Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Essentials > VPC > Flashcards

VPC Flashcards

1
Q

VPC

A

Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

VPC - Define

A

A private sub-section of AWS that you control, in which you can place AWS resources (such
as EC2 instances and databases). You have FULL control over who has access to the AWS
resources that you place inside your VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

VPC - AWS Definition

A

“Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section
of the Amazon Web Services (AWS) cloud where you can launch AWS resources in a virtual
network that you define. You have complete control over your virtual networking
environment, including selection of your own IP address range, creation of subnets and
configuration of route tables and network gateways.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

List the Standard Components of a VPC

A
  1. Internet Gateway (IGW)
  2. A Route Table (with predefined routes to the default subnets).
  3. A Network Access Control List (with predefined rules for access).
  4. Subnets to provision AWS resources in (such as EC2 Instance).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Internet Gateway (Simplified Definition)

A

A combination of hardware and software that provides your private network with a route to
the world outside (meaning the Internet) of the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Internet Gateway (AWS Definition)

A

An Internet gateway is a horizontally scaled, redundant and highly available VPC
component that allows communication between instances in your VPC and the Internet.
It therefore imposes no availability risks or bandwidth constraints on your network traffic.
NOTE: Your “default” VPC already has an IGW attached.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Internet Gateway (rules and details) you need to Know:

A

(1) Only 1 IGW can be attached to a VPC at a time
(2) An IGW cannot be detached from a VPC while there are active AWS resources in the
VPC (such as an EC2 instance or RDS Database)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Route Table?

A

A route table contains a set of rules, called routes, that are used to determine where
network traffic is directed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Route Table details you need to know:

A

(1) Unlike an IGW, you can have multiple “active” route tables in a VPC
(2) You cannot delete a route table if it has “dependancies” (associated subnets)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

NACL

A

Network Access Control List

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

NACL Definition

A

A network access control list (NACL) is an optional layer of security for your VPC that acts
as a firewall for controlling traffic in and out of one or more subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

NACL Inbound / Outbound Rule Basics

A

(1) Rules are evaluated based on
“rule #” from lowest to highest
(2) The first rule evaluated that
applies to the traffic type gets immediately applied and executed regardless of the rules that come
after (have a higher “rule #”).
(3) Default: Everything is set to deny.
(4) Any new NACLs you create DENY all traffic by default.
(5) A subnet can only be associated with ONE NACL as a time.
(6) An NACL allows or denies traffic from entering a subnet. Once inside the subnet, other
AWS resources (i.e. EC2 instances) may have an additional layer of security (security
groups).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

High Availability “Sounds” like

A

(1) “I can always access my data in the cloud”

(2) “My website never crashes and is always available to my customers”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Fault Tolerant “Sounds” like

A

(1) “One of my web servers failed, but my backup server immediately took over”
(2) “If something in my system fails, it can repair itself. ”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AZ (Acronym)

A

Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is an AZ?

A

Availability Zones are distinct locations that are engineered to be isolated from failures
in other Availability Zones. By launching instances in separate Availability Zones, you
can protect your applications from the failure of a single location. (Datacenters).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Describe AZ’s and VPCs

A

Any AWS resource that you launch (like EC2/RDS) must be placed in a VPC subnet. Any
given subnet must be located in an Availbility Zone. You can (and should) utilize multiple
Availabilty Zones to create redundacy in your architecture. This is what allows for High
Availabilty and Fault Toleratent systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

ELB

A

Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Load Balancing

A

Common method for distributing incoming traffic among servers.

20
Q

Is a ELB used within a VPC an internal or external load balancer.

A

Internal.

21
Q

What does ELB do if an EC2 instance becomes unhealthy?

A

It stops routing traffic to the unhealthy EC2 instance. Routes all traffic to the healthy instance.

22
Q

Can SSL certificates be applied to the ELB?

A

Yes.

23
Q

Auto Scaling

A

automates the process of increasing / decreasing the on-demand instances available for application.

24
Q

What service does Auto Scaling utilize for performance metrics?

A

Cloudwatch.

25
Q

Auto Scaling Launch Configuration

A

The EC2 template used when autoscaling needs to provision/terminate EC2 instances.

26
Q

Auto Scaling Group

A

All the rules/settings that govern if/when and EC2 instance is automatically provisioned or terminated.

27
Q

Autoscaling and ELB is required for the architecture to be considered highly available and fault tolerant. T/F

A

True - the instances have to be spread across at least 2 AZ’s.

28
Q

Classic Load Balancer

A

Simple balancing of traffic to multiple EC2 instances.
No granular routing rules.
Best used when all traffic is the same data regardless of instance.

29
Q

Application Elastic Load Balancer

A 
Complex balancing.
Content-Based Rules (Pictures,
 Videos,
 text, etc.)(Host, Path)
Supports ECS Containers, HTTP, HTTP/2, Web sockets, etc.
30
Q

ELB Order of Operations

A

EC2 Instances
Target Groups
Application ELB
Create content Rules.

31
Q

Bastion Host

A

EC2 instance that lives in public subnet and uses a gateway for traffic that is destined for an instance in a private subnet.
Critical Strong Point

32
Q

NAT Gateway

A

Designed to provide EC2 instances in private subnets a gateway to the internet. (Software packages, etc.).
Only allows return traffic unless the request originated from the instance in the private subnet.

33
Q

NAT Gateway Subnet essentials.

A

Must Be in Public Subnet

Must be associated with the Private subnet route table.

34
Q

VPN

A

Virtual Private Network

35
Q

VPN Essentials

A
  1. enables the ability to extend a subnet from one geographic location to another geographic location on two separate networks.
  2. Extending the subnets allows communication between all resources in the two subnets.
  3. “Extending” the on-premise network to the cloud or cloud to on-premise.
  4. VPN traffic is encrypted.
36
Q

T/F - A VPN has two parallel routes.

A

True - IPsec tunnels - which is for redundancy.

37
Q

How many Virtual Private Gateways can be attached to a VPC simultaneously?

A

One

38
Q

What components are required to establish a VPN connection with an on premises environment?

A

Customer Gateway
Virtual Private Gateway
Router (Route Tables).

39
Q

Customer Gateway

A

Physical device or software application at the on-premises location that acts as a connector to the VPN.

Customer gateway component is where you configure the public IP address.

40
Q

VPG

A

Virtual Private Gateway

Connector the VPN - AWS Side.

41
Q

AWS Edge Location

A
  1. AWS datacenter which does not contain AWS services.

2. It is used to deliver content to different parts of the world.

42
Q

CDN

A

Content Distribution Network.

43
Q

CloudFront

A

A global CDN - delivers content from an origin to an Edge location.

44
Q

Edge Location

A

Allows for caching of static objects from the origin location - reduce latency (web server - image traffic).

45
Q

CloudFront Benefits

A

Users experience lower latency and content load time.

Reduces load on your applications.

46
Q

Updating Cached files

A
  1. Caching is based off the object name.
  2. New object with same name or create invalidation to serve a new version.
  3. Invalidations have a cost. (create new distribution and move DNS names to reduce costs).
  4. Cached objects can be set to specific expiration date/times.
47
Q

Signed URLS

A

Allow access to private content by creating a temporary, one-time-use URL based off of the number of seconds you want it accessible.

Signed with a X.509 certificate.

AWS Essentials (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions