Services Flashcards

1
Q

SQS

A

Simple Queue Service
Messages in the queue, can be polled by multiple consumers. Serverless. 4 day retention with maximum 14 days. Deleted once read. Allows decoupling of applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

SNS

A

Simple Notification Service
Create topics with multiple subscribers. Subscribers get all messages. Subscribers can be HTTP/HTTPS, email, SMS, Mobile Notifications, SQS queues, Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Kinesis

A

Realtime Data Streaming

Collect, process and analyze real-time streaming data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon MQ

A

Managed Apache MQ

Used when an existing message service is needs to migrate to the cloud. Runs on dedicated machine. Doesn’t scale as well

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Service Health Dashboard

A

Shows status of AWS Services, present and historical for each region. Can subscribe to an RSS feed to get notifications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Personal Health Dashboard

A

Provides alerts and remediation guidance when AWS experiencing events that impact you and your services. Warns about scheduled activities via notifications. Can see historical issues as well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

IAM MFA

A

Multi-Factor Authentication
Virtual MFA (google authenticator or Authy)
U2F Universal Second Factory (USB)
Hardware MFA (device with number)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Organisations

A
Manages multiple AWS accounts
Consolidated Billing
Pricing benefits 
Pooled EC2 reserved instances
API for automated account creation
Restrict privileges using Service Control Policy (SCP)

Best Practices
Multi Account vs One Account Multi VPC
Use tagging for billing purposes
Enable cloudtrail on all accounts, send logs to central S3
Cloudwatch Logs to central logging account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Acceptable use policy

A

No illegal harmful, offensive or abusive use. AWS Trust & Safety team can be contacted when you think AWS is being abused

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Trusted Advisor

A
Analyze your AWS accounts and provides recommendations.
Cost Optimization
Performance
Security (Some things are free)
Fault Tolerance 
Service Limits

For most stuff you need Business or Enterprise Support

Find underutilized/overutilized resources, security problems or service limit information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Control Tower

A

Easy set up of multiple accounts with best practices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Config

A

Record all resources configurations and compliance over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

CloudFormation

A

Infrastructure as code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Logging

A

Service Logs and Access Logs to S3 or CloudWatch Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

CloudTrail

A

Records API calls made within your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

TCO Calculator

A

Calculates the cost and savings of moving to the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Simple Monthly Calculator/Pricing Calculator

A

Tells you the estimated cost of services before you use them. SMC is being depreciated in favour of PC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Billing Dashboard

A

Overview of costs in AWS. Breaks down per service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Cost and Usage Reports

A

Most comprehensive cost reports. Can be integrated in with Athena, Redshift or QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cost Explorer

A

Visualise and manage AWS costs and usage. Create custom reports at a high level across accounts. Choose optimal savings plan. Forecast usage up to 12 months based on previous usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Billing Alarms

A

Billing data is stored in us-east-1, but is for worldwide cost. Actual cost, not projected. Simple alarm, not as powerful as budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Budgets

A

Create budget and send alarms when costs exceed budgets.
3 types of budgets: Usage, Cost, Reservation
For reserved instances:
track utilisation
Supports EC2, RDS, Redshift
5 SNS notifications per budget
Lots of filters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Athena

A

Fully Serverless database with SQL capabilities. Query S3. Pay per query. Output to S3.

24
Q

Redshift

A

Based on postgres. OLAP (data warehousing). Columnar.

25
QuickSight
Dashboarding tool.
26
CloudWatch Metrics
Variable monitor. Create dashboards.
27
CloudWatch Alarms
Alarms for when metrics go above expected levels. Can also create Billing alarms
28
CloudWatch Logs
Collect log files from various applications such as beanstalk, ECS, Lambda, On-Premises, DNS. Real-time monitoring of logs.
29
CloudWatch Events
React to events on AWS. Cron Jobs etc. Send SNS, SQS messages.
30
EventBridge
Next gen events. Default event bus for AWS services. Partner event bus for third party events. Custom event buses for own applications. Schema Registry
31
CloudTrail
History of events / API calls made within AWS account. Can apply to various regions or all.
32
What is encrypted by default?
s3 Glacier, AWS Storage Gateway
33
Storage Gateway
Bridge to on-premises storage for hybrid storage.
34
SSM
Systems Manager | Manage ECS and On-Premises systems at scale. Hybrid AWS service. Get operational insights of infra.
35
Inspector
Automated Security Assessments for EC2 instances. Install inspector Agent on EC2 instance. Get a report
36
Serverless
Lambda. Gateway. DynamoDB. S3. Kinesis. Aurora. Fargate. SNS. SQS. EFS. RDS Proxy. AppSync. Step Functions. Athena. EventBridge.
37
Elastic Beanstalk
PaaS. Developer centric view of deploying. Control over config, but everything in one view.
38
Lightsail
Easy to get up and running. Simple applications with little cloud experience. No autoscaling.
39
Shared responsibility Model
AWS and user specific responsibilities. Some are shared. Use common sense!
40
AMI
Amazon Machine Image | Customisation of EC2 instance. Specific region! Can buy on Marketplace.
41
Types of computing
``` IaaS Provide building blocks for cloud IT. Infra only EC2 etc. PaaS Don't need to manage infra. Deployment and management of applications Beanstalk SaaS Completed product provided by the service provider Rekognition ```
42
EMR
Elastic MapReduce Hadoop cluster (Big Data) Analyse lots of data
43
QuickSight
Create dashboards for analysing database with machine learning
44
Neptune
Graph database | Social Network usage. Wikipedia
45
QLDB
Quantum Ledger Database | Financial transactions. Immutable. Review changes over time.
46
Managed Blockchain
Blockchain without the need for trusted, central authority
47
DMS
Database Migration Service
48
Glue
ETL service. Exract transform and load | Prepare and transform data sets for analytics
49
1st Pillar: Operational Excellence
``` Run and monitor systems Perform operations as code. Automated documentation. Frequent small reversible changes Refine operations procedures frequently Anticipate Failure ``` ``` Cloudformation config cloudtrail cloudwatch x-ray CI/CD tools ```
50
2nd Pillar: Security
Ability to protest information while delivering business value through risk assessment Strong Identity foundation. IAM. Least Privilege. Traceability. Security at all layers. protect data in transit and at rest Prepare for security events
51
Systems Manager
Centralize operational data from multiple AWS services and automate tasks across your AWS resources.
52
What are the 5 pillars of well architected Framework?
OpSeRePeCo ``` Operational Excellence Security Reliability Performance Efficiency Cost Optimisation ```
53
Operational Excellence
``` 1st Pillar Operations as code Annotate Documentation Frequent and small, reversible changes Refine operations frequently Learn from failures ``` ``` AWS Cloud Formation AWS Config CloudTrail CloudWatch X-Ray CI/CD CodeBuild CodeCommit CodeDeploy CodePipeline ```
54
Reliability
2nd Pillar ``` Strong Identity Foundation Traceability Security at all layers Automate best practices Protect in transfer and at rest Keep people away from data Prepare for security Events ``` ``` IAM STS MFA Organisations Config Cloudtrail CloudWatch CloudFront VPC Shield WAF Inspector KMS S3 ELB EBS RDS CloudFormation CloudWatch Events ```
55
Reliability
3rd Pillar ``` Test Recovery Procedures Automatically Recover from failure Scale Horizontally Stop guessing Capacity Manage change in automation ``` ``` IAM VPC Service Limits AWS trusted advisor Auto Scaling CloudWatch CloudTrail Backups CloudFormation ```
56
What services can you reserve instances on?
EC2, dynamos, elasticache, rds, redshift
57
What are the 5 elements of trusted advisor?
``` Cost Optimisation Performance Security Fault Tolerance Service Limits ```