Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect - Associate (SAA-C03) > SIMPLE STORAGE SERVICE (S3) > Flashcards

SIMPLE STORAGE SERVICE (S3) Flashcards

1
Q

Is S3 private by default?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What can S3 Bucket Policies be used for?

A
  1. Is Resource Police
  2. Allow or Deny same or different accounts
  3. Allow or Deny Anonymous principals (which Identity Policies are not able of)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When to use Identity and Bucket Policies?

A

Identity: control diff resources, only applicable for the same account
Bucket: just for S3, work with anonymous or cross-accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can you disable an Object Version after enabling it?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you suspend an Object Version after enabling it?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is MFA Delete?

A

MFA is required to change/delete bucket versioning state

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the maximum Single PUT Upload S3 Object size?

A

5GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the minimum Object size eligible for S3 Multipart Upload?

A

100MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the maximum number of parts allowed with Multipart Upload? What can be the minimum and maximum size of each part?

A

10.000 parts. Minimum: 5MB, Maximum: 5GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is S3 Transfer Acceleration?

A

S3 Transfer Acceleration uses Edge Locations to speed up the transfer of object to S3 (by default it is switched off, the bucket name cannot contain periods and needs to be DNS compatible)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is KMS?

A
  1. Key Management Service
  2. It is regional and public service
  3. Keys never leave KMS. IMPORTANT: provides FIPS 140-2 (L2)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is file max size that KMS can work with?

A

4 KB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can be used to overcome KMS file limitation of 4 KB?

A

DEK: Data Encryption Keys. In this case the user is responsible by encrypting and decrypting data manually.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can you extract a KMS key or make it leave a region?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

IMP: Study KMS Keu Policies

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is S3 SSE?

A

Server-Side Encryption (bucket cannot be enrypted, only objects)

17
Q
A
18
Q

What are the different types of SSE?

A
  1. SSE-C: Customer-Provided
  2. SSE-S3: Amazon S3-Managed Keys (default)
  3. SSE-KMS: KMS Keys Stored in AWS Key Management Service
18
Q

Is S3 SSE mandatory?

A

Yes

18
Q

IMP: S3 Storage Classes

A

!!!

19
Q

What are S3 Lifecycle Configurations?

A

Set of rules. Transition actions and expiration actions

20
Q

What is the exception in S3 Lifecycle Configuration - Transition actions?

A

You can transition in a “water-fall”manner to the Storage Classes below the current class, except for the S3 One Zone-IA that cannot transition to S3 Glacier - Instant Retrieval

21
Q

IMP: Study well S3 Lifecycle Configuration - Transition actions

A

!!!

22
Q

What are S3 Replication types?

A
  1. Cross-Region Replication (CRR)
  2. Same-Region Replication (SRR)
23
Q

What are some S3 Replication Considerations?

A
  1. By default, replication is non retroactive (it start from the moment you request replication even if the bucket already have objects). But you can use batch replication to overcome this situation
  2. Versioning needs to be ON
  3. By default, it is one-way replication process, from source to destination
  4. No system events are replicated
  5. No Glacier or Glacier Deep Archive objects can be replicated
  6. By default, deletes are replicated between buckets
24
Q

What is S3 Presigned URL?

A

Should be used when there is an unauthenticated user that needs to temporarily access a private S3 Bucket, and we do not want to give him a specific IAM Identity nor provide AWS credentials

25
Q

Can you create a Presigned URL for a S3 object you have no access to?

A

Yes

26
Q

Does the permissions associated to a Presigned URL match the identity which generated it?

A

Yes

27
Q

Is it OK to generate a Presigned URL with a role?

A

No. URL stops working when temporary credentials expire

28
Q

What is S3 Select and Glacier Select?

A

It lets you use SQL-Like statements to select part of the object, pre-filtered by S3

29
Q

What are the types of S3 Event Notifications?

A
  1. Create
  2. Delete
  3. Restore
  4. Replicate
30
Q

What is S3 Object Lock?

A

Applies WORM principle (Write-Once-Read-Many), with no delete and no overwrite. Requires versioning

31
Q

What are S3 Object Lock types?

A
  1. Retention period (days or years)
    a. Compliance: can’t be adjusted, deleted or overwritten even by root user until retention expires
    b. Governance: like Compliance but special permissions can be granted to adjust lock settings
  2. Legal Hold: no retention period. It is set on Object version - ON or OFF. There are NO deletes or changes until removed
32
Q

What is S3 Access Points?

A

Is simplify managing access to S3 Buckets and Objects. Instead of having 1 Bucket policy, it is possible to:
1. create many access points
2. each w/ different policies
3. each w/ different network access controls
With one address endpoint to each access point.

33
Q

What is the AWS CLI command to create a S3 Access Point?

A

aws s3control create-access-point –name <A_NAME> -- account-id <A_NUMBER> --bucket <A_BUCKET></A_BUCKET></A_NUMBER></A_NAME>

AWS Certified Solutions Architect - Associate (SAA-C03) (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions