AWS Gateways Flashcards

(62 cards)

1
Q

What are the three types of APIs supported by AWS API Gateway

A

REST APIs, HTTP APIs, WebSocket APIs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the default limit for API Gateway requests per second (RPS)?

A

10,000 RPS per account per region (soft limit, can request increase).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How can API Gateway secure APIs?

A

Using IAM policies, Cognito User Pools, Lambda Authorizers, API keys, and usage plans.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How can API Gateway reduce backend load?

A

With caching responses at the stage level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a stage in API Gateway?

A

A deployment environment for an API, e.g., dev, test, prod.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True or False: WebSocket APIs in API Gateway support stateful, real-time two-way communication.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What pricing components does API Gateway have?

A

API calls, data transfer out, caching (optional), and optional features like custom domain names.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How many VPCs can an IGW attach to?

A

One.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of IP addresses does an Internet Gateway support?

A

IPv4 and IPv6.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can an IGW perform NAT for private subnets?

A

No, only for instances with public IPs in public subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the primary use of a NAT Gateway?

A

A: Allow outbound internet access for private subnet instances without exposing them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

True or False: IGWs are horizontally scaled and redundant.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which route table entry is required to use an IGW?

A

0.0.0.0/0 for IPv4 or ::/0 for IPv6 pointing to the IGW.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How is NAT Gateway different from NAT Instance?

A

A: NAT Gateway is fully managed, highly available, and scales automatically. NAT Instance is self-managed and can be a single point of failure if not configured with HA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can NAT Gateways handle IPv6 traffic?

A

A: No, they only handle IPv4.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

True or False: NAT Gateway pricing is based on hourly usage and data processed.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Where should a NAT Gateway be deployed for high availability?

A

A: In each Availability Zone where private subnets exist.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How many VPN tunnels does a VGW support?

A

A: 2 tunnels per VPN connection (for redundancy).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is VGW used for?

A

A: To terminate site-to-site VPN connections on AWS side.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can a VGW be associated with multiple VPCs?

A

A: No, one VGW per VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

True or False: VGW only supports IPv4 traffic.

A

A: False. VGW supports IPv4 and optionally IPv6 if configured.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can VGW connect to AWS Direct Connect?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is AWS Transit Gateway?

A

A: A central hub that connects multiple VPCs and on-premises networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How does TGW simplify network management?

A

A: It reduces the need for multiple VPC peering connections and complex route tables.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
What is File Gateway used for?
A: Provides NFS/SMB access to objects stored in S3.
20
How is TGW priced?
A: By hourly attachment hours and data processing charges.
20
What is inter-region peering in TGW?
A: It connects Transit Gateways in different AWS regions.
21
How many VPCs can attach to a single Transit Gateway?
A: Default 5,000 per TGW (soft limit can be increased).
22
Name the three types of AWS Storage Gateways.
A: File Gateway, Volume Gateway (cached/stored), Tape Gateway.
22
True or False: TGW can be used to centralize internet access for multiple VPCs.
A: True, via a TGW + NAT Gateway architecture.
23
What is Tape Gateway used for?
A: Backup to Amazon S3 or Glacier using virtual tape libraries (VTL).
24
True or False: Volume Gateway can provide block-level storage via iSCSI.
True.
25
Which Storage Gateway type stores primary data locally and asynchronously backs up to AWS?
A: Volume Gateway (stored volumes).
26
Which gateway would you use for a hybrid cloud storage solution?
Storage Gateway.
27
Which gateway would you use to expose APIs to mobile or web clients?
A: API Gateway.
28
Which gateway allows private subnets to access the internet securely?
A: NAT Gateway.
29
For connecting on-premises network to multiple VPCs via VPN, which gateway is best?
A: Transit Gateway + VGW (site-to-site VPN).
30
For central logging or caching APIs, which AWS service works well with API Gateway?
A: CloudWatch (logging/monitoring) and API Gateway caching.
31
A company wants a single entry point to route requests from multiple APIs to different Lambda functions. Which service is best?
API Gateway ?
32
How would you connect 10 VPCs and on-prem network in a hub-and-spoke model?
Transit Gateway ?
33
You need to allow EC2 instances in private subnets to download software updates. Which AWS service do you use?
NAT Gateway ?
34
Which AWS gateway would you use for a VTL backup solution?
Storage Gateway (Tape Gateway) ?
35
True or False: Internet Gateway is required for NAT Gateway to access the internet.
True.
36
Which gateway should you use for site-to-site VPN termination?
Virtual Private Gateway ?
37
What is AWS Storage Gateway?
A hybrid storage service that connects on-premises environments to AWS cloud storage (S3, Glacier).
38
Name the types of Storage Gateway.
File Gateway, Tape Gateway, Volume Gateway (cached or stored).
39
What is AWS API Gateway used for?
AWS API Gateway is a fully managed service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any scale.
40
Which API types does AWS API Gateway support?
REST APIs, HTTP APIs, WebSocket APIs.
41
How does API Gateway integrate with backend services?
API Gateway can route requests to AWS Lambda, Amazon EC2, AWS Elastic Beanstalk, or other HTTP endpoints.
42
What are some features of API Gateway for security?
Authorization (Cognito, IAM, Lambda authorizers), throttling, API keys, request validation, and CORS support.
43
How can API Gateway improve performance?
With caching responses at the stage level, reducing the number of calls to backend services.
44
Can multiple VPCs share the same Internet Gateway?
No, each IGW is attached to a single VPC.
45
What is an Internet Gateway (IGW)?
A horizontally scaled, redundant AWS component that allows communication between instances in a VPC and the internet.
46
Do IGWs perform NAT (Network Address Translation)?
Yes, they perform NAT for instances with public IPv4 addresses.
47
Can NAT Gateways handle burst traffic automatically?
Yes, NAT Gateways are highly available and automatically scaled.
47
What types of connections can VGW support?
Site-to-site VPN and AWS Direct Connect.
48
What is a Virtual Private Gateway?
A VGW is the VPN concentrator on the AWS side of a site-to-site VPN connection.
49
Can VGW be shared across multiple VPCs?
No, each VGW is associated with one VPC.
49
Name key benefits of Transit Gateway.
Simplifies network management, reduces peering complexity, scalable, integrates with Direct Connect and VPNs.
49
What types of NAT gateways exist in AWS?
NAT Gateway (managed service) and NAT Instance (self-managed EC2 instance).
49
What is AWS Transit Gateway?
A hub-and-spoke network transit service that connects VPCs and on-premises networks via a single gateway.
49
Can Transit Gateway route between VPCs in different regions?
Yes, via inter-region peering.