Services Flashcards

1
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

EBS

A

Network drive you can attach to your EC2 instance
Data remains even EC2 instance is terminated
Mounted on 1 instance at a time
Bound to an AZ
Move data from 1 instance to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AMI

A

Amazon Machine Image
Launch EC2 instances from an AMI
You can add your s/w, configurations, OS, monitoring into an AMI
Build for a specific region
AMUI also creates an EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

EFS

A

Network file system (NFS) attached to EC2
It can be attached to more than 1 EC2 instance unlike EBS
EFS works only with your Linux EC2 instances
It works across multiple AZs.
Pay per use and not by capacity
EFS IA = Storage class is going to be cost-optimized for files that you don’t access very often

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Amazon FSx

A

Third party high performance (HPC) file system on AWS
Fully managed service
Build on windows file server
Supports SMB and windows NTFS
Integrated with windows active directory
Accessed from AWS or on Premise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

ELB

A

Spread load across more than 1 instance based on incoming traffic
TYPES
1. Application Load Balancer (Layer 7)(HTTP/HTTPS, uses DNS or URL)
2. Network Load Balancer (Layer 4) (TCP/UDP, users Static IP)
3. Gateway Load Balancer (Layer 3, GENEVA, used for intrusion detection and routes to third party security virtual appliances before sending it to EC2)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Snow Family

A

SnowCone - 8 and 14 TB, Migrate upto 24TB online and offline
SnowBall Edge - 80 TB, Migrate upto PB offline
SnowMobile - < 100 PB, Migrate upto Exabytes offline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Storage Gateway

A

Exposing S3 data on premises

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

OpsHub

A

Software you install on your computer to manage snow family device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

ElastiCache

A

In Memory DB for faster read/write for all databases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

DynamoDB

A

No SQL DB Managed DB
Serverless
Standard and IA Table Class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

RedShift

A

Serverless(Pay for what you use) and based on Postgre SQL
Only for OLAP and not OLTP
Used for Data warehousing
Uses Massively Paraller Processing Query (MPP)
Integrate with BI tools like AWS QuickSight or Tableau

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EMR (Elastic Map Reduce)

A

Helps create Hadoop clusters(Big Data)
Clusters are many EC2 instances
Autoscaling and integrated with spot instances
ML, Data Processing, Web Indexng, Big data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Athena

A

Serverless and perform anaytics on S3
Uses SQL
Used for BI, Analytics, Anaylze VPC Flow Logs, CloudTrail, ELB Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

QuickSight

A

Serverless to create interactive dashboards
Integrated with all DBs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DocumentDB

A

Aurora for MongoDB
No SQL DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Neptune

A

Fully Managed Graph DB
Social Media data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

QLDB

A

Quantum Ledger DB
Recording Financial Transactions
To review history of all the changes made to your application data over time
Central authority

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Managed Blockchain

A

Joins public blockchains like hyperledger fabric or Ethereum
No central authority

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Glue

A

Serverless and does ETL
Take data from S3 or RDS, Transform and load into RedShift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

DMS

A

Data Migration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

DynamoDB Accelerator(DAX)

A

In Memory Cache for faster read/write for Dynamo DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

DynamoDB Global Tables

A

It’s a way for you to make DynamoDB table accessible with low latency in multiple regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Docker

A

Software development platform to deploy apps
Apps are packaged into containers that can run on any OS
Docker images are stored in docker respositories
-Public docker respository
-Private in Amazon ECS (Elastic container repository)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

ECS

A

Launch docker container on AWS
Provision EC2 instances in advance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Fargate

A

Launch docker container on AWS
No need to provision EC2 instances in advance (serverless)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

ESR

A

Container registry to store docker images that can be run by ECS or Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Lambda

A

Virtual functions with unlimited CPU and RAM
Time limit of 15 mins
Limited to some programming languages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

API Gateway

A

To create, publish, maintain, monitor and secure API on AWS
e.g. Serverless HTTP API
supports RESTFul API and WebSocket API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Batch

A

Fully managed Batch Processing at any scale
Dynamically launch EC2 instances or Spot instances
Run as docker images on ECS
No limit of programming languages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Lightsail

A

Standalone services to get virtual storage, db and networking in one place

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

CloudFormation

A

Reusable template for defining AWS infrastructure
Infrastructure as Code (IaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

CDK

A

Define cloud infratuture using familiar programming languages like Java, Python, .Net, etc.
Code is finally compiled into JSON/YAML (CloudFormation) format
Deploy infrature and runtime together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Beanstalk

A

Developer centric view of deploying application on AWS
Platform as a service (PaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

CodeDeploy

A

Hybrid service to automatically deply your code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

CodeCommit

A

Hosts Git respository in AWS to store your code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

CodeBuild

A

Compiles source code, run tests, produces packages ready to be deployed by Code Build

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

CodePipeline

A

Code=>Build=>Test=>Provision=>Deploy=>EBS
It orchestrate the steps from code to deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

CodeArtifact

A

Store code artifacts like dependecies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

CodeStar

A

All code related services under one roof with unified UI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Cloud9

A

IDE on Browser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

SSM

A

Manage EC2 instances and On premise systems at scale(Hybrid service)
-Automatic patching of all your instances
-Run commands across entire fleet of services
-Store parameter configuration with SSM parameter store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

SSM Session Manager

A

Allows to start a secure shell on EC2 instances and on premise servers without SSH access or port 22 access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

SSM Parameter Store

A

Store API keys, passwords, configurations (Serverless)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

OpsWork

A

Gives managed Chef and Puppet in the cloud
Chef and Puppet performs server configurations automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

DNS Route 53

A

Route users, to the closer to deployment with the least latency
Disaster recovery strategies
DNS, Health Checks, Routing Policy, Domain Registration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

CDN CloudFront

A

Replicate part of our application data into some AWS Edge Locations
Cache the common request in CloudFront
Uses WAF and Shield to protect from web attacks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

S3 transfer acceleration

A

Global uploads and downloads into Amazon S3
Leverages the Edge Locations of AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

AWS Global Accelerator

A

Improved global application availability and performance using AWS global network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Outposts

A

Deploy Racks on premise data centre to extend AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Wavelength

A

AWS service within 5G networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Local Zones

A

Local access closer to users locations
Extend VPC to local zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

SQS

A

Serverless service to decouple applications
Stores messages from 4 to 14 days
FIFO and Standard Queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Kinesis

A

Real time big data streaming
Kinesis data streams, Kinesis fire hose, Kinesis data analytics and Kinesis video streams

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

SNS

A

Pub Sub integration
Sending 1 message to many applications
Send message notifications using publish and subscribe model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

MQ

A

Managed Brocker Service for Rabbit MQ and Active MQ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

CloudWatch

A

Provides metrics of each AWS service
Set Alarms at each service reaching a certain threshold

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

CloudWatch logs

A

Logs are not on by default for AWS service
Once on, you can see logs generated by each service here

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

EventBridge

A

To create a two types of events, cron job or rules to react to a service doing something like EC2 terminate, user logging into AWS console, etc.
The output from EventBridge can be sent to trigger a lambda function or SNS/SQS, etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

EventBus

A

Default Event Bus - Events happening inside AWS sent here
Partner Event Bus - Events happening outside AWS like zendesk, datadog, etc. sent here
Custome Event Bus - Events happening in custom apps sent here

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

CloudTrail

A

Provides governance, compliance and audit for your AWS accounts
This is user action logging and user actions like Console login, using SDK, using CLI, etc.
Output is sent to CloudWatch Logs or S3

62
Q

AWS X-Ray

A

TroubleShooting, Distributed Tracing, Service Graph for distributed applications on AWS

63
Q

CodeGuru

A

ML powered service for Automated code reviews (Code Guru Reviewer) and Application performance recommendations (Code Guru Profiler)
Code Guru Profiler - Checks the runtime code in production and identifies code inefficiences and recommends the performance, memory and cost optimization

64
Q

AWS Health Dashboard

A

Service History - All regions, all services status
Personal Health Dashboard (PHD) - If any AWS events that impact your account (performance and availability of the services), shows up here

65
Q

ElasticIP

A

It costs even if its not attached to an EC2 instance or EC2 instance is stopped

66
Q

VPC

A

VPC is linked to a region
Withing VPC we have subnets

67
Q

Subnet

A

Subnet is linked to an AZ
Used to partition your VPC
Define public and private subnets

68
Q

Route Table

A

Define access to internet and between subnets

69
Q

CIDR Range

A

Range of IP addresses allowed in the VPC

70
Q

Internet Gateway

A

Helps to connect VPC to internet
Public subnet routes to internet gateway which connect to internet

71
Q

NAT Gateway & NAT Instances

A

NAT Gateway (AWS managed)
NAT Instances (Self Managed)
Allows instances in private subnet to access internet but still remain private

72
Q

Network ACL

A

Firewall that controls traffic from and to a subnet
Define Allow & Deny rules and rules include only IP addresses

73
Q

Security Groups

A

Firewall that controls traffic from and to a ENI/EC2 instance
Define Allow rules only and rules include IP addresses or other SGs

74
Q

VPC Peering

A

To connect two VPC privately using the network from AWS
IP addresses range should not overlap

75
Q

VPC Endpoints

A

To access AWS services by a private subnet in a private network
VPC Endpoint Gateway - Connect to S3 or DynamoDB
VPN Endpoint Interface - Connect to all other AWS services

76
Q

AWS PrivateLink

A

Allows services running in your VPC in AWS to other VPCs privately
Add Network Load Balances on premise
Add Elastic Network Interface on AWS VPC

77
Q

Site to Site VPN

A

Connect on premise DC with VPC on AWS over public internet but enctypted
Add a Customer Gateway on premise
Add Virtual Private Gateway at VPC
Connect both using site to site VPN

78
Q

Direct Connect (DX)

A

Connect on premise DC with VPC on AWS over private network using physical connection

79
Q

Client VPN

A

Connect your computer to private subnet in VPC on AWS
Add AWS client VPN (OpenVPN) on the computer

80
Q

Transit Gateway

A

To connect different VPCs, client, On premise with one solution

81
Q

AWS Shield Standard

A

Free and enabled for all customers against DDoS attack
Provides Layer 3 and 4 attacks and reflection attacks

82
Q

AWS Shield Advanced

A

Paid and 24/7 DDoS protection and support

83
Q

AWS WAF(Web Application Firewall)

A

Filter requests based on rules and placed on Layer 7 like Application Load Balancer, API Gateway and CloudFront.
Protection against web exploits
Define Web ACL - filter based on IP addresses, HTTP header, body and URI strings, geo matching, rate based rules
Protects against SQL Injection and Cross Site Scripting (XSS)

84
Q

CloudFront and Route 53

A

Provide protection at Edge location when used along with Shield

Architecture:
Route 53 is protected by shield and routes the requests to CloudFront.

CloudFront is also protected by shield and it caches the content on edge location

Use AWS WAF at CloudFront to filter the requests based on rules

Use Load Balancer on public subnet to scale the load at network level

Then behind load balancer user EC2 instances with ASG

85
Q

AWS Network Firewall

A

Protect VPC overall from Layer 3 to 7.
This operates at VPC level unlike Web ACL that operates at subnet level

86
Q

KMS

A

Key Management Service is the AWS encryption service and keys are managed by AWS

87
Q

CloudHSM(Hardware security module)

A

AWS only provisions encryption hardware and encryption keys are managed by customer

88
Q

CMK

A

Customer Master Keys
1. Customer managed CMK
2. AWS managed CMK
3. AWS owned CMK
4. Cloud HSM keys(found under custom key store)
For CloudTrail and Glacier S3 encryption is enabled by default

89
Q

Secrets Manager

A

Store and Rotate passwords (Rotation using custom Lambda function)
Integrated with Amazon RDS
Encrypted using KMS

90
Q

AWS Artifacts

A

Portal that provides AWS compliance and AWS agreement documents

91
Q

Amazon GuardDuty

A

Threat Detective Service
Detects anomalies in AWS account
Input is from CloudTrail logs, VPC flow logs, DNS logs, S3 logs, EBS logs, Lambda network activity, RDS and Aurora login logs, EKS audit logs and output can be sent to EventBridge to generate SNS or Lambda function

