Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS 102 > AWSConfig > Flashcards

AWSConfig Flashcards

1
Q

What is the purpose of AWS config?

A

It enables you to track changes in your account’s resources over time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where does AWSConfig push the configuration changes to?

A

Changes are pushed to S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

I need to ensure my resources are compliant for both business and regulatory rules, what options do I have?

A

You cna use AWSConfig with Rules to check for non-complience.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

I am building a multi-region cloud virtual data centre, I want to ensure compliance, can I have one AWSConfig of all regions, if not, what options do I have?

A

AWSConfig is a single region resource, but you can have sperate AWSConfigs, one for each region, but have each push configs to one bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

I need to understand what resources change in my application over time, how can I do this?

A

You cna use AWSConfig and get a history.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What AWSConfig is been set up, do you need to grant some kind of permissions, if so what and how?

A

You need to either automatically or manually create a role with read-only permissions to all resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

I have an application and I want to receive every change to every resource in AWS in every region, how cna I do this?

A

You can set up an AWSConfig in every region and set each of the AWSConfig so that it SNS config points at the Application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Is AWSConfig realtime?

A

No, it takes up to 10min to received changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

To ensure my organization is compliant, I need to set up a set of rules that will ensure infrastructure is compliant, what are my options?

A

Set up AWS config and create a set of rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

I want to monitor if anyone creates a port on a set of restricted ports in my AWS environment, how cna I do this?

A

You can setup AWSConfig and some rules detect anyone creating a restricted port.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If you wnat more detailed information about changes, what options do you have?

A

You need to enable cloudtrail to work with AWSConfig.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

I want to send notifications for changes in the resource infrastructures, what are my options?

A

You can use SNS with AWSConbfig, you can set up a rule and have it send you a message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the high-level architecture of AWS config?

A
  • AWS Config tracks resource changes and writes to S3, it also validates again rules for compliant and non-compliant.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Do I need an IAM role to allow AWSConfig access to all services?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is AWS Config a global service?

A

No, but you can configure each region to log to a centre al S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a configuration item?

A

Is a record of a resource at a point in time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is a configuration history?

A

It is a set of configuration items, it shows you the configuration of a resource over time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Is every resource type in AWS supported for AWS Config?

A

No, only selected resource types are supported.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Where does AWS Config store the changes to resources?

A

In an S3 bucket, you can also add a bucket prefix.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

I wnat to stream configuration changes out of AWS Config, what options do I have?

A

You cna use SNS to stream changes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What do I need to associate with AWS Config to ensure AWS Config can access other services?

A

A role.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are AWS Config rules used for?

A

They enable you to check and ensure a resource is adhering to a configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Can you create your own custom AWS Config rule?

A

Yes 100%, they are created using Lambda.

24
Q

Will the AWS Config record in realtime?

A

No, it records and data becomes available in about 10min period.

25
Q

Describe a config item?

A

It is how the resource looked at a point in time,

  • Volumes
  • Status like running
  • AZ
  • Relationships like VPC, Subnets, SecurityGroups, Network interfaces
26
Q

How would I analyze if additional ports have been added to security groups?

A

You can use AWS config rule to create a list of ports to be blocked

27
Q

When using AWS Config rules, what options do I have as triggers?

A
  • Config changes

- Periodic, where the rule is checked periodically again the resources.

28
Q

When would I use AWS Config?

A

When I need to track for audit purpose or compliance purpose the past and present configuration state of my resources in AWS.

29
Q

What is tracked by AWS Configuration?

A

The configuration state of the resources, both past and current.

30
Q

With AWS Config can I get a list of inventory?

A

Yes in the resources section you can get a list of inventory.

31
Q

Yesterday we had an outage, it is suspected this was due to a configuration change, how cna I quickly understand what changed in the solution?

A

Using AWS Config, provided it was enabled. We can look at the resolution resource to understand what has changed.

32
Q

What is AWS Config keeping in the S3 bucket?

A

It is keeping the configuration snapshots.

33
Q

I wnat to log to an external HTTPS service I created when configuration changes in my AWS account, how can I do this?

A

You can set up an SNS topic with AWS Config and when we get a change in the AWS account to a resource configuration, we will get a notification send to SNS and where I have my HTTPS services registered with the SNS topic.

34
Q

I have multiple AWS accounts with multiple regions and I want to get an aggregated view of all my accounts and regions so I understand changes in configuration and also to audit for compliance, how cna I do this?

A

You can use one account as an AWS Config aggregator for other accounts and their regions. AWS Config has the concept of aggregators and these allow you to select accounts or even an orgnization where all the AWS Config will be aggregated into this one single account AWS Config.

35
Q

Where is AWS Config getting the information it needs to understand the configuration changed?

A

It is coming from cloudtrail.

36
Q

Where is AWS Config getting the information it needs to understand the configuration changed?

A

It is coming from AWS Cloudtrail.

37
Q

I have an orgnization, how can I understand if AWS resources are not compliant?

A

Configure to have the orgnization as part of an AWS Config aggregator so all the AWS configs form thet accounts are aggregated into this one single account.

38
Q

How cna I ensure my resources in my account are compliant?

A

You can use AWS Config rules.

39
Q

How cna I create an AWS Config rule?

A

put something here

40
Q

I have looked through the AWS riles available and what I wnat is not present, what options do I have?

A

I can create a custom rule (riles->Custum rule)

41
Q

I need to take an automatic action when an AWS Config rules are triggered, how can I do this?

A

Put something here

42
Q

Why does AWS Config need a service-link role or a role?

A

Because the AWS Config service needs to have permissions to read from services like CloudTrail.

43
Q

I require the ability to see configuration changes as part of my security SIEM, what options do I have to see resource config changes?

A

You can use AWS Config to monitor resource changes and to use the AWS Config Rules to evaluate complience and send notificatio to the SIEM via SNS HTTPs.

44
Q

I require the ability to see configuration changes as part of my security SIEM, what options do I have to see resource config changes?

A

You can use AWS Config to monitor resource changes and to use the AWS Config Rules to evaluate compliance and send notification to the SIEM via SNS HTTPs.

45
Q

Our orgnization has an audit in a months time, part of what the auditors are looking for is an inventory of resources and there configuration, how cna I create this?

A

AWS Config creates an inventory of resources, there historical and current configuration.

46
Q

We require the ability to see what happen to a resource configuration some months back, how cna we do this?

A

If AWS Config was enabled and configures, it will have a complete picture of what happened.

47
Q

What is a finding in AWS Config?

A

A finding is not used in AWS Config and is used in AWS GuardDuty, little trick question to make sure you are not asleep.

48
Q

I need to better understand the relationship between resources, how cna I do this?

A

AWS Config captures the relationship between resources.

49
Q

What is a configuration item?

A

A configuration item represents a point-in-time view of the supported AWS resource

50
Q

What is a configuration snapshot?

A

A configuration snapshot is a collection of the configuration items for the supported resources that exist in your account

51
Q

What is a configuration history?

A

A configuration history is a collection of the configuration items for a given resource over any time period

52
Q

What is the configuration timeline?

A

The same as configuration history and show a list of configuration items over time.

53
Q

How can I use a lambda function to remediate an issue a non-compliance rule belong to AWS Config?

A

Use AWS CloudWatch Events to receive the non-compliant event and then trigger the lambda function to remediate the issue.

54
Q

When using AWS Config rules and when a rule is triggered, how can I send an email message?

A

Rules have remediation configuration where you can use AWS Systems Manager Automation, AWS Systems Manager Automation has a preconfigured automation to send an SNS notification to a topic of your choice with a message. You can use this to send a message and have email SNS topic subscribers receive the message.

55
Q

When using AWS config rules how cna I remediate an issue triggered by a rule?

A

The rule has a remediation section where we can opt to use AWS Systems Manager Automation to solve the issue.

56
Q

I wnat to receive notification for all AWS Config rule non-compliant issues, what options do I have?

A

In the AWS Config, you have the option to use an SNS topic.

AWS 102 (90 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions