O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Flashcards

AWS developer associate #2

Chira Mircea-Darius Inglês 55 flashcards

Flashcards do conjunto (55)

  1. 1what is Route53?A DNS provider, register and manage domains, create record sets. Think godaddy or namecheap
  2. 2what is route53's simple routing?the default routing policy, multiple addresses result in a random endpoint selection
  3. 3what is route53 weighted routing?split up traffic based on different weights assigned
  4. 4what is route53 latency-based routing?directs traffic based on region, for lowest possible latency for users
  5. 5what is route53 failover routing?primary site in one location, secondary data recovery site in another (change on healthcheck)
  6. 6what is route53 geolocation routing?route traffic based on the geographic location of a requests origin
  7. 7what is route53 geo-proximity routing?route traffic based on geopgraphic location using 'Bias' values'
    it needs route53's traffic flow
  8. 8what is route53 multi-value answer routing?return multiple values in response to DNS queries (using health checks)
  9. 9what is route53 traffic flow?visual editor for chaining routing policies, can version policy records for easy rollback
  10. 10what is AWS Alias Record?AWS smart DNS record, detects changed IPs for AWS resources and adjusts automatically
  11. 11what is route53 resolver?lets you regionally route DNS queries between your VPCs and your network hybrid environments
  12. 12what is route53 health checks?health checks can be created to monitor automatically endpoints. you can have health checks monitor other health checks
  13. 13what is AWS CLI?command line interface - lets you interact with AWS from anywhere by simply using a command line
  14. 14what is AWS SDK?software development kit - set of libraries that let you integrate AWS services into your applications
  15. 15what is KMS?creates and manages encryption keys for a variety of AWS services or for your apps
  16. 16how can you audit KMS key access history?by combining it with cloudtrail
  17. 17what can KMS do?it can automatically rotate out your primary keys every year with no need to re-encrypt
  18. 18what is CMK?Customer Master Keys they are primary resources in KMS
  19. 19how does KMS handle teantcy?KMS is a multi-tenant HSM, multi tenant means you are sharing the hardware with multiple customers
  20. 20what is HSM?Hardware Security Module is a specialized hardware for storing your keys and is tamper proof
  21. 21how compliant is KMS?up to FIPS 140-2 Level 2
  22. 22what does KMS store?it stores Master Keys, not data keys
  23. 23what are Master Keys?they are used to encrypt data keys
  24. 24what is Envelope Encryption?the practice of encrypting data keys with master keys
  25. 25what types of keys does KMS support?symmetric keys - single key using 256 bit encryption (eg S3 bucket AES-256)
    asymmetric keys - use two keys (eg public and private key pair)
  26. 26what is cognito?decentralized managed authentication system. when you need to easily add authentication to your mobile and desktop app think cognito
  27. 27what are user pools?user directory, allows users to authenticate using Oauth to IpD such as facebook, google, Amazon to connect to web-applications. Cognito User Pool is itself a IpD
  28. 28what do user pools use to persist authentication?JWTs
  29. 29what are identity pools?they provide temporary aws credentials to access services (eg s3, dynamodb)
  30. 30what is cognito sync?can sync user data and preferences across devices with one line of code (powered by SNS)
  31. 31what is web identity federation?exchange identity and security information between an identity provider (IdP) and an application
  32. 32what is IdP?Identity Provider - a trusted provider of your user identity that lets you use authenticate to access other services (eg Facebook, Twitter, Google, Amazon)
  33. 33what is OIDC?a type of IdP which uses Oauth
  34. 34what is SAML?a type of IdP which is used for Single Sign-on
  35. 35what is SNS?Simple Notification Service - is a fully managed pub/sub messaging service
  36. 36what is SNS for?it's for application integration. it allows decoupled services and apps to communicate with each other
  37. 37what is an SNS topic?logical access point and communication channel
    a topic is able to deliver to multiple protocols
    you can encrypt topics via KMS
  38. 38what is an SNS publisher?it uses the AWS API via AWS CLI or SDK to push messages to a topic
    many AWS services integrate with SNS and act as publishers
  39. 39what is an SNS subscription?you subscribe to topics
    when a topic receives a message it automatically and immediately pushes messages to subscribers
  40. 40where are SNS messages stored?they are stored redundantly across multiple AZs
  41. 41what notification protocols does SNS support?HTTP/s to create webhooks
    email - plain text, good for internal notifications
    email json
    amazon SQS - place message in a queue
    AWS lambda trigger
    SMS
    platform application endpoints (mobile push, apple, google, Microsoft, etc.)
  42. 42what is SQS?Simple Queue Service - queing service using messages with a queue
    like Sidekiq or RabbitMQ
  43. 43what is SQS used for?application integration, it lets decoupled services and apps talk to each other
  44. 44how do you read from SQS?you need to pull using SKDs, it is NOT push-based
  45. 45what queing does SQS support?Standard whcih allows nearly unlimited messages per second, does not guarantee order of delivery, always delivers at least once, you must protect against duplicate messages being processed
    FIFO - maintain the order of messages with a 300 limit
  46. 46what types of polling does SQS support?short polling - returns messages immediatly, even if queue is empty
    long polling - waits until message arrives in the queue, or the poll timeout expires - it is the preferred version
  47. 47what is visibility time-out?period of time that messages are visible in the SQS queue - messages will be deleted from queue after an app processed them
    if visibility timeout expires than a job will become invisible in the queue
    default visibility timeout is 30, can be 0 seconds up to 12 hours
  48. 48how long can SQS retain messages for?60 seconds up to 14 days, default is 4 days
  49. 49what message size does SQS1 byte to 256 kb, in java it's up to 2gb
  50. 50what is Kinesis?solution for collecting, processing and analyzing streaming data in the cloud
    when you need real-time think Kinesis
  51. 51what are Kinesis Data Streams?per running shard, data can persist within the stream, data is ordered and every consumer keeps its own position
    consumers have to be manually added (coded), data persists for 24 hours (default) up to 168 hours
  52. 52what is Kinesis Firehose?pay for only the data ingested, data immediately disappears once processed
    consumer of choice is from a predefined set of services: s3, redshift, elasticsearch or splunk
  53. 53what is Kinesis Video Analytics?securely ingests and stores video and audio encoded data to consumers such as sagemaker, recognition or other services to apply machine learning and video processing
  54. 54what is KPL?Kinesis Producer Library is a java library to write data to a stream
    it is a bit more efficient than using SDKs
  55. 55what is SSMsimple secret manager? - store data such as passwords, database strings, license codes
    store

Informações

Descrição
FlashCards sobre AWS developer associate #2, criado por Chira Mircea-Darius em 30-04-2021.
Visualizações
1
Histórico
  • Criado por Chira Mircea-Darius · 28 abr 2021
  • Copiado por Chira Mircea-Darius · 30 abr 2021
Avaliação

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?