Kinesis / Parameter Stores / Secrets Manager Flashcards
(31 cards)
Kinesis
What are 6 common examples real-time streaming data?
- Streaming Data Examples
- Stock Prices
- Game Data (as the player plays)
- Social Network Data
- Geospatial Data
- Click Stream Data
The 4 types of Kinesis Streams
- Kinesis Data Streams
- Firehose Delivery Streams (into destination such as s3)
- Data Analytics (Custom SQL’s)
- Kinesis Video Analytics
Kinesis
How long does data persist in a data stream?
1 minute (min)
1 day (default)
365 days (max)
Amazon Kinesis Data Streams (KDS) is a massively scalable and durable real-time data streaming service
3 consumers of \ Data Streams?
keˈnɪsəs
- DynamoDB
- S3
- Redshift
True or False, Kinesis Video Streams can ingest encoded data from many various devices or services
True
Ingest video and audio encoded data from various devices and or service. Output video data to to ML or video processing services
How many consumers are used with a Firehose delivery stream?
1
You choose one consumer from a predefined list
Kinisis
True or False, with Firehose, data immediately disappears after its consumed
And how do you pay?
True
Pay for only the data ingested
Eg. An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket.
This Kinesis Stream type uses a single consumer, selected from a predefined list
Kinesis Firehose Delivery Stream
Eg. An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket.
AWS solution for collecting, processing, and analyzing streaming data in the cloud. When you need “real-time”
Amazon Kinesis
Kinisis
How can you write data to stream?
There are two options
KPL (Kinesis Producer Library) is a Java library to write data to a stream
You can write data to stream using AWS SDK, but KPL is more efficient
What are the 2 tiers available for Parameter Store?
- Advanced
- Standard
Parameter Store:
Which Parameter Store tier allows you to use parameter policies?
Advanced
Parameter Store:
What can you store in Parameter store?
- License codes
- Passwords
- Database strings
In Parameter Store How do you create hieraches?
by using forward slashes
You can’t change a standard parameter to an advanced parameter at any time, but you can revert an advanced parameter to standard parameter.
False
Reverting an advance parameter to a standard parameter would result in data loss because the system would truncate the size of the parameter for 8KB to 4KB
This AWS service lets you store data such as passwords, database strings, and license codes as parameter values
AWS ___ ___ ___ ___
AWS Systems Manager Parameter Store
ParaMeter policies are helpful in forcing you to update or delete passwords.
True
Parameter Store enforces parameter policies by using asynchronous, periodic scans.
What are the 3 Parameter Policies?
Expiration: I want this parameter expires after this date
ExpirationNotification: It triggers an even in Amazon Cloud watch
NoChangeNotification: If a parameter has not been modified for a specified period of time
Which AWS service would you use to monitor access to Secrets Manager?
CloudTrail
AWS Secrets Manager integrates with AWS CloudTrail, a service that provides a record of actions taken by a user, role or an AWS service in Secrets Manager. CloudTrail captures all API calls for Secrets Manager as events, including calls from the Secrets Manager console and from code calls to the Secrets Manager APIs.
Secret Manager: Store and automatically rotate database credentials
- RDS - Redshift - DocumentDB - Other Databases:
> (MariaDB, MySQL, PostgreSQL, Oracle DB, SQL Server)
> Key/Value (Text plain)
Which AWS service does Secrets Manager use to encrypt data at-rest?
Key Management Service (KMS)
ki ˈmænəʤmənt ˈsɜrvəs (keɪ-ɛm-ɛs)
You’ll see “Select the encryption key”
This AWS service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
AWS Secrets Manager
AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources
It eliminates the need to hardcode sensitive information in plain text. Secrets Manager offers secret rotation with built-in integration for Amazon RDS, Amazon Redshift, and Amazon DocumentDB
Which AWS service performs automatic key rotation for Secrets Manager?
AWS Secrets Manager uses this service to perform the actual rotation of a secret
AWS Lambda
AWS Secrets Manager
Easily rotate, manage, and retrieve database credentials, API keys, and other secrets through their lifecycle
What is the maximum rotation interval you can specify?
30 days to 1 Year (365 days)
In Secrets Manager this is the maximum interval length you can set for automatic key rotation
- 1 day (min)
- 30 days (default)
- 365 days (max)
