AWS Notes SanjaySingh
AWS Notes SanjaySingh
• It is the use of remote servers on the internet to store, manage and process data rather than a local
server or personal computer.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Uses of AWS o A small manufacturing organization uses their expertise to expand their business by
leaving their IT management to the AWS.
o A large enterprise spread across the globe can utilize the AWS to deliver the training to the distributed
workforce. o An architecture consulting company can use AWS to get the high-compute rendering of
construction prototype.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
To include every customer need under the sun, amazon has further categorized services under each domain. Let’s
discuss each one of them.
Compute Services
• Amazon EC2
• Amazon EC2 Auto Scaling
• Amazon Elastic Container Registry
• Amazon Elastic Container Service
• Amazon Elastic Kubernetes Service
• Amazon Lightsail
• AWS Batch
• AWS Elastic Beanstalk
• AWS Fargate
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o AWS EC2
o EC2 stands for Amazon Elastic Compute Cloud. o It is a web service which provides
re-sizable compute capacity in the cloud. o It is designed to make the web scale
computing easier for developers
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Now, every instance type has a set of instances which are optimized for different workloads:
• General Instances o t2 o m4 o m3
• Compute Instances o c4 o c3
• Memory Instances o r3
o x1
• Storage Instances o i2 o d2
• GPU Instances o g2
Elastic Beanstalk quickly deploy and manage applications in AWS without worrying about the underlying
infrastructure.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
EC2 is Amazon's service that allows you to Elastic Beanstalk is one layer of abstraction
create a server (AWS calls these instances) away from the EC2 layer. Elastic Beanstalk
in the AWS cloud. You pay by the hour and will setup an "environment" for you that can
only what you use. You can do whatever you contain a number of EC2 instances, an
want with this instance as well as launch n optional database, as well as a few other
number of instances. AWS components such as a Elastic Load
Balancer, Auto-Scaling Group, Security
Group. Then Elastic Beanstalk will manage
these items for you whenever you want to
update your software running in AWS.
Elastic Beanstalk doesn't add any cost on
top of these resources that it creates for you.
If you have 10 hours of EC2 usage, then all
you pay is 10 compute hours.
We can’t run our apps on plain EC2 We can run our apps on EB
with an EC2 instance, you can turn it off Beanstalk is a good product and really a
and on at any time and save money. You can good fit if you know your service is going to
have everything on one and save money too. grow. You get load balancers and auto
For large operations, this won’t matter, but scaling configured automatically, which is
for a bootstrapped start-up, this makes a way out of my domain
difference.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
ELB automatically manages the workload on your instances and distributes them to other instances in case of an
instance failure.
Load Balancer is a virtual machine or appliance that balances your web application load that could be Http or
Https traffic that you are getting in. It balances a load of multiple web servers so that no web server gets
overwhelmed.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o It is operated at the
Layer 4 of the OSI model. o It makes routing decisions at the transport layer (TCP/SSL), and it can handle
millions of requests per second.
o When a load balancer receives a connection, it then selects a target from the target group by using a flow
hash routing algorithm. It opens the TCP connection to the selected target of the port and forwards the
request without modifying the headers.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o
It is operated at Layer 4 of the OSI model.
o It routes the traffic between clients and backend servers based on IP address. o For example, an
Elastic Load balancer receives a request from a client on TCP port 80, it will then routes the request to a
specified port of backend servers. The port on which the Load Balancer routes to the target server will be
having port number 80. The backend server will then send the requested data back to the ELB, which will
then forward the Backend server reply to the client. According to the client's perspective, the request has
been fulfilled by the ELB, not by the backend server.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
AWS Lambda
AWS Lambda is used to execute backend code without worrying about the underlying architecture, you just upload
the code and it runs, it’s that simple!
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• But, if your code will be running for hours, and you expect a continuous stream of requests, you should
probably go with EC2, because the architecture of Lambda is for a sporadic kind of workload, wherein
there will be some quiet hours and some spikes in the no. of requests as well.
• For example, logging the email activity for say a small company, would see more activity during the day
than in the night, also there could be days when there are less emails to be processed, and sometimes the
whole world could start emailing you! In both the cases, Lambda is at your service.
• Considering this use case for a big social networking company, where the emails are never ending because
it has a huge user base, Lambda may not be the apt choice.
AWS Autoscaling
• The Autoscaling feature is used to scale up and down automatically as and when required.
• The application available at AWS requires space and load and the Auto Scaling helps us by providing
surety that there is a sufficient number of Amazon EC2 instances available to handle that load.
• You can set a limit on EC2 instances such that the number doesn’t go below this.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• AWS Autoscaling ensures that your group has a sufficient amount of servers.
• Auto-scaling automatically modifies the EC2 instance as per your demand changes.
• One can access Auto Scaling by signing into the AWS Management Console.
• AWS Auto-scaling helps you if you are using language-specific APIs rather than submitting requests over
HTTP or HTTPS Auto Scaling provides a benefit of libraries, Sample code, tutorial, and other resources
for the development of the software.
• It also helps us with some functions such as retrying requests, and handling error responses, making it is
easier for the applicant to get started.
Amazon Elastic Container Service
• Amazon EC2 Container Service (Amazon ECS) is a highly scalable, fast, container management service
that makes it easy to run, stop, and manage Docker containers on a cluster of Amazon EC2 instances.
• Amazon ECS uses Docker images in task definitions to launch containers on EC2 instances in our
clusters.
• Docker is a technology that allows us to build, run, test, and deploy distributed applications that are based
on Linux containers.
ECS is basically a set of APIs that turn EC2 instances into compute cluster for container management:
1. EC2 instances must call RegisterContainerInstance API to signal that they are ready to run containers.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• We can start using Amazon EC2 Container Service (Amazon ECS) by creating a task definition, scheduling
tasks, and configuring a cluster in the Amazon ECS console. Note that we do not need any orchestration
tools such as Mesos, Kubernetes or Docker Swarm.
• Amazon Elastic Container Service for Kubernetes (Amazon EKS) is a fully managed service that makes it
easy for you to use Kubernetes on AWS without having to be an expert in managing Kubernetes clusters.
• There are few things that we think developers will really like about this service.
• First, Amazon EKS runs the upstream version of the open-source Kubernetes software, so you can use all
the existing plugins and tooling from the Kubernetes community.
• Applications running on Amazon EKS are fully compatible with applications running on any standard
Kubernetes environment, whether running in on-premises datacentre’s or public clouds. This means that
you can easily migrate your Kubernetes application to Amazon EKS with zero code changes. Second,
Amazon EKS automatically runs K8s with three masters across three AZs to protect against a single point
of failure.
• This multi-AZ architecture delivers resiliency against the loss of an AWS Availability Zone.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Storage
• Amazon S3
• Amazon Elastic Block Store
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
S3 stands for simple storage service, it is used for storing data in the form of objects in the AWS Cloud.
o Amazon Simple Storage Service (S3) is a storage for the internet. o It is designed for large-capacity,
low-cost storage provision across multiple geographical regions. o Amazon S3 provides developers
and IT teams with Secure, Durable and Highly Scalable object storage. o S3 is a safe place to store the
files. o It is Object-based storage, i.e., you can store the images, word files, pdf files, etc. o The
files which are stored in S3 can be from 0 Bytes to 5 TB. o It has unlimited storage means that you can
store the data as much you want.
o Files are stored in Bucket. A bucket is like a folder available in S3 that stores the files.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Amazon Glacier
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Amazon Elastic Block Storage is a storage service wherein each block of storage acts like a separate hard drive.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Secure − Amazon’s flexible access control policies allows to specify who can access which EBS volumes.
Access control plus encryption offers a strong defense-in-depth security strategy for data.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Easy data backup − Data backup can be saved by taking point-in-time snapshots of Amazon EBS
volumes.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Amazon Storage Gateway is a modified storage service which enables the applications to use the
AWS Cloud for storage purpose.
