RDS, Aurora & Elasticache Flashcards
What are the 6 databases that RDS supports?
- Postgres
- MySQL
- MariaDB
- Oracle
- Microsoft SQL Server
- Aurora
How many read replicas can you have?
Up to 5
Are all read replicas in the same AZ?
You can have them in the same AZ, cross AZ or cross region
What does async replication mean?
It means the reads are eventually consistent
How does an application leverage read replicas?
You need to update the connection string
What is a typical use case for read replicas?
When you need a reporting application to read data but don’t want the production application to be impacted
What SQL keyword can be used with read replicas?
SELECT only. Not UPDATE, INSERT or DELETE
Do you have to pay for cross AZ traffic in read replicas?
If you are within the same region, the cross AZ traffic is free
What is RDS Multi AZ for?
It is for Disaster Recovery
In Multi AZ, how does the application switch from the main DB to the backup DB?
The application connects using a DNS name, which will automatically point to the backup if the master goes down.
Can read replicas be setup as Multi AZ for Disaster Recovery?
Yes
How do I make my DB go from single AZ to multi AZ?
Just click on Modify in the database and enable multi AZ. It causes zero downtime
What happens when I click enable multi AZ?
- A snapshot of the DB is taken.
- A new DB is restored from the snapshot in a new AZ
- Synchronization is established between the 2 DBs
Can I encrypt a read replica?
Only if the master is encrypted
How do you enforce SSL in Postgres?
In the RDS console, in Parameter Groups, set:
rds.force_ssl=1
How do you enforce SSL in MySQL?
Within the DB, run the following:
GRANT USAGE ON . TO ‘mysqluser’@’%’ REQUIRE SSL;
What are the 4 steps to encrypt an unencrypted DB?
- Create a snapshot
- Copy the snapshot and enable encryption
- Restore the DB using the encrypted snapshot
- Migrate apps to the new DB and delete the old one
What are the 4 things I am responsible for with RDS security?
- Check ports/IP/inbound security group rules
- In-DB user creation and permissions or manage through IAM
- Create a DB with or without public access
- Ensure parameter groups or DB is configured to allow SSL
What is AWS responsible for with RDS security?
- No SSH access
- No manual DB patching
- No manual OS patching
- No way to audit the underlying instance
What are the 2 DBs supported by Aurora?
- Postgres
- MySQL
How does Aurora maintain high availability and read scaling?
It has 6 copies of your data across 3 AZs
What are the 6 copies used for?
- 4 copies out of 6 needed for writes
- 3 copies of of 6 needed for reads
Does Aurora support cross region replication?
yes
What is a Writer endpoint in Aurora?
It is the DNS name the clients points to to communicate with the master
