on 17-Oct-2019 (Thu)

Question

In AWS (and computing in general), what's the difference between block vs object storage, in terms of how data is stored?

Answer

Block storage chunks data into blocks that are in seperate address spaces (and no metadata) whereas object storage stores one related file at once with metadata attached.

Question

Lippincott Illustrated Reviews Flash Cards: Physiology Copyright © 2015 Wolters Kluwer 7.1 Question Gastrointestinal Tract Identify the muscle layers and nerve plexuses indicated by boxed numerals. What is the role of the individual muscle layers within the GI tract? What is Chagas disease, and how does it cause megaesophagus? Submucosa Serosa Mucosa Nerve 1 2 3 4 5 6 Preston_Unit07.indd 299Preston_Unit07.indd 299 5/2/14 10:02 PM5/2/14 10:02 PM

Answer

[default - edit me]

Question

[default - edit me]

Answer

Muscular

Question

In AWS S3, by default each account can create up to [...] buckets but this limit can be increased by request to up to [...] buckets <--- looking for two different occultions obviously

Answer

100 and 1000

Question

In AWS S3, access permissions to buckets is configured via [...] [...] [...] and Bucket Policies.

Answer

Access Control Lists

^^ with ACLs, you can give read, write permission to other AWS accounts (at whole accout level) or public, at object level
^^^ with bucket policy, it is at bucket level only but you can give access to specific IAM users in your account

Question

In AWS S3, access to buckets is configured via Access Control Lists and [...] [...] .

Answer

Bucket Policies

^^ with bucket policy, it is at bucket level only but you can give access to specific IAM users in your account
^^^ with ACLs, you can give read, write permission to other AWS accounts (at whole accout level) or public, at object level

Question

In AWS S3, [...] [...] [...] are mostly used to grant fine grain access control at the object level.

Answer

Access Control Lists

^^ with ACLs, you can give read, write permission to other AWS account or public, at object level (and bucket level too)

Question

In AWS S3, [...] [...] s can only be used to grant access to the whole bucket.

Answer

Bucket Policies

Question

In AWS S3, [...] [...] [...] s are used to grant read/write access at object level to other AWS accounts and the public in general

Answer

Access Control Lists

Question

In AWS S3, if you want to grant particular users within your own account access to your bucket, you use [...] [...]

Answer

Bucket Policy

Question

In AWS S3, the "Block public access" bucket level configs can be used to overrule already configured [...] [...] [...] and [...] [...] that grant public access to your objects and bucket. <-- looking for 2 differnt occulsions here

Answer

Access Control Lists and Bucket Policies

Question

In AWS S3, when you configure encrption from the AWS console, you are really enabling [...] [...] encryption

Answer

Server Side Encryption

^^ Meaning data is encrypted while being stored in AWS Data Centre so if someone breaks in and steals the drives, it is useless.
^^^ Encrption in transit is already handled by https (which uses TLS), so S3 encryption is server side encryption.
^^^^ Also note, clien-side encryption is just you encrypting the data before uploading to S3 so it is different from server side encryption

Question

In AWS S3, there are three types of Server Side Encryption: SSE- [...] , SSE-KMS (AWS KMS key) and SSE-C (customer provided key)
.

Answer

SSE-S3

^^ meaning S3 takes care of/managed the encryption key
^^^ Remember Server Side encryption means data is encrypted while being stored in AWS Data Centre so if someone breaks in and steals the drives, it is useless.

Question

In AWS S3, there are three types of Server Side Encryption SSE-S3 (key managed by S3), SSE-[...] and SSE-C (customer provided key)

Answer

SSE-KMS

^^ meaning AWS KMS key is used for encryption
^^^ Remember Server Side encryption means data is encrypted while being stored in AWS Data Centre so if someone breaks in and steals the drives, it is useless.

Question

In AWS S3, there are three types of Server Side Encryption SSE-S3 (key managed by S3), SSE-KMS (key managed by AWS KMS) and SSE- [...]

Answer

SSE-C

^^ meaning encyrption is done with customer provided key, and this cannot be configured via AWS console, ONLY PROGRAMATICALLY
^^^ Remember Server Side encryption means data is encrypted while being stored in AWS Data Centre so if someone breaks in and steals the drives, it is useless.

Question

In AWS S3 (and computing in general), what is the differnce between client side encryption vs server side encryption?

