AWS SAA Review

Posted 2023-02-18

参考技术A

已过SAA认证，贴出知识点总结

Applications that run on an EC2 instance must include AWS credentials in the AWS API requests. you can and should use an IAM role to manage temporary credentials for applications that run on an EC2 instance. the role supplies temporary permissions that applications can use when they make calls to other AWS resources. When you launch an EC2 instance, you specify an IAM role to associate with the instance. Applications that run on the instance can then use the role-supplied temporary credentials to sign API requests.

When an EC2 instance is in the Hibernate state, you pay only for the EBS volumes and Elastic IP Addresses attached to it.

Only gp2/gp3 and io1/io2 can be used as boot volumes

After a scaling activity happens, you are in the cooldown period (default 300 seconds) ,During the cooldown period, the ASG will not launch or terminate additional instances

You have the ability to perform extra steps before the instance goes in service (Pending state) You have the ability to perform some actions before

the instance is terminated (Terminating state)

RDS security works by leveraging security groups

You manage your DB engine configuration through the use of parameters in a DB parameter group. DB parameter groups act as a container for engine configuration values that are applied to one or more DB instances.

If you want to use your own DB parameter group, you simply create a new DB parameter group, modify the desired parameters, and modify your DB instance to use the new DB parameter group.

Good for infrequent,intermittent or unpredictable workloads

Every node does R/W immediate failover for write node

DNS does not route any traffic, it only responds to the DNS queries

AWS CloudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources you want (like Amazon EC2 instances or Amazon RDS DB instances). AWS CloudFormation takes care of provisioning and configuring those resources for you.

so anytime you see in the exam something around deploying a CloudFormation stack globally or across accounts,think no more than just StackSets.

Elastic Beanstalk is a PaaS layer on top of AWS\'s IaaS services which abstracts away the underlying EC2 instances, Elastic Load Balancers, Auto Scaling groups, host Docker containers ,etc. This makes it a lot easier for developers, who don\'t want to deal with all the systems stuff, to get their application quickly deployed on AWS. With Elastic Beanstalk, you don\'t need to understand how any of the underlying magic works.

Elastic Beanstalk is intended to make developers\' lives easier. CloudFormation is intended to make systems engineers\' lives easier.

Rules can be created for a certain prefix (ex - s3://mybucket/mp3/* )

Rules can be created for certain objects tags (ex - Department: Finance)

Increase transfer(upload and download) speed by transferring file to an AWS edge location which will forward the data to the S3 bucket in the target region

With Requester Pays buckets , the requester instead of the bucket owner pays the cost of the request and the data download from the bucket

The requester must be authenticated in AWS (cannot be anonymous)

Exam Tip : analyze data in S3 using serverless SQL, use Athena

use AWS OpsHub (a software you install on your computer / laptop) to manage your Snow Family Device

When migrating to the cloud , instead of re-engineering the application to use SQS and SNS, we can use Amazon MQ

AWS K8S (ECS and Fargate)