AWS Certification

AURI?

All Upfront Reserved Instance

PURI?

Partial Upfront Reserved Instance

NURI?

No upfront reserved instance

What are the benefits of using AWS organizations?

• - create groups of accts and attach policies to the grps

• - simplifies automating acct creation and mgmt by using APIs

• - difference between IAM and Organizations?

  • IAM is for one acct.

Explain fault tolerant, explain elasticity and scalability

key terms: redundancy, adjust

True or False: Edge locations need to be in the same general area as regions.

False edge locations don’t need to be located in the same general area as regions.

AWS KMS (whats the full thing?) allows you to what?

AWS Key Management Service is a service that allows to create and manage encryption keys and control the use of them across a wide range of AWS services and in your applications.

In the shared responsibility model, which of the following are examples of “security in the cloud”?
- compliance with compute security standards and regulations
- physical security of facilities
- security group conigurations
- encryption of data at rest and data in transit
- protecting global infrastructure

Security group configurations, Encryption of data at rest and data in transit.

When creating an AWS IAM (full form?) policy what are the two types of access that can be granted to a user?

Programmatic access
AWS Management Console access

Which can only be done by the AWS Account root user?

Change the AWS support plan

Ipv4 how many bits?

32 bits split across 4 - 124.0.0.2

Ipv6 how many bits?

128 bits

what does the cidr tell you? what is /24 mean (use 12.0.0.2)

cidr tell you how many bits are fixed. /24 means 24 are fixed and 8 are flexible so thats after the last decimal and can go up to 255

largest ipv4 CIDR block?

/16

smallest ipv4 CIDR block?

/28

why is the smaller CIDR block bigger?

it’s because it means that there are less fixed bits and more bits to use making the available addresses larger

how many ip addresses are available in a /24? what about a /28? show (full) - (amt AWS takes away) = (final available amt)

256 - 5 = 251, 16 - 5 = 11

NAC lists vs Security groups vs NAT gateway

Netowork Access Control lists are used for subnet-level traffic control, Security Groups are used for instance-level traffic control. NAT Gateways are used to provide internet access for private subnets.

talk about what ec2 instances are and where they’re launched from and what that is?

ec2 instances give control to access guest os, they are launched from AMI which are virtual machines templates.

Launch an instance?

Launch instance wizard
Command Line Interface
SDKs

What is included in an Amazon Machine Image (AMI)?

A template for the root volume for the instance.
Lauch permissions that control which AWS accounts can use the AMI to launch instances.
A block device mapping that specifies the volumes to attach to the instance when it’s launched

Which EC2 feature ensure your instances will not share a physical host with instances from any other AWS customer?

Dedicated Instances