AWS Developer Associate pt3

41 cards·by luc-yahoo

Study this deck

which header & value to use SSE-KMS?

x-amz-server-side-encryption=aws:kms

difference betweekn SSE-KMS and SSE-C?

SSE-KMS uses a default auto created CMK

when to use x-amz-server-side-encryption-aws-kms-key-id

if you want to specify a particular key. otherwise it will use default

retrieve the latest AMI IDs for a CF template

CloudFormation with Systems Manager Parameter Store

AWS Service Catalog allows

create and manage catalogs of IT services that are approved for use on AWS

true/false: you need to stop an instance before detaching an EBS volume if it is the root device

true

CRR S3 requires 3 things:

versioning enabled on source & dest, buckets in diff regions, perms to replicate from source to dest

implement write-once-read-many (WORM) model with

S3 Object Lock on a bucket

Use S3 Transfer Acceleration for

fast, easy, and secure transfers of files over long distances. leverages CloudFront

which CF section to specify SAM version

Transform (it 'transforms' the SAM sytnax template to CF format)

Glacier standard retrieval time

3-5 hours

Glacier Bulk retrieval time

5-12 hours (lowest cost option)

Glacier Expedited retrieval time

1-5 mins

Lambda HTTP 502 cause could be:

error in the output ("2" = out-put)

API Gateway Lambda HTTP 504 could be:

INTEGRATION_FAILURE or INTEGRATION_TIMEOUT (4= *_*, *_*)

Enable cross-device sync of app user data with

Amazon Cognito Sync

Cognito User Pools is just a

user directory which allows your users to sign in to your web or mobile app through Amazon Cognito

Cognito Identity Pools allows

create user identities and federate them with id providers using temp AWS creds for AWS services

When to use IAM certificate store

In a region unsupported by AWS Certificate Manager

true/false: CodeDeploy can do rolling deployments to ECS

false (only blue/green is allowed to ECS)

When to use Quicksight

to build visualizations, get business insights, and continuously analyze your data

Use Athena for

interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL

3 rule types in a CORSRule; Allowed__, Allowed___, Allowed___

AllowedOrigin, AllowedMethod, AllowedHeader

CorsRule MaxAgeSeconds

amount of time in seconds that the browser caches an Amazon S3 response to a preflight OPTIONS request

CORSRule ExposeHeader

headers customer can access from their app

Up to __ local secondary indexes per table

True/false: local secondary index can be added to an existing table

false (and can't be deleted either)

What are Amazon CloudWatch Monitoring Scripts

a fully functional example that reports memory, swap, and disk space utilization metrics for a Linux instance.

Use Lambda Aliases to manage function ____

versions

Manage CF Templates across accounts with

StackSets

Use CF Change Sets to

preview proposed changes to a stack

When to use Lambda non-proxy (custom)

when you need mappings on req/res

How to fix hot partition

retry/backoff, or distribute operations more evenly across table

set ReturnConsumedCapacity to ___ to return the total wcu

TOTAL

set ReturnConsumedCapacity to ___ to return the total wcu, plus table subtotals and secondary indexes

INDEXES

ReturnConsumedCapacity default parameter value is ___

NONE

Lambda functions that process Kinesis or DynamoDB streams, unit of concurrency is

the number of shards

Lambda env vars for x-ray

_x_amzn_trace_id AND aws_xray_context_missing

Creat new instances and deploy only to them

Immutable AND Blue/Green

How many concurrent for 50 reqs, 100 seconds

5000

Ensure encryption at rest with

S3:PutObject with the x-amz-server-side-encryption header