Extras

Question 1

What’s the AWS Service Catalog?

Answer 1

1. Catalog: It’s a catalog of products available as a portal CFN templates
2. Access control: Users, groups and roles get access to a portfolio of products
3. Enforce standards:
   a. Approved resources only
   b. compliance with internal policies
   c. allowed services only
   d. configuration standards are maintained

Question 2

CloudFront Errors
400 - B
403 - A
404 - F
502 - B
503 - S
504 - G

Answer 2

400: Bad request → malformed request
403: Access denied → public access for S3 object using S3:GetObject (your s3 object isn’t public)
404: File not found
502: Bad gateway → CF can’t connect to origin
503: Service unavailable → performance issue on origin server
504: Gateway timeout → request expired before a response was received from the origin server.

• Server side errors: Usually caused by high traffic to the website and the server is not responding.

Question 3

What’s the most important thing in order to Direct Connect with Multiple Accounts to work?

Answer 3

Accounts have to be under the same Payer Account in order to share Direct Connect Gateway.

Question 4

Inter-Region VPC Peering:

• ______ ranges must be unique and cannot overlap
• Allows two ___ in different regions to communicate
• Traffic is ______ and it does not go through the _____ _____.

Answer 4

• CIDR
• VPCs
• Encrypted/ Public Internet

Question 5

When enabling HTTPS on your website, what kind of certificate do you need to associate with it?

Answer 5

SSL/TLS Certificate.

Question 6

What is the AWS recommended way to store and manage certificates?

Answer 6

By using AWS Certificate Manager (ACM)

Question 7

If ACM is not supported in your Region, which AWS service should you use in order to store certificates?

Answer 7

You can use IAM to store them, only if ACM is not supported in your Region.

Question 8

Which service do these best practices belong to?

• Control access using IAM
• Be aware of service limits
• Avoid Manual updates → it can cause mismatches
• Use CloudTrail
• Stack Policy → it’s a JSON document that describes what update actions can be performed on designated resources.
  
  • Helps protect critical stack resources from unintentional updates and mistakes caused by human error.

Answer 8

CloudFormation Best Practices