Answer

For client side encryption, user encrypts the data then uploads the encrypted data to S3 but for server side encryption, AWS takes care of encrypting the data (using various key option, customer provided vs AWS provided) after it is uploaded but before storing it in their data centres.

Question

Comment ca marche?

Answer

pas compliqué du tous

Question

In AWS S3, a great way to backup files and protect against accidental deletes and bad updates of files, is to enable [...]

Answer

Versioning

Question

In AWS S3, when you enable versioning, explain what happens when you update a file (i.e. upload a changed version of an already existing file)?

Answer

A: the new version gets stored in your bucket (with a unique random version id) along with the original version. The new version is marked as latest so it will be only one shown when you move the versioning "Hide"/"Show" toggle to "Hide"

^^^ you can only see all the versions in your console if you toggle the version button from "Hide" to "Show" in your bucket

Question

In AWS S3, when you enable versioning, explain what happens when you delete a file.

Answer

A: An empty file, called a delete marker appears in your S3 bucket

^^ note you can only see delete marker if you toggle the version button from "Hide" to "Show", if the toggle is in "Hide" then it just looks like the file is completely gone.

Question

In AWS S3, if you enable versioing, you can restore a deleted file by deleting its [...] [...]

Answer

Delete Marker

^^ Once you delete the delete marker, you can see the file again in console even when the version "Show"/"Hide" toggle is in "Hide" mode.

Question

In AWS S3, versioning is a great backup tool but can get expensive (as each version of file is stored) unless it is combined with [...] [...]

Answer

Lifecycle Rules

^^^ i.e. lifecycle rules can be set to move old versions of objects to less expensive tiers (like archiving in glacier) or deleting them after some days.

Question

In AWS S3, versioning once turned on cannot be disabled only [...] (BONUS: try to explain with this full statemeans exactly means)

Answer

Suspended

^^ remember suspended means versioning will not apply to new file uploads but the existing files still will have their already created versions.

Question

In AWS S3, once you enable versioning, you can enable [...] [...] on top of it for added protection

Answer

MFA Delete

^^^ MFA Delete can only be enabled (along with versioning) via AWS API not the console

Question

In AWS S3, [...] [...] are used to automates moving objects between the different storage tiers

Answer

Lifecycle Rules

Question

In AWS S3, Lifecycle Rules are used to automates moving objects between the different storage tiers and/or to [...] files after some days

Answer

Delete

^^^ e.g. you can set rules to move objects from S3 standard to S3 Infrequent-Access after 30 days, then to glacier after 60 total days, then set rule to delete/expire object after 365 days.

Question

In AWS S3, Lifecycle Rules can be applied to [...] and/or [...] versions of files. <-- Looking for two different occultions

Answer

current and/or previous

Question

In AWS S3, you can enable automatic copying of your objects to another bucket in another region for HA/Disaster recovery, through the setting of [...] [...] [...] rules.

Answer

Cross Region Replication

^^^ note the rules allow you to select your destination bucket (or create new one) and to decide what storage tier to use for the replicated data.

Question

In AWS S3, before you can create a Cross Region Replication rule, you must first enable [...] for both source and destination buckets.

Answer

Versioning

^^ One reason this is required is because CRR does not allow deleting of previous versions or delete markers

Question

In AWS S3, when you first set a Cross Region Replication rule, [...] files in the bucket are not automatically replicated.

Answer

existing

Question

In AWS S3, for Cross Region Replication, for safety reasons, [...] operations are NOT replicated.

Answer

delete

^^^ In other words no replication of delete markers and no replication of deleting of individual versions.

Question

In AWS S3, enabling [...] [...] will allow for faster uploads and downloads to/from bucket through the user of CloudFront edge locations.

Answer

Transfer Acceleration

^^ The way this works, for example, when user tries to upload file, they are routed (via DNS) to closest edge location, then from the edge location to the S3 bucket, amazon's backbone network is used to find fastest route to bucket.

Question

In AWS S3, enabling Transfer Accelration will allow for faster file upload/downloads through the user of [...] [...] [...]

Answer

CloudFront Edge Locations

^^ The way this works, for example, when user tries to upload file, they are routed (via DNS) to closest edge location, then from the edge location to the S3 bucket, amazon's backbone network is used to find fastest route to bucket.