S3 Flashcards by Walt Hare

What are some key descriptors of S3?

a place to store files
it is ‘object-based’ storage
data is spread across multiple devices and facilities

How well did you know this?

Not at all

Perfectly

S3 objects can have a maximum size of

5TB each

How well did you know this?

Not at all

Perfectly

The maximum storage for an S3 bucket is

unlimited

How well did you know this?

Not at all

Perfectly

S3 namespace must be unique _______

globally

How well did you know this?

Not at all

Perfectly

What is the status code for a successful file upload

HTTP 200

How well did you know this?

Not at all

Perfectly

S3 Objects consist of the following characteristics

Key (the name of the object)
Value (the data)
Version ID (used for versioning)
Metadata (data about the data being stored)
Subresources (Access Control Lists & Torrent)

How well did you know this?

Not at all

Perfectly

What is the S3 data consistency model

Read after Write consistency for PUTS of new Objects

- Eventual Consistency for overwrite PUTS and DELETES (can take time to propogate)

How well did you know this?

Not at all

Perfectly

The guarantees for S3 are

99.99% availability

11 9’s for durability

How well did you know this?

Not at all

Perfectly

What are key features of S3

Tiered Storage Availability
Life Cycle Management
Versioning
Encryption
MFA Delete
Securing of data using ACLs

How well did you know this?

Not at all

Perfectly

What is MFA Delete

requires MFA authentication before deleting an object

How well did you know this?

Not at all

Perfectly

What are the S3 Storage Classes

Standard - 
Infrequently Accessed - 
One Zone - IA
Intelligent Tiering
Glacier
Glacier Deep Archive

How well did you know this?

Not at all

Perfectly

What are the features of S3 - IA

Suitable for less frequently accessed data that requires rapid access when needed.

How well did you know this?

Not at all

Perfectly

What are the features of S3 - Intelligent Tiering

Optimizes cost by using machine learning to move your data to a less expensive option without impacting performance.

How well did you know this?

Not at all

Perfectly

What is S3 Glacier most suitable for

low cost

retrieval time is not immediate and can be configured

How well did you know this?

Not at all

Perfectly

What is the retrieval time for S3 Glacier Deep Archive?

~ 12 hours

How well did you know this?

Not at all

Perfectly

What is the retrieval time for each S3 storage class?

Standard, Intelligent Tiering, IA, 1Z-IA - milliseconds
Glacier - minutes or hours
Glacier Deep Archive - hours

How well did you know this?

Not at all

Perfectly

What factors impact S3 costs

Storage
Requests
Storage Management Pricing model selected
Data Transfer Pricing 
Transfer Acceleration
Cross Region Replication Pricing

How well did you know this?

Not at all

Perfectly

What is Cross Region Replication?

suitable for disaster recovery. more robust than caching.

How well did you know this?

Not at all

Perfectly

What service is used for Transfer Acceleration?

CloudFront to move data to an edge location

How well did you know this?

Not at all

Perfectly

A proper S3 URL for ‘irthy’ looks like

https://s3-eu-west-a.amazonaws.com/irthy

How well did you know this?

Not at all

Perfectly

S3 RRS is

Reduced Redundancy Service and it is being deprecated and replaced by One Zone - IA

How well did you know this?

Not at all

Perfectly

Storage class can be managed at the

a) object level
b) bucket level
c) AZ level
d) Region

a) object level

How well did you know this?

Not at all

Perfectly

Access to an S3 Bucket can be controlled using

a bucket ACL

Bucket Policies

How well did you know this?

Not at all

Perfectly

Encryption in Transit is achieved by

using SSL or TLS

How well did you know this?

Not at all

Perfectly

Encryption at Rest is achieved by

- on the server side using AWS capabilities- client side - encrypt before uploading

What are the methods available for encrypting within an S3 Bucket

S3 Manage Keys - SSE-S3AWS Key Management Service, Managed Keys - SSE-KMSServer side Encryption With Customer Provided Keys - SSE-C

Versioning stores ______ versions of an object

all

Versioning can be disabled by deleting an object (T/F)

False, it can only be suspended

What is Versioning MFA Delete?

it provides an additional layer of security by requiring a user to MFA when deleting an object in a bucket

Versioning is suitable for making backups?

true

What service automates moving objects between the different storage tiers?

