AWS CCP QUESTIONS AND ANSWERS GRADED A+

AWS CCP QUESTIONS AND ANSWERS GRADED A+ How to choose a AWS region? Compliance Proximity Available services Pricing Availability Zones Discrete datacenters in a region min. 2 max. 6 Shared Responsibility Model Customer = security in the cloud AWS = security of the cloud You ONLY want to manage Applications and Data. Which type of Cloud Computing model should you use? On-prem IaaS SaaS PaaS PaaS Pricing model of cloud computing? Discounts over time PAYG (pay-as-you-go) Pay once per year flat-rate PAYG Global Infra composed of one or more datacenters Edge Locations Availability Zones Regions Availability Zones Not a characteristic of cloud computing elasticity and scalability multi-tenancy and resource pooling dedicated support agents on-demand self service dedicated support agents Not an advantage of cloud computing Trade CAPEX (capital expenditure) for OPEX (operational expenditure) train your employees less go global in minutes stop spending money running data centers train your employees less which service has a global scope EC2 IAM Lambda Rekognition IAM IAM Policies Define permissions for users and groups IAM Policy Structure Version: language version ID: optional Statement: (see next term) Statement: Sid: statement id (optional) Effect: allow or deny Principal: account/user/role to which policy applies Action: list of actions effected Resource: resources to which actions apply Condition: optional AWS SDK Software Development Kit Language-specific APIs Embedded within your application Bootstrapping running scripts when EC2 instance starts EC2 Instance Name convention Example: m5.2xlarge m: instance class 5: generation 2xlarge: size within a class Ports to know 21 22 80 443 3389 21 - ftp 22 - ssh/sftp 80 - http 443 - https 3389 - rdp EC2 Reserved Instances: Reservation Periods Purchase Options Types 1 year or 3 year no upfront | partial upfront | all upfront Convertible Reserved: Can change instance type Scheduled Reserved: launch within reserve window (fraction of day / week / year) EC2 Spot Instance Discount of up to 90% over PAYG but can be "lost" at any time if your max price is less than current spot price EC2 Dedicated Host Physical server Allows use of server-bound software licenses 3-year period reservation EC2 Dedicated Instance instances running on dedicated hardware may share hardware with other instances in same account no control over instance placement EC2 User Data Script ran at first start of an instance EBS Volume Elastic Block Store Volume - network drive you can attach to instances bound to a specific availability zone EBS Snapshot (Snapshot) Not required to detach volume first but is recommended AMI Amazon Machine Image - custom EC2 instance - built for specific regions (but can be copied across regions) You can launch EC2 instances from: A Public AMI Your own AMI An AWS Marketplace AMI EC2 Image Builder Automates creation, maintenance, validation, and testing of EC2 AMIs EC2 Instance Store High-performance hardware disk Better I/O (than EBS volumes) Ephemeral EFS Elastic File System Managed network file system that can be mounted to 100s of Linux EC2 instances across multiple AZs EFS-IA EFS Infrequent Access Up to 92% lower cost Auto moved to from EFS after file not accessed for 60 days Amazon FSx Windows native file system built on Windows File Server, supports SMB and NTFS Amazon FSx for Lustre File storage for high performance computing Vertical Scaling Making one instance larger - beefier Horizontal Scaling increasing number of instances Scalability ability to handle a larger load Elasticity reilies on a scalable system that is automated/cloud-friendly, PAYG, matches demand, and optimize costs