Cloud Stuff - Sheet1 Flashcards
(44 cards)
What are the different storage classes available in S3 and when would you use each one?
The different storage classes in S3 are Standard, Intelligent-Tiering, Standard-IA (Infrequent Access), One Zone-IA, Glacier, and Glacier Deep Archive.
How can you control access to objects stored in S3?
Access to objects stored in S3 can be controlled through bucket policies, access control lists (ACLs), and IAM (Identity and Access Management) policies. You can grant or deny permissions to users, groups, or AWS services based on specific criteria.
What are the benefits of using CloudFront for content delivery?
CloudFront improves website performance by reducing latency, increasing data transfer speeds, and offloading traffic from the origin server. It also provides enhanced security through features like DDoS protection and HTTPS support.
How does CloudFront help improve website performance?
CloudFront improves website performance by caching content at edge locations. When a user requests content, CloudFront serves it from the nearest edge location rather than the origin server, reducing the time it takes to load the content.
What are the key components of CloudFront?
Distribution, origin, edge locations, cache behavior
How do you invalidate objects in CloudFront?
You can invalidate objects in CloudFront to remove them from cache before they expire. This can be done through the AWS Management Console, AWS CLI, or CloudFront API.
What is Route53 and what are its main functions?
Route53 is a scalable DNS (Domain Name System) web service provided by AWS. Its main functions include domain registration, DNS routing, health checking, and traffic management.
How do you create a new domain in Route53?
You can create a new domain in Route53 by logging into the AWS Management Console, navigating to Route53, selecting “Hosted zones”, and then clicking “Create Hosted Zone”. Enter the domain name and configure the required settings.
What is the difference between Route53’s Alias and CNAME records?
Alias records are used to map your domain name to AWS resources, like ELB, CloudFront distributions, or S3 buckets. They work like a CNAME record but provide additional functionality. CNAME records are used to map your domain name to another domain name.
How does Route53 handle DNS failover?
Route53 can monitor the health of your resources and automatically route traffic away from unhealthy resources to healthy ones. This is achieved using health checks, which periodically evaluate the health of your endpoints.
Can Route53 be used for routing traffic to resources outside of AWS?
Yes, Route53 can be used to route traffic to resources outside of AWS. You can create records that point to non-AWS resources by specifying their IP addresses or domain names.
What is AWS Certificate Manager (ACM) and what is it used for?
AWS Certificate Manager is a service that manages SSL/TLS certificates for use with AWS services. It simplifies the process of provisioning, managing, and deploying public and private SSL/TLS certificates.
How do you request and manage SSL/TLS certificates with ACM?
You can request SSL/TLS certificates in ACM by navigating to the ACM console, clicking “Request a certificate”, and following the wizard to verify domain ownership. Once issued, you can manage certificates by renewing, deleting, or modifying them.
What types of SSL/TLS certificates does ACM support?
ACM supports both public and private SSL/TLS certificates. Public certificates can be used with external-facing websites and services, while private certificates are used for internal communications within an organization.
Can ACM certificates be used outside of AWS services like CloudFront and Elastic Load Balancing?
No, ACM certificates can only be used with AWS services that are integrated with ACM, such as CloudFront, ELB, API Gateway, and Elastic Beanstalk.
What is API Gateway and what are its main features?
API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale. Its main features include API creation, management, versioning, monitoring, and security.
How do you create an API in API Gateway?
To create an API in API Gateway, you can use the API Gateway console or API Gateway REST API. You define the API’s resources, methods, request/response models, and integration points with backend services.
What is the purpose of API Gateway stages?
API Gateway stages are used to manage different versions or environments of your API (e.g., development, testing, production). Each stage has its own configuration and can be associated with different backend endpoints.
How does API Gateway handle authentication and authorization?
API Gateway supports various methods for authentication and authorization, including IAM (Identity and Access Management), Lambda authorizers, Cognito user pools, and custom authorizers. These methods allow you to control access to your APIs based on user identity and permissions.
Can API Gateway integrate with Lambda functions?
Yes, API Gateway can integrate directly with Lambda functions. This allows you to create serverless APIs where each endpoint is backed by a Lambda function. API Gateway automatically handles the invocation of the Lambda function based on incoming requests.
What is AWS Lambda and what is it used for?
AWS Lambda is a serverless computing service that allows you to run code without provisioning or managing servers. It’s used for executing code in response to events, such as HTTP requests, changes in data, or triggers from other AWS services.
How do you create a Lambda function?
You create a Lambda function by writing your code in the supported programming languages (e.g., Python, Node.js, Java), configuring the function’s triggers and permissions, and uploading the code to Lambda using the AWS Management Console, CLI, or SDK.
What are the event sources for Lambda functions?
Event sources for Lambda functions include AWS services like S3, DynamoDB, SNS, SQS, API Gateway, and CloudWatch Events. You can also use custom events and triggers.
How does Lambda pricing work?
Lambda pricing is based on the number of requests and the compute time consumed by your functions. You pay only for the compute time you use, rounded up to the nearest 100 milliseconds. There is also a free tier available.
