Cloud Developing Quiz and Answer

develop, deploy, and maintain

New components are obtained and installed.

AWS Identity and Access Management (IAM)

AWS Cloud9

(i) AWS Management Console, (ii) AWS Software development kits (SDKs), and (iii) AWS Command Line Interface (AWS CLI)

(i) AWS Serverless Application model (AWS SAM), (ii) AWS Tools for PowerShell, and (iii) AWS Amplify

(i) enhance application security, and (ii) acceletes coding tasks

(i) They provide a high-level abstraction than the low-level calls made by the service client APIs, and (ii) They provide access to resources through objects and collections.

By setting the Region when they instantiate the service client

400 series

Data lake

Bucket

Bucket names are globally unique. If the requested bucket name is not available, the developer must rename the bucket.

https://frank-martha-cafe.s3-website-us-east-1.amazonaws.com

False

5 GB

bucket policy

A predesigned URL

Secure Sockets Layer/Transport Layer Security (SSL/TLS)

Cross-Origin Resource Sharing (CORS) has not been enabled on the bucket where the assets are stored

(i) security group configuration, and (ii) client-side data

IAM policies

Authentication

(i) AWS credentials to authenticate with any supported service must be provided, and (ii) a username and password to authenticate to the consolde must be provided.

create an AWS IAM role and attach it to the EC2 instance.

JavaScript Object Notification (JSON)

identity-based

create policies that follow the principle of least privilege

denies actions on DynamoDB or Amazon S3 resources except for the resources that are listed in the NotResource element

(i) by defualt, all requests are denied, and (ii) an explicit deny overrides an explicit allow

a key-value and document database that scales horizontally and works well for internet-scale applications

Attributes

It is impossible for two items in the SensorReadings table to have the same primary key.

If a table has a simple primary key (partition key only), DynamoDB stores and retrieves each item based on its hash attribute.

set up a global secondary index on cuisine and customer rating

Use DynamoDB transactions

(i) An application that automatically sends notifications to the mobile devices of all friends in a group when one friend uploads a new picture, and (ii) An application that must monitor changes to a DynamoDB table and take action on specific changes when a value reaches a certain threshold

When a global table is created, Amazon DynamoDB performs all necessary tasks to create identical tables and propagate ongoing data changes to specified Regions.

the last 35 days

Create and manage DynamoDB tables.

An API that follows the principle of the Representational State Transfer style

a real-time chat application lets customers talk to customer support about their orders.

an application needs an API proxy in frony of an AWS Lamdba function

a developer can use HHTP proxy integrations to direct a route to a resource on the internet

use a mapping template to transform the request before it is sent to the database

Region and stage name

developers can use stage variables to connect different stages to different backends

use AWS WAF with Amazon API Gateway

responsiveness of the backend

Lambda runs code only when it is activated by an event and uses only the compute resources that are needed.

Burst quota

API Gateway directly invokes a function with a synchronous invocation

(i) A Lambda function writes to an Amazon DynamoDB table, and (ii) Lambda polls an Amazon Simple Queue Service (Amazon SQS) queue for messages that initiate invocation of a Lambda function.

The function handler is the entry point that Lambda calls to start running the Lambda function

An application that uses the Lambda function responds slowly for the first few users who sign in each day. Lambda metrics show higher latency for those initial requests.

(i) destinations, and (ii) asynchronous invocations

Upload the deployment package to an Amazon Simple Storage Service (Amazon S3) bucket, and specify the bucket name and object key on the Lambda console.

This ARN will invoke the version of the function that is currently associated with the PROD alias.

use the service map to visually locate errors across the application

the abstraction of details of what’s being “shipped” increases the agility system

(i) runtime engine, and (ii) application code

a container is runnable instance of an image

docker run –name my_app_1 node_app

each instruction in a Dockerfile creates a read-only layer in the image

each container can use the language ad technology that are best suited for the service.

to schedule container starts and stops and determine where to place containers

Amazon ECS is a highly scalable container orchestration service that supports Docker containers

Application

Traffic Splitting

consider the tolerance for stale data in each context where the data is used.

Amazon ElastiCache for Redis

writing code that looks for the requested data in the cache and, if the data is not found, requests it from the origin

Your application connects to an ElastiCache node by using a unique address called an endpoint.

Using different types of caching at each application layer might improve both the frontend and backend performance.

Set up a CloudFront distribution that can serve static content from the edge locations that are closer to UK users.

Include only the minimum necessary values in the cache key.

After a file expires, the next time the edge location gets a user request for the file, CloudFront forwards the request to the origin server.

a function that redirects the viewer to a different URL and adds a custom response header

Lazy loading avoids filling up the cache with data that is not requested.

consumer poll the queue for messages

A new topic message is pushed out to all topic subscribers.

Use the ReceiveMessage operation with MaxNumberOfMessages set to 5 to retrieve up to 5 messages off the queue at one time.

increase the visibility timeout

Add a dead-letter queue and set a low maxRecieveCount.

When short polling is configured, Amazon SQS samples a subset of its servers

An SNS topic is a logical access point, which acts as a communication channel.

Set up a filter policy so that the Lambda function subscription only receives cancel order messages.

Use the Kinesis Producer Library (KPL).

The data records in a data stream are distributed into shards.

a serverless application must run a series of AWS Lambda functions that are dependent on each other.

developers can use Step Functions to build visual workflows.

Task states perform a unit of work.

Choice

Map

Succeed states and Fail states do not include the Next field.

Parallel

A taskToken is returned as part of a call to the GetActivityTask action and is used when calling the SendTaskSuccess action to associate a result with a task

The workflow must support a very high rate of events that come from Internet of Things(IoT) devices

A developer can use Amazon API Gateway to associate their Step Function APIs with methods in an API Gateway API

both SSL and TSL encrypt network communications between connected resources.

Issue a certificate

ACM manages certificate renewals for both public and private certificates

Use AWS Identity and Access Management (IAM) roles to retrieve temporary security credentials

With federated users, the first authentication is made against an ldP. With IAM users, the first authentication is made against IAM.

Use AWS CloudTrail to search for information about delete object events on the S3 bucket

Amazon Cognito user pool

Compromised credentials check

With an identity pool. users can obtain temporary, limited-privilege AWS credentials to access other AWS services.

A mobile app user authenticates with a user pool, and the user pool returns JWTs to the app.

DevOps is about removing barriers between development and operations functions to optimize productivity and reliability.

Every phase of the software development lifecycle is automated.

Automate the steps that are required to release software based on a release model that the developer defines.

Continuous integration requires teams to write the automated tests.

Create an AWS CloudFormation template with a Resources section that defines the AWS resources for the application.

Use the Conditions section to control whether certain resources are created during stack creation or update.

A CloudFormation stack is a unit of deployment.

They can't replicate the production environment locally in the same way that they might with a server-based deployment

The Globals section is only found in AWS SAM templates

Resurces:

Orders:

Type:AWS::Serverless::SimpleTable

An Amazon DynamoDB Table that is called Orders.

Generate a pre-signed URL and distribute it to the consumers

CloudFormation

Key Pairs

Amazon Cognito

AWS KMS API

The AMIs referenced in the template are not available in us-west-1

CORS configuration

{

“Version”:”2012-10-17″,

“Id”:”Statement1”,

“Statement”:[

{

“Sid”:” Statement2″,

“Effect”:”Allow”,

“Principal”:”*”,

“Action”:[

“s3:GetObject”,

“s3:PutObject”

],

“Resource”:”arn:aws:s3:::mybucket/*”,

“Condition”:{

“StringLike”:{

“aws:Referer”:[

“http://www.example.com/*”,

“http://www.demo.com/*”

]

}

}

}

] }

It allows read or write access to the bucket ‘mybucket’ but only if it is accessed from example.com or demo.com

False

True

100

Fn::Select

Fn::Join

1 KB

Expressions

True

True

IAM

Set the ReceiveMessageWaitTimeSeconds property of the queue to 20 seconds

A default deny

STS:AssumeRole

Canary10Percent5Minutes

Amazon DynamoDB Accelerator

Use Route 53 weighted Routing policies

~/xray-daemon$ ./xray -o

You are now exceeding the throttle limits for KMS API calls.

(i) Rolling with additional batch, and (ii) Immutable

2

Use exponential backoff in your requests

Use the command aws sts decode-authorization-message

Query with EventualRead

Set “x-amz-server-side-encryption” as AES256 request header

Projection Expressions

All requests are forwarded to DynamoDB & results are not cached

Specify a parameters section

By setting up the appropriate gateway response in the API gateway

Consider using the Elastic Container Service

Ensure to set the ReturnConsumedCapacity in the query request to TOTAL

Creating Cloudformation StackSets

The bucket is not in the same region as the Code Build project.

Store them as secrets in AWS Secrets Manager

Presence of Transform section indicates it is a Serverless Application Model (SAM) template

Lambda Authorizer

Key pairs

Secrets Manager

ECR

CodeDeploy

AWS Cloud Development Kit (CDK)

Dedicated Instances

(I) By default, scripts entered as user data are executed with root user privileges, and (ii) By default, user data runs only during the boot cycle when you first launch an instance

Use backlog per instance metric with target tracking scaling policy

AWS requires approximately 5 weeks of usage data to generate budget forecasts

Deploy using 'Rolling with additional batch' deployment policy

Create a CNAME record

10

CloudTrail

CloudFront Key Pairs

Rolling

Use Kinesis Data Streams to process the data streams as well as decouple the producers and consumers for the real-time data processor

Convertible Reserved instances

Geolocation

(i) IAM, and (ii) AWS Certificate Manager

Use TransactWriteItems API of DynamoDB Transactions

no limit

EBS volumes are AZ locked

The ASG will terminate the EC2 Instance

AWS Security Token Service (STS)

ValidateService

Implement a Dead-Letter Queue

Redeploy the API to an existing stage or to a new stage

Amazon EC2 Auto Scaling adds only 1 instance to the group

VPC Flow Logs

Use Cognito User pools to facilitate sign up and user management for the mobile app

S3 access logging is pointing to the same bucket and is responsible for the substantial growth of bucket size

Conditional writes

AWS CodeCommit

AWS CodeDeploy

One instance is charged at one hour of Reserved Instance usage and the other two instances are charged at two hours of On-Demand usage

Cognito Sync

20

Create an IAM role with an AmazonDynamoDBReadOnlyAccess policy and apply it to the EC2 instance profile

'x-amz-server-side-encryption': 'aws:kms'

Use client-side encryption with an AWS KMS managed customer master key (CMK)

Use a cron job on the instances that pushes the EC2 RAM statistics as a Custom metric into CloudWatch

DynamoDB

Network Load Balancer

Create a LSI

The partition key that you have selected isn't distributed enough

SSE-S3

The bucket owner also needs to be object owner to get the object access logs

Use DelaySeconds parameter

All at once

Your Lambda function ran out of RAM

Use AWS KMS with automatic key rotation

Use LongPolling

Create an S3 event to invoke a Lambda function that inserts records into DynamoDB

Use Amazon Simple Notification Service (SNS) to push notifications when an order is created. Configure different Amazon Simple Queue Service (SQS) queues to receive these messages for downstream processing

Use 'Export' field in the Output section of the stack's template

(i) Blue/green Deployment, and (ii) in-place Deployment

5 minutes

Amazon Elastic Block Store (Amazon EBS)

AWS Organizations

A development team is using AWS CloudFormation to lunch the infrastructure for an application. Security for the application needs to be upgraded, but the team is concerned that the update might impact the performance of the application. What can be done to preview how these updates will impact the infrastructure?