://[bucket].s3.[aws-region].amazonaws.com/[key]
https://s3.[aws-region].amazonaws.com/[bucket]/[key]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does an S3 object consist of?

A

Key
Value
Version ID
Metadata
Sub resources?
Access control information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 Gateway Endpoint

A

Ec2 instances connecting to S3 using private addresses

Used for private subnet EC2s that want to communicate with S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

File Storage vs Object Storage

A

File Share
-data stored in directories
-can have heirarchy of directories
-file systems are mounted to OS (drive name in Windows)
-functions like local storage
-network connection is maintained; don’t need to remount

Object Store
-data stored in buckets
-flat namespace, no heirarchy
-hierarchy can be mimiced with prefixes (e.g. prefix in the object key name)
-accessed via REST API
-network connection reset with each request/complete after each request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Durability

S3 Durability offers how many 9’s

A

Protection against data loss and data corruption

11 9’s 99.999999999

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Availability

S3 Availability offers how many 9’s

A

a measurement of the amount of time the data is available to you

expressed as percentage of time per year

4 9’s, 99.99%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the S3 storage classes and where are they set?

A

Standard
S3 Intelligent Tiering
Standard IA
One Zone IA
Glacier Instant Retrieval
Glacier Flexible Retrieval
Glacier Deep Archive

Storage class applies to objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What storage class doesn’t offers a different number of 9’s?

A

One Zone-IA offers 99.5% availability,
S3 Intelligent Tiering, Standard IA, Glacier Instant Retrieval offers 99.9%
while all others offer 4 9’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which storage class has retrieval fees?

How is the retrieval fee measured?

A

Standard IA
One Zone IA
Glacier Instant Retrieval
Glacier Flexible Retrieval
Glacier Deep Archive

Per GB retrieved

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which storage classes have a minimum storage duration charge?

What is the minimum for each?

A

Standard IA - 30 days
One Zone IA - 30 days
Glacier Instant Retrieval - 90 days
Glacier Flexible Retrieval - 90 days
Glacier Deep Archive - 180 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which storage classes has a minimum capacity charge per object?

What is the minimum for each?

A

Standard IA - 128KB
One Zone IA - 128KB
Glacier Instant Retrieval - 128KB
Glacier Flexible Retrieval - 40KB
Glacier Deep Archive - 40KB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How many AZ’s is the data replicated in for each storage class?

A

All 3 AZ’s except for One Zone IA which is only one AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the Availability SLA for each storage class?

A

Standard - 99.9%
S3 Intelligent Tiering - 99%
Standard IA- 99%
One Zone IA- 99%
Glacier Instant Retrieval- 99%
Glacier Flexible Retrieval - 99.9%
Glacier Deep Archive - 99.9%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 Standard Storage class

A

Default storage class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

S3 Intelligent Tiering Storage class

A

Automatically move data between different storage classes based on how you are using data for cost and performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Standard IA Storage class

A

For infrequently accessed data, lower cost for data storage but fee for data retrieval and minimum storage duration and capacity charge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

One Zone IA Storage class

A

For infrequently accessed data only stored in one AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Glacier Instant Retrieval Storage class

A

Storage class with the best access to access archival data;
access data within milliseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Glacier Flexible Retrieval Storage class

A

Lesser need to access archival data;
access data within minutes to hours (not seconds), lowest minimum capacity charge per object where this applies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Glacier Deep Archive Storage class

A

Don’t need to access archival data
access data within hours (not seconds or minutes) and longest minimum storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Amazon Glacier Storage classes

A

used for archival data so you can store at a much lower costs for longer time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Bucket Policy

A

resource based policies, only attached to S3 buckets

resource specifies bucket

principal specifies user, group, or role

Action is an S3 action

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

S3 ACL

A

Access Control List

Legacy access control mechanism that predates IAM

AWS recommends using S3 bucket policies or IAM policies rather than ACLs

ACLs can be attached to the bucket or an object

Limited options for grantees and permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

When should you use IAM policies vs Bucket policies to control access to S3?

A

IAM policy if:
-YOu need to control access to AWS services other than S3
-You have numerous buckets each with different permission requirements
-Prefer IAM policy

S3 bucket policy if:
-You need simple way to grant cross account access to S3 env without IAM roles
-Your IAM policies are reaching the size limit
-Prefer bucket policies

27
Q

S3 Versioning

A

a means to keep multiple variants of an object in the same bucket

Use versioining to preserve, retrieve and restore every version of every object stored in your buckett

28
Q

What do version enabled buckets allow?

A

recovery of objects from accidental deletion or overwrite

29
Q

What are the two forms of S3 Replication?

Features, contraints?

A

Cross Region Replication (CRR)

Same Region Replication (SRR)

can be same or different accounts
buckets must have versioning enabled to use replication

30
Q

Cross Region Replication

A

Any data that is written in the original region/bucket is written to the region/bucket configured within CRR

31
Q

Same Region Replication (SRR)

A

Any data that is written in the original region/bucket is written to the same region and different bucket configured within SRR

can be same or different accounts

32
Q

AWS S3 Lifecycle Management

A

Transtion Actions - Defines when objects transition to another storage class

Expiration actions - Defines when objects expire/are deleted by S3

33
Q

S3 Lifecycle Transitions

A

Standard to any other
Any storage class to S3 Glacier or S3 Glacier Deep Archive
Standard IA to Intelligent Tiering or One Zone IA
Intelligent Tiering to One Zone IA

34
Q

What transitions are not allowed

A

Any storage class to Standard, Reduced Redundancy

Intelligence Tiering to Standard IA

One Zone IA to Standard IA or Intelligent Tiering

35
Q

What S3 operations can you add MFA to?

A

Changing the versioning state of a bucket
Permanently deleting an object version

36
Q

What are factors of authentication in MFA for S3?

A

username/password

token generated by HW or SW program

37
Q

What is required for MFA to be configured on bucket?

What must be included in request for MFA operations on a bucket?

A

versioning

The x-amz-mfa request header must be included in the request

38
Q

Who can enable MFA delete?

A

bucket owner (root account)

39
Q

SSE-S3

A

Server-side encryption with S3 managed keys uses:

S3 managed keys
Unique object keys
Master key
AES 256

Encryption/decryption happens on AWS side

Secured at rest via SSE-S3 and in transit via TLS

40
Q

What type of encryption is offered with S3?

A

SSE-KMS: Server side encryption with AWS KMS

SSE-S3: Server-side encryption with S3 managed keys

SSE-C: Server side encryption with client provided keys

S3 Client Side encryption

S3 Default Encryption

41
Q

SSE-C

A

Server side encryption with client provided keys

Client managed keys
Not stored on AWS

42
Q

S3 Client Side encryption

A

Client managed keys
Not stored on AWS or you can use KMS keys

Encryption/decryption on the client side, not in AWS

AWS only sees the encrypted object and can not encrypt/decryt

43
Q

S3 Default Encryption

A

All Amazon S3 buckets have encryption configured by default

All new object uploads to Amazon S3 are automatically encrypted

There is no additional cost and no impact on performance

Objects are automatically encrypted by using server side encryption with Amazon S3 managed keys (SSE-S3)

44
Q

SSE-KMS

A

Server side encryption with AWS KMS managed keys uses

KMS managed keys
Can be AWS managed keys or customer managed KMS keys

Encryption/decryption happens on AWS side

Secured at rest via SSE-KMS and in transit via TLS

45
Q

Can you encrypt unencrypted Amazon S3 objects? If so how, if not why?