• Amazon SG can help for backup and archiving, cloud processing, disaster recovery, and migration.
• Standard storage protocol such as NFS, SMB, and Amazon EBS connects the applications to a gateway
appliance using standard storage protocol.
• The gateways get connected to the storage services such as Amazon S3, Amazon Glacier, and Amazon
EBS.
• This service benefits the user in many ways such as It includes highly-optimized data transfer mechanism.
• Low-latency data along with the on-premise local cache provides access to the data.
CloudFront CDN
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Database
The Amazon Relational Database Service (RDS AWS) is a web service that makes it easier to set up, operate,
and scale a relational database in the cloud. It provides cost-efficient, re-sizable capacity in an industry-standard
relational database and manages common database administration tasks.
So people often develop a misconception, when they confuse RDS with a database.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o Amazon Aurora
It is a relational database engine that combines the speed and reliability of high-end commercial databases and the
cost effectiveness and simplicity of open-source databases.
o It is a relational database, and closed source database engine. o It is compatible with MySQL and delivers
five times throughput of MySQL on the same hardware.
o It is also compatible with PostgreSQL and delivers three times throughput of PostgreSQL on the same
hardware.
o Amazon RDS with Aurora manages the time-consuming administrative tasks such as software installation,
patching, and backups.
o The main features of Aurora are fault-tolerant, distributed, a self-healing storage system that auto-scales
upto 64 TB per database instance.
o It provides high-performance, availability, point-in-time recovery, continuous backed up to S3, and
replication across three availability zones.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Amazon RDS is a managed relational database service which does routine database tasks in 6 familiar
databases like Amazon Aurora, MySQL, MariaDB, Oracle, Microsoft SQL Server, and PostgreSQL.
o Amazon DynamoDB
It is a fully managed No-SQL database service. It is known for extremely low latencies and scalability.
Amazon DynamoDB
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o
o It is a web service that makes it easy to set up, manage and scale a distributed cache-in environment in the
cloud.
o Amazon Redshift
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Networking
• Amazon VPC
• Amazon CloudFront
• Amazon Route 53
• AWS Private Link
• AWS Direct Connect
• AWS Global Accelerator
• Amazon API Gateway
• AWS Transit Gateway
• AWS App Mesh
• AWS Cloud Map
• Elastic Load Balancing
VPC AWS
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Amazon Virtual Private Cloud (VPC) helps a firm or a user by providing virtual cloud space for integrating
the business.
• With AWS VPC one can completely monitor virtual networking environment, including the selection of
your own IP address range, the creation of subnets, and configuration of route tables and network gateways
these features helps a lot to integrate businesses.
• Amazon VPC allows you to logically analyse the section of Amazon Cloud where one can launch AWS
Resources in the virtual network.
• To provide secure and easy access fourth and sixth revision to the Internet Protocol can be used.
• VPC in AWS as a logical container that separates resources you create from other customers within the
Amazon Cloud. It is you defining a network of your own within Amazon.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
What is NAT?
NAT is designed for IP address conservation. It enables private IP networks that use unregistered IP addresses to
connect to the Internet.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
NAT instance enable instances in the private subnet to initiate outbound traffic to the Internet but prevent the
instances from receiving inbound traffic initiated by someone on the Internet.
Note: NAT Instance is a legacy, you can use NAT Gateway What
is NAT Gateway?
NAT Gateway is a managed NAT service that provides better availability, higher bandwidth, and requires
less administrative effort.
It helps you establish a private connection between your premises and AWS, therefore giving better network
performance and throughput than an Internet based connection.
o Amazon Route 53
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Amazon CloudWatch
Amazon CloudWatch is a monitoring and management service built for developers, system operators, site
reliability engineers (SRE), and IT managers. CloudWatch provides you with data and actionable insights to
monitor your applications, understand and respond to system-wide performance changes, optimize resource
utilization, and get a unified view of operational health. CloudWatch collects monitoring and operational data in the
form of logs, metrics, and events, providing you with a unified view of AWS resources, applications and services
that run on AWS, and on-premises servers. You can use CloudWatch to set high resolution alarms, visualize logs
and metrics side by side, take automated actions, troubleshoot issues, and discover insights to optimize your
applications, and ensure they are running smoothly.
With Amazon CloudWatch, it is easy to get started. There is no up-front commitment or minimum fee; you simply
pay for what you use. You will be charged at the end of the month for what you use.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o
It is a service which helps you setup and model your Amazon AWS resources so that you can spend less
time managing these resources and more time focusing on the development.
o AWS CloudTrail
AWS CloudTrail is a logging service which records the API calls to your Amazon AWS account and delivers them
to you.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o AWS OpsWorks
It is a configuration management tool that helps configure and operate applications of all size and shapes using
Chef.
o Trusted Advisor
o
Trusted Advisor is a customized cloud monitoring tool, that analyzes your AWS environment and gives
insights on the expense, performance improvement, security gaps and reliability.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
It is an AWS service that helps you control access to your AWS resources for your users.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
The biggest advantage of IAM is that it is free. But if users launch EC2 it will be charged.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Application Services
# Application Integration
• Step Functions
• Amazon MQ
• Simple Notification Service
• Simple Queue Service
• SWF
o Amazon SES
It is a cost effective emailing service which is built on the scalable and reliable infrastructure of Amazon.com
Amazon SES
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Amazon SES (Simple Email Service) is a service which sends an email regarding marketing, transaction, and
notifications. It is suitable for small as well as large industries as the cost is less and it is reliable. Amazon SES can
be directly integrated to the existing application with the help of SMTP Interface and Amazon SDK. Email
sending capabilities can also be introduced in Amazon SES such as ticketing system and email clients.
Building a large-scale email answer is a complex and expensive challenge for a business: you’ve got to make your
infrastructure, assemble your network, warm up your IP addresses and shield your sender name. Several thirdparty
email solutions need contract negotiations and important up-front prices.
o Amazon SNS
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
What is SNS?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
o Subscribers o Publishers
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Publishers are also known as producers that produce and send the message to the SNS which is a logical access
point.
Subscribers
Subscribers such as web servers, email addresses, Amazon SQS queues, AWS Lambda functions receive the
message or notification from the SNS over one of the supported protocols (Amazon SQS, email, Lambda, HTTP,
SMS). o Amazon SQS
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
1. AWS SQS (Amazon Simple Queue Service) is a service which helps to align the message. Moreover, it
also helps to enable the user to separate and scale microservices, distributed system, and serverless
applications.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• It has a benefit of supporting an ample amount of transactions per second per API action.
• As the message is delivered on at a time but at the same time, it delivers more than one copy of a message.
• It may happen that the message delivered is in the different order from the source in which they were sent.
• AWS SQS FIFO:The FIFO queues guarantee that the processed message takes place only once in the first in
first out basis.
• It has a high throughput which can send 300 messages per second which include 300 send, receive, and
delete operation per second.
• The message is not duplicated it is stored with the customer until and unless customer deletes it.
• The messages are treated in first in first out order as the message sent and received is strictly preserved.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:AWS stands for Amazon Web Services. AWS is a platform that provides on-demand resources for hosting
web services, storage, networking, databases and other resources over the internet with a pay-as-you-go pricing.
Answer:EC2 – Elastic Compute Cloud, S3 – Simple Storage Service, Route53, EBS – Elastic Block Store,
Cloudwatch, Key-Paris are few of the components of AWS.
Answer:Key-pairs are secure login information for your instances/virtual machines. To connect to the instances we
use key-pairs that contain a public-key and private-key.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• On-demand
• Reserved
• Spot
• Scheduled
• Dedicated
Answer:
Answer:EBS stands for Elastic Block Stores. They are persistent volumes that you can attach to the instances.
With EBS volumes, your data will be preserved even when you stop your instances, unlike your instance store
volumes where the data is deleted when you stop the instances.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• General purpose
• Provisioned IOPS
• Magnetic
• Cold HDD
• Throughput optimized
• General purpose
• Computer Optimized
• Storage Optimized
• Memory Optimized
• Accelerated Computing
Q10) What is an auto-scaling and what are the components?
Answer: Auto scaling allows you to automatically scale-up and scale-down the number of instances depending on
the CPU utilization or memory utilization. There are 2 components in Auto scaling, they are Auto-scaling groups
and Launch Configuration.
Answer: Reserved instances are the instance that you can reserve a fixed capacity of EC2 instances. In reserved
instances you will have to get into a contract of 1 year or 3 years.
Q12)What is an AMI?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
EIP (Elastic IP address) is a service provided by an EC2 instance. It is basically a static IP address attached to an
EC2 instance. This address is associated with your AWS account not with an EC2 instance. You can also
disassociate your EIP address from your EC2 instance and map it to another EC2 instance in your AWS account.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Cloudwatch is a monitoring tool that you can use to monitor your various AWS resources. Like health
check, network, Application, etc.
Q15) What are the types in cloudwatch?
Answer: There are 2 types in cloudwatch. Basic monitoring and detailed monitoring. Basic monitoring is free and
detailed monitoring is chargeable.
Q16) What are the cloudwatch metrics that are available for EC2 instances?
Q17) What is the minimum and maximum size of individual objects that you can store in S3
Answer: The minimum size of individual objects that you can store in S3 is 0 bytes and the maximum bytes that
you can store for individual objects is 5TB.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Glacier is the back up or archival tool that you use to back up your data in S3.
Answer: There are two ways that you can control the access to your S3 buckets,
Answer: You can encrypt the data by using the below methods,
• Storage used
• Number of requests you make
• Storage management
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q24) What is the pre-requisite to work with Cross region replication in S3?
Answer: You need to enable versioning on both source bucket and destination to work with cross region
replication. Also both the source and destination bucket should be in different region.
Answer: Roles are used to provide permissions to entities that you trust within your AWS account. Roles are users
in another account. Roles are similar to users but with roles you do not need to create any username and password
to work with the resources.
Q26) What are policies and what are the types of policies?
Answer: Policies are permissions that you can attach to the users that you create. These policies will contain that
access that you have provided to the users that you have created. There are 2 types of policies.
• Managed policies
• Inline policies
Answer: Cloudfront is an AWS web service that provided businesses and application developers an easy and
efficient way to distribute their content with low latency and high data transfer speeds. Cloudfront is content
delivery network of AWS.
Q28) What are edge locations?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q29) What is the maximum individual archive that you can store in glacier?
Answer: VPC stands for Virtual Private Cloud. VPC allows you to easily customize your networking
configuration. VPC is a network that is logically isolated from other network in the cloud. It allows you to have
your own IP address range, subnets, internet gateways, NAT gateways and security groups.
Answer: VPC peering connection allows you to connect 1 VPC with another VPC. Instances in these VPC behave
as if they are in the same network.
Answer: NAT stands for Network Address Translation. NAT gateways enables instances in a private subnet to
connect to the internet but prevent the internet from initiating a connection with those instances.
Answer: You can use security groups and NACL (Network Access Control List) to control the security to your
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• File gateway
• Volume gateway
• Tape gateway
Q35) What is a snowball?
Answer: Snowball is a data transport solution that used source appliances to transfer large amounts of data into and
out of AWS. Using snowball, you can move huge amount of data from one place to another which reduces your
network costs, long transfer times and also provides better security.
• Aurora
• Oracle
• MYSQL server
• Postgresql
• MariaDB
• SQL server
Answer: Amazon redshift is a data warehouse product. It is a fast and powerful, fully managed, petabyte scale data
warehouse service in the cloud.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: SNS stands for Simple Notification Service. SNS is a web service that makes it easy to notifications from
the cloud. You can set up SNS to receive email notification or message notification.
• Simple routing
• Latency routing
• Failover routing
• Geolocation routing
• Weighted routing
• Multivalue answer
• Standard queue
• FIFO (First In First Out)
Answer: Multi-AZ (Availability Zone) RDS allows you to have a replica of your production database in another
availability zone. Multi-AZ (Availability Zone) database is used for disaster recovery. You will have an exact copy
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Automated backups
• Manual backups which are known as snapshots.
Q44) What is the difference between security groups and network access control list?
Answer:
Security Groups Network access control list
Can control the access at the instance level Can control access at the subnet level
Can add rules for “allow” only Can add rules for both “allow” and “deny”
Evaluates all rules before allowing the traffic Rules are processed in order number when
allowing traffic.
Can assign unlimited number of security groups Can assign upto 5 security groups.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: ELB stands for Elastic Load balancing. ELB automatically distributes the incoming application traffic or
network traffic across multiple targets like EC2, containers, IP addresses.
Q47) What are the two types of access that you can provide when you are creating users?
Answer: Following are the two types of access that you can create.
• Programmatic access
• Console access
Answer: Security groups acts as a firewall that contains the traffic for one or more instances. You can associate one
or more security groups to your instances when you launch then. You can add rules to each security group that
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Shared AMI’s are the AMI that are created by other developed and made available for other developed to
use.
Q51)What is the difference between the classic load balancer and application load balancer?
Answer: Dynamic port mapping, multiple port multiple listeners is used in Application Load Balancer, One port
one listener is achieved via Classic Load Balancer
Answer: 5
Answer: A large section of IP Address divided in to chunks are known as subnets Q54)
Answer: Remove IGW & add NAT Gateway, Associate subnet in Private route table Q55)
Answer: no it’s not possible, we can increase it but not reduce them
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q57) One of my s3 is bucket is deleted but i need to restore is there any possible way?
Q58) When I try to launch an ec2 instance i am getting Service limit exceed, how to fix the issue?
Answer: By default AWS offer service limit of 20 running instances per region, to fix the issue we need to contact
AWS support to increase the limit based on the requirement
Q59) I need to modify the ebs volumes in Linux and windows is it possible
Answer: yes its possible from console use modify volumes in section give the size u need then for windows go to
disk management for Linux mount it to achieve the modification
Q60) Is it possible to stop a RDS instance, how can I do that?
Answer: Yes it’s possible to stop rds. Instance which are non-production and non multi AZ’s Q61)
What is meant by parameter groups in rds. And what is the use of it?
Answer: Since RDS is a managed service AWS offers a wide set of parameter in RDS as parameter group which is
modified as per requirement
Q62) What is the use of tags and how they are useful?
Answer: Tags are used for identification and grouping AWS Resources
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: As AWS user I don’t have access to use it, I need to have permissions to use it further Q64)
I don’t want my AWS Account id to be exposed to users how can I avoid it?
Answer: In IAM console there is option as sign in url where I can rename my own account name with AWS
account
Q66) You are enabled sticky session with ELB. What does it do with your instance?
Q67) Which type of load balancer makes routing decisions at either the transport layer or the Application
Q68) Which is virtual network interface that you can attach to an instance in a VPC?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q70) You have chosen a windows instance with Classic and you want to make some change to the Security
Q71) Load Balancer and DNS service comes under which type of cloud service?
Answer: IAAS-Storage
Q72) You have an EC2 instance that has an unencrypted volume. You want to create another
Encrypted volume from this unencrypted volume. Which of the following steps can achieve this?
Answer: Create a snapshot of the unencrypted volume (applying encryption parameters), copy the. Snapshot and
create a volume from the copied snapshot
Q73) Where does the user specify the maximum number of instances with the auto scaling Commands?
Q75) After configuring ELB, you need to ensure that the user requests are always attached to a Single
instance. What setting can you use?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q76) When do I prefer to Provisioned IOPS over the Standard RDS storage?
Q78) Which the AWS services will you use to the collect and the process e-commerce data for the near by
real-time analysis?
Q79) A company is deploying the new two-tier an web application in AWS. The company has to limited on
staff and the requires high availability, and the application requires to complex queries and table joins.
Which configuration provides to the solution for company’s requirements?
Q80) Which the statement use to cases are suitable for Amazon DynamoDB?
Answer:The storing metadata for the Amazon S3 objects& The Running of relational joins and complex an
updates.
Q81) Your application has to the retrieve on data from your user’s mobile take every 5 minutes and then
data is stored in the DynamoDB, later every day at the particular time the data is an extracted into S3 on a
per user basis and then your application is later on used to visualize the data to user. You are the asked to
the optimize the architecture of the backend system can to lower cost, what would you recommend do?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q82) You are running to website on EC2 instances can deployed across multiple Availability Zones with an
Multi-AZ RDS MySQL Extra Large DB Instance etc. Then site performs a high number of the small reads
and the write per second and the relies on the eventual consistency model. After the comprehensive tests you
discover to that there is read contention on RDS MySQL. Which is the best approaches to the meet these
requirements?
Answer:The Deploy Elasti Cache in-memory cache is running in each availability zone and Then Increase the
RDS MySQL Instance size and the Implement provisioned IOPS.
Q83) An startup is running to a pilot deployment of around 100 sensors to the measure street noise and The
air quality is urban areas for the 3 months. It was noted that every month to around the 4GB of sensor data
are generated. The company uses to a load balanced take auto scaled layer of the EC2 instances and a RDS
database with a 500 GB standard storage. The pilot was success and now they want to the deploy take
atleast 100K sensors.let which to need the supported by backend. You need to the stored data for at least 2
years to an analyze it. Which setup of following would you be prefer?
Answer: The Replace the RDS instance with an 6 node Redshift cluster with take 96TB of storage.
Q84) Let to Suppose you have an application where do you have to render images and also do some of
general computing. which service will be best fit your need?
Q85) How will change the instance give type for the instances, which are the running in your applications
tier and Then using Auto Scaling. Where will you change it from areas?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Let Create a load balancer, and Give register the Amazon EC2 instance with it.
Answer: The re-routes traffic from the instances which are to be updated (or) failed an health to check.
Q88) When the instance is an unhealthy, it is do terminated and replaced with an new ones, which of the
services does that?
Q89) What are the life cycle to hooks used for the AutoScaling?
Answer: They are used to the put an additional taken wait time to the scale in or scale out events.
Q90) An user has to setup an Auto Scaling group. Due to some issue the group has to failed for launch a
single instance for the more than 24 hours. What will be happen to the Auto Scaling in the condition?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q93) An customers wants to the captures all client connections to get information from his load balancers at
an interval of 5 minutes only, which cal select option should he choose for his application?
Answer: The condition should be Enable to AWS CloudTrail for the loadbalancers.
Q94) Which of the services to you would not use to deploy an app?
Q96) An created a key in the oregon region to encrypt of my data in North Virginia region for security
purposes. I added to two users to the key and the external AWS accounts. I wanted to encrypt an the object
in S3, so when I was tried, then key that I just created is not listed.What could be reason&solution?
Q97) As a company needs to monitor a read and write IOPS for the AWS MySQL RDS instances and then
send real-time alerts to the operations of team. Which AWS services to can accomplish this?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: All Invites take acquired the company’s AWS account to join existing the company’s of organization by
using AWS Organizations.
Q99) The user has created an the applications, which will be hosted on the EC2. The application makes calls
to the Dynamo DB to fetch on certain data. The application using the DynamoDB SDK to connect with the
EC2 instance. Which of respect to best practice for the security in this scenario?
Answer: The user should be attach an IAM roles with the DynamoDB access to EC2 instance.
Q100) You have an application are running on EC2 Instance, which will allow users to download the files
from a private S3 bucket using the pre-assigned URL. Before generating to URL the Q101) application
should be verify the existence of file in S3. How do the application use the AWS credentials to access S3
bucket securely?
Answer:An Create an IAM role for the EC2 that allows list access to objects in S3 buckets. Launch to
instance with this role, and retrieve an role’s credentials from EC2 Instance make metadata.
Q101) You use the Amazon CloudWatch as your primary monitoring system for web application. After a
recent to software deployment, your users are to getting Intermittent the 500 Internal Server to the Errors,
when you using web application. You want to create the CloudWatch alarm, and notify the on-call engineer
let when these occur. How can you accomplish the using the AWS services?
Answer: An Create a CloudWatch get Logs to group and A define metric filters that assure capture 500 Internal
Servers should be Errors. Set a CloudWatch alarm on the metric and By Use of Amazon Simple to create a
Notification Service to notify an the on-call engineers when prepare CloudWatch alarm is triggered.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Assign to multiple ELBs an EC2 instance or group of EC2 take instances running to common
component of the web application, one ELB change for each platform type.Take Session will be stickiness
and SSL termination are done for the ELBs.
Q103) You are migrating to legacy client-server application for AWS. The application responds to a specific
DNS visible domain (e.g. www.example.com) and server 2-tier architecture, with multiple application for the
servers and the database server. Remote clients use to TCP to connect to the application of servers. The
application servers need to know the IP address of clients in order to the function of properly and are
currently taking of that information from TCP socket. A Multi-AZ RDS MySQL instance to will be used for
database. During the migration you change the application code but you have file a change request. How do
would you implement the architecture on the AWS in order to maximize scalability and high availability?
Answer: File a change request to get implement of Proxy Protocol support in the application. Use of ELB with
TCP Listener and A Proxy Protocol enabled to distribute the load on two application servers in the different AZs.
Q104) Your application currently is leverages AWS Auto Scaling to the grow and shrink as a load
Increases/decreases and has been performing as well. Your marketing a team expects and steady ramp up in
traffic to follow an upcoming campaign that will result in 20x growth in the traffic over 4 weeks. Your
forecast for approximate number of the Amazon EC2 instances necessary to meet peak demand is 175.
What should be you do avoid potential service disruptions during the ramp up traffic?
Answer: Check the service limits in the Trusted Advisors and adjust as necessary, so that forecasted count remains
within the limits.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Deploy to 3 EC2 instances in one of availability zone and 3 in another availability of zones and to use of
Amazon Elastic is Load Balancer.
Q106) You are the designing an application that a contains protected health information. Security and Then
compliance requirements for your application mandate that all protected to health information in
application use to encryption at rest and in the transit module. The application to uses an threetier
architecture. where should data flows through the load balancers and is stored on the Amazon EBS volumes
for the processing, and the results are stored in the Amazon S3 using a AWS SDK. Which of the options
satisfy the security requirements?
Answer: Use TCP load balancing on load balancer system, SSL termination on Amazon to create EC2 instances,
OS-level disk take encryption on Amazon EBS volumes, and The amazon S3 with server-side to encryption and
Use the SSL termination on load balancers, an SSL listener on the Amazon to create EC2 instances, Amazon EBS
encryption on the EBS volumes containing the PHI, and Amazon S3 with a server-side of encryption.
Q107) An startup deploys its create photo-sharing site in a VPC. An elastic load balancer distributes to web
traffic across two the subnets. Then the load balancer session to stickiness is configured to use of
AWSgenerated session cookie, with a session TTL of the 5 minutes. The web server to change Auto Scaling
group is configured as like min-size=4, max-size=4. The startup is the preparing for a public launchs, by
running the load-testing software installed on the single Amazon Elastic Compute Cloud (EC2) instance to
running in us-west-2a. After 60 minutes of load-testing, the web server logs of show the
following:WEBSERVER LOGS | # of HTTP requests to from load-tester system | # of HTTP requests to
from private on beta users || webserver #1 (subnet an us-west-2a): | 19,210 | 434 | webserver #2 (subnet an
us-west-2a): | 21,790 | 490 || webserver #3 (subnet an us-west-2b): | 0 | 410 || webserver #4 (subnet an us-west-
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Result of cloud is re-configure the load-testing software to the re-resolve DNS for each web request.
