Solutions Architect Associate Level Flashcards

(32 cards)

1
Q

What is an elastic ip?

A

Public IPv4 you own as long as you don’t delete it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Add an elastic IP

Then delete it

A

EC2
Network and Security
- elastic IP
- Amazon’s pool of IPv4 addresses

Right click your created elastic ip
- action
- associate elastic ip address- instance
- give the private ip you want to associate

DELETION
- click you elastic IP and disassociate it.
- Release it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are Placement Groups?

A

Where your instances are placed physically
Cluster
Parition
Spread

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the Placement Group Strategies below:
Cluster
Spread
Partition

A

Cluster - Instance grouped together in low-latency group in single AZ

Spread - Spreads instances across underlying hardware (max 7 instances per group per AZ) - critical apps

Partition - Spreads instances across many different partitions. 100s of instance per group. (hadoop, cassandra, kafka)

Cluster - speed
Spread - resilience, separated, different AZs
Partition - seperated, but in the same building, different racks. Mix of Cluster and Spread

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Placement Groups - Cluster

A

Low Latency
10 Gbps

If AZ fails all instances fail at same time

Use Case:
big data jobs
apps that need low latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Placement Groups - Spread

A

Minimize failure risk
All EC2s are on different hardware
Span across AZs
Reduce risk of failure

limited to 7 instance per AZ per placement group

Use Case:
App that needs to maximize it’s high availability
Critical apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Placement Groups - Partitions

A

Many EC2 instances in a partition (rack)
7 partitions per AZ and they can span across multiple AZs in same region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Create a placement group

Launch an instance in this group

A

EC2

Network & Security
Placement Groups
name - my-high-performance group
placement strategy - cluster

my-critical-group - spread - Rack

my-distributed-group - partition - 4 (partitions)

LAUNCH
Instances
launch
Advanced
- placement group name (drop down)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an ENI

A

Elastic Network Interfaces
Logical component in VPC that represents a virtual Network Card
- primary private ipv4 and on secondary
- one or more security groups
- mac address
- create ENI independently and move them
- bound to AZ

These don’t dissapear like the default ones after you’re done

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Check ENIs on your instances

Create an ENI

A

you can create two instances of something when creating under Summary

Click you instance
Networking
Network Interfaces

View ENIs
EC2
Network Interfaces
Create network interface
Action
attach
Instance - whatever
action
detach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is EC2 Hibernate

A

RAM is preserved. Super fast book.
RAM is written in file in the root EBS volume while it hybernates
encrypted
Can’t go over 60 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Create a hibernate instance

A

EC2
Create instance
Stop - Hibernate behavior - Enable

We’ll have to encrypt storage now
# Scroll to storage and click advanced
Encrypt - Yes
KMS key - aws/ebs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are EBS volumes?

A

Elastic Block Store

Network Drive you can attach while running
Only one instance at a time
Bound to AZ

Like a network USB

Have to provision GBs and IOPS in advance but can increase over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Delete on Termination in terms of EBS?

A

Second to last column - By default when you instance is deleted so is your EBS volume

By default any other EBS volume is not deleted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Look at EBS on your machine

Create an EBS

Attach

A

EC2
Instance
click an instance
Storage tab
Look at root and block devices
Click the volume

OR
Scroll all the way down on the left-hand side under Elastic Block Storage click Volume -> Create volume
Size 2 GiB
Availability Zone (Match your EC2 instance - you can find that in your instance’s network settings)

Now check it
Actions
Attach
Click you instance
Attach Volume

TO CHECK LOOK AT STORAGE FOR BLOCK DEVICES ON INSTANCE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Check if you Volume is delete on Termination

A

Look at your EBS volumes and you’ll see it on the far right

17
Q

What is an EBS snapshot

What is an EBS Snapshot Archive

What is Recycle Bin for EBS Snapshots?

What is FSR?

