AWS SAP考试笔记

1. AWS X-Ray
   用来记录请求并展示数据。

For any traced request to your application, you can see detailed information not only about the request and response, but also about calls that your application makes to downstream AWS resources, microservices, databases and HTTP web APIs.

2. EBS Volumes
   可以不必stop instance或detached而更改类型，但有容量和种类限制。其中Cold HDD(sc1)至少500GB.
3. Kinesis Video Streams Playback
   1>GetMedia :可用来创建一个Player
   2>HLS:

HTTP Live Streaming (HLS) is an industry-standard HTTP-based media streaming communications protocol. You can use HLS to view an Amazon Kinesis video stream, either for live playback or to view archived video.

3> MPEG-DASH

Dynamic Adaptive Streaming over HTTP (DASH), also known as MPEG-DASH, is an adaptive bitrate streaming protocol that enables high quality streaming of media content over the Internet delivered from conventional HTTP web servers.

4. AWS Cognito Identity pools ad User pools
   User pools只是提供用户管理，不涉及AWS服务的认证，要授权访问S3，RDS等需要identity pools.
5. AWS Organizations
   一个AWS account只能加到一个Organization。只有用户有相应的IAM permissions就能创建邀请。
6. Organizations Moving an account to an OU or between the root and OUs

To move an account to a new location in the OU hierarchy, you must have the following permissions:
1>organizations:DescribeOrganization (console only)
2>organizations:MoveAccount

7. AWS Organizations 可以移动Account，但不能移动OU（organizational units）
8. Using access data to improve SCPs（Service control policies）
   可在Organizations 的management account中查看service last accessed data，以便找到很久不被使用的服务，从而 refine your SCPs to better adhere to the principle of least privilege.
9. OU可以嵌套，下层的继承上层的设置，因此上层的deny比下层的allow优先级高。
10. AWS Organization本身不收费。
11. AWS Application Discovery Service
    Discovery Connector只能用在VMware vCenter. Discovery Agent不运行所有系统。两个都不能用时可以用Migration Hub Import，它是先下载 specially-formatted, comma separated value (CSV) import template，然后填好数据，再上传。
12. AWS Application Discovery Service用来收集 on-premises data centers数据，真正迁移要用Server Migration Service.
13. AWS Database Migration Service

Data at rest is encrypted with AWS Key Management Service (AWS KMS) encryption. During migration, you can use Secure Socket Layers (SSL) to encrypt your in-flight data.

14. AWS Snowball Edge

Snowball Edge Storage Optimized provides 100 TB of capacity and 24 vCPUs and is well suited for local storage and large scale data transfer. Snowball Edge Compute Optimized provides 52 vCPUs and an optional GPU for use cases such as advanced machine learning and full motion video analysis in disconnected environments.

15. Adding the Amazon S3 integration option

To use Amazon RDS for Oracle Integration with Amazon S3, your Amazon RDS Oracle DB instance must be associated with an option group that includes the S3_INTEGRATION option.

16. CMK policy
    如果CMK is unmanageable，例如只允许Tim访问，但又把Tim给删除了。这时要联系AWS Support。
17. Cognito guest
    unauthenticated identities是在Identity Pool中配置，不是在User Pool.
18. Using DNS to Validate Domain Ownership
    Amazon certificate authority (CA)在发放证书前会验证你拥有这个域名。 You can choose either email validation or DNS validation when you request a certificate.
19. API Gateway
    29秒后会超时，50 milliseconds - 29 seconds for all integration types, including Lambda, Lambda proxy, HTTP, HTTP proxy, and AWS integrations.
20. Lambda Function
    可以在CloudWatch Logs查看Lambda分配和利用的内存，从而给Lambda分配适合的内存。
21. AWS Lambda function dead-letter queues
    Lambda function出错了可以把错误事件发到一个SQS或SNS topic以便进一步处理。
22. Lambda Internet and service access for VPC-connected functions

By default, Lambda runs your functions in a secure VPC with access to AWS services and the internet. Lambda owns this VPC, which isn't connected to your account's default VPC. When you connect a function to a VPC in your account, the function can't access the internet unless your VPC provides access.

23. CloudFormation OpsWorks stack
    可以在CloudFormation使用OpsWorks stack，resource type是"AWS::OpsWorks::Stack"
24. OpsWorks
    CodePipeline支持OpsWorks作为deployment target.但在codePipeline中配置时需要先创建好OpsWorks stack/layer/instance.
25. Amazon Aurora
    Amazon Aurora有PostgreSQL-compatible edition。
26. Elastic network interfaces
    ENI可以有自己固定的MAC地址。
27. AWS WorkDocs
    Enterprise-level file sharing solution
28. Changing DHCP options

After you create a set of DHCP options, you can't modify them. If you want your VPC to use a different set of DHCP options, you must create a new set and associate them with your VPC. You can also set up your VPC to use no DHCP options at all.

28. API Gateway
    Updates to a REST API that require redeployment
29. Lambda role
    Lambda role必须要有访问Cloudwatch Logs的权限。
30. VPC multicast
    要想在VPC中使用multicast可以用overlay multicast来建一个IP level multicast.
31. Kinesis Firehose

Kinesis Firehose will use Amazon S3 to store raw data before copying to Amazon Redshift.