Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

.๐’œ๐’ฒ๐’ฎ ๐’ž๐‘’๐“‡๐“‰๐’พ๐’ป๐’พ๐‘’๐’น ๐’Ÿ๐‘’๐“‹๐‘’๐“๐‘œ๐“…๐‘’๐“‡ > Section 6: AWS Fundamentals: Amazon S3 > Flashcards

Section 6: AWS Fundamentals: Amazon S3 Flashcards

1
Q

What does S3 stand for?

A

Simple Cloud Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is S3 advertised as?

A

โ€œInfinetily scalableโ€ storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the naming rules of S3 buckets?

A 
No uppercase
No underscore
3-63 chararecters long
Not an IP
Must start with lowercase letter or number
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How unique must S3 bucket names be?

A

Totally unique accross the entire AWS S3 ecosystem. Two AWS accounts canโ€™t have a buket with the same name.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What characterize S3 objects?

A

Key
Metadata
Tags
Version ID (if versionning is enabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What consists in an S3 object key?

A

The filename and its โ€œsubpathโ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the max size of an S3 object?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are there directories in an S3 bucket?

A

No, although the UI will trick you to think otherwise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

At what level can versioning be activated in S3?

A

At the bucket level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What happens if we update a file in an S3 bucket with versionning?

A

The file will have a new version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some reasons why you should enable versioning in an S3 bucket?

A

Protects you against unintended deletes (ability to restore)

Easy roll back to previous version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What will be the version id of any files that were on an S3 bucket prior to activating versioning?

A

Null

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the four methods of encrypting objects in S3?

A

SSE-S3
SSE-KMS
SSE-C
Client Side Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What keys does SSE-S3 use to encrypt S3 objects?

A

It uses keys handled and managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What keys does SSE-KMS use to encrypt S3 objects?

A

It leverages AWS KMS Service to manage encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What keys does SSE-C use to encrypt S3 objects?

A

It uses your own encryption keys which you pass to S3 in a header of your HTTP request.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Where are objects encrypted when using SSE-S3

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Where are objects encrypted when using SSE-KMS

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Where are objects encrypted when using SSE-C

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Where are objects encrypted when using Client Side Encryption

A

On the client side using a library such as Amazon S3 Encryption Client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to tell S3 to use SSE-S3 when sending a file?

A

By setting the โ€œx-amz-server-side-encryptionโ€ header to โ€œAES256โ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How to tell S3 to use SSE-KMS when sending a file?

A

By setting the โ€œx-amz-server-side-encryptionโ€ header to โ€œaws:kmsโ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the advantages of using KMS to encrypt S3 objects?

A

User control

Audit trail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

With what encryption must HTTPS be used?

A

SSE-C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How to get encryption in flight when sending data to S3?

A

By using the HTTPS endpoint rather than the HTTP endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is another common name for โ€œEncryption in flightโ€ ?

A

SSL / TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does SSL stand for?

A

Secure Sockets Layer

28
Q

What does TLS stand for?

A

Transport Layer Security

29
Q

How to insure user based security in an S3 bucket?

A

By using the right IAM policies

30
Q

How to manage user based security for S3?

A

With IAM policies (Which API calls should be allowed for a specific user from IAM console)

31
Q

How to manage resource based security for S3?

A

Bucket polices (Most popular / Better method)
Object Access Control List
Bucket Access Control List

32
Q

What form an S3 bucket policy?

A

Resources (Buckets or objects)
Actions (Set of API)
Effect (Allow or Deny)
Principal (The account or user to apply the policy to. E.g. * means everybody)

33
Q

How can you force objects to be encrypted at upload?

A

By setting the appropriate bucket policy

34
Q

How can you grant public access to the bucket?

A

By setting the appropriate bucket policy

35
Q

How can you grant access to another account (Cross account)?

A

By setting the appropriate bucket policy

36
Q

Does S3 bucket support VPC endpoints?

A

Yes

37
Q

Where should an S3 bucket access logs be stored?

A

In an other bucket, not in the same otherwise youโ€™ll get an infinite loop

38
Q

Where can API calls be logged?

