Cram Quiz – Introduction to AWS – SOA-C02 Study Guide

Cram Quiz Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can. 1. Which of the following benefits of the AWS cloud allows AWS to provide a relatively low cost per unit of compute, storage, and networking? A. Massive economies of scale […]

Backing Up Amazon EC2 Instances – AWS Security Fundamentals – SCS-C02 Study Guide

Backing Up Amazon EC2 Instances If you want to back up your instance for either point-in-time recovery purposes or to use in a launch configuration with autoscaling, you need to create an AMI. Follow these steps to create an AMI: $ a ws ec2 run-instances \ –image-id ami-0f3c9c466bb525749 \ –instance-type t3.micro \ –region us-east-2 Note […]

CloudFront Security – Network Design – ANS-C01 Study Guide

CloudFront Security CloudFront supports multiple security options. Front-end Internet-based denial-of-service protection is included at no cost when deploying a CloudFront distribution. AWS uses its Shield service in front of all edge locations. Shield will protect the edge from distributed denial-of-service (DDoS) attacks. Shield includes automatic inline attack mitigation support to protect your site from common […]

Permissions Boundaries – Determining an Authentication and Access Control Strategy for Complex Organizations – SAP-C02 Study Guide

Permissions Boundaries Permissions boundaries allow us to define the maximum permissions that identity-based policies can give to IAM entities (user or role). An entity can then only perform actions allowed by both its identity-based policies and its permissions boundaries. Setting a permissions boundary does not give permissions on its own but it limits what the […]

Edge Locations – Introduction to AWS – SOA-C02 Study Guide

Edge Locations Edge locations are globally distributed locations that provide an additional latency reduction when delivering applications from AWS. Most of the capacity in an edge location is dedicated to CloudFront, a content delivery network that can help deliver static content with fast response times, usually in the double-digit millisecond range. You can also terminate […]

Organizations SCPs – Determining an Authentication and Access Control Strategy for Complex Organizations – SAP-C02 Study Guide

Organizations SCPs AWS Organizations is a service that allows us to centrally manage multiple AWS accounts belonging to the same organization. It provides the ability to structure them according to a hierarchy of organizational units (OUs). It also provides a feature called SCPs that allows us to limit permissions for all member accounts in either […]

The CRISP-DM modeling life cycle – Machine Learning Fundamentals – MLS-C01 Study Guide

The CRISP-DM modeling life cycle Modeling is a very common term used in ML when you want to specify the steps taken to solve a particular problem. For example, you could create a binary classification model to predict whether the transactions from Table 1.1 are fraudulent or not. A model, in this context, represents all […]

CloudFront Encryption Using SSL/TLS and SNI – Network Design – ANS-C01 Study Guide

CloudFront Encryption Using SSL/TLS and SNI Encrypting data in transit over the Internet is the recommended transport method for web traffic. This relies on the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) services. SSL has been deprecated and replaced by TLS even though the SSL name lives on and is widely used in the industry […]

AWS Global Architecture – Introduction to AWS – SOA-C02 Study Guide

AWS Global Architecture The AWS global architecture has four components: Datacenters Availability zones Regions Edge locations and regional edge caches Datacenters The smallest piece of the AWS infrastructure is a datacenter. AWS builds its own datacenters as well as operates in third-party facilities. Customers have no visibility at the level of datacenters and their locations. […]

Cram Quiz – Introduction to AWS – SOA-C02 Study Guide

Cram Quiz Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can. 1. Which feature of cloud computing enables customer isolation at the account or network level? A. Rapid elasticity B. Resource pooling C. Monitoring D. Firewalls 2. Which of the following service […]