click below
click below
Normal Size Small Size show me how
AWS SysOps
Study for AWS SysOps Exam
Question | Answer |
---|---|
Route53 | DNS Service |
VPC | Virtual Private Cloud - network, subnet, VPN |
Direct Connect | Connect your other infrastructure to AWS Cloud using AWS Network |
EFS | Elastic File System - Network file system - can mount to multiple EC2 |
EBS | Elastic Block Store - Network drive to attach to instances - one instance at a time - Single AZ |
S3 | Simple Storage Service - Encryption - Object versioning |
Glacier | Store your data for longer periods - Use for backups |
Snowball | Send your data to AWS using a storage they'll send to your company |
Athena | Query logs from S3 using SQL |
CloudFront | CDN Service |
Storage Gateway | Connect your applications outside AWS to AWS Storages |
Load Balancing | Balance the load of your application |
Auto Scaling | Automatically scale up or down your EC2 |
Elastic Beanstalk | Push your dev code and AWS will build the resources/services to support it |
Cloudformation | AWS' Terraform |
EC2 | Elastic Compute Cloud |
EC2 Systems Manager | Manage EC2 instances and on-prem - patching automation - parameter store - patch manager |
OpsWorks | Chef, Puppet on AWS |
RDS | Relational Database Server - MySQL, Oracle, PostgreSQL, MariaDB |
Aurora | Like AWS RDS but better :PogChamp: |
CloudWatch | Performance monitoring - Events & alerting - Log aggregation and analysis |
CloudTrail | Log API calls to AWS services, who made and when |
Config | Record configuration changes - get timeline of changes and compliance |
Shield | Automatic DDoS protection + 24/7 support for advanced plan |
WAF | Firewall to filter incoming requests based on rules |
Inspector | For EC2 only, install agent and find vulnerabilities |
GuardDuty | Find malicious behaviour with VPC, DNS and CloudTrail |
Trusted Advisor | Analyze AWS account and get recommendations |
KMS | Encryption keys managed by AWS |
CloudHSM | Hardware encryption - we manage keys - supports asymmetrical |
STS | Generate Security Token |
Identity federation | SAML 2.0 or custom for enterprise, Cognito for Apps |
Artifact | Get access to compliance reports such as PCI, ISO etc. |