Published March 17, 2018 by

AWS Interview Questions

Types of the cloud?
  • Public Cloud
  • Private Cloud
  • Hybrid Cloud
Explain What is AWS?
Amazon Web Services (AWS) is a secure cloud services platform, offering computing power, database storage, content delivery and other functionality to help businesses scale and grow. Explore how millions of customers are currently leveraging AWS cloud products and solutions to build sophisticated applications with increased flexibility, scalability and reliability.

AWS provides which cloud?
AWS basically provide Public Cloud. But it provides a feature to set up Private Cloud and Hybrid Cloud also.

Explain key components of AWS?
  • Route 53
  • Simple E-mail Service
  • IAM
  • S3
  • EC2
  • EBS
  • CloudWatch
Benefits of AWS cloud?
  • Easy to use
  • Flexible
  • Cost-Effective
  • Pay Per Use
  • Reliable
  • Elastic and Scalable
  • Secure
What are service models AWS provide? 
AWS provides a service model
  • IAAS
  • PAAS
  • SAAS
What is VPC? 
Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS.

What is internet gateway?
An Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the Internet. It, therefore, imposes no availability risks or bandwidth constraints on your network traffic.
An Internet gateway serves two purposes: to provide a target in your VPC route tables for Internet-routable traffic and to perform network address translation (NAT) for instances that have been assigned public IPv4 addresses.
An Internet gateway supports IPv4 and IPv6 traffic.

What tools you can use for migration to AWS?
  • Direct Connect
  • SnowBall
What is the storage options available in AWS?
  • EBS
  • S3
  • Glacier
What is S3? Can you store static websites in AWS?
Amazon Simple Storage Service is storage for the Internet. It is designed to make web-scale computing easier for developers. Amazon S3 has a simple web services interface that you can use to store and retrieve any amount of data, at any time, from anywhere on the web.

Yes, we can store a static website in S3.

How much large object you can store in S3?
Amazon S3 objects can range in size from a minimum of 0 bytes to a maximum of 5 TB.

What is RRS in S3? 
Reduced Redundancy Storage (RRS) is an Amazon S3 storage option that enables customers to store noncritical, reproducible data at lower levels of redundancy than Amazon S3’s standard storage. It provides a highly available solution for distributing or sharing content that is durably stored elsewhere, or for storing thumbnails, transcoded media, or other processed data that can be easily reproduced. The RRS option stores object on multiple devices across multiple facilities, providing 400 times the durability of a typical disk drive, but does not replicate objects as many times as standard Amazon S3 storage.

What is IAM? How it works?
AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.

What is AWS KMS system?
AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. Enable and disable master keys. Set and retrieve master key usage policies (access control)

What is hosted zone in Route53
A hosted zone is analogous to a traditional DNS zone file; it represents a collection of records that can be managed together, belonging to a single parent domain name. All resource record sets within a hosted zone must have the hosted zone’s domain name as a suffix.

How you can setup primary, secondary failover in route53?
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-configuring.html

How you can setup weighted policy in route53?
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

Explain the functionality of AMI? how it works?
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIs.html

What is the relation between AMI and Instance?
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instances-and-amis.html

What are backup strategies available in AWS?
  • AMI
  • Snapshots
  • EBS snapshots
How you can take backup of instances?
  • Manual EC2 Instance Backup by an EBS Snapshot
  • Manual Backup Using AMI
  • Automating the EC2 Backup using CLI
  • Automating Instance Backup Using CPM
What is EC2? Can you launch an instance in your dedicated network?
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers.

Yes, we can launch an instance in our dedicated network in aws.

Explain T2 and C4 instances?
https://aws.amazon.com/ec2/instance-types/

How to setup EC2 for ping response?
Allow Inbound ICMP protocol in Security Group.
https://www.serverkaka.com/2018/03/ping-aws-ec2-instance.html

What is Security Group in AWS?
A security group acts as a virtual firewall that controls the traffic for one or more instances. When you launch an instance, you associate one or more security groups with the instance. You add rules to each security group that allows traffic to or from its associated instances.

What is dynamo DB? how it differs from RDS?
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html

What is an elastic cache?
Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store or cache in the cloud. ElastiCache for Redis is fully managed, scalable, and secure - making it an ideal candidate to power high-performance use cases such as Web, Mobile Apps, Gaming, Ad-Tech, and IoT.

Explain CloudFront and it functions?
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html

Explain Regions and availability zones in AWS?
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

What is a direct connect?
AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

Where are the backup snapshots get a store in AWS?
Backup snapshots stored in S3.

What is the support options available in AWS?
AWS provides 4 support options:
  • Basic
  • Developer
  • Business
  • Enterprise
How you will setup VPN for AWS VPC?
https://aws.amazon.com/premiumsupport/knowledge-center/create-connection-vpc/

Difference between Elastic Beanstalk and Cloud Formation?
They're actually pretty different. Elastic Beanstalk is intended to make developers' lives easier. CloudFormation is intended to make systems engineers' lives easier.

Describe the steps to set up a VPC?
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/getting-started-ipv4.html

What is MFA in AWS? how it works?
Multi Factor Authentication (MFA) provides additional security by authenticating the users to enter a unique authentication code from an approved authentication device or SMS text message when they access AWS websites or services. If the MFA code is correct, then only the user can access AWS services or else not.

What is need of AWS CLI?

Can you use read replica to write data in RDS?

If you want to run a database on EC2 instance, what is the most recommended storage solutions?

What are the features you can use to increase EC2 security?