S3 Flashcards

1
Q

What are some key descriptors of S3?

A
  • a place to store files
  • it is ‘object-based’ storage
  • data is spread across multiple devices and facilities
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 objects can have a maximum size of

A

5TB each

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The maximum storage for an S3 bucket is

A

unlimited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

S3 namespace must be unique _______

A

globally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the status code for a successful file upload

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

S3 Objects consist of the following characteristics

A

Key (the name of the object)
Value (the data)
Version ID (used for versioning)
Metadata (data about the data being stored)
Subresources (Access Control Lists & Torrent)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the S3 data consistency model

A
  • Read after Write consistency for PUTS of new Objects

- Eventual Consistency for overwrite PUTS and DELETES (can take time to propogate)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The guarantees for S3 are

A

99.99% availability

11 9’s for durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are key features of S3

A
  • Tiered Storage Availability
  • Life Cycle Management
  • Versioning
  • Encryption
  • MFA Delete
  • Securing of data using ACLs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is MFA Delete

A

requires MFA authentication before deleting an object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the S3 Storage Classes

A
Standard - 
Infrequently Accessed - 
One Zone - IA
Intelligent Tiering
Glacier
Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the features of S3 - IA

A

Suitable for less frequently accessed data that requires rapid access when needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the features of S3 - Intelligent Tiering

A

Optimizes cost by using machine learning to move your data to a less expensive option without impacting performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is S3 Glacier most suitable for

A

low cost

retrieval time is not immediate and can be configured

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the retrieval time for S3 Glacier Deep Archive?

A

~ 12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the retrieval time for each S3 storage class?

A

Standard, Intelligent Tiering, IA, 1Z-IA - milliseconds
Glacier - minutes or hours
Glacier Deep Archive - hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What factors impact S3 costs

A
Storage
Requests
Storage Management Pricing model selected
Data Transfer Pricing 
Transfer Acceleration
Cross Region Replication Pricing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Cross Region Replication?

A

suitable for disaster recovery. more robust than caching.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What service is used for Transfer Acceleration?

A

CloudFront to move data to an edge location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A proper S3 URL for ‘irthy’ looks like

A

https://s3-eu-west-a.amazonaws.com/irthy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

S3 RRS is

A

Reduced Redundancy Service and it is being deprecated and replaced by One Zone - IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Storage class can be managed at the

a) object level
b) bucket level
c) AZ level
d) Region

A

a) object level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Access to an S3 Bucket can be controlled using

A

a bucket ACL

Bucket Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Encryption in Transit is achieved by

A

using SSL or TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Encryption at Rest is achieved by

A
  • on the server side using AWS capabilities- client side - encrypt before uploading
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the methods available for encrypting within an S3 Bucket

A

S3 Manage Keys - SSE-S3AWS Key Management Service, Managed Keys - SSE-KMSServer side Encryption With Customer Provided Keys - SSE-C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Versioning stores ______ versions of an object

A

all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Versioning can be disabled by deleting an object (T/F)

A

False, it can only be suspended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Versioning MFA Delete?

A

it provides an additional layer of security by requiring a user to MFA when deleting an object in a bucket

30
Q

Versioning is suitable for making backups?

A

true

31
Q

What service automates moving objects between the different storage tiers?

A

Lifecycle Management

32
Q

What is the relationship between versioning and lifecycle management.

A

lifecycle management can be used in conjunction with versioning by using version as criteria for moving.

33
Q

Versioning must be enabled in both…

A

the source and destination buckets.

34
Q

The source and destination buckets for cross region replication must be

A

in different regions

35
Q

Files in an existing bucket ARE/ARE NOT replicated automatically

A

are not

36
Q

How are ‘delete markers’ handled in CRR?

A

delete markers are not replicated

37
Q

How are individual version handled in CRR when they are deleted?

A

they are not replicated

38
Q

What is S3 Transfer Acceleration

A

uses CloudFrount Edge Network

provides a direct URL to an edge location which can be used for uploads

39
Q

What is CloudFront?

A

A Content Delivery Network (CDN)

40
Q

What is a Content Delivery Network

A

A Content Delivery Network (CDN) delivers web content to a user based on location, the origin of the content, and a content delivery server.

41
Q

What is an Edge Location

A

the location where content will be cached

42
Q

What is an Origin, in terms of a CDN

A

the location that the CDN will deliver

43
Q

What is a Distribution, in terms of a CDN

A

the collection of Edge Locations

44
Q

How long is an object cached at an Edge Location

A

TTL - Time To Live

45
Q

What are the types of CloudFront Distributions

A

a. Web Distribution

b. RTMP for media streaming

46
Q

What are the possible sources of an Origin for a CDN

A

a. S3 Bucket
b. EC2 instance
c. Elastic Load Balancer
d. Route53

47
Q

And Edge Location is read only (T/F)

A

False. both read and write are possible

48
Q

Access to CloudFront URLs can be restricted by using

A

Signed URLs

49
Q

Invalidating a CloudFront Distributions means

A

that object will not be on the Edge Locations

50
Q

What is the relationship between an edge location and a Region

A

none

51
Q

Invalidating cached objects in a CloudFront Distribution is free (T/F)

A

False, you will be charged

52
Q

What are the technical features of Snowball

A

a. tamper resistant case
b. 256 bit encryption
c. Trusted Platform Module (TPM) designed to ensure security and full chain-of-custody of your data

53
Q

What are the additional features of Snowball Edge over Snowball?

A

a. Compute capability

b. can be clustered to allow applications to run even when not connected to the cloud

54
Q

What is Snowmobile?

A

a. 100PB

b. 45’ ruggedized shipping container on a semi-trailer

55
Q

Snowball allows import and export to/from

A

S3 buckets

56
Q

What is a Storage Gateway?

A

a service that connects an on-premise software appliance with cloud storage for the purpose of supporting hybrid architectures.

57
Q

What methods are available for installing a Storage Gateway in your location?

A

a. hardware device

b. software appliance on VMWare ESXi or MS Cyber-V

58
Q

What are the different types of Storage Gateway that are available?

A
  • File Gateway ((NFS & SMB)
  • Volume Gateway (iSCSI) for stored volumes and Chached volumes
  • Tape Gateway (VTL) virtual tape library
59
Q

Using a Volume Gateway, EBS volumes can be saved as snapshots of VMs in two ways

A

point in time

incremental backups

60
Q

Cached volumes emphasize

A

data that is frequently accessed

61
Q

Tape Gateway allows

A

you to leverage existing virtual tape library software to store backups to the cloud.

62
Q

Using a File Gateway, you can store

A

flat files directly in S3

63
Q

Using a Volume Gateway for Stored Volumes, what is backed up to S3

A

an entire dataset is stored on site and asynchronously backed up to S3

64
Q

The key difference between Stored Volumes and Cached Volumes is

A

Entire data set is stored on S3, but Cached Volumes only store the most frequently accessed data on site.

65
Q

When a new user is created in IAM, they have what permissions by default

A

none

66
Q

For Versioning to work with Cross Region Replication, versioning must be enabled where?

A

on both the source and destination buckets

67
Q

For Cross Region Replication, the buckets must be in ____ Regions

A

unique/different

68
Q

With Cross Region Replication, ____ is not replicated

A

delete markers

deleted individual versions

69
Q

What options allows users to have secure access to private files located in S3?

A

a. CloudFront Signed URLs
b. CloudFront Origin Access Identity
c. CloudFront Singed Cookies

70
Q

Power User Access allows

A

Access to all AWS services except the management of groups and users within IAM.

71
Q

How many S3 buckets can you have by default per account

A

100