A

SNAPSHOT
snapshot of EBS volume
Copy across AZ or region

SNAPSHOT ARCHIVE
- Snapshot archive tier is 75% cheaper
- Takes within 24 to 72 hours for restoring the archive

RECYCLE BIN
- Rule to retain deleted snapshot so you can recover after accidental deletion
- Specify retention (from 1 day to 1 year)

FAST SNAPSHORT RESTORE
- Force full initialization of snapshot to have no latency on first use (bunchamoney)

18
Q

Create an EBS Snapshot

View All snapshots and copy it to a different region

Recreate a volume from your snapshot

Show recycle bin and create a rule

A

CREATE SNAPSHOT
EC2
Elastic Block Storage
Actions
- Create snapshot
Create Snapshots

COPY SNAPSHOT
EC2
Elastic Block Storage
- Snapshots
right click EBS
Copy snapshot
Select Destination Region

RECREATE VOLUME FROM SNAPSHOT
EC2
Elastic Block Storage
Snapshots
Select your snapshot
Actions
- Create a volume from a snapshot
Choose an AZ

RECYCLE BIN
EC2
Elastic Block Storage
Snapshots
Recycle Bin
Create retention rule

19
Q

Describe AMI

A

Amazon Machine Image - customization of EC2 instance
- add software, configuration, OS, monitoring, faster boot, config time

Can be built in specific region and copied over to different ones

20
Q

What options do you have for obtaining an AMI? There’s 3

A

Public AMI from AWS
Your own
AWS Marketplace AMI

21
Q

Create AMI

A

Launch instance
AWS Linux 2 is fine
Key Pair (whatever)
Edit network setting and select a security group
User Data:
Make a script that updates and install httpd as well as system, just don’t create the httpd page itself.

Right click you instance
- Image and templates
- create image

CHECK YOUR AMIS
Images (left-hand side)
AMIs

You can launch instances from there directly or select to use an AMI when launching a new instance.
If selecting by a new instance, instead of selecting your OS the normal way, select the My AMIs tab and select the one you want
Now you can just modify the index.html file and you’re good to go

22
Q

Where would you go for high-performance hardware disks?

A

EC2 Instance Store - these are ephemeral (they are lost upon stopping)
Good for buffer, cache, etc
Risk data loss if hardware fails
Backups and replications your responsibility

23
Q

What are the below EBS Volume Types
- gp2/gp3
- io1/io2
- st1
- sc1

A
  • gp2/gp3 - ssd - General purpose for price and performance
  • io1/io2 - Block Express (ssd) - Highest-performance
  • st1 (HDD) - Low Cost
  • sc1 (HDD) - Lowest Cost
24
Q

General Purpose SSD (gp2-3)

A

Cost effective low latency
1GiB - 16TiB

gp3 - 3000 IOPS - independently set IOPS
gp2 - up to 16,000 IOPS - IOPS are linked to size of Volume

25
Provisioned IOPS (PIOPS) SSD
Apps that need more than 16,000 Great for database workloads io1 (4-16TiB) - max PIOPS 64000 io2 Block Express (4GiB - 64TiB)
26
Sc1 and St1
HDD 128GiB to 16TiB st1- Max throughput 500 MIB/s max IOPS 500 Cold HDD sc1 -max throughput 250MiBs - max IOPS 250
27
If you want to get over 32000 IOPS, what do you go for
EC2 Nitro with IO1 or IO2
28
What is EBS Multi-Attach (for io1/io2 family)
Attach same EBS volume to multiple EC2 instances in the same AZ Volume goes to multiple EC2 instance USE CASE: Higher Application Availability in Clustered Linux apps Apps must manage concurrent write operations Up to 16 EC2 Instance at a time - Cluster aware file system needed! not xfs, ext4, ect
29
How do you encrypt EBS Volume? What does this do?
Data at rest is encrypted inside volume All data in flight moving between instance and volume is encrypted All snaps encrypted All volumes encrypted All volumes created from snapshot Encrypt and decryption handled separately EBS encryption leverages keys from KMS (AES-256) HOW TO ENCRYPT UNENCRYPTED EBS VOLUME: Create EBS snapshot of volume Encrypt snap Create new ebs volujme from snap Attach volume to original instance
30
Create unencrypted volume and then encrypt it
Create Volume - DON'T ENCRYPT Create Snapshot (it will show Not Encrypted) Create TO ENCRYPT In Snapshots Click your snapshot Actions Copy Snapshot Encrypt this snapshot Click the snapshot and then Action - create volume from snapshots ---- Click your unencrypted snap Actions create volujme Encyrpt aws/ebs
31
What is EFS
Elastic File System Managed NFS that can be mounted on many EC2 Works with EC2 in many AZ Highly available, scalable, and expensive pay per use ONLY FOR LINUX Encryption at rest using KRM POSIX file system with standard file API file system scales automatically So us-east-1a-c can all use the same EFS
32
Create an EFS
Go to EFS in services Create file system Customize