Q108) To serve the Web traffic for a popular product to your chief financial officer and IT director have
purchased 10 m1.large heavy utilization of Reserved Instances (RIs) evenly put spread across two
availability zones: Route 53 are used to deliver the traffic to on Elastic Load Balancer (ELB). After the
several months, the product grows to even more popular and you need to additional capacity As a result,
your company that purchases two c3.2xlarge medium utilization RIs You take register the two c3.2xlarge
instances on with your ELB and quickly find that the ml of large instances at 100% of capacity and the
c3.2xlarge instances have significant to capacity that’s can unused Which option is the most of cost effective
and uses EC2 capacity most of effectively?
Answer: To use a separate ELB for the each instance type and the distribute load to ELBs with a Route 53
weighted round of robin.
Q109) An AWS customer are deploying an web application that is the composed of a front-end running on
the Amazon EC2 and confidential data that are stored on the Amazon S3. The customer security policy is
that all accessing operations to this sensitive data must authenticated and authorized by centralized access
to management system that is operated by separate security team. In addition, the web application team
that be owns and administers the EC2 web front-end instances are prohibited from having the any ability to
access data that circumvents this centralized access to management system. Which are configurations will
support these requirements?
Answer:The configure to the web application get authenticate end-users against the centralized access on
the management system. Have a web application provision trusted to users STS tokens an entitling the
download of the approved data directly from a Amazon S3.
Q110) A Enterprise customer is starting on their migration to the cloud, their main reason for the migrating
is agility and they want to the make their internal Microsoft active directory available to the many
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: By Using a VPC, they could be create an the extension to their data center and to make use of resilient
hardware IPSEC on tunnels, they could then have two domain consider to controller instances that are joined to
the existing domain and reside within the different subnets in the different availability zones.
Enroll Now!
Answer:Cloud computing means it provides services to access programs, application, storage, network, server over
the internet through browser or client side application on your PC, Laptop, Mobile by the end user without
installing, updating and maintaining them.
Answer:
Answer:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: SAAS (Software as a Service): It is software distribution model in which application are hosted by a
vendor over the internet for the end user freeing from complex software and hardware management. (Ex: Google
drive, drop box)
PAAS (Platform as a Service): It provides platform and environment to allow developers to build applications. It
frees developers without going into the complexity of building and maintaining the infrastructure. (Ex: AWS
Elastic Beanstalk, Windows Azure)
IAAS (Infrastructure as a Service): It provides virtualized computing resources over the internet like cpu, memory,
switches, routers, firewall, Dns, Load balancer (Ex: Azure, AWS) Q115)What are the advantage of Cloud
Computing?
Answer:
Q116)What is AWS?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Region: An independent collection of AWS resources in a defined geography. A collection of Data centers
(Availability zones). All availability zones in a region connected by high bandwidth.
Availability Zones: An Availability zone is a simply a data center. Designed as independent failure zone. High
speed connectivity, Low latency.
Edge Locations: Edge location are the important part of AWS Infrastructure. Edge locations are CDN endpoints
for cloud front to deliver content to end user with low latency Q118)How to access AWS Platform?
Answer:
• AWS Console
• AWS CLI (Command line interface)
• AWS SDK (Software Development Kit)
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Benefits:
Answer:
• On-Demand Instances
• Reserved Instances
• Spot Instances
• Dedicated Host
Answer:
• General Purpose
• Compute Optimized
• Memory optimized
• Storage Optimized
• Accelerated Computing (GPU Based)
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Types of AMI:
• Published by AWS
• AWS Marketplace
• Generated from existing instances
• Uploaded virtual server
Answer:
• Public Domain name system (DNS) name: When you launch an instance AWS creates a DNS name that can be
used to access the
• Public IP: A launched instance may also have a public ip address This IP address assigned from the address
reserved by AWS and cannot be specified.
• Elastic IP: An Elastic IP Address is an address unique on the internet that you reserve independently and associate
with Amazon EC2 instance. This IP Address persists until the customer release it and is not tried to Q124)What is
Security Group?
Answer: AWS allows you to control traffic in and out of your instance through virtual firewall called Security
groups. Security groups allow you to control traffic based on port, protocol and source/Destination.
Retired state only available in Reserved instances. Once the reserved instance reserving time (1 yr/3 yr) ends it
shows Retired state.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:AWS assigned Public IP automatically but it’s change dynamically while stop and start. In that case we
need to assign Elastic IP for that instance, once assigned it doesn’t change automatically.
Q127)What is Elastic Beanstalk?
AWS Elastic Beanstalk is the fastest and simplest way to get an application up and running on AWS. Developers
can simply upload their code and the service automatically handle all the details such as resource provisioning,
load balancing, Auto scaling and Monitoring.
Answer:Lightsail designed to be the easiest way to launch and manage a virtual private server with AWS.Lightsail
plans include everything you need to jumpstart your project a virtual machine, ssd based storage, data transfer,
DNS Management and a static ip.
Q129)What is EBS?
Answer:Amazon EBS Provides persistent block level storage volumes for use with Amazon EC2 instances.
Amazon EBS volume is automatically replicated with its availability zone to protect component failure offering
high availability and durability. Amazon EBS volumes are available in a variety of types that differ in performance
characteristics and Price.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
EBS Volume size: 1 GB to 1 TB Average IOPS: 100 IOPS Maximum throughput: 40-90 MB
General-Purpose SSD: General purpose SSD volumes offers cost-effective storage that is ideal for a broad range of
workloads. General purpose SSD volumes are billed based on the amount of data space provisioned regardless of
how much of data you actually store on the volume.
EBS Volume size: 1 GB to 16 TB Maximum IOPS: upto 10000 IOPS Maximum throughput: 160 MB
Provisioned IOPS SSD: Provisioned IOPS SSD volumes are designed to meet the needs of I/O intensive
workloads, particularly database workloads that are sensitive to storage performance and consistency in random
access I/O throughput. Provisioned IOPS SSD Volumes provide predictable, High performance.
EBS Volume size: 4 GB to 16 TB Maximum IOPS: upto 20000 IOPS Maximum throughput: 320 MB
Q131)What is cold HDD and Throughput-optimized HDD?
Answer: Cold HDD: Cold HDD volumes are designed for less frequently accessed workloads. These volumes are
significantly less expensive than throughput-optimized HDD volumes.
EBS Volume size: 500 GB to 16 TB Maximum IOPS: 200 IOPS Maximum throughput: 250 MB
Throughput-Optimized HDD: Throughput-optimized HDD volumes are low cost HDD volumes designed for
frequent access, throughput-intensive workloads such as big data, data warehouse.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Amazon EBS optimized instances to ensure that the Amazon EC2 instance is prepared to take advantage
of the I/O of the Amazon EBS Volume. An amazon EBS-optimized instance uses an optimized configuration stack
and provide additional dedicated capacity for Amazon EBS I/When you select Amazon EBS-optimized for an
instance you pay an additional hourly charge for that instance.
Answer:
• It can back up the data on the EBS Volume. Snapshots are incremental backups.
• If this is your first snapshot it may take some time to create. Snapshots are point in time copies of volumes.
Answer: We can’t able to connect EBS volume to multiple instance, but we can able to connect multiple EBS
Volume to single instance.
Answer: Hardware assisted Virtualization: HVM instances are presented with a fully virtualized set of hardware
and they executing boot by executing master boot record of the root block device of the image. It is default
Virtualization.
Para virtualization: This AMI boot with a special boot loader called PV-GRUB. The ability of the guest kernel to
communicate directly with the hypervisor results in greater performance levels than other virtualization
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:
Block Storage: Block storage operates at lower level, raw storage device level and manages data as a set of
numbered, fixed size blocks.
File Storage: File storage operates at a higher level, the operating system level and manage data as a named
hierarchy of files and folders.
Answer:
Answer:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:
• Amazon S3 Standard
• Amazon S3 Standard-Infrequent Access
• Amazon S3 Reduced Redundancy Storage
• Amazon Glacier
Q140)Explain Amazon s3 lifecycle rules?
Answer: Amazon S3 lifecycle configuration rules, you can significantly reduce your storage costs by automatically
transitioning data from one storage class to another or even automatically delete data after a period of time.
Answer: To encrypt Amazon S3 data at rest, you can use several variations of Server-Side Encryption. Amazon S3
encrypts your data at the object level as it writes it to disks in its data centers and decrypt it for you when you
access it’ll SSE performed by Amazon S3 and AWS Key Management Service (AWS KMS) uses the 256-bit
Advanced Encryption Standard (AES).
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: Cross region replication is a feature allows you asynchronously replicate all new objects in the source
bucket in one AWS region to a target bucket in another region. To enable cross-region replication, versioning must
be turned on for both source and destination buckets. Cross region replication is commonly used to reduce the
latency required to access objects in Amazon S3 Q143)How to create Encrypted EBS volume?
Answer: You need to select Encrypt this volume option in Volume creation page. While creation a new master key
will be created unless you select a master key that you created separately in the service. Amazon uses the AWS key
management service (KMS) to handle key management.
Answer:
Stateful Firewall: A Security group is a virtual stateful firewall that controls inbound and outbound network traffic
to AWS resources and Amazon EC2 instances. Operates at the instance level. It supports allow rules only. Return
traffic is automatically allowed, regardless of any rules.
Stateless Firewall: A Network access control List (ACL) is a virtual stateless firewall on a subnet level. Supports
allow rules and deny rules. Return traffic must be explicitly allowed by rules.
Answer:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
NAT Gateway: A NAT gateway is an Amazon managed resources that is designed to operate just like a NAT
instance but it is simpler to manage and highly available within an availability Zone. To allow instance within a
private subnet to access internet resources through the IGW via a NAT gateway.
Answer: Amazon VPC peering connection is a networking connection between two amazon vpc’s that enables
instances in either Amazon VPC to communicate with each other as if they are within the same network. You can
create amazon VPC peering connection between your own Amazon VPC’s or Amazon VPC in another AWS
account within a single region.
Answer: Multi factor Authentication can add an extra layer of security to your infrastructure by adding a second
method of authentication beyond just password or access key.
Answer:
• User Name/Password
• Access Key
• Access Key/ Session Token
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Data ware house is a central repository for data that can come from one or more sources. Organization typically
use data warehouse to compile reports and search the database using highly complex queries. Data warehouse also
typically updated on a batch schedule multiple times per day or per hour compared to an OLTP (Online
Transaction Processing) relational database that can be updated thousands of times per second.
Answer: Multi AZ allows you to place a secondary copy of your database in another availability zone for disaster
recovery purpose. Multi AZ deployments are available for all types of Amazon RDS Database engines. When you
create s Multi-AZ DB instance a primary instance is created in one Availability Zone and a secondary instance is
created by another Availability zone.
Answer: Amazon Dynamo DB is fully managed NoSQL database service that provides fast and predictable
performance with seamless scalability. Dynamo DB makes it simple and Cost effective to store and retrieve any
amount of data.
Answer: Cloud formation is a service which creates the AWS infrastructure using code. It helps to reduce time to
manage resources. We can able to create our resources Quickly and faster.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Manual Scaling
• Scheduled Scaling
• Dynamic Scaling
Answer: Auto Scaling group is a collection of Amazon EC2 instances managed by the Auto scaling service. Each
auto scaling group contains configuration options that control when auto scaling should launch new instance or
terminate existing instance.
Answer:
Basic Monitoring: Basic monitoring sends data points to Amazon cloud watch every five minutes for a limited
number of preselected metrics at no charge.
Detailed Monitoring: Detailed monitoring sends data points to amazon CloudWatch every minute and allows data
aggregation for an additional charge.
Answer: In Cloud front we will deliver content to edge location wise so here we can use Route 53 for Content
Delivery Network. Additionally, if you are using Amazon CloudFront you can configure Route 53 to route
Internet traffic to those resources.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• Simple
• Weighted
• Latency Based
• Failover
• Geolocation
Answer: Amazon ElastiCache is a web services that simplifies the setup and management of distributed in memory
caching environment.
• Cost Effective
• High Performance
• Scalable Caching Environment
• Using Memcached or Redis Cache Engine
Answer: SES (Simple Email Service): SES is SMTP server provided by Amazon which is designed to send bulk
mails to customers in a quick and cost-effective manner.SES does not allows to configure mail server.
SQS (Simple Queue Service): SQS is a fast, reliable and scalable, fully managed message queuing service.
Amazon SQS makes it simple and cost Effective. It’s temporary repository for messages to waiting for processing
and acts as a buffer between the component producer and the consumer.
SNS (Simple Notification Service): SNS is a web service that coordinates and manages the delivery or sending of
messages to recipients.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:low price – Consume only the amount of calculating, storage and other IT devices needed. No long-term
assignation, minimum spend or up-front expenditure is required.
Elastic and Scalable – Quickly Rise and decrease resources to applications to satisfy customer demand and control
costs. Avoid provisioning maintenance up-front for plans with variable consumption speeds or low lifetimes.
Answer:
Answer:Cloud computing can be damaged up into three main services: Software-as-a-Service (SaaS),
Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS). PaaS in the middle, and IaaS on the lowest
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Cloud computing offers industries flexibility and scalability when it comes to computing needs:
Flexibility. Cloud computing agrees your workers to be more flexible – both in and out of the workplace. Workers
can access files using web-enabled devices such as smartphones, laptops and notebooks. In this way, cloud
computing empowers the use of mobile technology.
One of the key assistances of using cloud computing is its scalability. Cloud computing allows your business to
easily expensive or downscale your IT requests as and when required. For example, most cloud service workers
will allow you to increase your existing resources to accommodate increased business needs or changes. This will
allow you to support your commercial growth without exclusive changes to your present IT systems.
IaaS workers include Amazon Web Services, Microsoft Azure and Google Compute Engine
What is PaaS?
Answer:PaaS runs cloud platforms and runtime environments to develop, test and manage software
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
What is SaaS?
Answer:In SaaS, cloud workers host and manage the software application on a pay-as-you-go pricing model
Answer:The API tools can be used for spin up services and also for the written scripts. Persons scripts could be
coded in Perl, bash or other languages of your preference. There is one more option that is flowery management
and stipulating tools such as a dummy or improved descendant. A tool called Scalar can also be used and finally
we can go with a controlled explanation like a Right scale. Which automation gears can help with pinup service.
Q170) What Is an Ami? How Do I Build One?
Answer:An Amazon Machine Image (AMI) explains the programs and settings that will be applied when you
launch an EC2 instance. Once you have finished organizing the data, services, and submissions on your ArcGIS
Server instance, you can save your work as a custom AMI stored in Amazon EC2. You can scale out your site by
using this institution AMI to launch added instances
Use the following process to create your own AMI using the AWS Administration Console:
*Configure an EC2 example and its attached EBS volumes in the exact way you want them created in the custom
AMI.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Read the message box that appears. To view the AMI standing, go to the AMIs page. Here you can see your AMI
being created. It can take a though to create the AMI. Plan for at least 20 minutes, or slower if you’ve connected a
lot of additional applications or data.
