S3 Flashcards

1
Q

What are you charged for with S3?

A

Storage
Requests
Data transfer within S3
Transfer Acceleration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or false: S3 buckets are limited to access from a single account

A

False. When setting up an S3 bucket, you can grant access to the bucket from multiple other accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What kinds of destinations can receive event notifications from an S3 bucket

A

An Amazon SNS topic
An Amazon SQS queue
A Lambda function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the three kinds of server-side encryption available to S3 buckets?

A

SSE – S3
SSE – KMS
SSE – C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Distribution as it applies to cloud front?

A

A Distribution is a content delivery network, consisting of a collection of edge locations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

True or false: cloud front is only used for reading objects

A

False. Cloud front can be used to both read and write objects to edge locations.In order to enable this feature, the Allowed HTTP Methods setting must be set properly when creating the distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a Snowball Edge?

A

A snowball edge is similar to a regular Snowball, but it also includes computer capabilities, so that the user cannot only store data on it but also collect the data using code stored on the snowball edge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Snowmobile

A

A Snowmobile is a data transfer device stored on a full size shipping container, pulled by a semi trailer truck. Snowmobile is used to transfer enormous amounts of data into AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do I download an S3 file using bit torrent?

A

Using the Rest API, simply add the ?torrent parameter at the end of your Get request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you have an S3 bucket with the same name as another?

A

No. All S3 bucket across AWS must have a globally unique name.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Explain how volume gateway works

A

Volume gateway stores back ups of volumes such as operating systems or databases, as point in time snapshots and are backed up asynchronously. Snapshots are backed up incrementally and compressed to minimize storage charges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

S3 stands for

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How many as three buckets are allowed per account

A

The default is 100 packets per account, though this can be changed by visiting AWS Service Limits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the URL format for a static website stored in S3?

A

http://bucket-name.S3–website-region-name.AmazonAWS.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the four types of storage gateways?

A

File gateway
Volume gateway (stored volumes)
Volume gateway (cached volumes)
Tape gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a Lifecycle Rule?

A

It is a rule which indicates when objects in S3 are transition from one storage class to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two types of cloud front distribution?

A

Web distribution, typically used for websites and

RTMP, used for streaming video

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the threshold for object size above which multipart upload should be considered?

A

100 MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can you remove objects from cloud front edge caches?

A

You can set up an Invalidation in the distribution settings. However doing so incurs additional charges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How can you designate a single folder within an S3 bucket to act as the origin for a CDN?

A

Set the Origin Path when creating the distribution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

True or false: a cloud front distribution can have more than one origin

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

When creating an S3 bucket, by default is it public or private

A

S3 buckets are private by default, though you can grant public read access to buckets when creating them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

True or false: You can force users to only access your content from CDN edge locations.

A

True. By setting Restrict Bucket Access to Yes you can force users to only access content from cloud front URLs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the availability for standard S3 objects?

A

99.99 percent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How many object tags can be added to an S3 object?

A

10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Can objects which are cashed using cloud front be cleared

A

Yes. You can clear cached objects in cloud front, but that incurs an additional charge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

How much storage is available in one S3 bucket?

A

An S3 bucket can support unlimited storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the durability of objects stored in S3-IA?

A

11x9

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the best method for configuring an S3 bucket with a unique set of permissions that will be used in the future

A

You can create a Bucket Policy and apply it to the S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

I file that has been uploaded to an S3 bucket has a URL link associated with it. However, clicking on this link brings up and “access denied” XML document. Why?

A

Files uploaded into an S3 bucket private by default, so clicking on the provided link will generate this message. The file must be made public before it can be accessed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How do you get data into S3-IA?

A

Two ways.
You can use lifecycle policies to automatically transition objects to IA after a specified length of time
Using the API you can put objects directly into IA by specifying so in the header.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Transfer Acceleration

A

Transfer Acceleration allows users in far-flung corners of the world to upload data to an edge location which is then transferred in the background by Amazon to the account’s region. Very fast.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is the data consistency model for new object puts in S3?

A

Read after write consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

True or false: the bucket owner must always pay for access to the files in the bucket.

A

False. The bucket can be configured with “requester pays”. This means that the requester of the data must pay for that access rather than the bucket owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What does an S3 object consist of, and describe each of its constituent parts

A
Key – the name of the object
Value – the actual data, the content of the file itself
Version ID
Metadata
Subresources, including
access control lists
torrent
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is returned after a successful S3 upload?

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is an Origin Access Identity?

A

A user which is created specifically for accessing content from the origin of a cloud front distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is Glacier?

A

And S3 storage tear which is extremely inexpensive, but requires 3 to 5 hours to retrieve data. It is typically used for archival storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

True or false: lifecycle management roles cannot be used to permanently delete an

A

False. You can use lifecycle management rules to delete objects after a specified period of time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What can you do with S3 event notifications?

A

You can run workflows, send alerts, or perform other actions in response to changes in your objects stored in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is Athena?

