diff --git a/README.md b/README.md index 3961f81..a0cdc81 100644 --- a/README.md +++ b/README.md @@ -1396,14 +1396,19 @@ Learn more [here](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-accel
Explain data consistency
+ S3 Data Consistency provides strong read-after-write consistency for PUT and DELETE requests of objects in the S3 bucket in all AWS Regions. S3 always return latest file version.
Can you host dynamic websites on S3? What about static websites?
+ No. S3 support only statis hosts. On a static website, individual webpages include static content. They might also contain client-side scripts. By contrast, a dynamic website relies on server-side processing, including server-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting.
What security measures have you taken in context of S3?
+ * Enable versioning. + * Don't make bucket public. + * Enable encryption if it's disabled.
@@ -1500,8 +1505,9 @@ More on ELB [here](https://aws.amazon.com/elasticloadbalancing) What types of load balancers are supported in EC2 and what are they used for?
* Application LB - layer 7 traffic - * Network LB - ultra-high performances or static IP address - * Classic LB - low costs, good for test or dev environments + * Network LB - ultra-high performances or static IP address (layer 4) + * Classic LB - low costs, good for test or dev environments (retired by August 15, 2022) + * Gateway LB - transparent network gateway and and distributes traffic such as firewalls, intrusion detection and prevention systems, and deep packet inspection systems. (layer 3)
#### AWS Security @@ -1558,6 +1564,8 @@ Learn more [here](https://aws.amazon.com/inspector)
What is AWS Guarduty?
+AWS definition: "Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your Amazon Web Services accounts, workloads, and data stored in Amazon S3"
+Monitor VPC Flow lows, DNS logs, CloudTrail S3 events and CloudTrail Mgmt events.
@@ -6229,6 +6237,7 @@ You could say that CMD is a Docker run-time operation, meaning it’s not someth The following command is executed from within the directory where Dockefile resides: +`docker image build -t some_app:latest .` `podman image build -t some_app:latest .`