AWS Software Flashcards

Question

Amazon Kinesis

Answer 1

A scalable and durable real-time data streaming service that can continuously capture gigabytes for real-time data such as video, audio, application logs, website clickstreams, and IoT telemetry data for machine learning, analytics, and other applications. Captures and automatically loads streaming data Amazon S3 and Amazon Redshift, allowing for near-real-time analytics with business intelligence tools.

Answer 2

A virtual private server (VPS) or instance provider in which users can run websites and web applications in a highly secure and available environment. Provides developers with compute, storage, and networking capacity and capabilities to deploy and manage websites and web applications in the cloud. A low-cost, pre-configured cloud resource for simple workloads just starting on AWS.

Answer 3

Relational Database Service Service that enables running relational databases in the AWS Cloud. Automates tasks such as hardware provisioning, DB setup, patching, and backups. A database service that makes it easy to set up, operate, and scale a relational database in the cloud.

Answer 4

A large scale, managed data warehouse service used for big data analytics with Amazon S3. Collects data from many sources and helps you understand relationships and trends across your data.

Answer 5

A DNS web service that gives developers and businesses a reliable way to route and users to internet applications hosted in AWS, as EC2 instances and load balancers. Also **manages DNS records for domain names**.

Answer 6

Amazon Simple Storage Service A data store that allows storage and retrieval of an unlimited amount of data at any scale. Stores data as objects in buckets. Six different storage types exist: - S3 Standard - S3 Standard Infrequent Access - S3 One Zone Infrequent Access - S3 Intelligent Tiering - S3 Glacier - S3 Glacier Deep Archive

Answer 7

Retrieval of objects that may take a few minutes to a few hours. Low cost storage for data archiving.

Answer 8

Object retrieval in 12 hours. Lowest cost object storage class.

Answer 9

Ideal for data with unknown or changing access patterns. Fee per object for monthly monitoring and automation. Tiered between Standard and Standard IA.

Answer 10

Amazon S3 One Zone Infrequent Access Stores data in 1 AZ with a lower storage price. Recommended for data that can be easily reproduced.

Answer 11

Used to store frequently accessed data. Stored in a minimum of 3 AZs. High availability.

Answer 12

Amazon S3 Standard Infrequent Access Infrequently accessed data with a lower storage price but a higher retrieval price. Stored in a minimum of 3 AZs.

Answer 13

Amazon Simple Notification Service A notification service for the mass delivery of messages to both application-to-application (A2A) and application-to-person (A2P) communications at scale via SMS, mobile push, and email. _Coffee shop analogy:_ Notification can be sent out to customers to let them know their order is ready.

Answer 14

Amazon Simple Queue Service A messaging queuing service to send, store and receive messages between software components without losing messages or requiring other services to be available. Use with decoupled applications and microservices. _Coffee shop analogy:_ Coffee orders are displayed on a screen or queue, allowing the cashiers to input orders and baristas to accept the orders when ready.

Answer 15

A tool to provision and build-out EC2-based environments automatically by providing application codes and desired configurations. Environments can be saved for easy deployment and shifts focus to the business applications vs the infrastructure. - Adjusts capacity - Load balancing - Automatic scaling - Application health monitoring

Answer 16

Amazon Virtual Private Cloud A networking service used to establish boundaries around an AWS resource (barista with security guard example). It can be further sectioned into a subnet which holds resources/EC2 instances and can span multiple availability zones.

Answer 17

Virtual Private Network The connection that encrypts or protects internet traffic from all other requests around it (like a bodyguard). Establishes a connection between the VPC and a private network (on-premise data center or internal corporate network).

Answer 18

AWS Web Application Firewall Allows monitoring of network requests that come into web applications. Works with CloudFront and application load balancer by using a web access control list (ACL). Example: VIP list that excludes blocked IP addresses.

Answer 19

The 2nd type of load balancers offered through Elastic Load Balancer. Offers all services of the Classic Load Balancer with additional features: supported protocols, enhanced CloudWatch metrics, enhanced access logs, and health checks.

Answer 20

**A single data center or group of data centers in a region,** located tens of miles from each other for low latency between zones. \*A fully isolated portion of the AWS infrastructure. Running apps in multiple zones promotes redundancy in case of a data center failure.

Answer 21

Provides on-demand access to AWS Security and compliance reports and select online agreements.

Answer 22

Creates budgets to plan for service uses, costs, and instance reservations. **Alerts can be set when a budget has exceeded a threshold.**

Answer 23

AWS Command Line Interface A unified tool to manage Amazon S3 data, buckets, and objects via a command line using commands or scripts.

Answer 24

Allows building environment by writing lines of code. Provisions resources in a safe, repeatable manner by determining the right operations to perform when managing stacks and rolls back changes automatically if it detects errors.

Answer 25

A service that delivers data, video, aps, and APIs to customers using low latency and high transfer speeds. Accelerates communication with Edge Locations - **a global content delivery service.**

Answer 26

A service that establishes a dedicated private connection between a data center and a VPC (private hallway to the coffee example). No public internet is shared.

Answer 27

A serverless compute engine for containers that does not require provisioning or managing of servers, the customer only pays for resources required to run the containers. AWS Fargate manages servers for you. Also works with ECS and EKS.

Answer 28

A technology infrastructure that delivers high-availability and fault tolerance by distributing datacenters throughout the world into different areas called regions.

Answer 29

Identity and Access Management Used to create users and manage their respective access to resources, including buckets and objects.

Answer 30

A serverless computing service that lets you run code without needing to provision or manage servers - only pay for computing time when your code is running. No containers, no virtualization, only code. *Host short running functions, service-oriented applications, event driven application, no provisioning or managing servers.* Upload code - set code to trigger from event source - code runs when triggered - pay only when code runs.

Answer 31

Provides a simple web interface to view buckets and objects, upload and download data and manage permissions and security without having to write code. - Max upload 160GB

Answer 32

A digital catalog to find, test, and buy software that runs on AWS.

Answer 33

A service that offers policy-based management for multiple AWS accounts in a central location.

Answer 34

AWS Software Development Kits

Answer 35

A service that protects applications against distributed denial-of-service (DDoS) attacks. Standard: automatically protects against attacks, at no cost, using analysis techniques to detect malicious traffic in real time and mitigate it. Advanced: A paid service that provides detailed attack diagnostics and ability to detect and mitigate sophisticated DDoS attacks.

Answer 36

An offline data transfer service that uses a physical device to physically transport data into and out of AWS to up 80TB. - Snowball Edge Storage Optimized is for large-scale data migration and reoccurring transfer workflows. - Snowball Edge Compute Optimized for powerful computing resources like advanced machine learning, full motion video analysis, analytics, and local computing stacks.

Answer 37

A set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.

Answer 38

A hub for managing support cases.

Answer 39

Help with troubleshooting issues at a lower cots and efficiently use AWS services. Basic Support: Free support through white papers, documentation and support communities, personal health dashboard. Developer Support: Best practice guidance, client diagnostic tools, building block architecture support. Business Support: use-case guidance, trusted advisor checks, limited support for third-party software. Enterprise Support: Application architecture guidance, infrastructure event management, technical account manager (TAM, primary point of contact at AWS).

Answer 40

Web Application Firewall Allows monitoring of network requests that come into web applications. Works with CloudFront and Application Load Balancer by using a web access control list (ACL). For example, a VIP list that excludes blocked IP addresses.

Answer 41

A services that help you understand how to design and operate reliable, secure, efficient, and cost-effective systems in AWS Cloud. Based on 5 Pillars: Operational Excellence Security Reliability Performance Efficiency Cost Optimization

Answer 42

Ideal for compute-bound applications that benefit from **high-performance processors** (batch processing, web, application, gaming servers).

Answer 43

A tool that enables you to visualize, understand, and manage AWS costs and usage over time.

Answer 44

* General purpose instances * Compute optimized instances * Memory optimized instances * Accelerated computing instances * Storage optimized instances

Answer 45

A site that Amazon CloudFront uses to store cached copies of content closer to customers for faster delivery (Brazil and China example).

Answer 46

Amazon Elastic Kubernetes Services A fully managed service that you can use to run Kubernetes on AWS. You manage the EC2 instances. Kubernetes is an open source system for automating deployment, scaling, and management of containerized applications.

Answer 47

**Ensures that no single Amazon EC2 instance has to carry the full workload on its own.** Automatically distributes incoming application traffic across multiple resources, such as EC2 instances, ensuring no single Amazon EC2 instance has to carry the full workload on its own. Evenly distributes requests to EC2 instances when demand increases. _Coffee shop analogy:_ Host that directs customers to lines to ensure even distribution of customers to cashiers.

Answer 48

**Provides a balance of compute, memory, and networking resources** (application servers, gaming servers, backend servers for enterprise applications, small and medium databases).

Answer 49

Identity and Access Management Group A collection of IAM users that are granted the same permissions specified by the IAM policy.

Answer 50

Identity and Access Management Policy A document that allows or denies permissions to AWS services and resources. - Recommends to follow the security principle of least privilege when granting permissions.

Answer 51

Identity and Access Management Roles An identity that can be assumed to gain temporary access to permissions.

Answer 52

Identity and Access Management User An identity created in AWS with specific permissions. - Default user has no permissions. - Each user has their own set of security credentials.

Answer 53

**Ideal for high-performance databases.** Designed to deliver fast performance for workloads that process large datasets in memory.

Answer 54

**A geographical area that contains AWS resources** with multiple locations that are isolated from each other. They are designed and built closest to where business traffic demands: Paris, Tokyo, Sao Paulo, Dublin, Ohio. There are multiple data centers within each region. Regions are connected by high-speed fiber network. 4 key factors to selecting a region: 1. Compliance - Does your data need to physically reside within specific boundaries? 2. Proximity - Latency increases the further away the data is from the customer. 3. Availability - Where do the AWS services reside? 4. Pricing - Pricing is determined by factors that include the country's tax structure.

Answer 55

**Suitable for data warehouse applications.** Designed for workloads that require high, sequential read and write access to large datasets on local storage (distributed file systems, data warehousing applications, high-frequency online transaction processing systems).

Answer 56

A tool that enables you to visualize, understand, and manage AWS costs and usage over time.

Answer 57

Extends AWS infrastructure and services to your on-premises data center.

Answer 58

Key Management Service **Enables encryption operations through the use of cryptographic keys.** A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data.

Answer 59

A web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices. Includes **security checks, such as Amazon S3 buckets with open access permissions**. Best practice recommendations: * **cost optimization** * **performance** * **security** * **fault tolerance** * **service limits**

Answer 60

**A service that enables you to assess, audit, and evaluate the configurations of your AWS resources.** Continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

AWS Software Flashcards

(85 cards)