4 AWS Interview Questions
4 AWS Interview Questions
A list of top frequently asked AWS Interview Questions and answers are given below.
1) What is AWS?
AWS stands for Amazon Web Services. It is a service which is provided by the Amazon that
uses distributed IT infrastructure to provide different IT resources on demand. It provides
different services such as an infrastructure as a service, platform as a service, and software as a
service.
Simple Storage Service: S3 is a service of aws that stores the files. It is object-based
storage, i.e., you can store the images, word files, pdf files, etc. The size of the file that
can be stored in S3 is from 0 Bytes to 5 TB. It is an unlimited storage medium, i.e., you
can store the data as much you want. S3 contains a bucket which stores the files. A
bucket is like a folder that stores the files. It is a universal namespace, i.e., name must be
unique globally. Each bucket must have a unique name to generate the unique DNS
address.
Elastic Compute Cloud: Elastic Compute Cloud is a web service that provides resizable
compute capacity in the cloud. You can scale the compute capacity up and down as per
the computing requirement changes. It changes the economics of computing by allowing
you to pay only for the resources that you actually use.
Elastic Block Store: It provides a persistent block storage volume for use with EC2
instances in aws cloud. EBS volume is automatically replicated within its availability
zone to prevent the component failure. It offers high durability, availability, and low-
latency performance required to run your workloads.
CloudWatch: It is a service which is used to monitor all the AWS resources and
applications that you run in real time. It collects and tracks the metrics that measure your
resources and applications.
Identity Access Management: It is a service of aws used to manage users and their level
of access to the aws management console. It is used to set users, permissions, and roles. It
allows you to grant permission to the different parts of the aws platform.
Simple Email Service: Amazon Simple Email Service is a cloud-based email sending
service that helps digital marketers and application developers to send marketing,
notification, and transactional emails. This service is very reliable and cost-effective for
the businesses of all the sizes that want to keep in touch with the customers.
Route53: It is a highly available and scalable DNS (Domain Name Service) service. It
provides a reliable and cost-effective way for the developers and businesses to route end
users to internet applications by translating domain names into numeric IP addresses.
An Amazon EC2 uses public key cryptography which is used to encrypt and decrypt the login
information. In public key cryptography, the public key is used to encrypt the information while
at the receiver's side, a private key is used to decrypt the information. The combination of a
public key and the private key is known as key-pairs. Key-pairs allows you to access the
instances securely.
4) What is S3?
S3 is a storage service in aws that allows you to store the vast amount of data. To know more
about S3, click on the link given below:
On-Demand instance
o On-Demand pricing is also known as pay-as-you-go. Pay-as-you-go is a pricing
model that allows you to pay only for those resources that you use.
o You need to pay for the compute capacity by per hour or per second that depends
on which instances you run.
o On-Demand instance does not require any upfront payments.
o While using On-Demand instance, you can increase or decrease the compute
capacity based on the requirements of your application.
o On-Demand instances are recommended for those applications which are of short
term and unpredictable workloads.
o Users that want low cost and flexibility on EC2 instances with no upfront
payments.
o On-Demand instances are used for those applications which have been developed
or tested on EC2 for the first time.
Reserved instance
o Reserved instance is the second most important pricing model that reduces the
overall cost of your AWS environment by making an upfront payment for those
services that you know will be used in the future.
o Reserved instances provide a discount of up to 75% as compared to On-Demand
instance.
o Reserved instances are assigned to a specific Availability zone that reserves the
compute capacity for you so that you can use whenever you need.
o Reserved instances are mainly recommended for those applications that have
steady state and require reserve capacity.
o Customers who want to use the EC2 over 1 to 3 term can use the reserved
instance to reduce the overall computing costs.
Spot instance
o Spot instances consist of unused capacity which is available at a highly
discounted rate.
o It offers up to 90% discount as compared to On-Demand instance.
o Spot instances are mainly recommended for those applications which have
flexible start and end times.
o It is useful when applications require computing capacity at a very low price.
o It is useful when applications require additional amount of computing capacity at
an urgent need.
Dedicated Hosts
It is a physical EC2 server which is dedicated for your use. It reduces the overall costs by
providing you a VPC that comprise of a dedicated hardware.
