Advanced S3: Cloudfront, Snowball, Storage Gateway, Athena Flashcards

1
Q

Explain S3 MFA-Delete

A

MFA (multi factor authentication) forces user to generate a code on a device (usually a mobile phone or hardware) before doing important operations on S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In order To use MFA-Delete, enable ____ on the S3 bucket

A

Versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

• You will need MFA to

A
  • permanently delete an object version

- suspend versioning on the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You won’t need MFA for..?

A
  • enabling versioning

* listing deleted versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Only this user can enable/disable MFA-delete

A

bucket owner (root account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

MFA-Delete currently can only be enabled using the….

A

CLI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What’s evaluated first, Bucket Policies or “default encryption”

A

Bucket Policies are evaluated before “default encryption”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 Cross Region Replication can be in different accounts?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 Cross Region Replication is async?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 pre-signed URLs are valid for a default ..?

A

Valid for a default of 3600 seconds, can change timeout with –expires-in [TIME_BY_SECONDS] argument

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Users given a pre-signed URL inherit what?

A

the permissions of the person who generated the URL for GET / PUT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Give some examples of S3 pre-signed URLs

A
  • Allow only logged-in users to download a premium video on your S3 bucket
  • Allow an ever changing list of users to download files by generating URLs dynamically • Allow temporarily a user to upload a file to a precise location in our bucket
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS CloudFront and what does it do?

A
  • Content Delivery Network (CDN)
  • Improves read performance, content is cached at the edge
  • 136 Point of Presence globally (edge locations)
  • Popular with S3 but works with EC2, Load Balancing
  • Can help protect against network attacks
  • Can provide SSL encryption (HTTPS) at
  • CloudFront can use SSL encryption (HTTPS) to talk to your applications
  • Support RTMP Protocol (videos / media)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudFront signed URL can only be created using?

A

AWS SDK, so you have to code an application to verify users and generate these URLs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is CloudFront great for?

A

Great for static content that must be available everywhere

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is S3 Cross Region Replication Great for?

A

Great for dynamic content that needs to be available at low-latency in few regions.

Must be setup for each region you want replication to happen
Files are updated in near real-time
Read only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are S3 Storage Tiers?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Reduced Redundancy Storage (deprecated) • Amazon S3 Intelligent Tiering (new!)
  • Amazon Glacier
18
Q

What is S3 Standard – Infrequent Access (IA) suitable for?

A

Suitable for data that is less frequently accessed, but requires rapid access when needed

19
Q

Use case of S3 (IA)

A

• Use Cases: As a data store for disaster recover y, backups…

20
Q

S3 One Zone - Infrequent Access (IA) Use Case

A

• Use Cases: Storing secondary backup copies of on-premise data, or storing data you can recreate

21
Q

What’s S3 Glacier meant for?

A

• Low cost object storage meant for archiving / backup

22
Q

How much storage can each archived item in glacier hold?

A

Up to 40TB

23
Q

Archives are stored in what?

A

Vaults

24
Q

What is S3 Lifecycle Rules?

A

• Set of rules to move data between different tiers, to save storage cost

25
Q

What is S3 Lifecycle Transition actions?

A

It defines when objects are transitioned to another storage class.

26
Q

What is S3 Lifecycle Expiration actions?

A

Helps to configure objects to expire after a certain time period. S3 deletes expired objects on our behalf

27
Q

this Can be used to delete incomplete multi-part uploads!?

A

S3 Lifecycle Rules

28
Q

Snowball Edge vs Snowball?

A

Snowball Edges add computational capability to the device
• 100TB capacity with either:
• Storage optimized – 24 vCPU
• Compute optimized – 52 vCPU & optional GPU
• Supports a custom EC2 AMI so you can perform processing on the go
• Supports custom Lambda functions

29
Q

What is AWS Storage Gateway?

A
  • Bridge between on-premise data and cloud data in S3

* Use cases: disaster recovery, backup & restore, tiered storage

30
Q

What are the 3 types of storage gateway?

A
  • File Gateway

* Volume Gateway • Tape Gateway

31
Q

Storage Gateway - File Gateway supports what?

A

Supports S3 standard, S3 IA, S3 One Zone IA

32
Q

Storage Gateway - Define Volume Gateway?

A
  • Block storage using iSCSI protocol backed by S3
  • Backed by EBS snapshots which can help restore on-premise volumes! • Cached volumes: low latency access to most recent data
  • Stored volumes: entire dataset is on premise, scheduled backups to S3
33
Q

Storage Gateway - Define Volume Gateway?

A
  • Some companies have backup processes using physical tapes (!)
  • With Tape Gateway, companies use the same processes but in the cloud • VirtualTape Library (VTL) backed by Amazon S3 and Glacier
  • Back up data using existing tape-based processes (and iSCSI interface)
  • Works with leading backup software vendors
34
Q

If exam mentioned on premis data, that means what?

A

Storage gateway

35
Q

File access / NFS refers to what?

A

File Gateway

backed by S3

36
Q

Volumes / Block Storage / iSCSI refers to what?

A

Volume gateway (backed by S3 with EBS snapshots)

37
Q

VTLTape solution / Backup with iSCSI

A

Tape Gateway (backed by S3 and Glacier)

38
Q

What is Athena?

A

Serverless service to perform analytics directly against S3 files

39
Q

Athena uses what query language?

A

Uses SQL language to query the files

40
Q

What are you charged to use Athena?

A

Charged per query and amount of data scanned