Aws Missed Concepts

Front 1

5 Pillars of AWS

Back 1

1. Operational Excellence

2. Reliability

3. Performance Efficiency

4. Security

5. Cost Optimization

Front 2

AWS Command Line

Back 2

Sets up AWS services through a CL (including MFA). Can use scripts

Front 3

AWS Organizations

Back 3

Control over users and roles in a group of accounts

Front 4

AWS Guard Duty

Back 4

Gives guidance against security threats and DdoS attacks. Can work with CloudWatch and Lambda to automate remediation actions

Front 5

Amazon CloudTrail

Back 5

Tracks WHO, HOW, WHEN, makes changes

Front 6

AWS Config

Back 6

WHAT changes were made. Asses, audit, and evaluate relationship of resources

Front 7

Reserved Instances

Back 7

1 or 3 year contract for instances. Good for consistent use.

Front 8

Reserved Instances - Partial Upfront

Back 8

Pay partial upfront and discounted rate afterwards

Front 9

Reserved Instances -No upfront

Back 9

Pay no money upfront but pay over time. No discounts

Front 10

AWS Service Quotas

Back 10

Limit on maximum number of service operations on an account

Max # can be seen in Trusted Advisor

Can change max # by contacting AWS Support

Front 11

AWS WAF

Back 11

Firewall potection for web applications. Monitors HTTP/S requests to Cloudfront, load balancers, and API gateways.

Can protect websites NOT hosted on AWS

Front 12

AWS Lambda

Back 12

Runs code with no admin burden

Has usage plans

Inheritantly elastic

Front 13

Ec2 instance pricing variables

Back 13

1. Buying option

2. Instance type

3. Region

4. Number of instances

5. Load balancing

6. Allocated elastic ip addresses

Front 14

Amazon RDS

Back 14

Relational database service

Allows for multiple AZ deployment

Read copies can be deployed across regions

Front 15

Application load balancer

Back 15

Load balancer for HTTP/S requeste

Front 16

Network Load Balancer

Back 16

Used for TCP/UDP applications

Front 17

CloudFront

Back 17

Distributes CACHED (not actually instances or storage) content to edge location

NOT Network related

Cost based on Traffic, requests, and data transfer out

Front 18

Amazon Machine Image

Back 18

Image of instance that can be easily created. A template

Front 19

Amazon Elastic Map Reduce

Back 19

A managed cluster platform that simplifies running big data frameworks

Front 20

AWS ACM

Back 20

Certificate manager (SSL)

Front 21

IAM Policies

Back 21

Granular control over what users & roles individual accounts can do

Front 22

AWS Service Control Policies

Back 22

AWS Organizations service policies that are applied to multiplied accounts

Front 23

Are EC2 instances inheritantly elastic?

Back 23

No. They have to be configured to adjust to demand

Front 24

Are S3 buckets elastic

Back 24

Yes. They will scale by default with no prior configuration

Front 25

Are Lambda scripts elastic?

Back 25

Yes. They are elastic by default without configuration

Front 26

How does S3 protect data at rest?

Back 26

Through versioning, permissions, and AWS Macie

Front 27

AWS Migration evaluator

Back 27

Creates business cases for migrating DB's to AWS

Front 28

S3 One-Zone IA

Back 28

Infrequent Access storage that can be accessed rapidly when needed

Front 29

S3 Standard IA

Back 29

Used for backup, but not as cost effective as One Zone

Front 30

Benefits of Dynamo DB

Back 30

Performance at scale/elasticity

Server less

Highly available and low latency

Front 31

CloudFormation

Back 31

Allows you to manage infrastructure as code. Ci/CD pipelines to setup infrastructure.

Can spin up RDS instances

Front 32

Amazon EBS

Back 32

Block storage. Used for frequent and rapid read/write activity

Attached to a single instance. Similar to a hard drive

Not Encrypted by default

Replicated and Stored in a single availability zone through snapshots and AUTOMATED backups

Front 33

Load Balancer

Back 33

Distributes traffic between targets. Checks the health of the target before sending info

Front 34

AWS Service Catalog

Back 34

Simplifies and organized commonly deployed IT services

Front 35

Amazon VPC

Back 35

Private networks within a cloud

Front 36

AWS Trusted Advisor

Back 36

Reduce costs,

improve performance,

improve security

Improve compliance

Front 37

Virtual Private Gateway

Back 37

Gateway to a private VPC

Front 38

TOC

Back 38

Total cost of ownership. Applies to labor, IT, maintanence, power/cooling costs of data centers

Front 39

Amazon Chime

Back 39

Let's you meet, char, and make business calls outside your organization

Front 40

Is data sovereignty applicable to regions?

Back 40

Yes. Data sovereignty is a considerable factor when picking a region

Front 41

Amazon route 53

Back 41

Service for DNS registration, and health checking web service

Front 42

AWS Savings plan

Back 42

1 or 3 year contract for consistent usage. However, you can use any instance config (#,type, etc of ec2s).

Reserved Instances you are locked into an instance confirmation

Front 43

Amazon SQS

Back 43

A queuing system to decouple existing and monolithic systems.

Front 44

Horizonal scaling

Back 44

Adding more instances instead of upgrading them. Always do horizontal scaling (increasing # of instances) over vertical scaling (upgrading computational power)

Front 45

AWS Support plan order

Back 45

1. Basic

2. Developer

3. Business

4. Enterprise

Front 46

Basic Support Plan

Back 46

Free basic Support for every AWS user

- 24/7 customer service

- Documentation

- white papers

- Support forms

- Limited AWS Trusted Advisor features

- AWS personal Healthboard

Front 47

Developer tier

Back 47

Basic Support Tier + can email AWS Support directly and have a max 12 hour response time

Front 48

Business Support

Back 48

Everything in Developer Support +

- full AWS Trusted Advisor at a low cost

- AWS Health API

- Direct phone and live chat access to AWS Support

- 4 hour response on delayed prod systems

- 1 hour response on downed prod systems

Front 49

Enterprise support plan

Back 49

Everything in business support plan +

- personal technical account manager

- 15 minute response for critical workload issues

Front 50

Native Lambda Programming languages

Back 50

- C#

- Java

- Go

- PowerShell

- Ruby

- Python

- Can run any language through a runtime api

Front 51

IAM roles

Back 51

Temporary credentials and permissions for AWS accounts. Can be rotated automatically for security reasons

Front 52

Where are Edge Locations located?

Back 52

Outside of regions in multiple cities

Front 53

AWS Professional Services

Back 53

Assists costumers in achieving their desired business outcomes

Front 54

AWS Cloud Directory

Back 54

Web-based directories to organize and manage hierarchy of users, groups, locations, policies, and devices

Front 55

AWS OpsWorks

Back 55

Manages instances of Chef and Puppet

Chef and Puppet automate how servers are configured, deployed and managed across EC2 instances

Front 56

AWS Storage Gateway

Back 56

Allows on premise applications to use AWS Storage such as S3, EBS, etc

Front 57

FIDO Security Key

Back 57

MFA device

Front 58

AWS Outposts

Back 58

Hybrid where AWS services, apis, infrastructure, and tools can be used at local data centers

Front 59

Amazon Connect

Back 59

Cloud contact center. Low-cost customer service

Front 60

AWS Federation

Back 60

Used for IdP

Front 61

AWS Infrastructure Event Manager

Back 61

Offers architecture and scaling guidance and operational support

Front 62

Amazon EMR

Back 62

Big Data management

Front 63

Security credentials for IAM account?

Back 63

Username and password

Front 64

AWS DyamoDB

Back 64

NoSQL Database with key-pairing values.

Multi-AZ fault tolerance. Stored SSD and replicated across multiple AZ

Scales automatically. RDS does not scale automatically

Front 65

BYOL

Back 65

Bring your own (existing) license. Can be used on only Dedicated hosts. New licenses given on reserved hosts

Front 66

APN Consulting Partners

Back 66

Professional Service to help customers design, architect, build, migrate, and manage workloads for AWS applications

Front 67

Elasticache

Back 67

In-memory data store for read-heavy applications

Front 68

AWS Identity Center

Back 68

Manages SSO connections to your AWS accounts and cloud pplications using SAML 2.0

Front 69

AWS Site-to-site

Back 69

Securely connects on-prem network or branch office site to AWS using IPSec

Front 70

AWS Client VPN

Back 70

Enables you to securely connect users to AWS or on-prem networks from any location. Uses TLS connection

Front 71

Amazon S3

Back 71

Storage type. Comes with different usage plans. Good for static content and data stored for long periods of time

Up to 5 TB per S3.

Unlimited S3 per AWS account

Front 72

Amazon EFS

Back 72

Storage type. Allows multiple instances to access data at the same time.

Regional resource

Automatically scales

Can be used on prem

Encrypted by default

Front 73

S3 Glacier

Back 73

Deep storage type. Split into 3 types:

Instant retrieval - retrieves data instantly. Most expensive

Flexible retrieval - retrieves data within 1-5 minutes to 12 hours

Deep - retrieves data in 12 hours

Front 74

AWS QuickSight

Back 74

Generates high-level reports of insightful business intelligence

Front 75

AWS Personal Health Dashboard

Back 75

Alerts/dashboard for AWS service availability and performance that may affect resources deployed

Front 76

When can you change security groups?

Back 76

When the associated instance is in the "running" or "stopped" state

Front 77

Is instance Savings Plans available everywhere?

Back 77

No it is not available in China

Front 78

Amazon Workspaces

Back 78

Manages virtual desktops for remote users

Front 79

Amazon Inspector

Back 79

Provides security inspection on your infrastructure setup

Front 80

Amazon Neptune

Back 80

Graph type AWS managed DB

Front 81

AWS Elastic Disaster Recovery

Back 81

Provides fast, reliable recovery of physical, virtual, and cloud based servers

Front 82

AWS Cost Explorer

Back 82

Dive into your usage Data to identify cost drivers and detect anomalies.

Checks from the last 12 months, and forecasts to the next 12.

Details Reserved and Dedicated Instance utilization

Front 83

S3 infrequent access

Back 83

Infrequent data, but needs to be accessed immediately.

Front 84

Amazon Lightsail

Back 84

Easy way to launch web servers on aws

Front 85

AWS CodeBuild

Back 85

Compile and test code

Front 86

Databases that can run on RDS

Back 86

1. Amazon Aurora,

2.Postgres,

3.MySQL

4.MariaDB

5.Oracle DB

6. MSSQLS

Front 87

AWS CloudFormation

Back 87

Allows you to build infrastructure with just a text file

Front 88

Biggest charges in AWS

Back 88

Compute charges

Data Transfer Out charges

Front 89

Cloud HSM

Back 89

Manages security keys

Front 90

AWS CloudWatch

Back 90

Used to send alarms based on triggers

Front 91

AWS Ground Station

Back 91

Satilites

Front 92

Amazon Aurora

Back 92

Used for MySQL and Postgres DB. High performance and auto data replication

Front 93

ECS launch types

Back 93

Fargate: server less

EC2: server-based

Front 94

5 Pillars of operational Excellence

Back 94

1. Perform operations as code

2. Make frequent, small reversible changes

3. Refine operations procedures frequently

4. Anticipate failure

5. Learn from all operational failires

Front 95

AWS Transit gateway

Back 95

Network transit hub they simplifies VPC connections

Front 96

Inherited controls

Back 96

Physical and environmental controls

Front 97

Shared controls

Back 97

Patch management

Configuration management

Awareness and training