AWS Lambda is a compute service that runs your code without managing servers. Lambda
function runs your code whenever needed. You need to pay only when your code is running. If
you want to know more about the AWS Lambda, then click on the link shown below:
Cross Region Replication is a service available in aws that enables to replicate the data from one
bucket to another bucket which could be in a same or different region. It provides asynchronous
copying of objects, i.e., objects are not copied immediately. If you want to know more about the
Cross Region Replication, then click on the link shown below:
9) What is CloudFront?
CloudFront is a computer delivery network which consists of distributed servers that delivers
web pages and web content to a user based on the geographic locations of a user. If you want to
know more about the CloudFront, then click on the link shown below:
Availability zones: An Availability zone is a data center that can be somewhere in the country
or city. Data center can have multiple servers, switches, firewalls, load balancing. The things
through which you can interact with the cloud reside inside the Data center.
If you want to know more about the Availability zone and region, then click on the link shown
below:
Edge locations are the endpoints in aws used for caching content. If you want to know more
about the edge locations, then click on the link shown below:
12) What is the minimum and maximum size that you can store in S3?
The minimum size of an object that you can store in S3 is 0 bytes and the maximum size of an
object that you can store in S3 is 5 TB.
Elastic Block Store is a service that provides a persistent block storage volume for use with EC2
instances in aws cloud. EBS volume is automatically replicated within its availability zone to
prevent from the component failure. It offers high durability, availability, and low-latency
performance required to run your workloads. . If you want to know more about the EBS
Volumes, then click on the link shown below:
14) What is Auto Scaling?
Auto Scaling is a feature in aws that automatically scales the capacity to maintain steady and
predictable performance. While using auto scaling, you can scale multiple resources across
multiple services in minutes. If you are already using Amazon EC2 Auto- scaling, then you can
combine Amazon EC2 Auto-Scaling with the Auto-Scaling to scale additional resources for
other AWS services.
AMI stands for Amazon Machine Image. It is a virtual image used to create a virtual machine
within an EC2 instance. If you want to know more about the AMI, then click on the link shown
below:
Suppose we consider the website www.javatpoint.com points to the instance which has a public
IP address. When instance is restarted, then AWS takes another public IP address from the pool
and the previous public IP address is no longer valid. Due to this reason, the original link is no
longer available between the website and EC2 instance. To overcome from such situation,
Elastic IP address or static address is used which does not change.
Storage classes are used to assist the concurrent loss of data in one or two facilities. Each object
in S3 is associated with some storage class. Amazon S3 contains some storage classes in which
you can store your objects. You can choose a storage class based on your requirements and these
storage classes offer high durability. To know more about the storage classes and its types, click
on the link given below:
19) How can you secure the access to your S3 bucket?
Sid
A Sid determines what the policy will do. For example, if an action that needs to be
performed is adding a new user to an Access Control List (ACL), then the Sid would be
AddCannedAcl. If the policy is defined to evaluate IP addresses, then the Sid would be
IPAllow.
Effect: An effect defines an action after applying the policy. The action could be either to
allow an action or to deny an action.
Principal
A Principal is a string that determines to whom the policy is applied. If we set the
principal string as '*', then the policy is applied to everyone, but it is also possible that
you can specify individual AWS account.
Action
An Action is what happens when the policy is applied. For example, s3:Getobject is an
action that allows to read object data.
Resource
The Resource is a S3 bucket to which the statement is applied. You cannot enter a simply
bucket name, you need to specify the bucket name in a specific format. For example, the
bucket name is javatpoint-bucket, then the resource would be written as
"arn:aws:s3""javatpoint-bucket/*".
20) What are policies and what are the different types of policies?
Policy is an object which is associated with a resource that defines the permissions. AWS
evaluate these policies when user makes a request. Permissions in the policy determine whether
to allow or to deny an action. Policies are stored in the form of a JSON documents.
AWS supports six types of policies:
Identity-based policies
Resource-based policies
Permissions boundaries
Organizations SCPs
Access Control Lists
Session policies
Identity-based policies
Identity-based policies are the permissions stored in the form of JSON format. This
policy can be attached to an identity user, group of users or role. It determines the actions
that the users can perform, on which resources, and under what conditions.
Identity-based policies are further classified into two categories:
o Managed Policies: Managed Policies are the identity-based policies which can be
attached to multiple users, groups or roles. There are two types of managed
policies:
AWS Managed Policies
AWS Managed Policies are the policies created and managed by AWS. If
you are using the policies first time, then we recommend you to use AWS
Managed Policies.
Custom Managed Policies
Custom Managed Policies are the identity-based policies created by user.
It provides more precise control over the policies than AWS Managed
Policies.
o Inline Policies
Inline Policies are the policies created and managed by user. These policies are
encapsulated directly into a single user, group or a role.
Resource-Based Policies
Resource-based policies are the policies which are attached to the resource such as S3
bucket. Resource-based policies define the actions that can be performed on the resource
and under what condition, these policies can be applied.
Permissions boundaries
Permissions boundaries are the maximum permissions that identity-based policy can
grant to the entity.
Service Control Policies (SCPs)
Service Control Policies are the policies defined in a JSON format that specify the
maximum permissions for an organization. If you enable all the features in an
Organization, then you can apply Service Control Policies to any or all of your AWS
accounts. SCP can limit the permission on entities in member accounts as well as AWS
root user account.
Access Control Lists (ACLs)
ACL defines the control that which principals in another AWS account can access the
resource. ACLs cannot be used to control the access of a principal in a different AWS
account. It is the only policy type which does not have the JSON policy document
format.
Snowball is a petabyte-scale data transport solution that uses secure appliances to transfer large
amounts of data into and out of aws cloud. If you want to know more about the Snowball, click
on the link given below:
Stopping: You can stop an EC2 instance and stopping an instance means shutting down the
instance. Its corresponding EBS volume is still attached to an EC2 instance, so you can restart
the instance as well.
Terminating: You can also terminate the EC2 instance and terminating an instance means you
are removing the instance from your AWS account. When you terminate an instance, then its
corresponding EBS is also removed. Due to this reason, you cannot restart the EC2 instance.
5 elastic IP addresses that you can create per AWS account per region.
Load Balancer is a virtual machine that balances your web application load that could be Http or
Https traffic that you are getting in. It balances a load of multiple servers so that no web server
gets overwhelmed. To know more, click on the link given below:
VPC stands for Virtual Private Cloud. It is an isolated area of the AWS cloud where you can
launch AWS resources in a virtual network that you define. It provides a complete control on
your virtual networking environment such as selection of an IP address, creation of subnets,
configuration of route tables and network gateways. To know more about VPC, click on the link
given below:
28) What is VPC peering connection?
A VPC peering connection is a networking connection that allows you to connect one
VPC with another VPC through a direct network route using private IP addresses.
By using VPC peering connection, instances in different VPC can communicate with
each other as if they were in the same network.
You can peer VPCs in the same account as well as with the different AWS account
NAT stands for Network Address Translation. It is an aws service that enables to connect an
EC2 instance in private subnet to the internet or other AWS services. If you want to know more
about NAT Gateways, click on the link shown below:
Security Groups
It acts as a virtual firewall for associated EC2 instances that control both inbound and
outbound traffic at the instance level.
Network access control lists (NACL)
It acts as a firewall for associated subnets that control both inbound and outbound traffic
at the subnet level
Amazon Aurora
It is a database engine developed in RDS. Aurora database can run only on AWS
infrastructure not like MySQL database which can be installed on any local device. It is a
MySQL compatible relational database engine that combines the speed and availability of
traditional databases with the open source databases
Postgre SQL
o PostgreSQL is an open source relational database for many developers and
startups.
o It is easy to set up, operate, and can also scale PostgreSQL deployments in the
cloud.
o You can also scale PostgreSQL deployments in minutes with cost-efficient.
o PostgreSQL database manages time-consuming administrative tasks such as
PostgreSQL software installation, storage management, and backups for disaster
recovery.
MySQL
o It is an open source relational database.
o It is easy to set up, operate, and can also scale MySQL deployments in the cloud.
o By using Amazon RDS, you can deploy scalable MySQL servers in minutes with
cost-efficient.
MariaDB
o It is an open source relational database created by the developers of MySQL.
o It is easy to set up, operate, and can also scale MariaDB server deployments in the
cloud.
o By using Amazon RDS, you can deploy scalable MariaDB servers in minutes
with cost-efficient.
o It frees you from managing administrative tasks such as backups, software
patching, monitoring, scaling and replication.
Oracle
o It is a relational database developed by Oracle.
o It is easy to set up, operate, and can also scale Oracle database deployments in the
cloud.
o You can deploy multiple editions of Oracle in minutes with cost-efficient.
o It frees you from managing administrative tasks such as backups, software
patching, monitoring, scaling and replication.
o You can run Oracle under two different licensing models: "License Included" and
"Bring Your Own License (BYOL)". In License Included service model, you do
need have to purchase the Oracle license separately as it is already licensed by
AWS. In this model, pricing starts at $0.04 per hour. If you already have
purchased the Oracle license, then you can use the BYOL model to run Oracle
databases in Amazon RDS with pricing starts at $0.025 per hour.
SQL Server
o SQL Server is a relational database developed by Microsoft.
o It is easy to set up, operate, and can also scale SQL Server deployments in the
cloud.
o You can deploy multiple editions of SQL Server in minutes with cost-efficient.
o It frees you from managing administrative tasks such as backups, software
patching, monitoring, scaling and replication.
Redshift is a fast, powerful, scalable and fully managed data warehouse service in the
cloud.
It provides ten times faster performance than other data warehouse by using machine
learning, massively parallel query execution, and columnar storage on high-performance
disk.
You can run petabytes of data in Redshift datawarehouse and exabytes of data in your
data lake built on Amazon S3.
SNS stands for Simple Notification Service. It is a web service that provides highly scalable,
cost-effective, and flexible capability to publish messages from an application and sends them to
other applications. It is a way of sending messages. If you want to know more about SNS, click
on the link given below:
36) Differences between Security group and Network access control list?
37) What are the two types of access that you can provide when you are creating
users?
Console Access
If the user wants to use the Console Access, a user needs to create a password to login in
an AWS account.
Programmatic access
If you use the Programmatic access, an IAM user need to make an API calls. An API call
can be made by using the AWS CLI. To use the AWS CLI, you need to create an access
key ID and secret access key.
When large section of IP address is divided into smaller units is known as subnet.
A Virtual Private Cloud (VPC) is a virtual network provided to your AWS account. When you
create a virtual cloud, you need to specify the IPv4 addresses which is in the form of CIDR
block. After creating a VPC, you need to create the subnets in each availability zone. Each
subnet has a unique ID. When launching instances in each availability zone, it will protect your
applications from the failure of a single location.
S3
EC2
No, it's not possible to establish a peering connection to a VPC in a different region. It's only
possible to establish a peering connection to a VPC in the same region.
An Amazon Elasticache is a web service allows you to easily deploy, operate, and scale an in-
memory cache in the cloud. To know more about the Amazon Elasticache, click on the link
given below:
An Amazon EMR stands for Amazon Elastic MapReduce. It is a web service used to process the
large amounts of data in a cost-effective manner. The central component of an Amazon EMR is a
cluster. Each cluster is a collection of EC2 instances and an instance in a cluster is known as
node. Each node has a specified role attached to it known as a node type, and an Amazon EMR
installs the software components on node type.
You cannot connect the EBS volume to multiple instances. But, you can connect multiple EBS
volumes to a single instance.
Lifecycle hooks perform custom actions by pausing instances when Autoscaling group launches
or terminates an instance. When instance is paused, an instance moves in a wait state. By default,
an instance remains in a wait state for 1 hour. For example, when you launch a new instance,
lifecycle hooks pauses an instance. When you pause an instance, you can install a software on it
or make sure that an instance is completely ready to receive the traffic.
An Amazon Kinesis Firehose is a web service used to deliver real-time streaming data to
destinations such as Amazon Simple Storage Service, Amazon Redshift, etc. To know more
about Amazon Kinesis Firehose, click on the link given below:
EBS stands for Elastic Block Store. It is a virtual disk in a cloud that creates the storage volume
and attach it to the EC2 instances. It can run the databases as well as can store the files. All the
files that it store can be mounted as a file system which can be accessed directly. To know more
about EBS, click on the link given below:
Vertical scaling means scaling the compute power such as CPU, RAM to your existing machine
while horizontal scaling means adding more machines to your server or database. Horizontal
scaling means increasing the number of nodes, and distributing the tasks among different nodes.