Flashcards
AWS developer associate #1
Cards in this deck (58)
- 1what does elastic beanstalk handle?deployment from capacity provisioning, load balancing, auto-scaling to application health monitoring
- 2when should you use beanstalk?when you want to run a web-application but don't want to have to think about the underlying infrastructure
- 3how does beanstalk pricing work?it costs nothing to use but you pay for the underlying resources (RDS, ELB, EC2)
- 4what is beanstalk not recommended for?not recommended for business critical huge kinda production environments
- 5what platforms does beanstalk support?java, .net, php, node.js, python, ruby, go and docker
- 6what container 'modes' can you run in beanstalk?single-container or multi-container, which are running on ECS instead of EC2
- 7what type of environments does beanstalk have?web environment vs worker environment
- 8what types of web environment does beanstalk support? how do they differ?single-instance which launches a single EC2 instance, an EIP is assigned to the EC2
load balanced env which launches EC2s behind an ELB managed by an ASG - 9how does beanstalk's worker environment work?it creates an sqs queue, installs the SQS daemon on the EC2 instances, and has ASG scaling policy which will add or remove instances based on queue size
- 10what deployment policies does beanstalk support?all at once, rolling, rolling with additional batch, immutable
- 11how does 'all at once' deployment work? how can it be classified?takes all servers out-of-service, applies changes, puts the servers back-in-service
fast, has dowtime - 12how does 'rolling' deployment work? how can it be classified?updates servers in batches, reduced capacity based on batch size
- 13how does 'rolling with additional batch' deployment work? how can it be classified?adds new servers in batches to replace old ones, never reduces capacity
- 14how does 'immutable' deployment work? how can it be classified?creates the same amount of servers, and switches all at once to new servers, removing old servers
- 15when can't you do a rollback deployment in beanstalk?rollback deployment polices require an ELB so cannot be used with single-instance web environments
- 16what is 'in place' deployment in the context of beanstalk?deployment within the environment, all deployment policies are in-place in the context of beanstalk
- 17what are 'blue/green' deployments ?when deplyment envs are swapped with older ones, good when you have external resources such as RDS which cannot be destroyed
- 18where are beanstalk's config files located?in a directory called .ebextensions
- 19how can you improve provisioning times in beanstalk?by providing a custom image
- 20how can you attach an RDS instance to beanstalk?by adding it when creating the beanstalk env -> it will be deleted with it
by connecting to a separately created RDS instance -> will persist if beanstalk env is deleted - 21what is ECS?Elastic Contain Service - a fully managed container orchestration service
- 22what are the components of ECS?cluster, task definition, task, service, container agent
- 23what is an ECS cluster?multiple ec2 instances which will house the docker containers
- 24what is an ECS task definition?a json file that defines the configuration of up to 10 containers you want to run
- 25what is an ECS task?a task launches containers in the task definition, tasks do not remain running once the workload is complete
- 26what is an ECS service?an ECS service is a task that remains running (web-app)
- 27what is an ECS container agent?it's a binary on each EC2 instance which monitors, starts and stops tasks
- 28what is ECR?Elastic Container Registry - a fully managed docker container registry that makes it easy for developers to store,manage and deploy docker container images
- 29what is fargate?fargate is serverless containers -> you don't have to worry about servers, only pay for the duration and consumption of containers
- 30what are some benefits of fargate?cold starts
duration as long as you need
memory up to 30 gb
pricing - pay at least 1 min and every additional second - 31what is X-Ray?X-Ray helps developers analyze and debug applications that utilize microservice architecture
X-Ray is a distributed tracing system, it is a method used to profile and monitor apps, especially those built using a microservices architecture to pinpoint where failures occur and what causes poor performance - 32how does X-Ray work?It is a daemon which is a software application that listens for traffic on UDP port 2000, gathers raw segment data, and relays it to the AWS X-Ray API
Data is not snd directly to the X-Ray API but passes through the X-Ray daemon which uploads in bulk - 33what are X-Ray segments?the provide the resource's name, details about the request, and details about the work done
- 34what are X-Ray subsegments?provide more granular timing information then segments and details about downstream calls that your app made to fulfill the original request
- 35what is an X-Ray service graph?flow chart visualization of average response for micro-services and to visually pinpoint failure
- 36what are X-Ray traces?they collect all segments generated by a single request so you can track the path of requests through multiple services
- 37what is X-Ray sampling?an algorithm that decides which requests should be traced which X-Ray sdk record the first request each second and 5% of additional requests
- 38what is X-Ray tracing header?is named X-Amzn-Trace-Id and identifies a trace which passed along to downstream services
- 39what are X-Ray filter expressions?allow you to narrow down specific paths or users
- 40what are X-Ray groups?allow saving FilterExpressions so you can quickly filter traces
- 41what are X-Ray annotations and metadatathey allow you to capture additional information in key-value pairs
annotations are indexed for use with filter expressions with a limit of 50
metadata are not indexed and are meant to be used when you want to store something the trace but don't need to use for searching traces - 42what is ACM?Aws Certificate Manager - handles the complexity of creating and managing public SSL/TLS certificates for your AWS based websites and applications
- 43what type of certificates does ACM handle?public - certificates provided by ACM
private - certificates you import (400$/month!) - 44to what can ACM be attached to?elastic load balancer
cloudfront
API gateway
Beanstalk (through elb) - 45how compliant is KMS?up to FIPS 140-2 Level 2
- 46what does KMS store?it stores Master Keys, not data keys
- 47what are Master Keys?they are used to encrypt data keys
- 48what is Envelope Encryption?the practice of encrypting data keys with master keys
- 49what types of keys does KMS support?symmetric keys - single key using 256 bit encryption (eg S3 bucket AES-256)
asymmetric keys - use two keys (eg public and private key pair) - 50what is cognito?decentralized managed authentication system. when you need to easily add authentication to your mobile and desktop app think cognito
- 51what are user pools?user directory, allows users to authenticate using Oauth to IpD such as facebook, google, Amazon to connect to web-applications. Cognito User Pool is itself a IpD
- 52what do user pools use to persist authentication?JWTs
- 53what are identity pools?they provide temporary aws credentials to access services (eg s3, dynamodb)
- 54what is cognito sync?can sync user data and preferences across devices with one line of code (powered by SNS)
- 55what is web identity federation?exchange identity and security information between an identity provider (IdP) and an application
- 56what is IdP?Identity Provider - a trusted provider of your user identity that lets you use authenticate to access other services (eg Facebook, Twitter, Google, Amazon)
- 57what is OIDC?a type of IdP which uses Oauth
- 58what is SAML?a type of IdP which is used for Single Sign-on
Information
- Description
- Flashcards on AWS developer associate #1, created by Chira Mircea-Darius on 28/04/2021.
- Created by
- Chira Mircea-Darius
- Views
- 0
- Rating