Aws Cloud Practitioner Stephane Maarek
79 community-sourced questions and answers. Free — no login.
EBS volume
network drive you can attach to your instances while they run -only one instance at a time -bound to a specific availability zone
EBS
Elastic Block Store
EBS snapshots
Make a backup of your EBS volume at a point in time
AMI
Amazon Machine Image
what is an AMI?
customization of an EC2 instance - built for a specific region
Public AMI
AWS provided
Your Own AMI
you make and maintain them yourself
AWS Marketplace AMI
an AMI someone else made (and potentially sells)
EC2 Image Builder
automated pipeline for the creation, maintainenance, validation, sharing, and deployment of Linux or Windows images for use on AWS and on-premises
EFS (elastic file system)
managed NFS (network file system) that can be mounted on 100s of EC2
EFS Infrequent Access (EFS-IA)
storage class that is cost-optimized for files not accessed every day
Amazon FSx
makes it easy and cost effective to launch and run popular file systems that are fully managed by AWS
FSx for Windows File Server
used for business applications
FSx for Lustre
used for high-performance computing
scalability
ability to accommodate a larger load by making the hardware stronger (scale up), or by adding nodes (scale out)
2 Types of Scalability
1. vertical 2. horizontal
Horizontal scalability (elasticity)
increasing number of instances / systems for your application (distributed systems, such as web applications or modern applications) - Amazon EC2
vertical scalabiltiy
increasing the size of the instance (common for non-distributed systems, such as a database) - limit of hardware
High availability
means running your application/system in at least 2 availability zones (goal is to survive data center loss)
elasticity
once a system is scalable, there will be some "auto-scaling" so that the system can scale based on the load
Load balancing
servers that forward internet traffic to multiple servers (EC2 instances) downstream
3 Kinds of Load Balancers
- application - network - classic
Application load balancer
(HTTP / HTTPS only) - Layer 7
Network load balancer
(ultra-high performance, allows for TCP) - Layer 4
Types of S3 Security
- user based - resource based - encryption
User Based S3 Security
IAM policies - which API calls should be. allowed for a specific user from IAM console
Resource Based S3 Security
- bucket policies - bucket wide rules from the S3 console - allows cross account - object access control list (ACL) - finer grain - bucket access control list (ACL) - less common
S3 Encryption
encrypt objects in Amazon S3 using encryption keys
S3 Standard - General Purpose
- 99.99 availability - used for frequent access - low latency & high throughput - sustain 2 concurrent facility failures (big data analytics, mobile & gaming applications, content distribution)
S3 Standard - Infrequent Access (IA)
- Suitable for data that is less frequently accessed, but requires rapid access when needed - 99.9% Availability - Lower cost compared to Amazon S3 Standard, but retrieval fee - Sustain 2 concurrent facility failures (a data store for disaster recovery, backups)
S3 Intelligent - Tiering
- 99.9% Availability - low latency and high throughput - Cost-optimized by automatically moving objects between two access tiers based on changing access patterns: Frequent access & Infrequent access • (Resilient against events that impact an entire Availability Zone)
S3 One Zone - Infrequent Access (IA)
- Same as IA but data is stored in a static AZ - 99.5% availability - low latency and high throughput lower cost compared to S3-IA (storing secondary backup copies of on-premise data)
Amazon Glacier
- low-cost object storage meant for archiving/backup - details retained for the longer terms (years) -cheap (expedited is 1 to 5 min) (standard is 3 to 5 hours) (bulk is 5 to 12 hours)
Amazon Glacier Deep Archive
- low-cost object storage meant for archiving/backup - details retained for the longer terms (years) -cheapest (standard is 12 hours) (bulk is 48 hours)
S3 moving between storage classes
- you can transition objects between storage classes - can be automated using a lifecycle configuration
S3 Object Lock
- Adopt a WORM (Write Once Read Many) model - Block an object version deletion for a specified amount of time
S3 Glacier Vault Lock
- Adopt a WORM (Write Once Read Many) model - Lock the policy for future edits (can no longer be changed) - helpful for compliance and data retention
AWS Snow Family
- import data onto S3 through a physical device - edge computing
AWS Snow Family - types of data migration
- snowcone - snowball edge - snowmobile
AWS Snow Family - types of edge computing
- snowcone - snowball edge
AWS OpsHub
a software you install on your computer/laptop to manage your snow family device
AWS Storage Gateway
Hybrid storage service that allows on-premises to seamlessly use the AWS Cloud (disaster recovery, backup & restore, tiered storage)
Buckets vs. Objects
global unique name, tied to a region
S3 Security
IAM policy, S3 Bucket Policy (public access), S3 Encryption
S3 Websites
host a static website on Amazon S3
S3 Versioning
multiple versions for files, prevent accidental deletes
S3 Access Logs
log requests made within your S3 bucket
S3 replication
same-region or cross-region, must enable versioning
S3 Storage Classes
-standard -IA -1Z-IA -Intelligent -Glacier -Glacier Deep Archive
S3 Lifecycle Rules
transition objects between classes
S3 Glacier Vault Lock / S3 Object Lock
WORM (write once read many)
AWS RDS
- relational database service - a managed DB service for DB use SQL as a query language - allows you to create databases in the cloud that are managed by AWS (Postgres, MySQL, MariaDB, etc.)
Amazon Aurora
- PostgreSQL & MySQL are both supported - Aurora is "AWS cloud optimized" and claims 5x performance improvement - Not in the free tier
RDS: Read Replicas
- scale the read workload of your DB - can create up to 5 Read replicas - data is only written to the main DB
RDS: Multi-AZ
- failover in case of AZ outage (high availability) - data is only read/written to the main database - can only have 1 other AZ as failover
RDS: Multi-Region (Read Replicas)
- disaster recovery in case of region issue - local performance for global reads - replication costs
Amazon ElastiCache
- in-memory databases with high performance, low latency - helps reduce load off databases for read. intensive workloads
DynamoDB
-NoSQL database - not a relational database - "serverless" - single-digit millisecond latency - low latency retrieval (key value database)
DAX (DynamoDB Accelerator)
- in-memory cache for Dynamo DB - 10x performance improvement - only used for and is integrated with DynamoDB
Redshift
- it's not used for OLTP - it's OLAP (online analytical processing (analytics and data warehousing) - columnar storage of data (instead of row based)
Amazon EMR
- Elastic MapReduce - helps creating Hadoop cluster (big data) to analyze and process vast amount of data - clusters can be made of hundreds of EC2 instances (data processing, machine learning, web indexing, big data)
Athena
- query data on Amazon S3 (serverless & SQL)
Amazon QuickSight
Serverless machine learning-powered business intelligence service to create interactive dashboards (business analytics, building visualizations, perform ad-hoc, analysis)
DocumentDB
NoSQL Document database that is MongoDB compatible - JSON
Amazon Neptune
- graph database
Amazon QLDB
- financial transactions ledger (immutable journal, cryptographically verifiable)
Amazon Managed Blockchain
managed Hyperledger Fabric & Ethereum blockchains
DMS (Database Migration Service)
- Quickly and securely migrate databases to AWS, resilient, self healing - The source database remains available during the migration - Homogeneous migrations: ex Oracle to Oracle - Heterogeneous migrations: ex Microsoft SQL Server to Aurora
AWS Glue
- Managed ETL (extract transform load) and data catalog service - Fully serverless service
what is serverless?
a new paradigm in which developers don't have to manage servers anymore (don't manage, provision, or see)
docker
a container technology that allows you to run applications
ECS
allow you to run Docker containers on EC2 instances (must provision instances in advance)
Fargate
allows you to run Docker containers without provisioning the infrastructure (serverless offering - no EC2 instances)
ECR (Elastic Container Registry)
private docker images repository
Batch
allows you to run batch jobs on AWS across a set of managed EC2 instances (runs on top of the ECS service)
Lightsail
predictable & low pricing for simple application & DB stacks
Lambda
serverless, function as a service, seamless scaling, reactive (use case: create thumbnails for images uploaded onto S3 or run a serverless cron job)
Lambda Billing
- run time x by the RAM provisioned - number of invocations
API Gateway
exposed Lambda functions as HTTP API
Looking for a different version?
CBTs get updated every year. Search for the exact version you're taking (e.g. "cyber awareness 2025").
Search all study materials