Secure Your Data Flashcards

Question

AWS storage gateway & types

Answer 1

AWS Storage Gateway is a hybrid cloud storage service that connects your existing on-premises environments with the AWS Cloud. 3 types of gateways: tape, file, volume

Answer 2

customer master key (CMK) is a logical representation of a master key. The CMK includes metadata, such as the key ID, creation date, description, and key state. The CMK also contains the key material used to encrypt and decrypt data. These are created and managed by the AWS customer. Access to these can be controlled using the AWS IAM service

Answer 3

IAM User Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK). Access keys consist of two parts: an access key ID (for example, AKIAIOSFODNN7EXAMPLE) and a secret access key (for example, wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY). As a user name and password, you must use both the access key ID and secret access key together to authenticate your requests. Access Keys are secret, just like a password. You should never share them.

Answer 4

An IAM role is similar to an IAM user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it.

Answer 5

collection of IAM users. Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users.

Answer 6

manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources. A policy is an object in AWS that, when associated with an identity or resource, defines their permissions.

Answer 7

AWS Service Health Dashboard publishes most up-to-the-minute information on the status and availability of all AWS services in tabular form for all Regions that AWS is present in. You can check on this page https://status.aws.amazon.com/ to get current status information.

Answer 8

AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. With Personal Health Dashboard, alerts are triggered by changes in the health of your AWS resources, giving you event visibility, and guidance to help quickly diagnose and resolve issues.

Answer 9

Connection between VPC and internet, allows pubic traffic fro, the internet to access VPC

Answer 10

Establish virtual private network (VPN) connection between your VPC and private network such as an on premise data Center or internal corporate network Allows traffic e into the VPC only if coming from an approved network

Answer 11

Service that enables you to establish a dedicated private connection between your data Center and VPC Reduce network costs and increase bandwidth traveling through your network

Answer 12

``` 24/7 customer support Documentation White paper Support forums AWS trusted advisor AWS personal health dashboard Free ```

Answer 13

Basic support 7 core checks trusted advisor Email access to email support - 24 hour response time Less than 12 response time if systems are down Unrestricted number of technical support cases for 1 primary contact Best practice guidance Client side diagnostic tools Building block architecture support which consists of guidance on how to use AWS offerings features and services together Pay by the month Require no long term contracts

Answer 14

Basic + developer AWS trusted advisor for all suite of checks Direct phone access to support team General guidance <24 hours System impaired <12 hours 4 hour SLA if production system is Impaired 1 hour if production system down Unrestricted number of technical support cases for unlimited contacts Pay by the month Require no long term contracts 1 hour SLA if production system is down Infrastructure event management ie global blitzes or massive events (extra fee) Use case guidance Limited support for third party software like common operating system and apps stack components

Answer 15

``` Mission critical workloads All tiers previous General guidance <24 hours System impaired <12 hours Production system Impaired < 4 hours Production system down <1 hour 15 min SLA for response time for biz critical workloads Dedicated TAM to coordinate access to programs and AWS experts Unrestricted number of technical support cases for unlimited contacts Pay by the month Require no long term contracts Consultative review based on your apps App architecture guidance to support company specific use cases and apps Access to self paced labs training Concierge support team Infrastructure event management ```

Answer 16

(TAM) Part of concierge support team Specialise in proactively monitoring environment and assisting in optimisation Reviews (infra management, well architected, etc)

Answer 17

ML service used for detecting abnormal industrial machine Behavior and enables to implement predictive maintenance

Answer 18

Extract printed text and handwriting from virtually any document. Requirement is to use natural language processing to find insights and relationships in the doc

Answer 19

Natural language processing service that uses ML to find meaning and insights in text

Answer 20

Agentless service which makes it easy and fast to migrate thousands of on premises workloads (VMs) to AWS Automate track and schedule incremental replications of live server volumes

Answer 21

Migrating databases from on premise to AWS

Answer 22

Monitor application migrations

Answer 23

``` Secure shell (SSH) - common tool to connect to linux servers Session manager - fully managed AWS system manager capability that lets you manage your EC2 instances, on premise instances, and VMs via interactive one click browser shell or through AWS CLI EC2 instance connect - connect to your Linux instance using browser based client ```