92
Q

Amazon Inspector

A

Run automated security assessments only on running EC2 instances, Lambda functions and Container images on ECR

Check for OS, S/w vulnerabilities and network reachability on EC2
Reports its findings into AWS Security Hub and Amazon Event Bridge

93
Q

AWS Config

A

Helps auditing and recording compliance of the AWS resources
It records the configurations and their changes over time

94
Q

AWS Macie

A

Fully managed data security and data privacy service uses ML
Alert agains PII

95
Q

AWS Security Hub

A

Dashboard to manage security across several AWS accounts and automate security checks
Aggregates alerts from Config, Guard Duty, Inspector, Macie, iAM Access Analyzer, Systems Manager, Firewall, Health, Partnet Network Solutions

96
Q

Amazon Detective

A

To analyze the root cause of security issues using ML and graphs

97
Q

AWS Abuse

A

Report suspected AWS resources used for abuse or illegal purpose

98
Q

CloudTrail

A

Track API calls made by users within the account

99
Q

iAM Access Analyzer

A

To identify which resources are shared externally outside your zone of trust

100
Q

Amazon Rekognition

A

To recognize objects, people, text and scene in images and videos
using machine learning

101
Q

Amazon Transcribe

A

Convert Speech To Text

102
Q

Polly

A

Convert Text to Speech

103
Q

Amazon Translate

A

Translate text to other language

104
Q

Amazon Lex

A

Same tech as Alexa. Uses ASR. Speech to Text and natural language understanding (NLU) to recognize the intent of the text

Helps to build ChatBots

Works with Amazon Connect (Call centre solution)

105
Q

Amazon Comprehend

A

NLP
Analyze customer emails

106
Q

Amazon SageMaker

A

Fully managed service for developers/data scientists to build machine learning models

107
Q

Amazon Forecast

A

Fully managed service uses ML to forcast

108
Q

Amazon Kendra

A

Fully managed document search service uses ML

109
Q

Amazon Personlize

A

Build apps with real time personlized recommendations

110
Q

Amazon Textracts

A

Extract text, handwriting, or data from any scanned document
and behind the scenes

111
Q

SCP (Service control policies)

A

Centrally manage all users and roles permissions in your organization
Whitelist or Blacklist iAM actions
Apply at OU(Org unit) or account level and not at Master Account level
You can allow or deny access to your AWS account services to the OU or Account

112
Q

AWS Control Tower

A

Set up and govern a secure multi-account AWS environment with best practices for your organization
Automate the setup of accounts
Automate ongoing policy management using guardrails
Detect the policy violations and remediate them
Monitor your compliance through an interactive dashboard

113
Q

AWS RAM (Resource access manager)

A

Share resources(owned by your account) with other accounts

114
Q

AWS Service Catalog

A

Self Service Portal to launch AWS services (pre configured by cloudformation templates) by the users
To use pre-defined tracks defined by admins

115
Q

AWS Compute optimizer

A

Supported resources to suggest cost optimization
EC2, EC2 ASG, EBS Volumes and Lambda Fx

116
Q

Pricing Calculator

A

To estimate cost in AWS and can be used by who does not have AWS account

117
Q

Cost usage report

A

Used for tracking cost. Shows when, why and how much the cost was incurred
Can be integrated with Athena, QuickSight or RedShift

118
Q

Cost Explorer

A

High level tracking compred to Cost usage report
Forcast the bill upto 12 months based on past usage
Can suggest Savings plan for reserved instances

119
Q

AWS Budgets

A

Alarm when cost exceeds the budget or forcast exceeds the budget

120
Q

AWS cost anomaly detection

A

Uses ML to detect cost anaomaly
Monitor cost->Get Alerted->RCA

121
Q

AWS Service Quotas

A

Notify when you are close to your service quota value threashold
Create CloudWatch Alarms
Request to increase service quota

122
Q

Trusted Advisor

A

High level AWS account assessment
Recommendation on 5 categories: PCSFS
-Cost Optimizations
-Performance
-Security
-Fault Tolerance
-Service Limits

