S3 Flashcards

1
Q

What is an ”infinitely scaling” storage?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How can S3 be used?

A

As backbone to websites or integrated with AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the use cases of S3?

A
  • Backup and storage
  • Disaster Recovery
  • Archive
  • Hybrid Cloud storage
  • Application hosting
  • Media hosting
  • Data lakes & big data analytics
  • Software delivery
  • Static website
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What storage directories require globally unique name but are defined at the region level?

A

S3 buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What has keys?

A

S3 objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Where can you find the key of an S3 object? what about the object name?

A

Object key: The part after s3://my-bucket/

Object name: the last bit after the final “/”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How can you ensure security of S3?

A

• User based
• IAM policies - which API calls should be allowed for a specific user from IAM (with EC2 Instance Role)
console
• Resource Based
• Bucket Policies - bucket wide rules from the S3 console - allows cross account
• Object Access Control List (ACL) – finer grain
• Bucket Access Control List (ACL) – less common
• Note: an IAM principal can access an S3 object if
• the user IAM permissions allow it OR the resource policy ALLOWS it
• AND there’s no explicit DENY
• Encryption: encrypt objects in Amazon S3 using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the tools for S3 versioning? And, what model do they adopt? And, at what level do they occur?

A

S3 Object Lock & Glacier Vault Lock

  • Adopt a WORM (Write Once Read Many) model
  • Bucket-level

S3 Replication:

  • Cross region replication
  • Same region replication
  • Across different accts & regions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What lock is good for S3 compliance and data retention, and why?

A

Glacier Vault Lock because vault lock policy prevents objects from being deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the key difference between S3 Object Lock and Glacier Vault Lock?

A

S3 Object Lock blocks an object version deletion for a specific amount of time vs. never!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What should you check if you get a 403 (Forbidden) error on S3 websites?

A

Ensure bucket policy allows public reads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What can host static websites and have them accessible on the www?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What stores any request made to S3, from any account, authorized or denied, will be logged into another S3 bucket? What is this used for?

A

S3 Access Logs

Root cause analysis, audit usage, and viewing of suspicious patterns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the S3 storage classes?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Intelligent Tiering
  • Amazon Glacier
  • Amazon Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What has 99.999999999% (eleven 9s) durability and 99.99% availability? Is it the same for all storage classes?

A

S3; same durability and different availability across the storage classes except for One Zone - IA which has 99.5%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What has 99.99% availability and is used for frequent data access due to its low latency and high throughput, and is able to sustain 2 concurrent facility failures?

A

Amazon S3 Standard - General Purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the use cases for Amazon S3 Standard - General Purpose?

A

Big Data analytics, mobile & gaming applications, content distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What has 99.99% availability and is suitable for data that is less frequently accessed, but requires rapid access when needed; and has lower cost than S3 standard but is subject to retrieval fee, and can sustain 2 concurrent facility failures?

A

S3 Standard - Infrequent Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the use cases for S3 Standard - Infrequent Access?

A

As a data store for disaster recovery, backups

20
Q

Which S3 storage class has 99.5% availability and 1 zone?

A

S3 One Zone - IA

21
Q

How many S3 Storage classes do most have at minimum?

A

3

22
Q

Which S3 Storage classes charge for retrieval?

A

S3 Std IA
S3 One Zone IA
S3 Glacier
S3 Glacier Deep Archive

23
Q

What can you use to automate moving objects between S3?

A

lifecycle configuration

24
Q

What is AWS responsible for as part of Shared Responsibility Model for S3?

A
  • Infrastructure (global security, durability, availability, sustain concurrent loss of data in two facilities)
  • Configuration and vulnerability analysis
  • Compliance validation
25
Q

What are you responsible for as part of Shared Responsibility Model for S3?

A
  • S3 Versioning
  • S3 Bucket Policies
  • S3 Replication Setup
  • Logging and Monitoring
  • S3 Storage Classes
  • Data encryption at rest and in transit
26
Q

What is a highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS

A

AWS Snow Family

27
Q

What does Snow Family support?

A

Data migration & edge computing

28
Q

What snow family supports data migration?

A

Snowcone, Snowball edge, and Snowmobile

29
Q

What snow family supports edge computing?

A

Snowcone, Snowball edge

30
Q

What challenges does the AWS Snow Family help overcome? What’s a good rule of thumb for using it?

A
  • Limited connectivity
  • Limited bandwidth
  • High network cost
  • Shared bandwidth (can’t maximize the line)
  • Connection stability

If it takes more than 1 wk to transfer over network

31
Q

What is a small, portable computing, anywhere, rugged & secure, withstands harsh environments that can handle 8TB of usable storage?

A

AWS Snowcone

32
Q

How can you send data with AWS Snowcone?

A

Can be sent back to AWS offline, or connect it to

internet and use AWS DataSync

33
Q

What is a the largest data migration option that can handle exabytes and has almost 100PB of usable storage, as well as high security?

A

Snowmobile

34
Q

What can you use as an alt to moving data over network if you need to move TB or PB of data in/out of AWS?

A

Snowball edge

35
Q

What are the 2 types of snowball edge? Which has how many TB?

A

Storage optimized and compute optimized.

Storage has 80TB vs. Compute’s 42 TB

36
Q

What devices do you set up to do edge computing?

A

Snowball edge/snowcone

37
Q

How can you manage Snow Family Devices for edge computing?

A

AWS OpsHub & CLI

38
Q

What can you do with AWS Ops Hub?

A

• Unlocking and configuring single or clustered devices
• Transferring files
• Launching and managing instances running on Snow
Family Devices
• Monitor device metrics (storage capacity, active
instances on your device)
• Launch compatible AWS services on your devices
(ex: Amazon EC2 instances, AWS DataSync,
Network File System (NFS))

39
Q

What storage cloud native options exist for block, file, and object?

A

Block: EBS & Instance Store
File: EFS
Object: S3 & Glacier

40
Q

What is a bridge between on-premise data and cloud

data in S3, a hybrid storage service to allow o-prem to be used in AWS Cloud?

A

AWS Storage Gateway

41
Q

What types of storage gateway are there and what are the use cases?

A

Types: file, volume, tape

Use cases: disaster recovery, backup &
restore, tiered storage

42
Q

global unique name, tied to a region

A

S3 Buckets vs Objects

43
Q

What ensures S3 security?

A

IAM policy, S3 Bucket Policy (public access), S3 Encryption

44
Q

multiple versions for files, prevent accidental deletes

A

S3 Versioning

45
Q

What logs requests made within your S3 bucket?

A

S3 Access logs

46
Q

transition objects between classes

A

S3 Lifecycle Rules