A

To encrypt existing unencrypted S3 objects, you can use S3 batch operations

You can also encrypt existing objects using the CopyObject API operation or the copy-object AWS CLI command

46
Q

How can you enforce encryption with bucket policy

A

You can force the type of SSE using condition

“s3:x-amz-server-side-encryption”: [true | type of encryption]

47
Q

S3 Multipart Upload

A

Multipart upload uploads objects in part independently in parallel and in any order

Performed using the S3 Multipart upload API

It is recommended for objects 100 MB and larger

Can be used for objects from 5 MB to 5 TB

Must be used for objects larger than 5 GB

48
Q

S3 Transfer Acceleration

A

Uses CloudFront edge locations to improve performance of transfers from client to S3 bucket

Upload file to CloudFront and then the content traverses the AWS global infrastructure to get to the bucket

Endpoint is different
http://[bucketname].s3-accelerate.amazonaws.com

http://[bucketname].s3-accelerate.dualstack.amazonaws.com

Only charge for additional acceleration if there is a performance improvement

Enable transfer acceleration at the bucket level

Once enabled it can’t be disabled only suspended

Uses anycast packets

49
Q

S3 Select

Glacier Select

A

Use SQL expressions to access the objects within buckets or objects within objects (e.g. zip)

50
Q

Server Access Logging

A

Provides detailed records for the request that are made to a bucket

Details include requester, bucket name, request time, request action, response status, and error code (if applicable)

Disabled by default

Must configure a separate bucket as the destination (can specify a prefix)

Need to grant write permissions to the S3 log delivery group on destination bucket

Need to enable logging to specified bucket (should be different than bucket to avoid endless loop)

51
Q

CORS with Amazon S3

A

Cross Origin Resource Sharing (CORS)

Allow request from an origin to another origin

Origin is defined as DNS name, protocol, port

Must add CORS configuration to bucket to allow requests from the other origin

52
Q

How do you enable CORS with S3

A

Enable through settings:

-Access-Control-Allow-Origin
-Access-Control-Allow-Methods
-Access-Control-Allow-Headers

These settings are defined using rules
Rules are added by using JSON files in S3

53
Q

S3 Object Lambda

A

S3 Object lambda uses lambda functions to proces sthe output of S3 GET Request

You can use your own functions or use th AWS pre-built functions

54
Q

S3 Object Lambda - Prebuilt Functions

A

Prebuilt lambda functions that detect PII

PII includes names, addresses, dates, credit card numbers, SSN

PII Access Control - detects PII and restricts access
PII Redaction - detects PII and returns document with the PII redacted
Decompression - decrypts objects compressed with Bzip2, gzip, snappy, zlib, zstandard, and Zip

All functions have ARNs that can be referenced to use these functions

55
Q

Limit to S3 file size

A

up to 5 TB

56
Q

S3 namespace

A

universal namespace so bucket names must be unique globally

57
Q

Where are buckets created and where should you create them as a best practice?

A

Regions

create buckets in region that are physically closest to your users to reduce latency

58
Q

Limit on number of buckets per account

A

By default 100 buckets

59
Q

S3 Event Notifications

A

Sends notifications when events happen in buckets

No polling needed

Destination include:

SNS topics
SQS queues
Lambda

60
Q

What are the cross account access methods for S3?

A

Resourced based policies and IAM policies for programmatic only access to S3 bucket objects

Resourced based ACL and IAM policies for programmatic only access to S3 bucket objects

Cross account IAM roles for programmatic and console access to S3 bucket objects

61
Q

What are S3 Performance Optimization methods

A

Se supports at least 3500 PUT, COPY, POST, DELETE OR 5500 GET/HEAD requests per second per prefix in a bucket

Increase read or write performance by parallelizing reads

Use byte-range fetches

Retry request for latency sensitive applications

Combine S3 storage and EC2 compute in the same region

Use S3 Transfer Acceleration to minimize latency caused by distance

62
Q

Presigned URL?

A
63
Q

Strong read after write consistency

A

Certified Assoc 2024 (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions