Merge branch 'master' of github.com:bregman-arie/devops-exercises

This commit is contained in:
abregman 2021-11-07 17:54:17 +02:00
commit 503b5029e6

View File

@ -1396,14 +1396,19 @@ Learn more [here](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-accel
<details>
<summary>Explain data consistency</summary><br><b>
S3 Data Consistency provides strong read-after-write consistency for PUT and DELETE requests of objects in the S3 bucket in all AWS Regions. S3 always return latest file version.
</b></details>
<details>
<summary>Can you host dynamic websites on S3? What about static websites?</summary><br><b>
No. S3 support only statis hosts. On a static website, individual webpages include static content. They might also contain client-side scripts. By contrast, a dynamic website relies on server-side processing, including server-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting.
</b></details>
<details>
<summary>What security measures have you taken in context of S3?</summary><br><b>
* Enable versioning.
* Don't make bucket public.
* Enable encryption if it's disabled.
</b></details>
<details>
@ -1500,8 +1505,9 @@ More on ELB [here](https://aws.amazon.com/elasticloadbalancing)
<summary>What types of load balancers are supported in EC2 and what are they used for?</summary><br><b>
* Application LB - layer 7 traffic
* Network LB - ultra-high performances or static IP address
* Classic LB - low costs, good for test or dev environments
* Network LB - ultra-high performances or static IP address (layer 4)
* Classic LB - low costs, good for test or dev environments (retired by August 15, 2022)
* Gateway LB - transparent network gateway and and distributes traffic such as firewalls, intrusion detection and prevention systems, and deep packet inspection systems. (layer 3)
</b></details>
#### AWS Security
@ -1558,6 +1564,8 @@ Learn more [here](https://aws.amazon.com/inspector)
<details>
<summary>What is AWS Guarduty?</summary><br><b>
AWS definition: "Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your Amazon Web Services accounts, workloads, and data stored in Amazon S3" <br>
Monitor VPC Flow lows, DNS logs, CloudTrail S3 events and CloudTrail Mgmt events.
</b></details>
<details>
@ -6229,6 +6237,7 @@ You could say that CMD is a Docker run-time operation, meaning its not someth
The following command is executed from within the directory where Dockefile resides:
`docker image build -t some_app:latest .`
`podman image build -t some_app:latest .`
</b></details>