EC2 Flashcards

1
Q

components

A

AMI; Instance Type; Network Interface; Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Facts

A

a security group must be assigned to an instance during the creation process.
each instance must be placed into an existing VPC, AZ and subnet.
Automated(bootstrapping) custom launch commands can be passed into the instance during launch via “user-data” scripts.
“Tags” can be used to help name and organize provisioned instances.
Encrypted key-pairs are used to manage login authentication.
limits on the amount of instances you can run in a region at any particular time.( 20 on demand instances)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

EC2 Shared Responsibility Model

A

Customer – managing the software level security on instances:
–Security groups;
–Firewalls;
–EBS encryption provided by AWS – EBS encryption –utilizes AWS Key Management Service; encryptiing the entire file system using an encrypted file system.
–applying an SSL Certificate to the ELB.
AWS: managing the hypervisor and physical layer of security for EC2: DDOS protection; Port scanning protection;
Ingress network filtering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Placement Groups

A
  • a CLuster of instances within the same availablity zone.
    -Used for applications that require an extremely low latency network between them.
    -attempts to place all the instances as close as physically possible in the data center to reduce latency.
    -instances within a placement group have a low-latency, 10 Gbps network connection between them.
    Instances that are in the placement group need to have enhanced networking in order to maximize placement groups.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Toubleshooting Placement Groups

A

if an instance stoped, once it is started again it will continue to be a member of the same placement group.

    • it is suggested to launch all the required instances within the placement group in a single request, and that the same instance type is used for all instances within the placement group.
    • It is possible, if more instances are added at a later time to the placement group OR if a placement group instance is stopped and started again, to receive an “insufficient capacity error”.
    • resolve the capacity error by stopping all instances int he member group and attempting to start them again.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AMI

A

community AMIs: free to use, generally with these AMIs you are just selecting the OS you want.
AWS Marketplace AMIs:
Pay to use; generally comes packaged with additional, licensed software.
My AMIs: create by you.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Vitualization

A

run using the Xen Hypervisor software.

the maintenance of the physical AWS server and the Xen Hypervsor is handled by AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Linux AMI Virtualization types:

A
HVM AMI: take advantage of hardware extensions that provide fast access to the underlying hardware on the host system.
PV AMIs(Paravirtual).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

curl http://169.254.169.254/latest/user-data/

A

displays bootstrapping commands

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

EFS

A

is a storage option for EC2 that allows for a scalable storage option;
elastic;
fully managed, no maintenance required.
Supports the Network File System version 4.0 and 4.1(NFSv4) protocols when mounting.
Best performance when using an EC2 AMI with Linux kernel 4.0 or newer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Benefits of EFS:

A

can be accessed by one or more EC2 instances at the same time.
– share file access across all your EC2 instances;
– application that span multiple EC2 instances can access the same data.
pay only for the amount of storage you are using
can be mounted to on-premises servers(when connected to your VPC via AWS Direct Connect). this allow you to migrate data from on-prem servers to EFS and /or use it as a back up solution.
Scale to petabytes in size, while maintaining low-latency and high levels of throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EFS SECURITY

A

Control file system access through POSIX permissions.
VPC for network access control, and IAM for API access control.
Encrypt data at rest using AWS Key Management Service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EFS When to Use

A

Big data and analytics
Media processing workflows
Web Serving and Content Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EBS Basics

A

network attached storage. can be only attached to one EC2 instance at a time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EBS Performance

A

EBS volumes measure input/output operations in IOPS:
IOPS – input/output operations per second.
measure IOPS in 256KB chunks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Initializing EBS Volume

A
  1. new EBS volumes no longer need to be “pre-warmed”;
  2. New Volumes will receive their maximum performance at the moment they are created.
  3. Volumes created from an EBS snapshot must be initialized.
  4. initializing occurs the first time a storage block on the volume is read – and the performance impact can be impacted by up to 50%.
  5. You can avoid this impact in production enviroments by manually reading all the blocks.
17
Q

General Purpose SSD

A

use for dev/test/environments and smaller DB instances.
performance of 3 IOPS/GIB of storage size
Volume size of 1GiB to 16 TiB
Considerations when using T2 instances with SSD root volumes (burstable vs. baseline performance).

18
Q

Provisioned IOPS SSD

A

used for mission critical applications that require sustained IOPS performance.
Large database workloads;
Volume size of 4GIB to 16TIB;
performs at provisioned level and can provision up to 20,000 IOPS per volume.

19
Q

Magnetic

A

Low storage cost;
Used for workloads where performance is not important or data is infrequently accessed
Volume size of Min 1GiB Max 1 TiB

20
Q

Instance Store Volumes:

A

Instance-store volumes are virtual devices whose underlying hardware is physically attached to the host computer that is running the instance.
ephemeral data, meaning the data on the volumes only exists for the duration of the life of the instance.
the instance can be rebooted and still maintain its ephemeral data.

21
Q

EBS Snapshots

A

point-in-time backups of EBS volumes that are stored in S3.

22
Q

Snapshot properties:

A

incremental in nature.
only stores changes since the most recent snapshot, thus reducing costs by only having to ay for storage for the “incremental changes” between snapshots).
However, if the “original” snapshot is deleted, all data is still available in all the other snapshots.
can be used to create fully restored EBS volumes

23
Q

Other snapshot notes

A

frequent snapshots of your data increases data durability – so highly recommended.
when a snapshot is being taken against the EBS volume, it can degrade performance so snapshots should occur during non-production or non-peak load hours.

24
Q

EC2 Key Pair

A

Each Key pari consists of a public key and a private key.

AWS sores the public key on the instance, and you are responsible for storeing the private key.

25
Q

Key Pair with Linux/Windows Instances

A

Linux instances have no password you use a key pari to log in (using SSH).
With WIndows instances, you use a key pair to obtain the administrator password and then log in using RDP.

26
Q

SSH login in to linux instance

A

SSH -i “keypari1.pem” ec2-user@…..(IP address)/

you need to change permissions on the .pem file before you ca use it to login via SSH.

27
Q

placement group facts:

A

Instance not originally launched/created in the placement group can not be moved into the placement group.
Placement groups cannot be merged together.
a placement group can not span multiple zones.
placement grou names must be unique within your own AWS account.
Placement groups can be “connected”.
Instances must have 10 gb network speeds in order to take advantage of placement groups.(proper instance type).

28
Q

Creating a EFS

A
  1. Configure file system access (select VPC);
  2. configure optional setting.(add tags)
  3. Review and create.
29
Q

AMI vs instance Type

A

AMI are what dictate the instance’s operating system and other software settings;
instance tpe determines the instances virtual hardware.

30
Q

EC2 Instance Type

A

t2 - general purpose - “Burstable” performance instances
m3 - general Purpose – Nice Balance
c3/c4 - Compute Optimized - for high traffic front end fleets, web servers
d2/i2 - Storage Optimized - For large-scale data warehouse or parallel file systems
g2/p2 – GPU Optimized – for machine learning, high performance databases, rendering
r3/r4 – Memory Optimized – for databases, memcached, large deployments of enterprise applications

31
Q

Instance Type for SSD backed storage

A

M3, C3