S3 Flashcards
Is S3 object or block based storage?
Object
What is the S3 availability SLA
99.9
What is the guarantee durability of S3
99.999999999%
What are the S3 tiers?
S3S3 - IAS3 One Zone -IAGlacier
What storage solution would you use for data archive?
Glacier
What is the proper format for a s3bucket name?
Https://s3-region.amazonaws/bucketname
What are the S3 object permissions?
OwnerAccountsPublic
How to control access to buckets?
ACLbucket policy
You’ve enabled bucket cross-region replication. There are existing files there and you add some new files. When you check the destination, only the new files are present. Why?
Existing files on sources are not replicated after replication is enabled. Only new or changed files will be present at the destination
You manually copy over items from one bucket to another. Items at the source were publically available, but are not at the destination. Why?
The object is copied but not permissions.
You’ve deleted an object in your source bucket. You observe this activity replicated to the destination bucket. You then go into versioning and delete the deletion marker. Will this change be replicated?
No
True or false: You can replicate buckets in the same region
false
You delete an object in a bucket. Will that deletion marker in versioning be replicated?
Yes
True or false. A new bucket is publically available and permissions are wide open.
false
What is an S3 lifecycle policy?
A mechanism to transition data to tiered storage.
What is the max file min file size eligible for transition?
128Kb
Do you need versioning enabled to use a lifecycle policy?
No
Can lifecycle policies capture versions also?
Yes
You have just setup a lifecycle policy. You notice not all files were transitioned to the next tier. Why?
The files creation date must be older than 30 days and the file larger than 128KB
What is cloudfront?
It is a CDN content delivery network
What does a CDN do?
It stores and delivers data to users based on geographic location to ensure reduced latency
What is an edge location?
A location where content will be cached?
Does an edge location have to be in a defined region?
No
What is an origin?
Data source, S3 bucket EC2 instance or ELB
What is a distribution?
A collection of edge locations
What are the types of distributions?
Web and RTMP
Are edge location read only?
No, you can write and it will replicate to origin
What determines a time data will live in the edge location?
TTL
Can you clear data from edge cache?
Yes, but at a cost
How do you secure S3 buckets?
Bucket policies and S3
You want to ensure auditing of your buckets are enabled but are concerned the logs will take up to much space. Can the logs be redirected to another bucket?
Yes
What are the three types of server-side encryption at rest?
S3 managed keys - SS3-S3AWS Key mgmt - SSE-KMSserver-side encryption with customer-provided keys - SSE-CClient-side encryption
What encryption does S3 manage keys - SS3-S3use?
AES256
You need to ensure encryption is enabled on your S3 bucket. Governance has indicated its required to capture an audit trail of all encrypts and decrypts with the key. What type of encryption would you recomend
AWS Key mgmt - SSE-KMS
You need to ensure encryption is enabled on your S3 bucket. Governance has indicated its required to capture an audit trail of all encrypts and decrypts with the key. What type of encryption would you recommend
AWS Key mgmt - SSE-KMS
You need to ensure encryption is enabled on your S3 bucket. You want to use an existing key What type of encryption would you recommend
AWS Key mgmt - SSE-KMS
You need to ensure encryption is enabled on your S3 bucket. You want to manage the keys yourself. What type of encryption would you recommend
server side encryption with customer provided keys - SSE-C
What is client side encryption?
Data is encrypted then uploaded to S3
What is AWS storage GW?
a software service connects on-prem storage to AWS cloud storage
What are the five types of storage gateways?
File gateway (NFS)Volume gateway (iSCSI)-stored volumes-cached volumesVTL gateway (VTL)
What type of storage gateway would you use for file storage?
File gateway