Storage Flashcards

Question

What are the max number of EFS file systems per customer account in an AWS region?

Answer 1

Number of file systems for each customer account in an AWS Region 1,000

Answer 2

A key is the unique identifier for an object within a bucket.

Answer 3

By default, you can create up to 100 buckets in each of your AWS accounts.

Answer 4

You can’t change its Region after creation.

Answer 5

• You can upload and copy objects of up to 5 GB in size in a single operation. For objects greater than 5 GB up to 5 TB, you must use the multipart upload API.

Answer 6

S3 provides the tagging subresource to store and manage tags on a bucket. AWS generates a cost allocation report with usage and costs aggregated by your tags. ◦ You can associate up to 10 tags with an object. Tags associated with an object must have unique tag keys. ◦ A tag key can be up to 128 Unicode characters in length and tag values can be up to 256 Unicode characters in length. ◦ Key and values are case sensitive.

Answer 7

These are the methods on how to grant cross-account access to objects that are stored in your own Amazon S3 bucket: ▪ Resource-based policies and AWS Identity and Access Management (IAM) policies for programmatic-only access to S3 bucket objects ▪ Resource-based Access Control List (ACL) and IAM policies for programmatic-only access to S3 bucket objects ▪ Cross-account IAM roles for programmatic and console access to S3 bucket objects

Answer 8

▪ Change the versioning state of your bucket | ▪ Permanently delete an object version

Answer 9

◦ Use versioning to keep multiple versions of an object in one bucket. ◦ Versioning protects you from the consequences of unintended overwrites and deletions. ◦ You can also use versioning to archive objects so you have access to previous versions. ◦ Since versioning is disabled by default, need to EXPLICITLY enable. ◦ When you PUT an object in a versioning-enabled bucket, the non-current version is not overwritten. ◦ When you DELETE an object, all versions remain in the bucket and Amazon S3 inserts a delete marker. ◦ Performing a simple GET Object request when the current version is a delete marker returns a 404 Not Found error. You can, however, GET a non-current version of an object by specifying its version ID. ◦ You can permanently delete an object by specifying the version you want to delete. Only the owner of an Amazon S3 bucket can permanently delete a version.

Answer 10

``` ◦ S3 STANDARD for general-purpose storage of frequently accessed data. ◦ S3 REDUCED_REDUNDANCY (RRS) for noncritical, reproducible data that can be stored with less redundancy than the STANDARD storage class. Not recommended because STANDARD storage class is more cost effective. ```

Answer 11

◦ S3 STANDARD_IA for long-lived, but less frequently accessed data. It stores the object data redundantly across multiple geographically separated AZs. ◦ S3 ONEZONE_IA stores the object data in only one AZ. Less expensive than STANDARD_IA, but data is not resilient to the physical loss of the AZ. ◦ These two storage classes are suitable for objects larger than 128 KB that you plan to store for at least 30 days. If an object is less than 128 KB, Amazon S3 charges you for 128 KB. If you delete an object before the 30-day minimum, you are charged for 30 days.

Answer 12

Amazon S3 Intelligent Tiering: ``` ◦ S3 Intelligent-Tiering is a storage class designed for customers who want to optimize storage costs automatically when data access patterns change, without performance impact or operational overhead. ◦ S3 Intelligent-Tiering is the first cloud object storage class that delivers automatic cost savings by moving data between two access tiers — frequent access and infrequent access — when access patterns change, and is ideal for data with unknown or changing access patterns. ◦ S3 Intelligent-Tiering monitors access patterns and moves objects that have not been accessed for 30 consecutive days to the infrequent access tier. If an object in the infrequent access tier is accessed later, it is automatically moved back to the frequent access tier. ◦ There are no retrieval fees in S3 Intelligent-Tiering. ```

Answer 13

GLACIER ◦ For long-term archive ◦ Archived objects are not available for real-time access. You must first restore the objects before you can access them. ◦ You cannot specify GLACIER as the storage class at the time that you create an object. ◦ Glacier objects are visible through S3 only ◦ Retrieval Options: ▪ Expedited – allows you to quickly access your data when occasional urgent requests for a subset of archives are required. For all but the largest archived objects, data accessed are typically made available within 1–5 minutes. There are two types of Expedited retrievals: On-Demand requests are similar to EC2 On-Demand instances and are available most of the time. Provisioned requests are guaranteed to be available when you need them. ▪ Standard – allows you to access any of your archived objects within several hours. Standard retrievals typically complete within 3–5 hours. This is the default option for retrieval requests that do not specify the retrieval option. ▪ Bulk – Glacier’s lowest-cost retrieval option, enabling you to retrieve large amounts, even petabytes, of data inexpensively in a day. Bulk retrievals typically complete within 5–12 hours. ◦ For S3 Standard, S3 Standard-IA, and Glacier storage classes, your objects are automatically stored across multiple devices spanning a minimum of three Availability Zones.

Answer 14

• Amazon S3 Glacier Deep Archive ◦ A new Amazon S3 storage class providing secure and durable object storage for long-term retention of data that is accessed rarely in a year. ◦ S3 Glacier Deep Archive offers the lowest cost storage in the cloud, at prices lower than storing and maintaining data in on-premises magnetic tape libraries or archiving data offsite. ◦ All objects stored in the S3 Glacier Deep Archive storage class are replicated and stored across at least three geographically-dispersed Availability Zones, protected by 99.999999999% durability, and can be restored within 12 hours or less. ◦ S3 Glacier Deep Archive also offers a bulk retrieval option, where you can retrieve petabytes of data within 48 hours.

Answer 15

The same key used to encrypt in the first place is taken into the snapshot. If you create a new EBS snapshot then will be a new key. Should use this my default Exam power ups: - Accounts can be set to encrypt by default - Otherwise choose the CMK to use - Each volume uses 1 unique DEK - Can't change a volume to not be encrypted - OS is not aware of the encryption so no performance hit