Lifecycle Management

What is the relationship between versioning and lifecycle management.

lifecycle management can be used in conjunction with versioning by using version as criteria for moving.

Versioning must be enabled in both...

the source and destination buckets.

The source and destination buckets for cross region replication must be

in different regions

Files in an existing bucket ARE/ARE NOT replicated automatically

are not

How are 'delete markers' handled in CRR?

delete markers are not replicated

How are individual version handled in CRR when they are deleted?

they are not replicated

What is S3 Transfer Acceleration

uses CloudFrount Edge Network | provides a direct URL to an edge location which can be used for uploads

What is CloudFront?

A Content Delivery Network (CDN)

What is a Content Delivery Network

A Content Delivery Network (CDN) delivers web content to a user based on location, the origin of the content, and a content delivery server.

What is an Edge Location

the location where content will be cached

What is an Origin, in terms of a CDN

the location that the CDN will deliver

What is a Distribution, in terms of a CDN

the collection of Edge Locations

How long is an object cached at an Edge Location

TTL - Time To Live

What are the types of CloudFront Distributions

a. Web Distribution | b. RTMP for media streaming

What are the possible sources of an Origin for a CDN

a. S3 Bucket b. EC2 instance c. Elastic Load Balancer d. Route53

And Edge Location is read only (T/F)

False. both read and write are possible

Access to CloudFront URLs can be restricted by using

Signed URLs

Invalidating a CloudFront Distributions means

that object will not be on the Edge Locations

What is the relationship between an edge location and a Region

none

Invalidating cached objects in a CloudFront Distribution is free (T/F)

False, you will be charged

What are the technical features of Snowball

a. tamper resistant case b. 256 bit encryption c. Trusted Platform Module (TPM) designed to ensure security and full chain-of-custody of your data

What are the additional features of Snowball Edge over Snowball?

a. Compute capability | b. can be clustered to allow applications to run even when not connected to the cloud

What is Snowmobile?

a. 100PB | b. 45' ruggedized shipping container on a semi-trailer

Snowball allows import and export to/from

S3 buckets

What is a Storage Gateway?

a service that connects an on-premise software appliance with cloud storage for the purpose of supporting hybrid architectures.

What methods are available for installing a Storage Gateway in your location?

a. hardware device | b. software appliance on VMWare ESXi or MS Cyber-V

What are the different types of Storage Gateway that are available?

- File Gateway ((NFS & SMB) - Volume Gateway (iSCSI) for stored volumes and Chached volumes - Tape Gateway (VTL) virtual tape library

Using a Volume Gateway, EBS volumes can be saved as snapshots of VMs in two ways

point in time | incremental backups

Cached volumes emphasize

data that is frequently accessed

Tape Gateway allows

you to leverage existing virtual tape library software to store backups to the cloud.

Using a File Gateway, you can store

flat files directly in S3

Using a Volume Gateway for Stored Volumes, what is backed up to S3

an entire dataset is stored on site and asynchronously backed up to S3

The key difference between Stored Volumes and Cached Volumes is

Entire data set is stored on S3, but Cached Volumes only store the most frequently accessed data on site.

When a new user is created in IAM, they have what permissions by default

none

For Versioning to work with Cross Region Replication, versioning must be enabled where?

on both the source and destination buckets

For Cross Region Replication, the buckets must be in ____ Regions

unique/different

With Cross Region Replication, ____ is not replicated

delete markers | deleted individual versions

What options allows users to have secure access to private files located in S3?

a. CloudFront Signed URLs b. CloudFront Origin Access Identity c. CloudFront Singed Cookies

Power User Access allows

Access to all AWS services except the management of groups and users within IAM.

How many S3 buckets can you have by default per account

100