7 Core checks for basic and developer plans
-S3 bucket permissions - Making sure bucket is not public
-Security group, making sure that some ports are not unrestricted, such as SSH.
-IAM Use so making sure that we have at least one,
-IAM user in our accounts.
-Ensuring we don’t have any EBS public snapshots
-Ensuring we do not have any RDS public snapshots
-Looking at service limits in AWS

Full Checks for business and enterprise plans
- Full checks in all 5 categories above
- Set cloudwatch alarms
- Programatic access to AWS Support API

123
Q

AWS STS

A

Security token services is only to provide temporary limited credential services to a AWS services to a user

124
Q

Cognito

A

Identity for web and mobile application users

125
Q

AWS Directory services

A

AWS Managed Microsoft AD ((AD users both on prem and AWS)
AD Connector (AD Users onpremise)
Simple AD (AD users on AWS only)

126
Q

AWS IAM Identity Center (SSO)

A
127
Q

Amazon Workspaces

A

Destop as a Service (DaaS) to provision Windows and Linus desktops

128
Q

AppStream

A

Desktop application streaming service on your web browser (no need of virtual desktop)

129
Q

IoT Core

A

To connect IoT devices into AWS cloud

130
Q

Elastic Transcoder

A

Convert media files on S3 to media files as required by the devices like phones, etc.

131
Q

AppSync

A

To build a backend for your mobile and web application
To store and synchronize data for mobile and web applications in real time
Makes use of GraphQL

132
Q

Amplify

A

Helps to develop full stack Web and Mobile applications

133
Q

Device Farm

A

To test web and mobile apps using real devices and browsers

134
Q

AWS Backup

A

Automate backups across AWS services into S3
Cross region and cross account backups

135
Q

Disaster recovery strategies

A

Backup and restore (cheapest)
Pilot light
Warm standby
Multi sites/hot sites

136
Q

AWS Elastic DR

A

To recover physical, virtual and cloud based servers into AWS
Continuous replication of on premise apps, OS and DBs into AWS low cost staging.
On failover move to higher cost production enviornment on AWS

137
Q

AWS DataSync

A

Move large amount of data from on premise to AWS using replication
After full load the replication is incremental

138
Q

Application Discovery Service and Migration

A

Services to migrate on premise to AWS

139
Q

AWS Migration Evaluator

A

Install Collector on premise to collect all info with regards to data, servers, dependenscies, etc.
Input that into AWS Migration Evaluator
Output is quick insights into cost and business case

140
Q

AWS Migration Hub

A

Central location where you can collect server and applications inventory data for the assessment, planning and tracking of migrations to AWS
Automate the process of lift and shift
Also use AWS Hub Migration Orchestrator to use pre-bulit templates for SAP, SQL Server, etc.

141
Q

AWS Fault Injection Simulator (FIS)

A

Generate and run experiment templates to create disruptions to the application like suddeb increase in CPU or RAM, etc to see how the application reacts.
Monitor using CloudWatch or EventBridge

142
Q

Step Functions

A

Serverless visual workflow to orchestrate Lambda functions

143
Q

Ground Station

A

Control Satellite communication

144
Q

AWS Pinpoint

A

2 way marketing communication service

145
Q

6 Pillars

A
  • Operational Excellence
  • Security
  • Reliability
  • Performance Efficiency
  • Cost Optimization
  • Sustainability
146
Q

AWS CAF (Cloud adoption framework)

A
  • White paper that helps you to build and execute a plan for digital transformation using AWS
  • It groups the capabilities under
    Business
  • Business
  • People
  • Governance
    Technical
  • Platform
  • Security
  • Operations
147
Q

AWS CAF Transformation Domains

A
  • Technology
  • Process
  • Organization
  • Product
148
Q

AWS IQ

A

Help to quickly find a professional to help you with your AWS projects

149
Q

AWS re:Post

A

Community Forum. AWS managed Q&A service

150
Q

AWS Managed Service

A

AWS provides a team of AWS exeprts to help you manage and operate your infrastructure for security, reliability and availability