Aws Certified Developer Associate Course

Front 1

Availability Zone

Back 1

A data center, designed to be isolated from failures.

Front 2

Region

Back 2

Geographical area containing 2 or more Availability Zones. There are currently 11.

Front 3

Edge Location

Back 3

CDN (Content Delivery Network) endpoint for CloudFront. It's where files are cached. There are currently over 50.

Front 4

VPC

Back 4

Virtual Private Cloud. Lets you provision a logically isolated section of the AWS cloud where you can launch AWS resources in a virtual network that you define. Have complete control over the IP address range, creation of subnets, and configuration of route tables and network gateways. Can use with VPNs. By default, allowed 5 VPCs in each AWS region.

Front 5

Route53

Back 5

AWS' DNS service, play on Route 66, runs on port 53.

Front 6

S3

Back 6

Simple Cloud Storage Service, object-based storage. Not suitable for installing an OS or running a database. "Unlimited" storage. File sizes up to 5 TB. Bucket names must be globally unique. Data is stored lexicographically (in alphabetical order). By default, all newly created buckets are private.

Front 7

CloudFront

Back 7

Content Delivery web service, uses edge locations.

Front 8

Glacier

Back 8

For data archiving and long-term backup. Can take 3 - 5 hours to retrieve a file.

Front 9

EFS

Back 9

Elastic File System. For EC2 instances, block-level storage.

Front 10

DMS

Back 10

Database Migration Service. Allows you to migrate your production database to AWS. AWS manages data-type transformation, compression, and parallel transfer, and ensures that data changes to the source database that occur during the migration process are automatically replicated to the target. Can help you switch from Oracle (paid) to MySQL (free).

Front 11

IAM

Back 11

Identity Access Management, allows you to create/manage users, groups, and roles, and their level of access to the AWS console. It is not region-specific.

Front 12

KMS

Back 12

Key Management Service.

Front 13

CloudTrail

Back 13

For auditing changes on AWS. Provides a record of your AWS API calls. You can use this data to gain visibility into user activity, troubleshoot operational and security incidents, or to help demonstrate compliance with internal policies or regulatory standards.

Front 14

SES

Back 14

Simple Email Service.

Front 15

SQS

Back 15

Simple Queue Service. AWS' first service offering. Distributed queue system that enables web service applications to quickly and reliably queue messages that one component in the app generates to be consumed by another component. They are stored in the queue while awaiting processing. Messages can contain 256KB of text, can be delivered more than once, and does not guarantee FIFO. Billed at 64KB chunks. Default visibility timeout is 30 seconds - can be extended up to 12 hours with ChangeMessageVisibility endpoint.

Front 16

SWF

Back 16

Simple Workflow Service. Makes it easy to coordinate work across distributed application components, as a coordination of tasks. Brokers the interactions between workers and deciders. Allows the decider to get consistent views into the progress of tasks and to initiative new tasks. Stores tasks, assigns workers, monitors their progress, and maintains the application's state. Ensures tasks don't get duplicated. Max workflow length is one year, and the length is measured in seconds.

Front 17

SNS

Back 17

Simple Notification Service. Allows you to setup, operate, and send notifications from the cloud. Can publish messages from an application and immediately deliver them to subscribers or other applications. Has a "publish-subscribe" messaging paradigm. Uses a push mechanism so clients don't have to poll.

Front 18

IAM Group

Back 18

Collection of IAM Users under 1 set of permissions.

Front 19

IAM Role

Back 19

Similar to a IAM User, in that it is an identity with permission policies that determine what the identity can and cannot do in AWS. Does not have any credentials (password or access keys) associated with it. Intended to be assumable by anyone (IAM user) who needs it.

Front 20

IAM User

Back 20

An IAM user is an entity that you create in AWS. The IAM user represents the person or service who uses the IAM user to interact with AWS.

Front 21

IAM Policy

Back 21

Document that defines one or more permissions. Can attach to IAM users, groups, and roles.

Front 22

ADFS

Back 22

Active Directory Federation Service. Provides users with single sign-on access to systems and applications located across organizational boundaries. You authenticate through ADFS first, which returns a SAML cookie, allowing you to login to AWS with a temporary security credential.

Front 23

SAML

Back 23

Secure Assertive Markup Language.

https://signin.aws.amazon.com/saml

Front 24

Web Identity Federation

Back 24

For logging in with social media accounts like Facebook or LinkedIn. First you login to the social media account, which gives you a security token, which you use to get into AWS and obtain a temporary security credential, using a call to the AssumeRoleWithWebIdentity endpoint.

Front 25

True or False? Once an EC2 instance has been created, you cannot switch its role. You can only change the permissions that that role has been assigned.

Back 25

True.

Front 26

EC2

Back 26

Elastic Compute Cloud. An instance is a virtual server in the AWS cloud. With Amazon EC2, you can set up and configure the operating system and applications that run on your instance.

Front 27

EC2 Spot Instances

Back 27

Allow you to bid on spare Amazon EC2 computing capacity. Often available at a discount compared to On-Demand pricing. As soon as the price rises above your bid, the instance is stopped.

Front 28

EBS

Back 28

Elastic Block Storage. Allows you to create storage volumes and attach them to EC2 instances. You can create filesystems, run databases, or any way you would use a block device. Placed in a specific availability zone, where they are automatically replicated to protect against failures.

Front 29

True or False? You cannot mount an EBS volume to multiple EC2 instances.

Back 29

True. You'd have to use EFS (Elastic File System) instead.

Front 30

True or False? You can assign roles to existing EC2 instances.

Back 30

False, you have to assign roles at the time of creation.

Front 31

Instance metadata

Back 31

http://169.254.169.254/latest/meta-data/

Can only be accessed from within the instance itself. Not encrypted.

Front 32

ELB

Back 32

Elastic Load Balancer. Can have multiple SSL certificates. Before using, must configure at least one Listener that will check for connection requests to your load balancer.

Front 33

ELB Listener

Back 33

A process that checks for connection requests to your load balancer. Must be configured with a protocol/port for the front-end (client to load balancer) connections and a protocol/port for the backend (load balancer to backend instance) connections.

Front 34

Supported ELB Protocols

Back 34

HTTP(S), TCP, SSL

Front 35

HTTP Codes

Back 35

200 = Success

3xx = Redirection

4xx = Client Error

5xx = Server Error

Front 36

Available AWS SDKs

Back 36

Android, iOS, JavaScript

Java

.NET

Node.js

PHP

Python

Ruby

Go

C++ (still in preview)

Front 37

AWS SDK Default Region

Back 37

US-EAST-1 (North Virginia)

Front 38

EC2 Instance Types

Back 38

D for Density

I for IOPs

R for RAM

T for Cheap... general purpose

M for Main choice, for general purpose apps

C for Compute (CPU Intensive)

G for Graphics

Front 39

S3 Object Consistency

Back 39

Read after Write consistency for PUTs of new objects.

Eventual Consistency for overwrite PUTs and DELETEs.

Front 40

S3 Tiers

Back 40

S3 Standard - 99.99% availability, "11 - 9's durability"

S3-IA - Infrequently Accessed data, but requires rapid access when needed. Costs less but has a retrieval fee.

RRS - Reduced Redundancy Storage. Data is less durable, use if it's ok to lose some. Costs less than standard tier.

Glacier - very cheap. Archival. Can take 3 - 5 hours to restore a file from it.

Front 41

URL for accessing an S3 Bucket online

Back 41

https://s3-region-name.amazonaws.com/bucket-name

Front 42

URL for accessing an S3 static website

Back 42

https://website-name.s3-website-region-name.amazonaws.com

Front 43

S3 and CORS

Back 43

CORS = Cross-Origin Resource Sharing

Have to add CORS config in the bucket that's receiving requests from other places; the "allowed origins" being the places making the requests, whether those be other buckets or websites.

Front 44

CDN

Back 44

Content Delivery Network. A system of distributed servers (network) that delivers web content to a user based on their geographic location, the origin of the web content, and a content delivery server. Content is sent to the nearest edge location to the user, so it can be cached.

Front 45

(CDN) Distribution and Types

Back 45

A CDN consisting of a collection of edge locations.

Web Distribution - for websites

RTMP Distribution - for media streaming, uses Adobe Flash Media Server's Real-Time Messaging Protocol.

Front 46

S3 Transfer Acceleration

Back 46

Utilizes CloudFront Edge Network to accelerate uploads to S3. Costs extra.

https://your-website.s3-accelerate.amazonaws.com

Front 47

Storage Gateway Types

Back 47

Gateway Stored Volumes - entire dataset is stored onsite and is asynchronously backed up to S3.

Gateway Cached Volumes - entire dataset is stored on S3 and the most frequently accessed data is cached onsite.

Gateway Virtual Tape Library - used for backup and uses popular backup applications like Netbackup, Backup Exec, Veam, etc...

Front 48

S3 Bucket Encryption

Back 48

Amazon uses Advanced Encryption Standard 256.

Front 49

Supported Relational Databases

Back 49

SQL Server

Oracle

MySQL Server

PostgreSQL

Aurora

MariaDB

Front 50

OLTP and OLAP

Back 50

OLTP - Online Transaction Processing - run on the original copy of the database.

OLAP - Online Analytics Processing - run on the data warehouse copy of the database.

Front 51

Elasticache

Back 51

Service that makes it easy to deploy, operate, and scale an in-memory cache in the cloud. Supports Memcached and Redis, which are open-source in-memory caching engines.

Front 52

DynamoDB

Back 52

NoSQL database service, supports both document-based and key-value data models. Runs exclusively on SSDs. Total size of an item (including attribute names and values) cannot exceed 400KB. Spread across 3 geographically distinct data centers. Can have up to 35 levels of nesting. Uses primary keys.

Front 53

DynamoDB Primary Key Types

Back 53

Single attribute - think unique ID, called a hash or partition key.

Composite - composed of 2 attributes, consists of a Partition/Hash key and a Sort/Range key.

Front 54

Partition Key

Back 54

DynamoDB uses the partition key's value as an input to an internal hash function. The output determines the partition (the physical location in which the data is stored).

No two items in a table can have the same partition key value.

Front 55

Local Secondary Index

Back 55

Has the same partition key, but a different sort key than the default set for a table. Can only be created when creating the table.

Front 56

Global Secondary Index

Back 56

Has a different partition key and a different sort key than the default set for a table. Can be created at the time of table creation, or later.

Front 57

DynamoDB Streams

Back 57

Used to capture any kind of modification of the tables. Can be used to trigger Lambda functions.

New item - stream captures an image of the entire item.

Updated item - stream captures the before and after image of any attributes that were modified in the item.

Deleted item - stream captures an image of the entire item before it was deleted.

Front 58

Query

Back 58

A query operation finds items in a table using only primary key attribute values. You must provide a partition attribute name and a distinct value to search for. Can optionally provide a sort key attribute name/value and use a comparison operator to refine the search results. By default returns all attributes - use ProjectionExpression parameters to refine which attributes are returned. Results are sorted by the Sort key if provided, in ascending order. Set the ScanIndexForward param to reverse it.

Front 59

Scan

Back 59

Examines every item in the table and returns all the data (and all it's attributes). Use ProjectionExpression parameters to refine which attributes are returned. Have to add "filters" to limit the result set. Far less efficient than using a query.

Front 60

DynamoDB Provisioned Throughput Calculations

Back 60

Read Throughput = [((size of read rounded up to multiple of 4KB) / 4KB) * (# of items)] / (2 if eventually consistent)

Write Throughput = [(size of write) * (# of items)]

Front 61

What is the HTTP error you receive when you've exceeded your provisioned throughput for a table or your global secondary indexes?

Back 61

400 ProvisionedThroughputExceededException

Front 62

BatchGetItem

Back 62

API call to retrieve up to 100 items, or up to 1MB of data. Can retrieve from multiple tables at once.

Front 63

SQS Long Polling

Back 63

Way to retrieve messages from your SQS queue. Traditional short polling returns immediately. SQS long polling doesn't return a response until a message arrives in the queue, or the long poll times out, at 20 seconds. Long polling makes it easy and cheap to retrieve messages from the queue as soon as they're available.

Front 64

SNS Topic

Back 64

Allows you to group multiple recipients. A topic is an "access point" for allowing recipients to dynamically subscribe for identical copies of the same notification.

Front 65

SNS vs SQS

SQS vs SWF

Back 65

SNS uses push, SQS uses pull/poll

SQS allows messages to be duplicated, SWF prevents tasks from being duplicated

Front 66

SNS Protocols

Back 66

HTTP(S)

Email

Email-JSON

Amazon SQS

Application

Can customize message per protocol.

Front 67

SWF Tasks

Back 67

Invocations of various processing steps in an application which can be performed by executable code, web service calls, human actions, and scripts.

Front 68

SWF Workers

Back 68

Program that interacts with Amazon SWF to get tasks, process received tasks, and return the results.

Front 69

SWF Deciders

Back 69

Program that controls the coordination of tasks, i.e., their ordering, concurrency, and scheduling according to the application logic.

Front 70

SWF Domain

Back 70

Your workflow and activity types and the workflow execution itself are all scoped to a domain. Domains isolate a set of types, executions, and task lists from others within the same account. You can only register a domain by using the AWS management console or by using the RegisterDomain API call.

Front 71

CloudFormation

Back 71

Service that allows you to script your infrastructure. Can choose from preexisting stack/templates. The service is free, but any resources it allocates are not necessarily. Use the GetAtt function to get information. Has Rollback enabled by default - if there's an error in the script, it'll de-provision all the resources it created.

Front 72

Elastic Beanstalk

Back 72

Free service, but pay for the resources it creates. For deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.

Front 73

VPC Pairing

Back 73

Allows you to connect VPCs via a direct network route using private IP addresses. Instances behave as if they were on the same private network. You can peer VPCs with other AWS accounts as well as with VPCs in the same account. There is no "transitive peering."

Front 74

CIDR

Back 74

Classless Inter-domain Routing. Subnetting, range of IP addresses to be used. Subnets are assigned to one availability zone.

Front 75

Internet Gateway

Back 75

An Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the Internet.

Front 76

NAT

Back 76

Network Address Translation (remaps one IP address space into another by modifying network address information in Internet Protocol datagram packet headers while they are in transit across a traffic routing device. You have to disable Source/Destination Checks.

Front 77

ACL

Back 77

Network Access Control Lists. Like a firewall, can create network rules across entire subnets. Numbered list of rules checked in order. By default, starts as closed (nothing allowed through). Subnets can only be associated to one ACL at a time.

Front 78

RedShift

Back 78

AWS' data warehousing service.

Front 79

Elastic Map Reduce

Back 79

Allows organizations to do complex analysis on large volumes of data.