[S3] Simple Storage Service Flashcards

1
Q

S3 object-base consist of 5 properties?

A
  1. Key
  2. Value
  3. VersionID
  4. Metadata
  5. Sub-resource: Access Control Lists / Torrent
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What specialty of S3 namespace?

bucket name must be ______ ;
receive _______ code

A

bucket name must be unique;

will receive HTTP200 code as URL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How AWS keep data consistency?

_______ for PUTS of new objects;
_______ for overwrite PUTS and DELETES

A
  • Read after Write consistency for PUTS of new objects

- Eventual Consistency for overwrite PUTS and DELETES (take time to propagate)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What SLA on S3 availability & durability

A
  1. 99% availability

99. 999999999% durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what feature of S3 to keep data security?

A
  • tier storage available
  • lifecycle management (intelligent)
  • versioning
  • encryption
  • MFA delete
  • secure by Access Control List & Bucket Policy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How S3 charges?

A
  1. storage size ( => 5TB)
  2. requests & data retrievals
  3. storage management
  4. data transfer
  5. Transfer Acceleration (CloudFront & Edge)
  6. cross region replication
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How 3 type of policy to restrict bucket access?

A
  1. Bucket Policies
  2. Object Policies
  3. IAM Policies to User & Groups
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How the sequence of S3 class from expensive to cheapest?

A
  1. Standard
  2. Infrequent Access
  3. Intelligent Tiering
  4. One Zone - IA
  5. Glacier
  6. Glacier - Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How Encryption method of S3 being use on data when…

  1. Encryption at rest in server side : _______
  2. encryption in-transit :
  3. encryption on client side
A
  1. Encryption In-Transit
    • SSL/TLS
  2. Encryption At Rest (server side)
    • S3 Managed Key - SSE-S3
    • AWS KMS
    • Server side encryption w/ Customer Provided Keys - SSE-C
  3. Client side Encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is S3 Lifecycle management?

A
  • automate moving objects between different storage tiers
  • can be used in conjunction with versioning
  • can apply to current & previous version
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What VAULT policy can apply in S3?

A
  • S3 object lock by Write Once Read Many model include Government mode & Compliance mode
  • S3 Glacier Vault Lock
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

you can achieve a high number of request ____ put/copy/post/delete and ___ get/head request per second per prefix

A

you can achieve a high number of request 3500 put/copy/post/delete and 5500 get/head request per second per prefix

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

in S3, by using 2 prefix, you can achieve _____ requests per second

A

by using 2 prefix, you can achieve 11000 requests per second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

use _____ when upload file to S3;

use _____ when download file from S3

A

use multiparts uploads when upload file to S3;

use S3 byte-range fetches when download file from S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

____ use simple SQL expression to retrieve only subset of data in stead of retrieving entire object to get data by ___ & ___

A

S3 Select use SQL expression to retrieve only subset of data in stead of retrieving entire object to get data by rows & columns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

____ with ____ allow highly regulated industries to run SQL query directly to Glacier to satisfy compliance as well as save on storage cost

A

Glacier Select with lifecycle policies allow highly regulated industries to write data directly to Glacier to satisfy compliance as well as save on storage cost

17
Q

best practice with AWS Organization:

  1. ____ on root account & _____ on root account password
  2. ____ purpose on billing account
  3. use ______ policies on either OU or account
A

best practice with AWS Organization:

  1. MFA on root account & strong & long on root account password
  2. Billing purpose on billing account
  3. use Service Control policies on either OU or account
18
Q

3 different way to share S3 bucket across account?

  1. Bucket ____ & IAM which apply to entire bucket;
  2. Bucket ____ & IAM which apply to individual object;
  3. _____ IAM allow programmatic & console access
A

3 different way to share S3 bucket across account?

  1. Bucket Policies & IAM which apply to entire bucket;
  2. Bucket ACLs & IAM which apply to individual object;
  3. Cross account IAM Roles allow programmatic & console access
19
Q

When setup S3 bucket cross region replication,

  1. ____ must be enable to source & destination bucket
  2. file in existing bucket ____ replicated automatically
  3. subsequent updated files ____ replicated automatically
  4. ____ & ____ are not replicated
A

When setup S3 bucket cross region replication,

  1. Versioning must be enable to source & destination bucket
  2. file in existing bucket NOT replicated automatically
  3. subsequent updated files WILL replicated automatically
  4. delete markers & individual deleted version are not replicated
20
Q

DataSync is use for

  1. move large amount of data from ___ to AWS
  2. used with ___ & ___ compatible file system
  3. replication can be done by ___, day or week
  4. require to install ____
  5. can use to replicate ___ to ___
A

DataSync is use for

  1. move large amount of data from on-premise to AWS
  2. used with EFS- & SMB- compatible file system
  3. replication can be done by hour, day or week
  4. require to install DataSync Agent
  5. can use to replicate EFS to EFS
21
Q

What 5 options can be choose under Storage Gateway?

A
  1. File gateway
  2. Volume gateway
    stored volumes
    cached volumes
  3. Gateway Virtual Tape Library
22
Q

____ is serverless, interactive query service in S3 commonly used to analyze log data

A

Athena is serverless, interactive query service in S3 commonly used to analyze log data

23
Q

Using ____ , you can give your federated users single sign-on (SSO) access to the AWS Management Console.

A

Using SAML (Security Assertion Markup Language 2.0), you can give your federated users single sign-on (SSO) access to the AWS Management Console.

24
Q

what file language is policy write in?

A

JSON

25
Q

How AWS Storage Gateway as a way of using AWS S3 managed storage to supplement on-premise storage with VPC?

A

it is a physical or virtual appliance that can be used to cache S3 locally at customer site