A

In AWS CloudTrail

39
Q

When setting a policy for an S3 bucket, what should the ARN end with if you want the policy to affect all files in the bucket?

A

/*

40
Q

How to upload a file that is more than 5GB to an S3 bucket?

A

By enabling multi-part upload (itโ€™s mandatory for files of 5GB and more)

41
Q

What happens if you delete a file from an S3 bucket with versioning enabled?

A

The file wonโ€™t show in the bucket anymore but you can still access it by enabling the showing of versions in the GUI.

42
Q

Is it possible to define a default encryption in the properties of a bucket?

A

Yes

43
Q

How can you grant access to file to a user for a short amount of time?

A

By generating a signed URL

44
Q

The client has an index.html file which tries to access an image in another bucket but it is not working, what is going on?

A

It most likely is that the CORS other bucket doesnโ€™t have the proper CORS enabled.

45
Q

What will happen if you want enable static site hosting in an S3 but donโ€™t allow public read?

A

You will get a 403 (Forbidden) error

46
Q

What should you set if you have a website hosted on an S3 bucket that needs to download an image hosted on another S3 bucket?

A

On the bucket hosting the image, you need to enable CORS access to bucket that needs to access the image

47
Q

What do CORS protect you from?

A

From having other websites referencing your file in your bucket therefore generating traffic and incurring costs on your behalf.

48
Q

What is the consistency model of PUTS of new objects in S3?

A

Read after write

except if we did a GET before to see if the object existed

49
Q

What is the consistency model of DELETES and PUTS of existing objects?

A

Eventual consistency

If we read an object after updating it, we might get the older version
If we read an object after deleting it, we might still be able to retrieve it for a short time

50
Q

Where can S3 send notifications on changes to?

A

AWS SQS
AWS SNS
AWS Lambda

51
Q

Historically, when would S3 performance decrease?

A

When you had over 100 TPS (Transactions per second)

52
Q

Behind the scene, where do objects go when uploaded to S3?

A

To various S3 partitions

53
Q

What WAS recommended in order to opmitise performance when uploading files to S3?

A

Have random characters in front of your key names

54
Q

Should you use a date as a prefix to a file on S3?

A

No because the files with such prefix would most likely be stored in the same partitions which could hit performance

55
Q

As of July 17th 2018, what are the new max RPS for PUTS and RPS for GET in S3 for each prefix?

A

3500RPS for PUT

5500RPS for GET

56
Q

How to get faster upload of large objects in S3?

A

Use multi part upload

57
Q

What are the three ways multi part upload fasten uploads in S3?

A

Parallelizes PUTs for greater throughput
Maximize your network bandwidth and efficiency
Decrease time to retry in case a part fails

58
Q

In what case do multi part upload MUST be used in S3

A

When uploading files larger than 5GB

59
Q

How to improve reads around the world for objects stored in S3?

A

Use Cloudfront

60
Q

How to improve writes around the world for objects stored in S3?

A

Use S3 Transfer Acceleration (uses Edge locations)

61
Q

If you use KMS for encryption, what might be slowing you down?

A

Your KMS usage limits

62
Q

What is S3 Glacier?

A

S3 Glacier is a file storage for long term archival

63
Q

What to do if you only want to retrieve a subset of data in an S3 or Glacier?

A

Use S3 Select or Glacier Select

64
Q

With what file type is S3/Glacier Select compatible?

A

CSV, JSON and Parquet

65
Q

Are subqueries/joins supported in S3/Glacier Select?

A

No, only simple select with where statements

66
Q

How much cost savings can using S3/Glacier Select provide?

A

Up to 80%

67
Q

How much performance savings can using S3/Glacier Select provide?

A

Up to 400%

.๐’œ๐’ฒ๐’ฎ ๐’ž๐‘’๐“‡๐“‰๐’พ๐’ป๐’พ๐‘’๐’น ๐’Ÿ๐‘’๐“‹๐‘’๐“๐‘œ๐“…๐‘’๐“‡ (26 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions