Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

.๐’œ๐’ฒ๐’ฎ ๐’ž๐‘’๐“‡๐“‰๐’พ๐’ป๐’พ๐‘’๐’น ๐’Ÿ๐‘’๐“‹๐‘’๐“๐‘œ๐“…๐‘’๐“‡ > Section 6: AWS Fundamentals: Amazon S3 > Flashcards

Section 6: AWS Fundamentals: Amazon S3 Flashcards

(67 cards)

Start Studying
1
Q

What does S3 stand for?

A

Simple Cloud Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is S3 advertised as?

A

โ€œInfinetily scalableโ€ storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the naming rules of S3 buckets?

A 
No uppercase
No underscore
3-63 chararecters long
Not an IP
Must start with lowercase letter or number
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How unique must S3 bucket names be?

A

Totally unique accross the entire AWS S3 ecosystem. Two AWS accounts canโ€™t have a buket with the same name.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What characterize S3 objects?

A

Key
Metadata
Tags
Version ID (if versionning is enabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What consists in an S3 object key?

A

The filename and its โ€œsubpathโ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the max size of an S3 object?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are there directories in an S3 bucket?

A

No, although the UI will trick you to think otherwise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

At what level can versioning be activated in S3?

A

At the bucket level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What happens if we update a file in an S3 bucket with versionning?

A

The file will have a new version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some reasons why you should enable versioning in an S3 bucket?

A

Protects you against unintended deletes (ability to restore)

Easy roll back to previous version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What will be the version id of any files that were on an S3 bucket prior to activating versioning?

A

Null

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the four methods of encrypting objects in S3?

A

SSE-S3
SSE-KMS
SSE-C
Client Side Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What keys does SSE-S3 use to encrypt S3 objects?

A

It uses keys handled and managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What keys does SSE-KMS use to encrypt S3 objects?

A

It leverages AWS KMS Service to manage encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What keys does SSE-C use to encrypt S3 objects?

A

It uses your own encryption keys which you pass to S3 in a header of your HTTP request.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Where are objects encrypted when using SSE-S3

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Where are objects encrypted when using SSE-KMS

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Where are objects encrypted when using SSE-C

A

On the server side (in S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Where are objects encrypted when using Client Side Encryption

A

On the client side using a library such as Amazon S3 Encryption Client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to tell S3 to use SSE-S3 when sending a file?

A

By setting the โ€œx-amz-server-side-encryptionโ€ header to โ€œAES256โ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How to tell S3 to use SSE-KMS when sending a file?

A

By setting the โ€œx-amz-server-side-encryptionโ€ header to โ€œaws:kmsโ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the advantages of using KMS to encrypt S3 objects?

A

User control

Audit trail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

With what encryption must HTTPS be used?

A

SSE-C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
How to get encryption in flight when sending data to S3?
By using the HTTPS endpoint rather than the HTTP endpoint
26
What is another common name for "Encryption in flight" ?
SSL / TLS
27
What does SSL stand for?
Secure Sockets Layer
28
What does TLS stand for?
Transport Layer Security
29
How to insure user based security in an S3 bucket?
By using the right IAM policies
30
How to manage user based security for S3?
With IAM policies (Which API calls should be allowed for a specific user from IAM console)
31
How to manage resource based security for S3?
Bucket polices (Most popular / Better method) Object Access Control List Bucket Access Control List
32
What form an S3 bucket policy?
Resources (Buckets or objects) Actions (Set of API) Effect (Allow or Deny) Principal (The account or user to apply the policy to. E.g. * means everybody)
33
How can you force objects to be encrypted at upload?
By setting the appropriate bucket policy
34
How can you grant public access to the bucket?
By setting the appropriate bucket policy
35
How can you grant access to another account (Cross account)?
By setting the appropriate bucket policy
36
Does S3 bucket support VPC endpoints?
Yes
37
Where should an S3 bucket access logs be stored?
In an other bucket, not in the same otherwise you'll get an infinite loop
38
Where can API calls be logged?
In AWS CloudTrail
39
When setting a policy for an S3 bucket, what should the ARN end with if you want the policy to affect all files in the bucket?
/*
40
How to upload a file that is more than 5GB to an S3 bucket?
By enabling multi-part upload (it's mandatory for files of 5GB and more)
41
What happens if you delete a file from an S3 bucket with versioning enabled?
The file won't show in the bucket anymore but you can still access it by enabling the showing of versions in the GUI.
42
Is it possible to define a default encryption in the properties of a bucket?
Yes
43
How can you grant access to file to a user for a short amount of time?
By generating a signed URL
44
The client has an index.html file which tries to access an image in another bucket but it is not working, what is going on?
It most likely is that the CORS other bucket doesnโ€™t have the proper CORS enabled.
45
What will happen if you want enable static site hosting in an S3 but don't allow public read?
You will get a 403 (Forbidden) error
46
What should you set if you have a website hosted on an S3 bucket that needs to download an image hosted on another S3 bucket?
On the bucket hosting the image, you need to enable CORS access to bucket that needs to access the image
47
What do CORS protect you from?
From having other websites referencing your file in your bucket therefore generating traffic and incurring costs on your behalf.
48
What is the consistency model of PUTS of new objects in S3?
Read after write except if we did a GET before to see if the object existed
49
What is the consistency model of DELETES and PUTS of existing objects?
Eventual consistency If we read an object after updating it, we might get the older version If we read an object after deleting it, we might still be able to retrieve it for a short time
50
Where can S3 send notifications on changes to?
AWS SQS AWS SNS AWS Lambda
51
Historically, when would S3 performance decrease?
When you had over 100 TPS (Transactions per second)
52
Behind the scene, where do objects go when uploaded to S3?
To various S3 partitions
53
What WAS recommended in order to opmitise performance when uploading files to S3?
Have random characters in front of your key names
54
Should you use a date as a prefix to a file on S3?
No because the files with such prefix would most likely be stored in the same partitions which could hit performance
55
As of July 17th 2018, what are the new max RPS for PUTS and RPS for GET in S3 for each prefix?
3500RPS for PUT | 5500RPS for GET
56
How to get faster upload of large objects in S3?
Use multi part upload
57
What are the three ways multi part upload fasten uploads in S3?
Parallelizes PUTs for greater throughput Maximize your network bandwidth and efficiency Decrease time to retry in case a part fails
58
In what case do multi part upload MUST be used in S3
When uploading files larger than 5GB
59
How to improve reads around the world for objects stored in S3?
Use Cloudfront
60
How to improve writes around the world for objects stored in S3?
Use S3 Transfer Acceleration (uses Edge locations)
61
If you use KMS for encryption, what might be slowing you down?
Your KMS usage limits
62
What is S3 Glacier?
S3 Glacier is a file storage for long term archival
63
What to do if you only want to retrieve a subset of data in an S3 or Glacier?
Use S3 Select or Glacier Select
64
With what file type is S3/Glacier Select compatible?
CSV, JSON and Parquet
65
Are subqueries/joins supported in S3/Glacier Select?
No, only simple select with where statements
66
How much cost savings can using S3/Glacier Select provide?
Up to 80%
67
How much performance savings can using S3/Glacier Select provide?
Up to 400%

.๐’œ๐’ฒ๐’ฎ ๐’ž๐‘’๐“‡๐“‰๐’พ๐’ป๐’พ๐‘’๐’น ๐’Ÿ๐‘’๐“‹๐‘’๐“๐‘œ๐“…๐‘’๐“‡ (26 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions