AWS Sections 1 through 6 Flashcards
Review concepts from sections 1 through 6 of Stephane Maarek's AWS Certified Developer Associated DVA C01 course (Section 1: Course Intro, Section 2: Code & Slides Download, Section 3: Getting started with AWS, Section 4: IAM & AWS CLI, Section 5: EC2 Fundamentals, and Section 6: EC2 Instance Storage). Most of these sentences are (or are basically) Stephane's exact words.
What is a proper definition of an IAM Role?
An IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS service
Some AWS services need to perform actions on your behalf. To do so, you assign permissions to AWS services with IAM Roles.
Which of the following is an IAM Security Tool?
- IAM Credentials Report
- IAM Root Account Manager
- IAM Services Report
- IAM Security Advisor
IAM Credentials Report
IAM Credentials report lists all your AWS Account’s IAM Users and the status of their various credentials.
Which answer is INCORRECT regarding IAM Users?
IAM Users access AWS services using root account credentials
IAM Users access AWS services using their own credentials (username & password or Access Keys).
Which of the following is an IAM best practice?
Don’t use the user account
Use the root account only to create your first IAM User and a few account/service management tasks. For everyday tasks, use an IAM User.
What are IAM Policies?
JSON documents that define a set of permissions fo rmaking requests to AWS services, and can be used by IAM Users, User Groups, and IAM Roles
no footnote
Which principle should you apply regarding IAM Permissions?
Grant Least Privilege
That’s right! Don’t give more permissions than the user needs.
What should you do to increase your root account security?
Enable Multi Factor Authentication
When you enable MFA, this adds another layer of security. Even if your password is stolen, lost, or hacked your account is not compromised.
IAM User Groups can contain IAM Users and other User Groups.
True or False
False
IAM User Groups can contain only IAM Users.
An IAM policy consists of one or more statements. A statement in an IAM Policy consists of the following, EXCEPT:
Version
A statement in an IAM Policy consists of Sid, Effect, Principal, Action, Resource, and Condition. Version is part of the IAM Policy itself, not the statement.
According to the AWS Shared Responsibility Model, which of the following is AWS responsibility?
AWS Infrastructure
no footnote
Which instance/initial letter pair naming convention:
in the course, we use the t2.micro
General Purpose. No set initial letter! (T, M, and A currently seen)
Describe ec2 instance naming convention
m5.2xlarge
EC2 Instance Types
not entirely sure the exam asks questions like this one
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
General Purpose
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Compute Optimized
Which EC2 Instance type has the following characteristics?
r6g
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Memory Optimized
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Storage Optimized
What are the associated port numnbers?
22, 21, 22, 80, 443, 3389
What are the associated usages of the following port numbers?
22, 21, 22, 80, 443, 3389
What are we looking at here?
Also, read what’s in the picture!
EC2 Instances Purchasing Options
What type of EC2 Instance Purchase option is this?
discount numbers illustrative and changing
Options:
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 On Demand
What type of ec2 instance purchase option is this?
discount numbers illustrative and changing
Options:
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 Reserved Instance
What type of ec2 instance purchase option is this?
discount numbers illustrative and changing
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
ec2 Savings Plan
what type of ec2 instance purchase option is this?
discount numbers illustrative and changing
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
ec2 Spot Instance