Udemy lecture 5: Amazon S3 Flashcards

1
Q

__________ is one of the main building blocks of AWS

A

Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the different use cases of amazon S3?

A
  • Backup & storage
  • Disaster recovery
  • Archive
  • Hybrid cloud storage
  • Application hosting
  • Media hosting
    etc
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon S3 stores objects (files) into ____________

A

Buckets (directories)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Buckets must have a ____________________ name (across all regions all accounts)

A

Globally unique name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Buckets are defined at the __________ level

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the naming conventions for S3 buckets?

A
  • No uppercase, no underscore
  • 3-63 character long
  • Not an IP
  • Must start with lowercase letter or number
  • Must not start with the prefix xn-
  • Must not end with the suffix -s3alias

So just use letters, numbers, and hyphons youll be fine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Objects (files) have a ________

A

Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The key is the _________ path

A

Full (all the layers of your file like think of it being in a folder & having multiple layers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

The object key is composed of the __________ + _____________

A

prefix + object name (ex. s3://my-bucket/my_folderI/another_folder(prefix)/(object name) my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Keys are usually just long names that contain ________

A

Slashes (/)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Object values are the content of the _________

A

Body

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are some aspects of objects related to their sizing?

A
  • Max. object size is 5TB (5000GB)
  • If uploading more than 5GB, must use “multi-part upload”
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Object can also contain __________

A

Metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are metadata?

A

Metadata consists of a list of text key/ value pairs, which can be used by the system or user to know some elements of the file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Metadata contain ______– which are unicode key/ value pair up to 10 & they are useful for security/ lifecycle

A

Tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Metadata also contains a __________ if versioning is enabled

A

Version ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the different Amazon S3 securities?

A
  1. User-based
  2. Resources- Based
  3. Encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the user-based policies used in Amazon S3?

A

IAM policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are IAM polices related to S3?

A

IAM policies are API calls that decide which API calls should be allowed for a specific user from IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the different resource-based policies related to S3?

A
  • Bucket policies
  • Object Access Control List (ACL)
  • Bucket Access control list (ACL)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the bucket policies related to S3?

A

Its bucket wide rules from the S3 console which allows cross account (its what allows it to become public)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the object access control list (ACL) related to S3?

A

Finer grain that can be disabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the bucket access control list (ACL) related to S3?

A

Less common & can be disabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the conditions that must be met for an IAM principal to access an S3 object?

A
  1. The user IAM permissions allow it or the resources policy allows it
  2. There’s no explicit deny
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How is encryption related to S3 security?

A

Encrypt object in amazon S3 using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

S3 bucket policies mostly are what?

A

JSON based policies (with allow the features of JSONs such as the resources, effect, actions, principals, etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Why do we use S3 bucket for policies?

A
  • Grant public access to the bucket
  • Force objects to be encrypted at upload
  • Grant access to another account (cross account)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

S3 can host __________ websites & have them accessible on the internet

A

Static

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

If you get a 403 forbidden error, make sure that the _________ allows public reads

A

bucket policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does versioning your files mean?

A

Updating your files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

You can version your files in Amazon S3 but it has to be done at the ___________

A

bucket level (when you use the same key overwrite it will change the version, making updates)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Why should you version your buckets?

A
  • Protects against unintended deletes (ability to restore a version)
  • Easy roll back to previous version
  • Any file that is not versioned prior to enabling versioning will have version “null” (suspending versioning doesn’t delete the previous versions)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the 2 different Amazon S3 replications?

A
  1. CRR (cross-region replication) (the2 regions must be different)
  2. SRR (same-region replication)(the 2 regions must be the same)
  • Must enable versioning in source & destination buckets to use them
34
Q

How can CRR be beneficial?

A

If you use cross-region replication, it can be helpful for compliance or for providing lower latency access to your data because its in another region or to replicate data across accounts

35
Q

How can SRR be beneficial?

A

It can be helpful to aggregate logs across multiple S3 buckets or to perform a live replication between production & test accounts, so you basically have your own test environment

36
Q

What are the different S3 storage classes?

A
  • Amazon S3 standard- general purpose
  • Amazon S3 standard - infrequent access (IA)
  • Amazon S3 one zone-infrquent access
  • Amazon S3 glacier instant retrieval
  • Amazon S3 glacier flexible retrieval
  • Amazon S3 glacier deep archive
  • Amazon S3 intelligent tiering
37
Q

What does durability mean related to Amazon S3?

A

Durability represents how many times an object is going to be lost by Amazon S3 so Amazon S3 has a high durability called 11 nines

38
Q

What does Amazon S3 11 nine durability means?

A

Means that if you decided to store 10 million object in Amazon S3 then you can expect to lose a single object once every 10,000 years

39
Q

What does availability mean related to S3?

A

It represents how readily a service is (depends on storage class)

40
Q

Amazon S3 standard has 99.99 availability & its used for ____________ accessed data & it has low latency & high throughputs. It can sustain two concurrent facility failures by AWS

A

Frequently

41
Q

What are the use case for Amazon S3 standard?

A
  • Big data analytics
  • Mobile & gaming applications
  • Content distribution
42
Q

S3 infrequent access is used for data that is __________________ accessed but requires rapid access when needed

A

Less frequently accessed

43
Q

S3 infrequent access is _______ availability so a bit less available

A

99.9%

44
Q

What is the use case for amazon S3 infrequent access (IA)

A

Used for disaster recovery & backups

45
Q

_______________ has high durability within a single AZ only

A

Amazon S3 one zone -infrequent access (one-zone IA)

46
Q

Amazon S3 one zone -infrequent access has a __________ availability

A

99.5%

47
Q

What is the use case of S three one zone-IA?

