Other

Question 1

• S3 bucket permissions – bucket is not public
• Security groups – specific ports unrestricted
• IAM use (one IAM user minimum)
• MFA – on root accnt
• EBS – no public snapshots
• RDS – no pulic snapshots
• Service limits

Answer 1

7 core checks in Basic & Developer Support Plan

Question 2

• Full checks available on the 5 categories
• Ability to set cloudwatch alarms when reaching limits
• Programmatic access using AWS support API

Answer 2

Business and Enterprise support plan

Question 3

AWS Support plans

Answer 3

AWS Basic
AWS Developer
AWS Business - 1 - 4 hr downtime,
AWS Enterprise On-Ramp - TAMs, 1-4 hr prod. downtime or 30 mins critical system
AWS Enterprise - mission critical - TAM, 1-4 hr downtime or 15 mins critical system

Question 4

• create a database of users for your web and mobile applications (potentially millions)

Answer 4

Amazon Cognito

Question 5

• Create temporary, limited privileges credentials

Answer 5

Amazon STS (Security Token Service)

Question 6

• Managed desktop as a service DaaS, easily provision Windows/Linux desktop
• Eliminate on premise VDI infrastructure
• Fast/scalable to thousands of users
• Integrates with KMS
• Minimize latency by deploying to region closest to users

Answer 6

Amazon Workspaces

Question 7

• Desktop application streaming service
• Deliver to any computer w/o acquiring or provisioning infrastructure
• Application delivered from within a web browser, works on any device
• Can configure instance per application

Answer 7

AppStream 2.0

Question 8

• Create and run VR and AR and 3D applications
• Create 3D models and animations
• Ready to use templates and assets
• Accessible via web browser URLS or on popular hardware for AR/VR

Answer 8

Sumerian

Question 9

• Easily connect IoT devices to the AWS Cloud
• Any ‘Smart’ device connect to the cloud
• integrates with Lambda, S3, Sagemaker, etc

Answer 9

AWS IoT Core

Question 10

• Convert media files stored in s3 into media files in formats required by consuer playback
  devices (phones/tables/PCs/etc)
• Highly scalable

Answer 10

Elastic Transcoder

Question 11

• Fully managed service to test web and mobile apps against desktop browsers, real mobile devices, tablets
• Run tests concurrently on multiple devices
• Ability to configure device settings (GPS, language, WiFi, Bluetooth)

Answer 11

Device Farm

Question 12

• Fully managed service to centrally and manage automate backups across AWS services
• On demand and schedule backups
• Create frequency, retention policys, which aws resources are affected and backed up to S3

Answer 12

AWS Backup

Question 13

• Back and Restore: cheapest option, stored in S3
• Pilot Light: Core functions of app ready to scale, minimal setup in EC2, little more expensive
• Warm Standby: full version of app but at minimum size, more expensive
• Multi-Site/Hot site: Full version of app, at full size – very expensive

Answer 13

Disaster Recovery Strategies

Question 14

• Quickly and easily recover physical, virtual, cloud based servers in AWS
• Continuous block level replication for your servers
• AWS Replication Agent replicates on prem DB/Apps/ and continuously pushes to AWS cloud
• Can do failback, xfer back from cloud to on prem

Answer 14

Elastic Disaster Recovery (DRS)

Question 15

• Move large amt of data from on prem to AWS, Can sync to S3
• Replication tasks scheduled hourly, daily, weekly
• Replication tasks are incremental after the first full load

Answer 15

Datasync

Question 16

• Fully managed service for running fault injection experiments on AWS Workloads
• Based on Chaos Engineering – how app reacts to disruptive events
• Find hidden bugs and performance bottlenecks
• EC2, ECS, EKS, RDS, etc.

Answer 16

AWS Fault Injection Simulator (FIS)