Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

amng-AWS-SAP-C02 > S3 > Flashcards

S3 Flashcards

1
Q

S3 Server Side Encryption Types

A

SSE-S3
S3 manages encryption keys.
Free

SSE-C
Customer manages encryption keys.

SSE-KMS
AWS Key Management Service (KMS) manages the encryption keys.
Audit trail of when your key is used, and by whom.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Object Size Limit

A

0 bytes to 5 terabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS S3 Scope

A

Region-wise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

S3 Storage Classes - 6 Types

A

Standard

Standard Infrequent Access (Standard IA)

Intelligent Tiering

One Zone Infrequent Access (One Zone IA)

S3 Glacier

S3 Glacier Deep Archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 Storage Class - Standard
Durability
Availability
Failures sustainability

A

Durability : 11 - Nines
Availability : 99.99%
Failures sustainability : Two aviability zones (AZ)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

S3 Storage Class - Standard Infrequent Access (Standard IA)
Durability
Availability
Failures sustainability
Saving :

A

Durability : 11 - Nines
Availability : 99.9%
Failures sustainability : One aviability zone (AZ)
Saving : ? on storage costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 Storage Class - One Zone-Infrequent Access (S3 One Zone-IA)
Durability
Availability
Failures sustainability
Saving :

A

Durability : 11 - Nines
Availability : 99.5%
Failures sustainability : 1 AZ
Saving : 20% less than S3 Standard-Infrequent Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 Storage Class - S3 Intelligent-Tiering
Durability
Availability
Failures sustainability
Saving :

A

Durability : 11 - Nines
Availability : 99.9%
Failures sustainability :
Saving : 40% on storage costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 Archive Standard - Glacier
3 Types

A

Amazon S3 Glacier Instant Retrieval
Amazon S3 Glacier Flexible Retrieval (Formerly S3 Glacier)
Amazon S3 Glacier Deep Archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 Archive Standard :
Amazon S3 Glacier Instant Retrieval

Durability
Availability
Retrieval Time
Cost

A

Durability : 11 Nines
Availability : 99.9%
Retrieval Time : milliseconds
Cost : 68% on storage costs compared to using the S3 Standard-Infrequent Access (S3 Standard-IA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 Archive Standard :
Amazon S3 Glacier Flexible Retrieval

Durability
Availability
Failure :
Retrieval Time
Cost

A

Durability : 11 Nines
Availability : 99.99%
Failure : one entire Availability Zone destruction
Retrieval Time : Configurable retrieval times, from minutes to hours
Cost : 10% lower cost (than S3 Glacier Instant Retrieval)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Amazon S3 Glacier Deep Archive

Durability
Availability
Failure :
Retrieval Time
Cost

A

Durability :
Availability : 99.99%
Failure : Stored in 3 areas
Retrieval Time : 12 hrs or 48 hrs
Cost : lowest-cost storage class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Object Lock & Glacier Lock

A

Both adopts WORM
(Write Once - Read Many Times)

Objects : Blocks object version deletion for a predetermined time

Glacier : Locks the policy for future edits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS S3 Replication - Two Types
SRR - CRR

A

Same Region: Same Region Replication (SRR)

Different Region: Cross-Region Replication (CRR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AWS S3 Replication - points
Versioning
Accounts
Copying mode
IAM requirements

A

Must enabling versioning in source and destination
Buckets can be different accounts
Copying is asynchronous
Must give proper IAM permissions to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Retention Period and Legal Hold

A

Retention Period
- Governance mode
- Compliance mode

Legal Hold
Lock has no expiration until the hold is removed

Lock feature must be enabled during the bucket creation only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Governance mode

A

Users can’t overwrite or delete an object version or alter its lock settings unless they have special permissions
With governance mode, you protect objects against being deleted by most users, but you can still grant some users permission to alter the retention settings or delete the object if necessary.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Compliance mode

A

Protected object version can’t be overwritten or deleted by any user, including the root user in your AWS account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 object consists of

A

Key (Name)
Value
Version ID (used when versioning is turned on)
Metadata (data about the object such as date uploaded)
Sub-resources (ACL & Torrent)

20
Q

S3 Charging

A

Volume of data you have stored
Number of Requests
Data transfer out (including to buckets in other zones/regions)
Transfer Acceleration (Uses the AWS CloudFront CDN for caching files at edge locations)

21
Q

Uploading to S3

A

200 OK is returned after a successful upload.
Multipart upload is supported via the S3 API.
Recommended : Always Multipart uploads for file > 100mb.

22
Q

S3 bucket URL format

A

s3-region.amazonaws.com/bucketname/path-to-file

https://s3-ap-southeast-2.amazonaws.com/lithi/2017/10/8e306.jpg

23
Q

OAI (Origin Access Identity)

A

For allowing CloudFront to access objects in an S3 bucket,
while preventing the S3 bucket itself from being publicly accessible directly

24
Q

Bucket Policies & ACL

A

Bucket Policies override any ACLs -
if you enable public access via a Bucket Policy,
the object will be publicly accessible regardless any ACLs on Bucket

25
Q

Versioning

A

Disabled by default
Versioning once enabled, can only be disabled, but not removed.
Once versioning is enabled on existing bucket, versioning will not be applied to existing objects; versioning will only apply to any new or updated objects
Cross-region replication requires that versioning is enabled.
When you DELETE an object from a bucket with versioning, all versions remain and a delete marker is added.

26
Q

S3 Transfer Acceleration

A

Enables very fast, secure transfers of files over long distances (S3 bucket to client)
Utilizing Cloud Front’s edge locations.
Compatible with the multipart upload

27
Q

S3 Archives

A

Archives in Glacier class are immutable.
It can’t be modified but it can be deleted

28
Q

Glacier Vault Lock

A

Policies is a feature to protect archives to be deleted until a date

29
Q

S3 pre-signed URL

A

Can be used to provide temporary access to a private S3 object.
Three Parameters
- Bucket
- Key
- Expires

30
Q

S3 requester pays feature

A

By default, the bucket owner pays for the storage and for downloads. If the bucket owner wants to pay only for storage, the S3 requester pays must be enabled.

The requester pays buckets can’t be accessed by anonymous access.
It must be authenticated for billing purpose

31
Q

Cross-origin resource sharing (CORS)

A

Security mechanism that allows client web applications in one domain name to access resources in a different domain name.
For example, suppose you use an S3 bucket named Images to store graphics.
By configuring CORS for the Images bucket, you can allow the images in that bucket to be displayed on a website that hasn’t the same domain name

32
Q

S3 batch operations

A

Can be used to perform large-scale batch operations on S3 objects.
It can do the job on millions of objects. S3 tracks progress, send a notification, and stores a detailed completion report

33
Q

S3 Select

A

S3 Select runs simple SQL statements to filter the content of S3 objects to retrieve a subset of data

Works only on objects stored in SCV, JSON, or Apache Parquet format.
It works also with objects compressed with Gzip or Bzip2 (for JSON and CSV object only) and server-side encryption only.

Output of S3 Select can be in CSV or JSON

34
Q

Integration with other services

A

S3 integrates with CloudWatch and CloudTrail

35
Q

S3 Event notification

A

Sends a notification to SNS, SQS, or lambda to perform an action when events (upload, update, delete, etc) occur in S3

36
Q

S3 Access Logs

A

Used for audit purposes.
It logs all access to S3 buckets from any account (the operation, access or deny, etc)

Can be analyzed using data analysis tools or Amazon Athena.
It is enabled in the bucket level

Gives more details data than CloudTrail

37
Q

S3 Request Rates

A

Application can achieve at least
3500 put/copy/Post/Delete
or
5000 GET/HEAD requests per second per prefix in a bucket.

38
Q

S3 permissions

A

Resource Based Policies
Identity/User Policies

Identity Policy controls WHAT identities can access and Resource Policies controls WHO can access resources

Resource Policy have a “Principal” field.

39
Q

What policy is applied when anonymous users try to access an S3 Bucket?

A

Only the bucket policy

40
Q

What policy is applied when an external identity tries to access an S3 bucket?

A

Identity policy and bucket policy are applied and need to allow access.

41
Q

When is preferable to use Identity Policy against Resource Policy?

A

Allow or deny access to individual resources across multiple accounts

42
Q

When is preferable to use Resource Policy against Identity Policy?

A

Allow or deny access to everybody in the account or allow anonymous or cross-account access to S3 buckets.

43
Q

Static Hosting
How can you use a custom domain to access files into s3 bucket?

A

Name the bucket with your domain name and a prefix i.e s3.mydomain.com and add a custom domain on R53 that matches the bucket name.

44
Q

Static Hosting
What are the two good scenario for using S3 Static Web Hosting?

A

Offloading - Use an S3 bucket to store static content for a website.

#Out-of-band pages - Use an S3 Bucket to have a static website and use DNS to redirect users to that when the main website is unavailable.

45
Q

What are the two S3 Uploading modes?

A

Single PUT Upload - default - limit of 5Gb/upload - if fails, had to start again from beginning

#Multipart Upload

46
Q

What is the restriction to bucket name to take advantage of S3 Transfer Acceleration?

A

The bucket name can not have “dots”, and the name format must be DNS compatible.

amng-AWS-SAP-C02 (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions