Podcast
Questions and Answers
Which of the following is NOT a type of IAM policy supported by AWS?
Which of the following is NOT a type of IAM policy supported by AWS?
- Frame control policies (correct)
- Service control policies
- Identity-based policies
- Resource-based policies
What is the primary purpose of a NAT gateway in AWS?
What is the primary purpose of a NAT gateway in AWS?
- To provide a direct access point to the VPC
- To securely manage IAM policies
- To allow private subnets to connect to the internet (correct)
- To encrypt all data in transit
Which instance type is specifically designed for general-purpose workloads in AWS EC2?
Which instance type is specifically designed for general-purpose workloads in AWS EC2?
- T Series (correct)
- P Series
- R Series
- C Series
What is the main function of an Internet Gateway in AWS?
What is the main function of an Internet Gateway in AWS?
Which of the following is a characteristic of Elastic Load Balancers in AWS?
Which of the following is a characteristic of Elastic Load Balancers in AWS?
Flashcards are hidden until you start studying
Study Notes
Cloud Deployment Models
-
Public Cloud: Cloud services offered by third-party providers such as AWS, Google Cloud, and Azure. Provides scalability, flexibility and cost-effectiveness.
-
Private Cloud: Cloud services deployed within an organization's own data centers. Provides more control over data and security but requires significant investment.
-
Hybrid Cloud: Combines elements of both public and private clouds, allowing organizations to leverage the benefits of both. Offers flexibility and cost-optimization.
-
Multi-Cloud: Using multiple cloud service providers simultaneously. Provides greater flexibility and reduces vendor lock-in. Requires advanced management.
AWS Regions and Availability Zones
-
AWS Regions: Geographical locations where AWS data centers are located. Each region is designed to be isolated and independent from other regions.
-
Availability Zones: Distinct locations within a region which are physically separate. Each AZ has its own power, cooling, and networking infrastructure.
IAM Policy Types
-
User Policy: Grants permissions to individual users.
-
Group Policy: Applies to groups of users.
-
Role Policy: Defines permissions for AWS roles.
-
Resource Policy: Controls access to specific resources.
-
Service-Linked Role Policy: Grants permissions to AWS services acting on your behalf.
EC2 Instance Types
- General Purpose: Instances designed for a wide range of workloads.
- Compute Optimized: Instances that provide high CPU performance.
- Memory Optimized: Instances with large amounts of memory for demanding applications.
- Storage Optimized: Instances with large storage capacity.
- Accelerated Computing: Instances that feature GPUs, FPGAs, or other hardware accelerators.
- Specialized: Instances designed for specific purposes such as high-performance computing.
Steps Involved in Creating an AWS EC2 Instance
- Launch an EC2 Instance: In the AWS Management Console, navigate to the EC2 dashboard and click "Launch Instance."
- Choose an AMI: Select an Amazon Machine Image (AMI) for your instance.
- Select Instance Type: Choose an instance type based on your requirements.
- Configure Instance Details: Configure settings such as network, storage, and security groups.
- Add Storage: Choose a storage type and size for your instance.
- Tag Your Instance: Add tags for organization and identification.
- Configure Security Group: Define rules to allow inbound and outbound traffic to your instance.
- Review and Launch: Review the instance details and launch the instance.
- Connect to Your Instance: Use an SSH client to connect to the instance.
VPC
- Virtual Private Cloud (VPC): A private network within AWS that is logically isolated from other VPCs. It provides more control over your network environment.
Internet Gateway
- Internet Gateway: A gateway that connects your VPC to the internet. It allows your instances to communicate with the internet.
Bastion Host
- Bastion Host: A secure server located within a VPC that allows you to access other servers in the VPC securely. It acts as a gateway between the internet and the private network.
NAT Gateway
- NAT Gateway: A service that provides NAT (Network Address Translation) for your instances. It allows instances in your private subnet to access the internet without having public IP addresses.
Subnet
- Subnet: A range of IP addresses within a VPC. They are used to segment your VPC into smaller, more manageable networks.
Steps to Create a VPC Peering Connection
- Create a VPC: Create the first VPC in your account.
- Create a VPC: Create the second VPC in your account.
- Create a Peering Connection: In the AWS Management Console, navigate to the VPC dashboard and click "Peering Connections."
- Configure the Peering Connection: Provide information about the two VPCs involved.
- Accept the Connection: Accept the connection to establish the peering connection.
Elastic Load Balancers Types
- Application Load Balancer (ALB): Handles HTTP and HTTPS traffic based on application-level information. Features include traffic routing, load balancing, and health checking.
- Network Load Balancer (NLB): Handles TCP and UDP traffic based on the IP address and port. Provides low latency and high throughput.
- Classic Load Balancer: An older load balancer that distributes traffic across instances in a single Availability Zone.
- Global Accelerator: A service that improves latency and availability for applications with global users.
Amazon RDS Database Engines
- MySQL: Open-source relational database management system.
- PostgreSQL: Another open-source, object-relational database system.
- Oracle: A commercial relational database management system.
- SQL Server: A commercial relational database management system developed by Microsoft.
- MariaDB: A fork of the MySQL database.
- Amazon Aurora: AWS’s own relational database system, designed for high performance and scalability, compatible with MySQL and PostgreSQL.
Steps to Configure an Amazon S3 Bucket for Static Website Hosting
- Create an S3 Bucket: Create an S3 bucket in the AWS Management Console.
- Create an Index Document: Place an index.html (or other specified index document) in the root directory of your bucket.
- Configure Website Hosting: Go to the bucket's properties and select the "Static Website Hosting" option.
- Enable Website Hosting: Enable website hosting and specify the index document.
- Set Permissions: Set permissions on the bucket to allow public access.
- Upload Content: Upload your website files to the bucket.
- Get Your Bucket URL: Retrieve the bucket URL to access your website.
Amazon S3 Object-Level Storage Classes
- Standard: The most common storage class, it offers high availability and durability with an optimal balance between performance and cost.
- Standard-IA: Ideal for infrequently accessed data, offering lower cost than Standard, but with slightly higher retrieval cost.
- Reduced Redundancy Storage (RRS): A storage class with lower cost compared with Standard, suitable for data with lower durability requirements.
- Glacier: Designed for archival data, it offers the lowest cost but with higher retrieval latency.
- Glacier Deep Archive: The lowest cost option but with the longest retrieval time, good for data that is rarely accessed.
- Intelligent Tiering: A storage class that automatically selects the best pricing tier based on access patterns.
AWS Terminologies
- Bucket: A container that stores objects in Amazon S3.
- Key: A unique identifier for an object within a bucket.
- Versioning: A feature that allows you to create and store multiple versions of an object.
- Object: A file or binary data stored in an S3 bucket.
- Bucket Policy: A JSON document that defines access control policies for a specific S3 bucket.
Content Delivery Network (CDN)
- Definition: A network of servers distributed geographically which store copies of your content, enabling delivery to users with low latency.
- Advantages:
- Improved Performance: Caching content closer to users reduces latency.
- Reduced Bandwidth Costs: Caching content reduces the load on your origin server.
- Increased Reliability: CDN servers provide redundancy and improve availability.
- Global Reach: CDN servers can deliver content to users worldwide.
- Enhanced Security: CDNs can help mitigate DDoS attacks.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.