A

And interactive clary service that makes it easy to analyze data in S3 using standard SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What events can you be notified of using Event Notification in an S3 bucket

A

Object created event
Object deleted event
RRS object lost event

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What kinds of things are stored in S3?

A

S3 is object based storage, meaning it stores flat files only, and cannot store an OS or a database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is TTL?

A

TTL stands for time to live, which is the amount of time an object is cashed in an edge location when using cloud front

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What types of encryption are available for our files stored in an S3 bucket?

A

AES – 256

AWS – KMS

46
Q

Where is S3 data stored?

A

When an S3 bucket is created, a region is specified. This region will include multiple availability zones across which the data will be redundantly stored

47
Q

What is a CDN

A

A CDN is a content delivery network. A system of distributed servers that deliver webpages and other web content to a user based on the geographic locations of the user, the origin of the webpage and a content delivery server.

48
Q

After using cross – replication on an S3 bucket, you discover that the replicated bucket does not contain any of the objects in the original package. Why is this?

A

Any objects which exist in an S3 bucket or not automatically transferred over when that bucket is replicated

49
Q

True or false: S3 bucket’s can be replicated across different accounts

A

True

50
Q

What are Cash volumes?

A

Cashed volumes let you use S3 as your primary data storage while retaining frequently accessed data locally in your storage gateway. This minimizes the need to scale you’re on premises storage infrastructure while still providing your applications with low latency access to their frequently accessed data

51
Q

S3 objects are stored redundantly across multiple facilities. They are guaranteed to sustain the loss of how many facilities concurrently

A

2

52
Q

True or false: you must have versioning enabled on an object before you can apply lifecycle management to it

A

Pulse. You can use lifecycle management on an object whether or not versioning is enabled on

53
Q

True or false: you can use S3 to host dynamic websites which contain server-side code such as PHP or.net

A

False. S3 can only host static websites

54
Q

What is S3 Inventory?

A

Service which provides a CSV or ORC file listing of your objects in S3 and their corresponding meta-data on a daily or weekly basis

55
Q

True or false: you can select whether lifecycle rules apply to the current version of a document for all previous versions of a document

A

True

56
Q

If you add tags to an S3 bucket, do the files uploaded to that bucket inherit those tags?

A

No. You must tag files individually as they do not inherit the text of the bucket they are contained in

57
Q

What are the advantages of using SSE – KMS encryption versus SSE – S3 encryption?

A

SSE-KMS encryption includes an extra level of security with an envelope key, and also provides audit logs

58
Q

How can you restrict access to certain users in a cloud front distribution?

A

Set the Restrict Viewer Access to Yes when setting up the distribution (Use either pre-signed URLs or signed cookies)

59
Q

What is the scope of S3 name spaces?

A

S3 name spaces are globally unique

60
Q

What is S3 – RRS?

A

Reduced Redundancy Storage
Storage which is guaranteed at 99.9 percent durability, typically used for data which can be reproduced easily such as thumbnails

61
Q

What is an effective method for preventing users from deleting objects in an S3 bucket

A

MFA delete is a feature which requires multi factor authentication when deleting an object.

62
Q

What is the range of sizes for S3 objects?

A

0 bytes to 5 TB

63
Q

In what form are Snapshots of storage volumes store in S3

A

Snapshots of volume gateway store volumes are stored as EBS snapshots

64
Q

True or false: When replicating an S3 bucket, you can specify the replication to be of a different storage class

A

True

65
Q

Describe the for S3 storage tiers

A

S3
S3 – IA
S3 – RRS
Glacier

66
Q

What is a VPC End point for S3?

A

A logical entity within a VPC that allows connectivity only to S3

67
Q

Can S3 versioning be disabled?

A

No. Once versioning has been enabled, it can only be suspended, not disabled.

68
Q

What is S3 tagging used for

A

Tags are used in S3 bucket’s to enable you to track costs across different projects or other criteria. You can also use them to set up lifecycle policies and IAM policies.

69
Q

True or false: you can configure different light cycle rolls for the current and the previous versions of an object

A

True. When setting up lifecycle rules, there is a section for both the previous versions and the current version

70
Q

Describe Storage Gateway

A

Service that connects on premise software appliances with cloud-based storage to provide seamless and secure integration between an organizations on premise IT environment and a WSs storage infrastructure. The service enables you to securely store data to the AWS cloud for scalable and cost-effective storage.

71
Q

What is Server Access Logging?

A

Server Access Logging can be used to maintain a log of all access attempt to an S3 bucket. Server access logging can be enabled in the S3 bucket settings or when creating a new bucket

72
Q

What is the minimum size for an object in order for it to be transitioned using lifecycle girls?

A

128 kB

73
Q

What is Cross – Region Replication?

A

S3 bucket’s can be replicated across different regions or even different accounts.

74
Q

What does Atomic mean when referring to S3?

A

Data which is retrieved from S3 will never be partial or corrupt

75
Q

What is Amazon Macie?

A

An AI – powered security service that helps you prevent data loss by automatically discovering, classifying, and protecting sensitive data stored in S3

76
Q

Describe S3 Lifecycle Management

A

You can set up S3 so that data is stored in one storage tier for a specified length of time, and then is automatically transferred to a different storage tier

77
Q

What is “in transit” encryption?

A

Encryption which happens at the time and data is transferred over the Internet. Typically this is SSL

78
Q

What is a Snowball?

A

A snowball is a petabyte – scale data transport device. Amazon sends the device to you, you put your data on it and return it, and the data is loaded into AWS that way, without using the Internet at all.

79
Q

True or false: Objects stored using the file gateway can take advantage of things such as lifecycle management, permissions, and versioning.

A

True

80
Q

What is a disadvantage of enabling versioning on an S3 bucket?

A

If you have a file which is very large and prone to many updates, AWS will store every version of that file, potentially increasing storage costs.

81
Q

What is SSE – C?

A

Server side encryption with customer provided keys

82
Q

Can an S3 bucket be replicated to multiple Destination buckets?

A

No. An S3 bucket can only be replicated to a single Destination bucket.

83
Q

What did Snowball replace

A

Import export, service in which a user could send their own data storage device to Amazon who would then upload the data into AWS

84
Q

How are objects smaller than 128 kB charged if stored in S3-IA?

A

Any object smaller than 128 kB is charged as if it were 128 kB

85
Q

What is the minimum amount of time that must pass before an object can be moved from S3 to S3-IA?

A

30 days

86
Q

What is the name of AWS’s CDN?

A

Cloud front

87
Q

What is S3-IA?

A

Infrequently Accessed Storage

Data is immediately retrievable, but it is less expensive and incurs a fee upon retrieval

88
Q

True or false: individual files with in an S3 bucket can be replicated without replicating the entire bucket

A

True. Using file prefixes you can specify that cross region replication only operate on those

89
Q

What is the data consistency model for override puts and delete in S3?

A

Eventual consistency

90
Q

Are S3 buckets regional or global?

A

S3 buckets are created in a specific version, although when entering the S3 service, you can see all your buckets globally across all regions

91
Q

How do you delete large numbers of objects in S3?

A

Multi – Object Delete

92
Q

What is the availability for S3-IA?

A

99.9%

93
Q

What is an Origin as it applies to Cloud front?

A

The Origin is where all of the files that I CDN will distribute are located. This could be an S3 bucket, and ec2 instance, an ELB or route 53.

94
Q

How can you restrict certain geographies from accessing your cloud front distribution?

A

In the restrictions setting of theDistribution you can enable Geo restriction and sat by there a white list or black list of countries that are or are not able to access your distribution

95
Q

What is a CDN and what are its advantages?

A

A content delivery network caches objects from the origin to geographically dispersed edge locations so that subsequent users requesting the same object in the same geographical area can receive it from that at location rather than having to go back to the origin region to retrieve it.This means that the subsequent Yuzer has a much faster retrieval time because the data is located physically much closer to them.

96
Q

Explain the difference between a region, and edge location, and an availability zone

A

A region is a geographical location where an Amazon data center is located. There are about a dozen regions in the world.
And availability zone is a combination of one or more data centers in a given region. These data centers may be physically in proximity but have separate power and network capabilities and are connected with each other with fiber optic cable. Each region contains a small number of distinct availability zones.
An edge location is a data center where and users access services located at AWS. They are located in most of the major cities around the world and our specifically used by cloud front to distribute content to end-users and to reduce latency

97
Q

How do you copy multiple objects from one S3 bucket to another

A

You must use commandline interface commands (Linux)

98
Q

What are the two different ways you can set up access control to buckets?

A

Bucket policies

Access control lists

99
Q

What is the default TTL for a new objects in cloud front?

A

24 hours

100
Q

True or false: non-– AWS, on premise servers can act as cloud front origins.

A

True. You can use your own server as a cloud front origin. It does not have to be an AWS resource

101
Q

What is a scenario under which an S3 bucket cannot be replicated?

A

An S3 bucket can only be replicated if Both the source and the destination buckets have versioning enabled

102
Q

What is the largest object size that can be uploaded to S3 in a single put request?

A

5 GB

103
Q

True or false: an S3 bucket can be replicated do the same region

A

False. Cross region replication only works when replicating across different regions

104
Q

What is the format for an S3 bucket DNS address?

A

Https://region-name.amazonaws.com/bucket-name

105
Q

What is the durability of standard S3 objects?

A

11 X9 percent

106
Q

What is “Quarry in Place”?

A

You can run sophisticated quarries against data stored in S3 without the need to use ETL into a separate analytics platform.

107
Q

What is the minimum size of the files stored in an S3 bucket

A

Zero bytes

108
Q

What is a storage gateway software appliance?

A

Storage gateway is a virtual machine which is stored on your on premise server to connect to AWS

109
Q

Describe the difference between stored volumes and cashed

A

Stored volumes are snapshots of an entire hard disk, stored in an S3 bucket. Cash volumes store the entire hard disk on S3, but only frequently accessed objects are stored on premise.

110
Q

What is Glacier Vault Lock?

A

It is a way to create access policies for Glacier that can be locked for a specified amount of time. It is used to enforce regulatory requirements