Section 5: AWS Fundamentals: Route 53 + RDS + ElastiCache + VPC Flashcards
What is Route53?
A managed DNS
In AWS, what are the 4 most common records?
What are their use case? ___ to ___
A: URL to IPv4
AAAA: URL to IPv6
CNAME: URL to URL
Alias: URL to AWS resource.
What is the preferred record for cross referencing AWS resources?
Alias
What type of domain can Route53 use
Public domains you own (or buy)
Private domains that can be resolved by your instances in your VPCs
What are some advanced features Route53 has?
Load balancing through DNS (also called client load balancing)
Health Checks (limited)
Routing policies
What are some routing policies which Route53 is able to handle?
simple, failover, geolocation, geoproximity, latency, weighted
What does RDS stand for?
Relational Database Service
What is AWS RDS?
A managed DB service for DB which use SQL as a query language
What DB can be created with AWS RDS?
MySQL Postgres MariaDB Microsoft SQL Server Oracle Aurora (AWS Proprietary DB)
Why use RDS rather than installing a DB on an EC2 instance?
Itโs a managed service, which comes with those advantages:
- OS Patching
- Continuous backups and restore
- Monitoring dashboards
- Read replicas
- Multi AZ
- Maintenance windows
- Scaling capability
What is one drawback of using RDS rather than an EC2?
You canโt SSH into your instances
What are RDS Read Replicas used for?
Improving read scalability
How many Read Replicas can an RDS DB instance have?
Up to 5
What must the developer do to read from an RDS instance Read Replica?
Update the connection string (because the main connection string, which is used for writing to the DB, would also read from the main master DB)
What is the synchronicity of RDS DB replication to RDS DB Read Replica?
Asynchronous
What is the purpose of RDS Multi AZ
Disaster recovery
Not used for scaling
What must the developer do to start using RDS standby DB in case of disaster?
Nothing, the DNS name automatically points to the new DB instance if the main one fails
What is the synchronicity of RDS DB replication to RDS stand by DB (Multi AZ)?
Synchronous
What are automated RDS backups?
Daily full snapshot of the DB
When are RDS transaction logs captured?
In real time
With RDS backups, you can restore at what point in time?
Any, transaction logs are captured in real time
What is the default retention for automated RDS backups?
7 days
What is the maximum retention for RDS automated backups
35 days
What is the retention for manually triggered RDS DB Snapshots?
As long as you want
Is encryption available for AWS RDS?
Yes
At rest with AWS KMS (AWS-256)
In flight with SSL certificates
How to enforce SSL on Postgres?
By setting
rds.force_ssl=1 in the AWS RDS Console (Paratemer Groups)
How to enforce SSL on MySQL?
By running the following command in the DB:
ALTER USER โencrypted_userโ@โ%โ REQUIRE SSL;
or
GRANT USAGE ON . TO โmysqluserโ@โ%โ REQUIRE SSL;
How to connect to an RDS hosted DB with SSL?
Provide the SSL Trust certificate (can be downloaded from AWS)
Provide SSL options when connecting to database
In what type of subnet are RDS databases usually deployed?
Private
What does RDS Security leverages?
Security groups
What helps us define who can manage AWS RDS?
IAM policies
What is the traditional way to login to an RDS DB
With a username and password