EC2 Flashcards
1
Q
What does EC2 stand for ?
A
Elastic Compute Cloud
2
Q
What kind of as a service is ec2?
A
IaaS
3
Q
EC2 conists of what?
A
- renting virtual machines (ec2)
- storing data on virtual drives (EBS)
- distributing load across machines (ELB)
- scaling services using auto-scaling group (ASG)
4
Q
Knowing EC2 is fundamental to understand what?
A
how the Cloud works
5
Q
what OS are available in ec2?
A
Linux, Windows, Mac OS
6
Q
What are the config and sizing options
A
CPU, RAM, storage space
7
Q
how is the amount of storage space configured?
A
Network-Attached (EBS and EFS); hardware (ec2 instance store)
8
Q
ec2 network card
A
speed of card; public ip address
9
Q
firewall roles
A
security group
10
Q
Bootstrap script (configure at first launch):
A
EC2 User Data
11
Q
what does bootstrapping mean?
A
launching commands when a machine starts
12
Q
What is EC2 User Data Script for?
A
bootstrap our instances
13
Q
When is the ec2 user data script run and how many times?
A
script is only run once at the instance first start
14
Q
EC2 user data is used to automate boot tasks such as:
A
- Installing updates
- Installing software
- Downloading common files from the internet
- Anything you can think of
15
Q
The EC2 User Data Script runs with
A
the root user
16
Q
what is the naming convention for aws ec2 instance types?
A
instance class (letter), generation (number), size within the instance class name (example: m5.2xlarge)
17
Q
what are ec2 instance general purpose type?
A
Great for a diversity of workloads such as web servers or code repositories
18
Q
ec2 general purpose type balance between:
A
- Compute
- Memory
- Networking
19
Q
ec2 compute optimized type
A
Great for compute-intensive tasks that require high performance processors: • Batch processing workloads • Media transcoding • High performance web servers • High performance computing (HPC) • Scientific modeling & machine learning • Dedicated gaming servers
20
Q
EC2 Instance Types – Memory Optimized
A
Fast performance for workloads that process large data sets in memory
21
Q
use cases for memory optimized
A
Use cases:
• High performance, relational/non-relational databases
• Distributed web scale cache stores
• In-memory databases optimized for BI (business intelligence)
• Applications performing real-time processing of big unstructured data
22
Q
EC2 Instance Types – Storage Optimized
A
Great for storage-intensive tasks that require high, sequential read and write access to large data sets on local storage
23
Q
storage optimized use cases
A
Use cases:
• High frequency online transaction processing (OLTP) systems
• Relational & NoSQL databases
• Cache for in-memory databases (for example, Redis)
• Data warehousing applications
• Distributed file systems
24
Q
what are the ec2 instance types?
A
general-purpose, compute-optimized, memory-optimized, storage optimized
25
Security Groups are the fundamental of
network security in AWS
26
security groups control what in ec2?
control how traffic is allowed into or out of our EC2 Instances.
27
Security groups only contain ___ rules
allow rules
28
Security groups rules can reference by
IP or by security group
29
Security groups are acting as a
“firewall” on EC2 instances
30
Security groups regulate
* Access to Ports
* Authorised IP ranges – IPv4 and IPv6
* Control of inbound network (from other to the instance)
* Control of outbound network (from the instance to other)
31
Security groups can be attached to
multiple instances
32
Security groups are Locked down to a
region / VPC combination
33
Security groups Does live “outside” the EC2 – if
traffic is blocked the EC2 instance won’t see it
34
Security groups It’s good to maintain one separate security group for
SSH access
35
Security groups If your application is not accessible (time out), then it’s a
security group issue
36
Security groups If your application gives a “connection refused“ error, then it’s an
application error or it’s not launched
37
Security groups All inbound traffic is blocked
by default
38
Security groups All outbound traffic is authorised
by default
39
Security groups Classic Ports to know
* 22 = SSH (Secure Shell) - log into a Linux instance
* 21 = FTP (File Transfer Protocol) – upload files into a file share
* 22 = SFTP (Secure File Transfer Protocol) – upload files using SSH
* 80 = HTTP – access unsecured websites
* 443 = HTTPS – access secured websites
* 3389 = RDP (Remote Desktop Protocol) – log into a Windows instance
40
port 22 =
SSH (Secure Shell) - log into a Linux instance
41
port 21 =
FTP (File Transfer Protocol) – upload files into a file share
42
port 22 = SFTP (Secure File Transfer Protocol) –
upload files using SSH
43
port 80 =
HTTP – access unsecured websites
44
port 443 =
HTTPS – access secured websites
45
port 3389 =
RDP (Remote Desktop Protocol) – log into a Windows instance
46
ssh is available for what OS?
linux, macos, windows >=10
47
putty is available for what os?
windows
48
ec2 instance connect available for what os
linux, mac, windows
49
what is EC2 Instance Connect?
Connect to your EC2 instance within your browser with No need to use your key file that was downloaded
50
how does ec2 instance connect work? "magic"
temporary key is uploaded onto EC2 by AWS
51
EC2 Instance Connect works out of the box with
Amazon Linux 2
52
if using EC2 Instance Connect what port needs to be open?
22
53
What are the EC2 Instances Purchasing Options?
on-demand instances, reserved, spot instances, dedicated hosts, dedicated instances
54
what are On-Demand Instances?
short workload, predictable pricing
55
what is the minimum duration for reserved instances
1 year
56
what are the workloads for Reserved Instances:
long workloads
57
Convertible Reserved Instances:
long workloads with flexible instances
58
Scheduled Reserved Instances:
run a specific time and day
59
Spot Instances:
short workloads, cheap, can lose instances (less reliable)
60
Dedicated Hosts:
book an entire physical server, control instance placement
61
Dedicated Instances:
no other customers will share your hardware
62
for ec2 on demand you pay for
what you use
63
for ec2 on demand linux you pay for
billing per second, after the first minute
64
for ec2 on demand windows and macos you pay for
billing per hour
65
ec2 on demand has the highest __ BUT no __ __
cost but no upfront payment
66
ec2 on demand has no ___ ___ commitment
long term commitment
67
EC2 ondemand is recommended for what type of workloads where ___?
Recommended for short-term and un-interrupted workloads, where you can't predict how the application will behave
68
what is the max discount percentage of reserved instances to on demand?
72%
69
what is the reservation period impact on discount?
1 year = discount, 3 = more
70
what are the purchasing options for ec2 reserved instance?
no upfront costs, partial upfront, or all upfront
71
when is reserved instance recommended?
for easy steady-state usage apps (db)
72
what is a convertible reserved instance?
can change ec2 instance type
73
max discount for convertible reserved instance?
up to 45%
74
What scheduled reserved instances?
launch within time window you reserve, require fraction of day/week/month
75
what is the time commitment for scheduled reserved instances?
1 year only
76
max discount for spot instances compareed to on-demand
90%
77
what are spot instances?
instances you can lose at any point of time if your max price is less than the current spot price
78
what is the most cost-efficient ec2 instance ?
spot instances
79
spot instances are useful for workloads that are
resilient to failure
80
what type of instance would you use for batch jobs?
spot instances
81
what type of instance would you use for Dataa analysis?
spot instances
82
what type of instance would you use for image processing?
spot instances
83
what type of instance would you use for ANY distributed workloads?
spot instances
84
what type of instance would you use for workloads with flex start and end time?
spot instances
85
what instance is not suitable for critical jobs or databases?
spot instances
86
what is amazon ec2 dedicated host?
physical server with ec2 instance capacity fully dedicated to your use
87
what can ec2 dedicated hosts help you address?
compliance requirements
88
how can ec2 dedicated hosts help you reduce costs?
by allowing you to use your existing server-bound software licenses
89
ec2 dedicated hosts is allocated to your account for how long?
3-year period reservation
90
ec2 dedicated hosts is useful for software that have complicated _______ ___ ___
licensing model, Bring your Own License (BYOL)
91
ec2 dedicated hosts is useful for companies that have strong ____ or _____ ___
regulatory or compliance needs
92
what are dedicated instances?
instances running on hardware thats dedicated to you and may share with other instances in same acct
93
dedicated instances have no control over
instance placement ( can move hardware after stop/start)
94
What type of dedicated instance/hosts enables the use of dedicated physical servers?
both dedicated instances and dedicated hosts
95
What type of dedicated instance/hosts has per instance billing ?
dedicated instances
96
What type of dedicated instance/hosts has per host billing?
dedicated hosts
97
What type of dedicated instance/hosts has visibility of sockets, cores, host ID?
dedicated hosts
98
What type of dedicated instance/hosts affinity btwn a host and instance?
dedicated hosts
99
What type of dedicated instance/hosts target instance placement
dedicated hosts
100
What type of dedicated instance/hosts automatic instance placement
both
101
What type of dedicated instance/hosts add capacity using an allocation request
dedicated hosts
102
What is the best instance to purchase if it is like: coming and staying in resort whenver we like, we pay full price
on demand
103
What is the best instance to purchase if it is like: planning ahead and if we plan to stay for a long time we may get a good discount
reserved
104
What is the best instance to purchase if it is like: hotel allows people to bid for the empty rooms and highest bidder keeps the rooms, you can get kicked out any time
spot instances
105
What is the best instance to purchase if it is like: we book an entire building of the resort
dedicated hosts
106
how to make a spot instance request
define max spot price and get the instance while current spot price < max
107
what does hourly spot instance price depend on?
varies based on offer and capacity
108
If the current spot price > your max price you can choose to
stop or terminate your instance with a 2 minute grace period
109
what is spot blocking for spot instances?
"block" spot instance during a specified time frame (1-6 hours) w/o interruptions
110
what are spot instances primarily used for?
batch jobs, data analysis, workloads that are resilient to failures
111
spot instances are not great for
critical jobs or databases
112
whenn can you cancel a spot instance requests?
requests that are open, active, or disabled
113
T/F: Canceling a spot request doesnt terminate instances
T
114
How do you terminate a spot request
first cancel, then terminate
115
what does a spot fleet consist of ?
set of Spot Instances, (optional) on-demand instances
116
Spot fleet will try to meet the target capacity with
price constraints
117
when do stop fleets stops launching instances?
reach capacity or max cost
118
what are the strategries to allocate spot instances
lowestPrice, diversified, capacityOptimized
119
what is the lowestPrice strategy ?
allocate spot instances by from the pool with lowest price (cost optimization, short workload)
120
what is the diversified stragey?
allocate spot instances - distributed across all pools (great for availability, long workloads)
121
what capacityOptimized?
pool with the optimal capacity for the number of instances
122
what do spot fleets allow us to do?
automatically request spot instances with the lowest price
123
public ip
the machine can be id'd on the internet
124
public ip are unique across the web means
2 machines cant have same public ip
125
T/F: Public ip's cannot be geo-located easily
F
126
Private IP
machine can only be id'd on a private network only
127
how do machines on private ip connect to internet?
using a NAT + internet gateway (proxy)
128
Elastic IP
when you stop and then start an ec2 inst, it can change its public IP
129
what kind of ip do you need if you require a fixed public ip for your instance?
elastic ip
130
what is a public IPv4 ip you own as long as you dont delete it?
elastic ip
131
you can attach elastic ip to one
instance
132
what is the max amount of elastic IP you can have
5 , but can ask aws for more
133
what can you mask with elastic ip address?
mask failure of an instance or software by rapidly remapping the address to another inst in your acct
134
Why should you avoid using elastic ip?
reflect poor architectural decisions
135
how can you prevent using elastic ip?
use random public IP and register DNS name to it, or use a load blancer and dont use a public ip
136
what are placement groups?
when you want to control over the ec2 instance placement strategy
137
when you create placement groups, what do you specify?
cluster, spread, partition
138
what are clusters in placement groups?
clusters instances into a low-latency group in a single AZ
139
what are spread in placement groups?
spreads instances across underlying hardware
140
what are partition in placement groups?
spread instances across many different partitions that rely on different sets of racks within AZ
141
what are the adv of placement group clusters?
fastet network 10Gbps bandwidth btwn instances w/ enhanced networking enabled
142
what is disadv of placement group clusters?
if rack fails, all instances fails at same time
143
In terms of placment groups, what should be used for big data jobs that needs to complete fast?
placement group cluster
144
In terms of placment groups, what should be used for apps that need extremely low latency and high network throughput?
placement group cluster
145
what are the adv of placement group spread?
can span accross az, reduced risk is simultaneous fails, ec2 instances are on different physical hardware
146
what is disadv of placement group spread?
limited to 7 instances per AZ placement group
147
In terms of placment groups, what should be used for apps that need to max high availability?
spread
148
In terms of placment groups, what should be used for critical apps where each instance must be isolated from failure from each other?
spread
149
In terms of placment groups, what should be used for HDFS, HBase, Cassandra, Kafka
paritition
150
max partitions per AZ?
7
151
t/f: Partitions can span accross multiple az in the same region
t
152
paritions has up to ___s of ec2 instancs
100s
153
instances in a partition dont share racks with
the instances in th other partitions
154
a parition failure can affect
many ec2 but wont impact other partitions
155
how do ec2 instances get access to partition info as
metadata
156
ENI
elastic network interfaces
157
what are the attributes of ENI?
primary private IPv4 or more secondary ipv4; 1 elastic ip per ipv4; one public ipv4, one or more security groups, a MAC address
158
T/F: You can't create ENI independently and attach them on the fly (move them) on EC2 instances for failover
F, you can
159
ENI is bound to a specific
AZ, availability zone
160
what happens when you stop an EC2 instance?
the data on the disk (EBS) is kept intact for the next start
161
what happens when you terminate an EC2 instance?
any EBS volumes (root) also set up to be destroyed is lost
162
what happens when you FIRST START an EC2 instance?
OS boots & EC2 User Data Script is run
163
what happens when you Following STARTs an EC2 instance?
os boots, then your app starts, caches get warmed up (can take time)
164
What is EC2 Hibernate with respect to RAM?
in-memory (RAM) state is preserved
165
What is EC2 Hibernate with respect to instance boot speed?
faster since the OS isnt stopped or restarted
166
What is EC2 Hibernate with respect to RAM under the hood?
RAM state is written to a file in the root EBS volume
167
What is EC2 Hibernate with respect to EBS volume must be ?
encrypted
168
What EC2 mode would you use for the following use cases: long-running processes, saving the RAM state, services that take time to initialize
EC2 Hibernate
169
EC2 Hibernate Support which instance families?
C3-C5; M3-M5, R3-R5
170
EC2 Hibernate instance RAM size must be less than
150 GB
171
EC2 Hibernate instance size is not supported for
bare metals instances
172
EC2 Hibernate AMI:
Amazon Linux 2, Linux AMI, Ubuntu & Windows
173
EC2 Hibernate root volume:
must be EBS, encrypted, not instance store, and large
174
EC2 Hibernate is available for
On-Demand and Reserved Instances
175
an ec2 instance cannot be hibernated for more than how many days?
60 days
176
What is the underlying platform for the next generation of ec2 instances and new virtualization tech?
EC2 Nitro
177
EC2 Nitro allows for
better performance & underlying security
178
EC2 Nitro provides better networking how?
enhanced networking, HPC, IPv6
179
EC2 Nitro has higher speed
EBS
180
what can run on one cpu?
multiple threads
181
each thread is represented by a
virtual cpu
182
ec2 instances come with a combo of
RAM and vCPU
183
when are the # of CPU cores decreased?
need high RAM and low number of CPU (lower price)
184
when do you disable multithreading?
high performance computing (HPC) workloads
185
When can threads and vcpus be specified?
during instance launch
186
what do capacity reservations ensure?
you have ec2 capacity when needed
187
the end date for capacity reservations can be
manual or planned
188
capacity reservations do not need what commitment
1 or 3 year
189
capacity access is ___ and you get billled when __
immediate, when it starts
190
what do you specify for capacity reservations?
AZ, number of instances, instance attributes
191
What should you combine for cost savings?
Reserved Instances and Saving Plans
192
What is an EBS Volume?
Elastic Block Store Volume is a network drive you can attach to your instances while they run
193
What do EBS volumes allow for your instances data?
persist data even after their termination
194
EBS volumes can be mounted to
one instance at a time at CCP level
195
EBS volumes are bound to a
specific availability zone
196
EBS volumes uses the network to
communicate the instance
197
EBS volumes uses the network to communicate the instance means
latency
198
EBS volumes can be detached from an ec2 instance and then
attached to another quickly
199
EBS volumes are locked to a
AZ
200
to move an EBS volumes accross an AZ, you must
first snapshot it
201
EBS volumes have a provissioned
capacity (size in GB and IOPS)
202
how do you get billed for EBS volumes
for all provisioned capacity, which can be increased over time
203
what does Delete on Termination attribute for ebs?
controls the behaviour when an ec2 instance terminates
204
What happens by default when Delete on Termination attribute is enabled?
the root EBS volume is deleted
205
What happens by default when Delete on Termination attribute is disabled?
any other attached ebs volume isnt deleted
206
When do you use when Delete on Termination attribute on ebs?
preserve root volume when the instance is terminated
207
What is an EBS Snapshot?
make a backup/snapshot of your EBS volume at a point in time
208
What is recommended when doing an ebs snapshot?
detach your ebs volume
209
with ebs snapshot you can copy them across
AZ or region
210
AMI stands for
Amazon Machine Image
211
What are AMI's?
customization of an ec2 isntance
212
AMI you add your own
software, configuration, OS, monitoring
213
why are ami faster boot/config time than regular ec2 ?
all your software is pre-packaged
214
AMI are built for a
specfiic region that can be copied across regions
215
where can ec2 instances be launchd from?
public AMI, your own ami, AWS marketplace ami
216
What is the ami process from an ec2 instance?
Start EC2 instance and customize it; stop instance for data integrity, build AMI (creates EBS snapshots), launch from other amis
217
EBS volumes are network drives with good but _____ performance
"limited"
218
What should you use if your need a high-performance hardware disk (better i/o)?
EC2 Instance Store
219
what happens if an EC2 instance store stops?
they lose their storage (ephemeral)
220
EC2 instance store are good for what?
buffer, cache, scratch data, temporary content
221
EC2 instance store has risk of ?
data loss if hardware fails
222
what are you responsible for with EC2 instance store
backups and replication
223
What are the 6 types of EBS Volume Types?
gp2, gp3, io1, io2 (ssd); st1, sc1 (hdd)
224
what are gp2, gp3 SSD ebs volume types?
general-purpose ssd volume that balances price and performance for a wide variety of workloads
225
what are io1, io2 SSD ebs volume types? (ssd)
highest-performance SSD volume for mission-critical low-latency or high-throughput workloads
226
what are st1 HDD ebs volume types?
low cost hdd volume deisgned for frequently accessed, throughput-intensive workloads
227
what are sc1 HDD ebs volume types?
lowest cost hdd volume designed for less frequently accessed workloads
228
ebs volume are characterized in
Size, Throughput, IOPS(I/O Ops Per Sec)
229
what ebs volume types can be used as boot volumes?
gp2, gp3, io1, io2 (ssd)
230
EBS volume General Purpose SSD is best used for what kind of storage and latncy?
cost effective storage, low-latency
231
EBS volume General Purpose SSD is best used for what scenarios?
sys boot volumes, virtual desktops, development and test envs
232
EBS volume General Purpose SSD size range
1 GiB - 16 TiB
233
gp3 baseline IOPs and throughput of
3000 IOPS; 125 MiB/s
234
gp3 max IOPs and throughput of
16000; 1000
235
small gp2 volumes can burst IOPs to
3000
236
gp2 max IOPs
16000
237
gp2 size of volume and OPS are
linked
238
what are the io1/io2 ebs volumes considered?
Provisioned IOPS (PIOPS) SSD
239
when should Provisioned IOPS (PIOPS) SSD be used ?
critical business apps with sustained IOPS performance, or apps that need more than 16000 IOPS
240
What kind of workloads are Provisioned IOPS (PIOPS) SSD great for?
database workloads with sensitve storage perf and consistency
241
io1/io2 storage range:
4 GiB- 16 TiB
242
io1/io2 Max PIOPS for nitro ec2
64000
243
io1/io2 Max PIOPS for non-nitro ec2
32000
244
io1/io2 can increase PIOPS independdently from
storage size
245
how is io2 better than io1?
more durability and more IOPS per GiB
246
io2 Block Express size range
4GiB - 64 TiB
247
io2 Block Express has what kind of latency?
sub-millisecond latency
248
io2 Block Express Max PIOPS:
256,000 w/ an IOPS:GiB ratio of 1000:1
249
io2 Block Express supports
EBS Multi-Attach
250
EBS HDD cannot be a
boot volume
251
EBS HDD size range
125 MiB - 16TiB
252
Throughput Optimized HDD is which hdd ebs volume
st1
253
what is st1 good for ?
big data, data warehouses, log processing
254
st1 max throughput
500 MBps
255
st1 max IOPS
500
256
Cold HDD
sc1
257
when should sc1 be used?
data not accessed often, lowest cost is vital
258
sc1 max throughput and IOPS
250
259
what is ebs multi-attach
when you attached the same ebs volume to multiple ec2 instances in the same AZ
260
ebs multi-attach each instance has full
read & write permissions to the volume
261
When do you use ebs multi-attach?
achieve higher app availability in cluster linux apps; apps must manage concurrent write ops
262
to do ebs multi-attach, you must use a file sys that is
cluster-aware
263
what happens when you create an encrypted EBS volume?
data at rest is encrypted inside the volume, all the data in flight moving between the instance and volume is encrypted, all snapshots are encrypted, all volumes created from the snapshot
264
how is the encryptions and decryption of ebs volumes handled?
transparently, you do nothing
265
ebs encryotion has ___ impact on latency
minimal
266
ebs encrytpion leverages keys from
kms (aes-256)
267
t/f: copying an unencrypted volume snapshot allows encyrption
t
268
snapshotsof encrypted volumes are encrypted t/f
t
269
How do you encrypt an unencrytped EBS volume?
1. create an ebs snapshot of the volume
2. encrypt the ebs snapshot (using copy)
3. create new ebs volume from the snapshot (volume will also be encrypted_
4. attach encrypted volume to the original instance
270
EFS
Elastic File Sys
271
what is EFS?
managed NFS (netowrk file sys) that can be mounted on many ec2
272
EFS works with ec2 in
multi-AZ
273
T?F: EFS is highly available ,scalable, expenssive, pap per use
t
274
Use cases for efs
content mgmt, web serving, data sharing, Wordpress
275
what protocol does efs use?
NFSv4.1
276
how do you control access to efs?
use a secruity group
277
efs is comptabile with
linux based ami (not windows)
278
efs encryption at rest used
kms
279
what kind of file sys is efs?
POSIX file sys ~ Linux that has standard file API
280
efs scales
automatically, pay-per-use, no capacity planning
281
EFS Scale
1000s of concurrent NFS clients, 10 GB+ /s throughput, grow to Petabyte-scale network file sys automatically
282
EFS Performance mode is set at
efs creation time
283
efs performance mode general-purpose default?
lattency-senseitve use cases (web server, cms)
284
efs performance mode max i/o
higher latency, throughput, highly paralelel (big data, media processing)
285
efs throughput mode bursting
1TB = 50 MiB/s + burst of 100 MiB/s
286
efs throughput mode provisioned
set trhoughput regardless of storage size
287
efs storage tiers
lifecycle management feature
288
efs standard storage tier
often accessed files
289
efs infrequent access storage tier (EFS-IA)
cost to retrieve files and lower price to store