Answer:Amazon Cloud Front is a web service that speeds up delivery of your static and dynamic web content,
such as .html, .css, .js, and image files, to your users.CloudFront delivers your content through a universal network
of data centers called edge locations
Answer:Amazon Elastic Calculate Cloud (Amazon EC2) is a web service that provides secure, resizable compute
capacity in the cloud. It is designed to make web-scale cloud calculating easier for designers. Amazon EC2’s
simple web serviceinterface allows you to obtain and configure capacity with minimal friction.
Q173)Explain Storage For Amazon Ec2 Instance.?
Answer:An instance store is a provisional storing type located on disks that are physically attached to a host
machine. … This article will present you to the AWS instance store storage type, compare it to AWS Elastic Block
Storage (AWS EBS), and show you how to backup data stored on instance stores to AWS EBS
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q174)When attached to an Amazon VPC which two components provide connectivity with external
networks?
Answer:
Answer:
Q177)What is the best approach to anchor information for conveying in the cloud ?
Answer:Backup Data Locally. A standout amongst the most vital interesting points while overseeing information is
to guarantee that you have reinforcements for your information,
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:AWS Certificate Manager is an administration that lets you effortlessly arrangement, oversee, and send
open and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) endorsements for use with AWS
administrations and your inward associated assets. SSL/TLS declarations are utilized to anchor arrange
interchanges and set up the character of sites over the Internet and additionally assets on private systems. AWS
Certificate Manager expels the tedious manual procedure of obtaining, transferring, and reestablishing SSL/TLS
endorsements.
Answer:AWS Key Management Service (AWS KMS) is an overseen benefit that makes it simple for you to make
and control the encryption keys used to scramble your information. … AWS KMS is additionally coordinated with
AWS CloudTrail to give encryption key use logs to help meet your inspecting, administrative and consistence
needs.
Q180)
Answer:Amazon Elastic MapReduce (EMR) is one such administration that gives completely oversaw facilitated
Hadoop system over Amazon Elastic Compute Cloud (EC2).
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Amazon Kinesis Data Firehose is the least demanding approach to dependably stack gushing information
into information stores and examination devices. … It is a completely overseen benefit that consequently scales
to coordinate the throughput of your information and requires no continuous organization Q182)What Is
Amazon CloudSearch and its highlights ?
Answer:Amazon CloudSearch is a versatile cloud-based hunt benefit that frames some portion of Amazon Web
Services (AWS). CloudSearch is normally used to incorporate tweaked seek abilities into different applications.
As indicated by Amazon, engineers can set a pursuit application up and send it completely in under 60 minutes.
Q183)Is it feasible for an EC2 exemplary occurrence to wind up an individual from a virtual private cloud?
Answer:Amazon Virtual Private Cloud (Amazon VPC) empowers you to characterize a virtual system in your very
own consistently disengaged zone inside the AWS cloud, known as a virtual private cloud (VPC). You can
dispatch your Amazon EC2 assets, for example, occasions, into the subnets of your VPC. Your VPC nearly looks
like a conventional system that you may work in your very own server farm, with the advantages of utilizing
adaptable foundation from AWS. You can design your VPC; you can choose its IP address extend, make subnets,
and arrange course tables, organize portals, and security settings. You can interface occurrences in your VPC to the
web or to your own server farm
Answer:VPCs and Subnets. A virtual private cloud (VPC) is a virtual system committed to your AWS account. It is
consistently segregated from other virtual systems in the AWS Cloud. You can dispatch your AWS assets, for
example, Amazon EC2 cases, into your VPC.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:AWS Direct Connect empowers you to safely associate your AWS condition to your on-premises server
farm or office area over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic association. AWS Direct Connect
offers committed fast, low dormancy association, which sidesteps web access suppliers in your system way. An
AWS Direct Connect area gives access to Amazon Web Services in the locale it is related with, and also access to
different US areas. AWS Direct Connect enables you to consistently parcel the fiber-optic associations into
numerous intelligent associations called Virtual Local Area Networks (VLAN). You can exploit these intelligent
associations with enhance security, separate traffic, and accomplish consistence necessities.
Answer:Truly, it very well may be pushed off for examples with root approaches upheld by local event stockpiling.
By utilizing Amazon S3, engineers approach the comparative to a great degree versatile, reliable, quick, low-
valued information stockpiling substructure that Amazon uses to follow its own overall system of sites.
So as to perform frameworks in the Amazon EC2 air, engineers utilize the instruments giving to stack their
Amazon Machine Images (AMIs) into Amazon S3 and to exchange them between Amazon S3 and Amazon EC2.
Extra use case may be for sites facilitated on EC2 to stack their stationary substance from S3.
Q187)What is the distinction between Amazon S3 and EBS ?
Answer:EBS is for mounting straightforwardly onto EC2 server examples. S3 is Object Oriented Storage that isn’t
continually waiting be gotten to (and is subsequently less expensive). There is then much less expensive AWS
Glacier which is for long haul stockpiling where you don’t generally hope to need to get to it, however wouldn’t
have any desire to lose it.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:This is one of the generally asked AWS engineer inquiries questions. This inquiry checks your essential
AWS learning so the appropriate response ought to be clear. Amazon Web Services (AWS) is a cloud benefit stage
which offers figuring power, investigation, content conveyance, database stockpiling, sending and some different
administrations to help you in your business development. These administrations are profoundly versatile, solid,
secure, and cheap distributed computing administrations which are plot to cooperate and, applications in this
manner made are further developed and escalade.
Basic Storage Service (S3): S3 is most generally utilized AWS stockpiling web benefit.
Straightforward E-mail Service (SES): SES is a facilitated value-based email benefit and enables one to smoothly
send deliverable messages utilizing a RESTFUL API call or through an ordinary SMTP.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Flexible Block Store (EBS): EBS offers consistent capacity arrangement that can be found in occurrences as a
customary hard drive.
CloudWatch: CloudWatch enables the controller to viewpoint and accumulate key measurements and furthermore
set a progression of cautions to be advised if there is any inconvenience.
This is among habitually asked AWS engineer inquiries questions. Simply find the questioner psyche and solution
appropriately either with parts name or with the portrayal alongside.
Answer:You may run over at least one AMI related AWS engineer inquiries amid your AWS designer meet.
Along these lines, set yourself up with a decent learning of AMI.
AMI represents the term Amazon Machine Image. It’s an AWS format which gives the data (an application server,
and working framework, and applications) required to play out the dispatch of an occasion. This AMI is the
duplicate of the AMI that is running in the cloud as a virtual server. You can dispatch occurrences from the same
number of various AMIs as you require. AMI comprises of the followings:
Launch authorizations to figure out which AWS records will inspire the AMI so as to dispatch the occasions
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
This is one of the normal AWS engineer inquiries questions. In the event that the questioner is hoping to find a
definite solution from you, clarify the system for vertical scaling.
Q192)What is the association among AMI and Instance?
Answer:Various sorts of examples can be propelled from one AMI. The sort of an occasion for the most part
manages the equipment segments of the host PC that is utilized for the case. Each kind of occurrence has
unmistakable registering and memory adequacy.
When an example is propelled, it gives a role as host and the client cooperation with it is same likewise with some
other PC however we have a totally controlled access to our occurrences. AWS engineer inquiries questions may
contain at least one AMI based inquiries, so set yourself up for the AMI theme exceptionally well.
Amazon S3
Amazon EC2
The significance of S3 is Simple Storage Service. The importance of EC2 is Elastic Compute Cloud.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
It has a REST interface and utilizations secure HMAC-SHA1 validation keys. It is much the same as a tremendous
PC machine which can deal with application like Python, PHP, Apache and some other database.
When you are going for an AWS designer meet, set yourself up with the ideas of Amazon S3 and EC2, and the
distinction between them.
• Amazon EBS
• Amazon EC2 Instance Store
• Amazon S3
• Adding Storage
Amazon EC2 is the basic subject you may run over while experiencing AWS engineer inquiries questions. Get a
careful learning of the EC2 occurrence and all the capacity alternatives for the EC2 case.
Q195)What are the security best practices for Amazon Ec2 examples?
Answer: There are various accepted procedures for anchoring Amazon EC2 occurrences that are pertinent whether
occasions are running on-preface server farms or on virtual machines. How about we view some broad prescribed
procedures:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Slightest Privilege: Follow the vital guideline of minimum benefit for cases and clients to play out the capacities.
Produce jobs with confined access for the occurrences.
Setup Management: Consider each EC2 occasion a design thing and use AWS arrangement the executives
administrations to have a pattern for the setup of the occurrences as these administrations incorporate refreshed
enemy of infection programming, security highlights and so forth.
Whatever be the activity job, you may go over security based AWS inquiries questions. Along these lines, motivate
arranged with this inquiry to break the AWS designer meet.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:This is among habitually asked AWS designer inquiries questions. Give the appropriate response in
straightforward terms, the cradle is primarily used to oversee stack with the synchronization of different parts i.e.
to make framework blame tolerant. Without support, segments don’t utilize any reasonable technique to get and
process demands. Be that as it may, the cushion makes segments to work in a decent way and at a similar speed,
hence results in quicker administrations.
Answer:At the season of ceasing an Amazon EC2 case, a shutdown is performed in a typical way. From that point
onward, the changes to the ceased state happen. Amid this, the majority of the Amazon EBS volumes are stayed
joined to the case and the case can be begun whenever. The occurrence hours are not included when the occasion
is the ceased state.
At the season of ending an Amazon EC2 case, a shutdown is performed in an ordinary way. Amid this, the erasure
of the majority of the Amazon EBS volumes is performed. To stay away from this, the estimation of credit
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:In an AWS DevOps Engineer talk with, this is the most widely recognized AWS inquiries for DevOps. To
answer this inquiry, notice the well known DevOps apparatuses with the kind of hardware –
Q203)What are IAM Roles and Policies, What is the difference between IAM Roles and Policies.
Answer:Roles are for AWS services, Where we can assign permission of some AWS service to other Service.
Policies are for users and groups, Where we can assign permission to user’s and groups.
Q204)What are the Defaults services we get when we create custom AWS VPC?
Answer:
• Route Table
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Public Subnet will have Internet Gateway Attached to its associated Route Table and Subnet, Private
Subnet will not have the Internet Gateway Attached to its associated Route Table and Subnet
Public Subnet will have internet access and Private subnet will not have the internet access directly.
Q206) How do you access the Ec2 which has private IP which is in private Subnet ?
Answer: We can access using VPN if the VPN is configured into that Particular VPC where Ec2 is assigned to that
VPC in the Subnet. We can access using other Ec2 which has the Public access.
Q207)We have a custom VPC Configured and MYSQL Database server which is in Private Subnet and
we need to update the MYSQL Database Server, What are the Option to do so.
Answer:By using NAT Gateway in the VPC or Launch a NAT Instance ( Ec2) Configure or Attach the NAT
Gateway in Public Subnet ( Which has Route Table attached to IGW) and attach it to the Route Table which is
Already attached to the Private Subnet.
Q208) What are the Difference Between Security Groups and Network ACL
Answer:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Allow rules only, by default all rules are denied Allow and Deny can be Used.
Answer:Amazon Route 53 will handle DNS servers. Route 53 give you web interface through which the DNS can
be managed using Route 53, it is possible to direct and failover traffic. This can be achieved by using DNS
Routing Policy.
One more routing policy is Failover Routing policy. we set up a health check to monitor your application
endpoints. If one of the endpoints is not available, Route 53 will automatically forward the traffic to other
endpoint.
ELB automatically scales depends on the demand, so sizing of the load balancers to handle more traffic effectively
when it is not required.
Answer:
• MariaDB
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: System Status Checks – System Status checks will look into problems with instance which needs AWS
help to resolve the issue. When we see system status check failure, you can wait for AWS to resolve the issue, or
do it by our self.
• Network connectivity
• System power • Software issues Data Centre’s
• Hardware issues
• Instance Status Checks – Instance Status checks will look into issues which need our involvement to fix the issue.
if status check fails, we can reboot that particular instance.
• Failed system status checks
• Memory Full
• Corrupted file system
• Kernel issues
Q212)To establish a peering connections between two VPC’s What condition must be met?
Answer:
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
• If the instance state is 0/2- there might be some hardware issue • If the instance state is ½-there might be
issue with OS.
Workaround-Need to restart the instance, if still that is not working logs will help to fix the issue.
Q215) EBS: its block-level storage volume which we can use after mounting with EC2 instances.
Answer:
• We can access EBS only if its mounted with instance, at a time EBS can be mounted only with one instance.
• EFS can be shared at a time with multiple instances
• S3 can be accessed without mounting with instances
Answer:100 buckets can be created by default in AWS account.To get more buckets additionally you have to
request Amazon for that.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:EBS provides high performance block-level storage which can be attached with running EC2 instance.
Storage can be formatted and mounted with EC2 instance, then it can be accessed. Q220)Process
Answer:
• Df –k
• mkfs.ext4 /dev/xvdf
• Fdisk –l
• Mkdir /my5gbdata
• Mount /dev/xvdf /my5gbdata
Answer:With each restart volume will get unmounted from instance, to keep this attached need to perform below
step
Cd /etc/fstab
Q222) What is the Difference between the Service Role and SAML Federated Role.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Federated Roles are meant for User Access and getting access to AWS as per designed role. Example : We can
have a federated role created for our office employee and corresponding to that a Group will be created in the AD
and user will be added to it.
Answer: Root User will have acces to entire AWS environment and it will not have any policy attached to it.
While IAM User will be able to do its task on the basis of policies attached to it.
Answer: Principal of least privilege means to provide the same or equivalent permission to the user/role.
Answer: When an IAM user is created and it is not having any policy attached to it,in that case he will not be able
to access any of the AWS Service until a policy has been attached to it.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer:Creation of Group makes the user management process much simpler and user with the same kind of
permission can be added in a group and at last addition of a policy will be much simpler to the group in
comparison to doing the same thing manually.
Q230)What is the difference between the Administrative Access and Power User Access in term of pre-build
policy.
Answer: Administrative Access will have the Full access to AWS resources. While Power User Access will have
the Admin access except the user/group management permission.
Answer: Identity Provider helps in building the trust between the AWS and the Corporate AD environment while
we create the Federated role.
Answer: It help in securing the AWS environment as we need not to embed or distributed the AWS Security
credentials in the application. As the credentials are temporary we need not to rotate them and revoke them.
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Answer: 5TB
Answer:Yes
Q239)which service is used to distribute content to end user service using global network of edge location?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q243)I have some private servers on my premises also i have distributed some of My workload on the
public cloud,what is the architecture called?
Answer: False
Q245)Is simple workflow service one of the valid Simple Notification Service subscribers?
Answer: No
Q246)which cloud model do Developers and organizations all around the world leverage extensively?
Answer: No
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
Q249)Which AWS service will you use to collect and process ecommerce data for near real time analysis?
Q250)An high demand of IOPS performance is expected around 15000.Which EBS volume type would you
recommend?
https://www.linkedin.com/in/sanjay-singh-mct
© All rights reserved. This book or parts thereof may not be reproduced in any form, stored in any retrieval system, or
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior written
transmitted in any form by any means—electronic, mechanical, photocopy, recording, or otherwise—without prior
written