Things to Study Flashcards
What is Storage Gateway?
Hybrid cloud storage that connects to existing on-premises storage.
3 Types - File, Tape, and Volume Gateway
What are the types of Storage Gateway?
File Gateway, Tape Gateway, Volume Gateway.
What is WAF?
Web app firewall that protects apps against common exploits.
What does WAF do?
Blocks requests except ones you allow and can check for presence of SQL code (SQL injections).
What is AWS Direct Connect?
Establishes a dedicated connection from on-prem to AWS.
What is AWS Virtual Private Network (VPN)?
Establishes a secure connection between on-premises networks, remote offices, client devices, and the AWS global network.
What are the components of AWS VPN?
Comprised of Site-to-Site and Client VPN.
What is Site-to-Site VPN?
A resource in a VPC can’t talk to your own network. Set up a Site-to-Site VPN to let stuff in your VPC talk to your existing network.
What is AWS Virtual Private Cloud (VPC)?
Logically isolated section of the cloud where you can launch resources in a virtual network you define.
What are the components of a VPC?
Subnet, Route Table, Internet Gateway, VPC Endpoint, VPC Peering.
What is VPC Peering?
Connects two VPCs privately.
What is Transit Gateway?
Connects VPC and on-prem network through a central Hub.
What is an Internet Gateway?
VPC component that allows internet connection between your VPC and the internet.
What is a VPC Endpoint?
Privately connects your VPC to AWS services without requiring an internet gateway.
What are the types of VPC Endpoints?
Interface Endpoint - Private IP address that lets you connect VPC to some services (including SQS)
Gateway Endpoint - (S3, DynamoDB)
What is Virtual MFA?
Like Authy - lets you use MFA without a physical device.
What is a U2F Security Key?
Device you plug into USB port - what AWS uses.
What is the Well-Architected Framework?
OSRPCS: Operational Excellence, Security, Reliability, Performance efficiency, Cost optimization, Sustainability.
What is AWS Systems Manager Session Manager?
Fully managed service - interactive browser-based shell and CLI experience.
What can AWS Organizations do?
Centrally manage billing, share access across AWS accounts, automate account creation, govern access across services.
What is AWS Systems Manager?
View operational data from multiple services and manage resources. Can view ON-Prem & Cloud data in ONE PLACE
What does AWS Compute Optimizer do?
Recommends optimal AWS resources for workloads.
What is AWS Global Accelerator?
Improves availability and performance of apps with local or global users.
What is AWS Shield Advanced?
Provides real-time reports into attacks on the network layer, transport layer, and application layer.