Services Flashcards

1
Q

SQS

A

Simple Queue Service
Messages in the queue, can be polled by multiple consumers. Serverless. 4 day retention with maximum 14 days. Deleted once read. Allows decoupling of applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

SNS

A

Simple Notification Service
Create topics with multiple subscribers. Subscribers get all messages. Subscribers can be HTTP/HTTPS, email, SMS, Mobile Notifications, SQS queues, Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Kinesis

A

Realtime Data Streaming

Collect, process and analyze real-time streaming data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon MQ

A

Managed Apache MQ

Used when an existing message service is needs to migrate to the cloud. Runs on dedicated machine. Doesn’t scale as well

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Service Health Dashboard

A

Shows status of AWS Services, present and historical for each region. Can subscribe to an RSS feed to get notifications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Personal Health Dashboard

A

Provides alerts and remediation guidance when AWS experiencing events that impact you and your services. Warns about scheduled activities via notifications. Can see historical issues as well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

IAM MFA

A

Multi-Factor Authentication
Virtual MFA (google authenticator or Authy)
U2F Universal Second Factory (USB)
Hardware MFA (device with number)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Organisations

A
Manages multiple AWS accounts
Consolidated Billing
Pricing benefits 
Pooled EC2 reserved instances
API for automated account creation
Restrict privileges using Service Control Policy (SCP)

Best Practices
Multi Account vs One Account Multi VPC
Use tagging for billing purposes
Enable cloudtrail on all accounts, send logs to central S3
Cloudwatch Logs to central logging account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Acceptable use policy

A

No illegal harmful, offensive or abusive use. AWS Trust & Safety team can be contacted when you think AWS is being abused

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Trusted Advisor

A
Analyze your AWS accounts and provides recommendations.
Cost Optimization
Performance
Security (Some things are free)
Fault Tolerance 
Service Limits

For most stuff you need Business or Enterprise Support

Find underutilized/overutilized resources, security problems or service limit information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Control Tower

A

Easy set up of multiple accounts with best practices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Config

A

Record all resources configurations and compliance over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

CloudFormation

A

Infrastructure as code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Logging

A

Service Logs and Access Logs to S3 or CloudWatch Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

CloudTrail

A

Records API calls made within your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

TCO Calculator

A

Calculates the cost and savings of moving to the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Simple Monthly Calculator/Pricing Calculator

A

Tells you the estimated cost of services before you use them. SMC is being depreciated in favour of PC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Billing Dashboard

A

Overview of costs in AWS. Breaks down per service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Cost and Usage Reports

A

Most comprehensive cost reports. Can be integrated in with Athena, Redshift or QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cost Explorer

A

Visualise and manage AWS costs and usage. Create custom reports at a high level across accounts. Choose optimal savings plan. Forecast usage up to 12 months based on previous usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Billing Alarms

A

Billing data is stored in us-east-1, but is for worldwide cost. Actual cost, not projected. Simple alarm, not as powerful as budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Budgets

A

Create budget and send alarms when costs exceed budgets.
3 types of budgets: Usage, Cost, Reservation
For reserved instances:
track utilisation
Supports EC2, RDS, Redshift
5 SNS notifications per budget
Lots of filters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Athena

A

Fully Serverless database with SQL capabilities. Query S3. Pay per query. Output to S3.

24
Q

Redshift

A

Based on postgres. OLAP (data warehousing). Columnar.

25
Q

QuickSight

A

Dashboarding tool.

26
Q

CloudWatch Metrics

A

Variable monitor. Create dashboards.

27
Q

CloudWatch Alarms

A

Alarms for when metrics go above expected levels. Can also create Billing alarms

28
Q

CloudWatch Logs

A

Collect log files from various applications such as beanstalk, ECS, Lambda, On-Premises, DNS. Real-time monitoring of logs.

29
Q

CloudWatch Events

A

React to events on AWS. Cron Jobs etc. Send SNS, SQS messages.

30
Q

EventBridge

A

Next gen events. Default event bus for AWS services. Partner event bus for third party events. Custom event buses for own applications. Schema Registry

31
Q

CloudTrail

A

History of events / API calls made within AWS account. Can apply to various regions or all.

32
Q

What is encrypted by default?

A

s3 Glacier, AWS Storage Gateway

33
Q

Storage Gateway

A

Bridge to on-premises storage for hybrid storage.

34
Q

SSM

A

Systems Manager

Manage ECS and On-Premises systems at scale. Hybrid AWS service. Get operational insights of infra.

35
Q

Inspector

A

Automated Security Assessments for EC2 instances. Install inspector Agent on EC2 instance. Get a report

36
Q

Serverless

A

Lambda. Gateway. DynamoDB. S3. Kinesis. Aurora. Fargate. SNS. SQS. EFS. RDS Proxy. AppSync. Step Functions. Athena. EventBridge.

37
Q

Elastic Beanstalk

A

PaaS. Developer centric view of deploying. Control over config, but everything in one view.

38
Q

Lightsail

A

Easy to get up and running. Simple applications with little cloud experience. No autoscaling.

39
Q

Shared responsibility Model

A

AWS and user specific responsibilities. Some are shared. Use common sense!

40
Q

AMI

A

Amazon Machine Image

Customisation of EC2 instance. Specific region! Can buy on Marketplace.

41
Q

Types of computing

A
IaaS
Provide building blocks for cloud IT.
Infra only
EC2 etc.
PaaS
Don't need to manage infra. Deployment and management of applications
Beanstalk
SaaS
Completed product provided by the service provider
Rekognition
42
Q

EMR

A

Elastic MapReduce
Hadoop cluster (Big Data)
Analyse lots of data

43
Q

QuickSight

A

Create dashboards for analysing database with machine learning

44
Q

Neptune

A

Graph database

Social Network usage. Wikipedia

45
Q

QLDB

A

Quantum Ledger Database

Financial transactions. Immutable. Review changes over time.

46
Q

Managed Blockchain

A

Blockchain without the need for trusted, central authority

47
Q

DMS

A

Database Migration Service

48
Q

Glue

A

ETL service. Exract transform and load

Prepare and transform data sets for analytics

49
Q

1st Pillar: Operational Excellence

A
Run and monitor systems
Perform operations as code.
Automated documentation. 
Frequent small reversible changes
Refine operations procedures frequently
Anticipate Failure
Cloudformation
config
cloudtrail
cloudwatch
x-ray
CI/CD tools
50
Q

2nd Pillar: Security

A

Ability to protest information while delivering business value through risk assessment
Strong Identity foundation. IAM. Least Privilege.
Traceability.
Security at all layers.
protect data in transit and at rest
Prepare for security events

51
Q

Systems Manager

A

Centralize operational data from multiple AWS services and automate tasks across your AWS resources.

52
Q

What are the 5 pillars of well architected Framework?

A

OpSeRePeCo

Operational Excellence
Security
Reliability
Performance Efficiency 
Cost Optimisation
53
Q

Operational Excellence

A
1st Pillar
Operations as code
Annotate Documentation
Frequent and small, reversible changes
Refine operations frequently
Learn from failures
AWS Cloud Formation
AWS Config
CloudTrail
CloudWatch
X-Ray
CI/CD
CodeBuild
CodeCommit
CodeDeploy
CodePipeline
54
Q

Reliability

A

2nd Pillar

Strong Identity Foundation
Traceability
Security at all layers
Automate best practices
Protect in transfer and at rest
Keep people away from data
Prepare for security Events
IAM
STS 
MFA
Organisations
Config
Cloudtrail
CloudWatch
CloudFront
VPC
Shield
WAF
Inspector
KMS 
S3
ELB
EBS
RDS
CloudFormation
CloudWatch Events
55
Q

Reliability

A

3rd Pillar

Test Recovery Procedures
Automatically Recover from failure
Scale Horizontally
Stop guessing Capacity
Manage change in automation
IAM
VPC
Service Limits
AWS trusted advisor
Auto Scaling
CloudWatch
CloudTrail
Backups
CloudFormation
56
Q

What services can you reserve instances on?

A

EC2, dynamos, elasticache, rds, redshift

57
Q

What are the 5 elements of trusted advisor?

A
Cost Optimisation
Performance 
Security
Fault Tolerance 
Service Limits