A

To store secondary copies of backups of things like on-premise data, or data you can recreate

48
Q

____________ has the lowest cost object storage meant for arching & backup

A

Amazon S3 Glacier

  • Pay for the storage & retrieval cost
49
Q

_______________ give you milliseconds retrieval for data that’s accessed once a quarter & the minimum store duration is 90 days

A

Amazon S3 Glacier instant retrieval

50
Q

_____________ has 3 flexibility, where you have expedited where you get the data back between 1 & 5 minutes, you have a standard where you get data back between 3-5 hours & you got minimum storage duration of 90 days

A

Amazon Glacier Flexible retrieval

51
Q

What is the difference between instant & flexible related to data retrieval?

A

Instant means you retrieve data instantly & flexible means that your willing to wait longer period of time like for example 12 hours

52
Q

___________ which is meant for long-term storage, & it has 2 different types of retrieval which are standard retrieval of 12 hours & bulk of 48 hours. Also get a minimum storage duration of 180 days

A

Amazon Deep Glacier archive

53
Q

___________ storage class allow you to move objects between excess tiers based on usage patterns & you get a small monthly monitoring fee & auto tiering fee

A

Amazon S3 intelligent -tiering

54
Q

What are the two different types of encryptions used for amazon S3?

A
  1. Server side-encryption
  2. Client - side enctryption
55
Q

What is server-side encryption?

A

Its when the server is doing the encryption for you

56
Q

What is client side encryption?

A

Its when the user does the encryption

57
Q

Within AWS by default the ___________- encryption is used

A

Server-side encryption

58
Q

What is the IAM access analyzer for amazon S3?

A

Its a monitoring feature for your amazon S3 bucket to ensure that only the intended people have access to your S3 bucket, so when its shared with unwanted people you can see it & take action

59
Q

What is AWS responsible for related to S3?

A
  • Responsible for their infrastructure related to S3 (ability, availability, etc)
  • Internal configuration & vulnerability analysis
  • Compliance validation internally with their infrastructure
60
Q

What are you responsible related to Amazon S3?

A
  • Supposed to correctly setup S3 versioning to make sure you setup the right S3 bucket policy so that data is protected in your buckets
  • Make sure that if you want verfication you set it up yourself
  • Use the most optimal cost storage cloud that is going to be most cost friendly for you
  • Encrypt your data onto your amazon S3 bucket
61
Q

What is AWS snow family?

A

Its a highly secure portable device in AWS

62
Q

What are the two use cases for AWS snow family?

A
  • Its used to collect & process data at the edge

-Or to migrate data in & out of AWS

63
Q

What are the different types of devices in the snow family related to data migration?

A
  1. Snowcone
  2. Edge
  3. Snowmobile
64
Q

What are the two different types of devices within the snow family related to edge computing (collecting & transferring data at the edge)

A
  1. Snowcone
  2. Snowball edge
65
Q

The snow family is used for data migration why? and what is the rule of thumb related to the snow family & data migration?

A

To speed things up & rule of thumb is that if it takes more than a week to transfer data over the network then you should use a snowball device (it transfers data physically not by network)

66
Q

What are the two different types of snowball edge?

A
  1. Snowball edge storage optimized
  2. Snowball edge compute optimized
67
Q

What is snowball edge storage optimized?

A

Gives you 80 terabytes of hardware disk capacity which works for block volume or S3 compatible object storage

68
Q

What is snowball edge compute optimized?

A

Gives you 42 terabytes or 28 terabytes

69
Q

What is the use case for a snowball edge?

A

To do a large data cloud migration to decommission a data center or for a disaster recovery by backing up your data into AWS

70
Q

A ___________ is used for edge computing, storage & data transfer

A

Snowcone

71
Q

What are the two versions of snowcone?

A
  1. Snowcone- which is 8 terabytes of HDD storage
  2. Snowcone SSD with 14 terabytes of SSD storage
72
Q

You can transfer your data physically with __________, you can transfer exabytes of data with it & its highly secured

A

Snowmobile

73
Q

AWS recommends for migration size you wanna use ___________ for 24 terabytes, __________ petabytes, and exabytes for _________ want to

A

snowcone, snowball edge, snowmobile

74
Q

What is edge computing?

A

Edge computing is when you process data while its being created at an edge location

75
Q

What is an edge location?

A

An edge location is anything that really doesn’t have internet or that far away from the cloud

ex. a truck on the road or ship on sea, etc

76
Q

With snow edge pricing you pay for device usage & data transfer ______ of AWS

A

Out

77
Q

Putting data into Amazon S3 is _______

A

Free

78
Q

What are the different snowball edge pricing?

A
  1. On-demand
  2. Committed upfront- where you pay in advance for monthly, 1yr, or 3yr usage
79
Q

A _________ is used to bridge your on-premise data & cloud data in AWS (allows you to use a hybrid model with S3)

A

Storage gateway

80
Q

______________ is the most cost-effective option if you want to archive data and do not have a retrieval time requirement. You can retrieve data in 12 or 48 hours.

A

Amazon Glacier Deep Archive

81
Q

______________ can be used to define when S3 objects should be transitioned to another storage class or when objects should be deleted after some time.

A

Lifecycle Rules

82
Q

___________ devices are well suited for large-scale data migrations and recurring transfer workflows, as well as local computing with higher capacity needs.

A

Snowball Edge Storage Optimized