Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

solutions architect associate > S3 and IAM > Flashcards

S3 and IAM Flashcards

1
Q

Bucket names are…

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 has read after write consistency for..

A

Puts of new objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

S3 has eventual consistency for…

A

Puts of existing objects and deletes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Name all the s3 and glacier tiers.

A 
S3
S3 Infrequent access
S3 Infrequent access One Zone
S3 intelligent tiering 
S3 glacier
S3 glacier deep archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Name the three types of encryption used with s3.

A

In transit - such as https

Server side - such as s3-SSE managed keys, s3-kms and s3-SSE-C (customer provided keys)

Client side encryption - such as the client (you) encrypting the data before it gets to the bucket in s3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the five facts about s3 ‘versioning’?

A

Stores all versions of the object which includes overwrite puts and deletes.

Serves as a backup tool.

Once enabled cannot be disabled on the bucket only suspended.

Integrates with life cycle rules.

Versioning supports MFA deletes for better security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When talking about s3 object locks, what does the terms WORM mean?

A

Write once read many.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 object locks can be applied to…

A

The object or across the bucket as a whole.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 object locks can be applied in two different modes, they are..

A

Governance mode (locks down to only users who have permissions) and compliance mode ( cannot be modified by anyone during the period the object lock is put in place, this includes the root account user also).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 object locks can be held by two mechanisms they are…

A

Retention periods- protects the object or bucket for a certain amount of time from overwrites or deletes.

Legal hold - protects and object for as long as the hold is in place.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or false, S3 glacier vault locks once applied to a vault can be changed?

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When referring to s3 performance, what four subjects are normally considered?

A

S3 prefixes: and its speed benefits.

S3 sse-kms: and its limitations and quota limits.

S3 multi-part uploads: for upload speeds of larger files.

S3 byte ranges: for parallelised downloads and to download only parts of files such as the header of a file if the calling application does not require the full file to be downloaded.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

S3 life cycle rules automate..

A

Moving your objects between the different tiers of storage in s3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 life cycle rules can be used in conjunction with?

A

Versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

S3 life cycle rules can be applied to what versions of the objects within a bucket?

A

The current version and previous versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 select is used to..

A

Retrieve a subset of data from an object using sql expressions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the benefits of using s3 select or glacier select?

A

Get data by their rows or columns.

Save money on data transfer with increased speed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3 select enable applications to…

A

Retrieve only a subset of data from an object by using simple sql expressions. And this can achieve performance increases up to 400% in some cases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the advantages of consolidated billing in aws?

A

One bill per aws account.
Very easy to track charges and allocate costs.
Volume pricing discounts are applied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are aws organisations?

A

Aws organisations is an account management service that enables you to consolidate multiple aws accounts into an organisation that you create to centrally manage others. This includes account management, consolidated billing options, security features and features to meet compliance of your business.

21
Q

When using aws organisations you can enable or disable aws services by using…

A

Service control policies, which apply to an OU or on individual accounts.

22
Q

When sharing s3 buckets across account, there are three ways, these are…

A

Bucket policies and IAM(applies across the whole bucket and programmatic access only).

Using bucket ACLs and IAM(individual objects and programmatic access only).

Cross account IAM roles (programmatic access and console access).

23
Q

Yes or no, when setting up cross account roles, if account A gives account B access to a role can the root user on account B switch roles under account A?

A

No

24
Q

In S3 cross region replication, versioning must be enabled on which bucket? The source, the destination or both?

A

Both, the source and the destination must have versioning enabled.

25
Q

S3 cross region replication, will files existing in the source before the replication is out in place automatically be replicated to the destination?

A

No, only objects which are placed into the source after cross region replication is turned on will replicate to the destination.

26
Q

S3 cross region replication, are delete markers replicated from the source to the destination?

A

No.

27
Q

S3 transfer acceleration, describe how this is a benefit and how it is achieved?

A

S3 transfer acceleration speeds up uploads speed by enabling the use of edge locations which traverse the aws backbone to the bucket.

28
Q

AWS datasync, what is this and how is it used?

A

Data sync is an agent you can run on your local file servers to synchronise your local storage.

It is used to move large amounts of data from on premises to aws.

It is used with NFS and SMB compatible file systems.

Replication can be done hourly, daily or weekly.

Can be installed on an ec2 instance to replicate efs to efs storage on the cloud.

29
Q

What is cloud front?

A

A cdn or content delivery network.

30
Q

Regarding clout front, what is an edge location?

A

This is a location where content will be cached, typically with a time to live or ttl and they are separate from an aws region or availability zone.

31
Q

In cloud front , what do we mean by an origin?

A

This is the origin of all the files that the cdn will distribute, examples can include a bucket, elastic load balancer or route 53.

32
Q

When talking about cloud front, what do we mean by a distribution?

A

This is the name given to the cdn which consists of a collection of edge locations.

33
Q

When talking about cloud front, where would we typically use a ‘web distribution’?

A

When working with websites.

34
Q

When talking about cloud front, when we mention media streaming, what kind of cdn would we look to set up?

A

An RTMP.

35
Q

True or false, edge location are read only?

A

False, you can write to them also via puts.

36
Q

Edge locations cache their objects in what manner?

A

A TTL or time to live.

37
Q

When talking about edge locations, you are allowed to clear cached items in them but what will be the result of doing do?

A

You will be charged for this service.

38
Q

If you are dealing with a cdn network and you need to push and update but when you do you are not seeing an immediate change to the content, what can you do to speed this process up?

A

Create an invalidation to force the object or objects on the cdn to expire and the edge will then fetch the latest content from the origin.

39
Q

A signed url use case is best for…

A

When you are serving one file to the end user.

40
Q

A signed cookie use case is for…

A

When you are serving multiple files to the user and need to ensure they are securely accessed by the approved user.

41
Q

S3 signed urls are applicable when..

A

The user can access the bucket.

42
Q

What is aws snowball

A

Snowball is a secure hardware solution, that allows you to store on premises data for when the cloud is not accessible for upload at a later date. Snowball is also a good solution for uploading large amounts of data to the cloud when it is not feasible over a standard internet connection.

43
Q

Which aws service can aws snowball import and export to?

A

S3

44
Q

The client has no internet connectivity, however they require storage and compute resources on premesis, what aws service would you recommend? They also want their data to eventually reach an aws s3 storage location.

A

Snowball edge.

45
Q

Storage gateways, a file gateway is used for..

A

Flat files, stored directly to s3

46
Q

Storage gateways, volume gateways consist of stored and cached volumes, what are their functions and uses…

A

Stored volumes - entire dataset is stored on site and is asynchronously backed up to s3.

Cached volumes - entire dataset is stored on s3 and the most frequently accessed files are cached on site.

47
Q

Storage gateways, what are the three types?

A

File gateways
Volume gateways
Virtual tape library or VTL

48
Q

What is Athena and what does this service do?

A

Is an interactive query service.
Allows you to query data located in s3 using sql.
It is serverless.
Commonly used to analyse log data stored in s3.

49
Q

What is Marie and what does it do?

A

It is an AI service to analyze data in s3 and helps indenting PII.
Can also be used to analyze CloudTrail logs for suspicious api activity.
Includes dashboards, reports and alerting.
Good for pci-dss compliance and preventing ID theft.

solutions architect associate (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions