Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

DVA > S3 - Simple Storage Service > Flashcards

S3 - Simple Storage Service Flashcards

1
Q

What is S3?

A

Amazon Simple Storage Service is an object storage service that offers industry-leading scalability, data availability, security, and performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where are objects stored in S3?

A

in buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is globally unique on a bucket?

A

the name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How are buckets scoped?

A

regionally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the number of characters allowed in bucket’s name?

A

3-63

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What can not contain a bucket’s name?

A

no uppercase nor underscore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How must start a bucket’s name?

A

lowercase or number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the bucket object key?

A

the full path, starting after the bucket name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is composed of the key of a bucket object?

A

prefix + object name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

There are directories within buckets?

A

There’s no concept of “directories” within buckets
(although the UI will trick you to think otherwise)
Just keys with very long names that contain slashes (“/”)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the max object size in S3?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the max object size you can upload to S3?

A

5 GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What you need to do to upload an object greater than 5GB to S3?

A

use multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What contains an S3 object?

A 
Key
Version ID
Value (Object itself)
Metadata
Subresources
Access Control Information
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is useful for S3 object tags?

A

useful for security / lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many S3 object tags can you use?

A

up to 10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can you enable versioning on an S3 object?

A

no, it is at bucket level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How can you increment an S3 object version?

A

uploading an object with the same key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the version number of a file that was not versioned prior to when versioning is enabled?

A

null

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What happens to previous versions when versioning is disabled?

A

nothing, they are not deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which are the 4 methods of encrypting objects in S3?

A

SSE-S3
SSE-KMS
SSE-C
Client Side Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is about SSE-S3 encryption method in S3?

A

encrypts S3 objects using keys handled & managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is about SSE-KMS encryption method in S3?

A

leverage AWS Key Management Service to manage encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is about SSE-C encryption method in S3?

A

when you want to manage your own encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is about Client Side Encryption method in S3?

A

Customer fully manages the keys and encryption cycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What encryption type is used by SSE-S3 encryption method?

A

AES-256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What you must set to use S3 SSE-S3 encryption method?

A

Must set header: “x-amz-server-side-encryption”: “AES256”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is used by SSE-KMS S3 encryption method?

A

A Customer Master Key (CMK)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What you must set to use S3 SSE-KMS encryption method?

A

Must set header: “x-amz-server-side-encryption”: ”aws:kms”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What means SSE on S3 encryption methods?

A

Server Side Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What you must set to use S3 SSE-C encryption method?

A

You must provide the key via HTTPS only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What you must do to use Client Side encryption method?

A

You must encrypt and decrypt the data by yourself before sending it or receiving it using a client library such as the Amazon S3 Encryption Client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What endpoints are exposed by S3?

A

HTTP and HTTPS (recomended)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are the 2 base groups for S3 security?

A

User and Resource based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the User Based security on S3?

A

IAM policies - which API calls should be allowed for a specific user from IAM console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the Resource Based security on S3?

A
  • Bucket Policies - bucket wide rules from the S3 console - allows cross account
  • Object Access Control List (ACL) – finer grain
  • Bucket Access Control List (ACL) – less common
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How are S3 Bucket policies written?

A

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What you must define on a S3 Bucket policy?

A
  • Resources
  • Actions
  • Effect
  • Principal
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What means the actions in a S3 Bucket policy?

A

Set of API to Allow or Deny (s3:GetObject)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What means a resource in a S3 Bucket policy?

A

buckets and objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What means an effect in a S3 Bucket policy?

A

Allow / Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What means a principal in a S3 Bucket policy?

A

The account or user to apply the policy to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

How can you grant access to another account to your bucket?

A

Using a Bucket Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

How can you grant public access to your bucket?

A

Using a Bucket Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What can you use to block any permission allowed over your bucket?

A

Use Bucket settings for Block Public Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

At what level does work Block Public Access setting?

A

At bucket and account level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

How can you access private S3 instances without internet?

A

S3 supports VPC endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Where can you store S3 access logs?

A

In another S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Where can be logged S3 API calls?

A

CloudTrail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What can you use in order to prevent the deletion of any versioned S3 objects?

A

Use MFA Delete in your bucket, versioning must be enabled

51
Q

How can you share an S3 object with an external user?

A

Pre-Signed URLs (valid only for a limited time)

52
Q

Where can you host a static website and make it accessible on the www?

A

S3

53
Q

What is reflected in the S3 URL of a static website hosted there?

A

bucket name and region

54
Q

What if you get a 403 (Forbidden) error from a static web site deployed on S3?

A

make sure the bucket policy allows public reads

55
Q

How to configure your bucket to allow cross-origin requests?

A

create a CORS configuration, which is an XML document with rules that identify the origins that you will allow to access your bucket, the operations (HTTP methods) that will support for each origin, and other operation-specific information.
you can also allow all origins using *

56
Q

How is in S3 Read after write consistency for PUTS of new objects?

A

As soon as a new object is written, we can retrieve it
ex: (PUT 200 => GET 200)
except if we did a GET before to see if the object existed ex: (GET 404 => PUT 200 => GET 404) – eventually consistent

57
Q

How is in S3 Read after updating an object consistency?

A

If we read an object after updating, we might get the older version ex: (PUT 200 => PUT 200 => GET 200 (might be older version))

58
Q

How is in S3 Read after deleting an object consistency?

A

If we delete an object, we might still be able to retrieve it for a short time
ex: (DELETE 200 => GET 200)

59
Q

How can I request S3 strong consistency?

A

there is no way to request

60
Q

What you need to use MFA-Delete on S3?

A

to have versioning enabled in the bucket

61
Q

When you will need MFA on S3?

A
  • permanently delete an object version

* suspend versioning on the bucket

62
Q

Who can enable/disable MFA-Delete?

A

Only the bucket owner (root account)

63
Q

How can you enable MFA-Delete?

A

only by using the CLI

64
Q

What is evaluated before S3 default encryption?

A

Bucket policies, it was the old way to enable default encryption

65
Q

What you should not use as your logging bucket?

A

your monitored bucket, it will create a logging loop, and your bucket will grow exponentially

66
Q

What condition must be accomplished by 2 buckets involved in S3 replication?

A

Both must enable versioning

67
Q

Can you set S3 replications cross accounts?

A

yes

68
Q

How is data copied in S3 replication?

A

async, but it is very quick

69
Q

What condition must be accomplished by the bucket containing the data in S3 replication?

A

Must have proper IAM permission behind an IAM Role

70
Q

What happens to the objects when you activate S3 replication?

A

new objects are replicated, it is not retroactive

71
Q

What happens when you have S3 replication and you delete an object version

A

it is not replicated

72
Q

It is S3 replication transitive?

A

No

73
Q

How can you generate S3 pre-signed URLs?

A

using SDK or CLI

74
Q

What is the default expiration time of S3 pre-signed URLs?

A

3600 s

75
Q

What are the permissions of the person that a S3 Pre-signed URL was given to?

A

They inherit the permissions of the person who generated the URL for GET / PUT

76
Q

What you must use to create a S3 Pre-signed URL for uploads?

A

SDK

77
Q

What are the S3 Storage classes?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Intelligent Tiering
  • Amazon Glacier
  • Amazon Glacier Deep Archive
78
Q

How are files called in S3 Glacier and where are stored?

A

Archives and stored in Vaults

79
Q

What you need to pay for using S3 Intelligent Tiering Storage Class?

A

Small montly monitoring and auto-tiering fee

80
Q

Which are the retrieval options for S3 Amazon Glacier?

A
  • Expedited
  • Standard
  • Bulk
81
Q

What is the time to get the data for Amazon Glacier Expedited?

A

1 - 5 min

82
Q

What is the time to get the data for Amazon Glacier Standard?

A

3 - 5 hours

83
Q

What is the time to get the data for Amazon Glacier Bulk?

A

5 - 12 hours

84
Q

What is the time to get the data for Amazon Glacier Deep Archive Standard?

A

12 hours

85
Q

What is the time to get the data for Amazon Glacier Deep Archive Bulk?

A

48 hours

86
Q

Which are the retrieval options for S3 Amazon Glacier Deep Archive?

A
  • Standard

- Bulk

87
Q

Which is the minimum storage duration for S3 Amazon Glacier?

A

90 days

88
Q

Which is the minimum storage duration for S3 Amazon Glacier Deep Archive?

A

180 days

89
Q

What is S3 Lifecycle Configuration?

A

a set of rules that define actions that Amazon S3 applies to a group of objects to manage your objects so that they are stored cost effectively

90
Q

What are the 2 types of actions in S3 Lifecycle Configuration?

A
  • Transition Actions

- Expiration Actions

91
Q

What is S3 lifecycle configuration transition actions?

A 
It defines when objects are transitioned to another storage class.
• Move objects to Standard IA class 60 days after creation
• Move to Glacier for archiving after 6 months
92
Q

What is S3 lifecycle configuration expiration actions?

A

configure objects to expire (delete) after some time
• Access log files can be set to delete after a 365 days
• Can be used to delete old versions of files (if versioning is enabled)
• Can be used to delete incomplete multi-part uploads

93
Q

What can you use to apply S3 lifecycle configuration actions?

A

prefixes and tags

94
Q

What is the max amount of prefixes allowed in a bucket?

A

no limit

95
Q

What encryption method might impact your S3 performance baseline in extreme performance scenarios?

A

SSE-KMS becuse of their quota

96
Q

When is recommended to use S3 multi-part upload?

A

recommended for > 100MB because it parallelizes the uploads

97
Q

What is S3 Transfer Acceleration?

A

Increase transfer speed (just uploads) by transferring file to an AWS edge location which will forward the data to the S3 bucket in the target region. It is compatible with multi-part upload

98
Q

What can you use to accelerate your upoads to S3?

A

S3 Transfer Acceleration

99
Q

What can you use to accelerate your downloads from S3?

A

S3 byte-range fetches

100
Q

What is S3 byte-range fetches?

A

parallelize GETs by requesting specific byte ranges

101
Q

What can you use to request just for the header of a file in S3?

A

S3 byte-range fetches

102
Q

What is S3 Select and Glacier Select?

A

enables applications to retrieve only a subset of data from an object by using simple SQL expressions

103
Q

What are the advantages of using S3 Select?

A

Less network transfer and less CPU cost client side

104
Q

Set an example of two S3 events

A

S3:ObjectCreated
S3:ObjectRemoved

105
Q

In what time are S3 Event notifications delivered?

A

Typically in seconds but can sometimes take a minute or longer

106
Q

What are S3 event notifications?

A

The Amazon S3 notification feature enables you to receive notifications when certain events happen in your bucket

107
Q

What can you do to ensure that an event notification is sent for every successful write?

A

you can enable versioning on your bucket.

108
Q

What are the destinations supported by S3 event notification?

A

SNS
SQS
Lambda Functions

109
Q

What is Athena?

A

Serverless service to perform analytics directly against S3 files

110
Q

What language is used by Athena?

A

SQL

111
Q

What is the exam tip for Athena?

A

Analyze data direclty on S3

112
Q

How can you connect externally to Athena

A

Using a JDBC / ODBS driver

113
Q

What format(s) supports Athena?

A

A lot (CSV, JSON, ORC, Avro, and Parquet (built on Presto))

114
Q

How are you charged in Athena?

A

per query and amount of data scanned

115
Q

What is S3 Object lock?

A

feature that blocks object version deletion during a customer-defined retention period

116
Q

What is S3 Glacier Vault lock?

A

allows you to lock your vault

117
Q

What is the model adopted by S3 Object Lock and S3 Glacier Vault Lock?

A

write-once-read-many (WORM)

118
Q

What is great for S3 Cross Region Replication?

A

Great for dynamic content that needs to be available at low-latency in few regions

119
Q

Which is the minimum storage duration for S3 Standard IA?

A

30 days

120
Q

How can you mount a file system in S3?

A

you can’t

121
Q

Can you move data directly to Galcier Deep Archive from any other tier?

A

yes

122
Q

What is the order of the S3 storage classes?

A

You can move data from up to down but no otherwise:

  • Standard
  • Standard IA
  • Intelligent Tiering
  • One Zone IA
  • Glacier
  • Glacier Deep Archive
123
Q

What is S3 baseline performance for reads?

A

5,500 GET/HEAD requests per second per prefix in a bucket

124
Q

What is S3 baseline performance for writes?

A

3,500 PUT/COPY/POST/DELETE requests per second per prefix in a bucket

DVA (61 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions