Showing posts with label VPC. Show all posts
Showing posts with label VPC. Show all posts

March 19, 2023

Top AWS CodeBuild Interview Questions and Answers


    AWS A cloud-based continuous integration solution called CodeBuild is fully managed. CodeBuild compiles source code, runs tests, and creates deployable packages. You no longer need to set up, oversee, and scale up your own build servers thanks to CodeBuild. Your builds won't have to wait in line since CodeBuild scales up and down automatically and handles several builds at once. Use CodeBuild's prefabricated build environments to get going immediately, or create your own build environments to use your own build tools. You just pay by the minute with CodeBuild.


AWS(Amazon Web Services) Interview Questions and Answers

AWS Cloud Interview Questions and Answers

AWS EventBridge Interview Questions and Answers


Ques. 1): What is a build project?

Answer:

To specify how CodeBuild will conduct a build, create a build project. It explains things like how to obtain the source code, how to use a build environment, what commands to run throughout the build process, and where to put the build output. An operating system, a runtime for a programming language, and the tools needed by CodeBuild to do a build are together referred to as a build environment.


AWS AppSync Interview Questions and Answers

AWS Cloud9 Interview Questions and Answers

AWS Simple Notification Service (SNS) Interview Questions and Answers


Ques. 2): Which Windows build runtimes does CodeBuild offer preconfigured?

Answer:

For .NET Core 2.0, CodeBuild offers a predefined Windows build environment. For Microsoft.NET Framework users, many of whom already have a licence to use the company's proprietary libraries, we would like to offer a preset build environment. Microsoft, however, has so far shown little interest in cooperating with us to fulfil these customer requests. By building a Docker image and submitting it to the Amazon EC2 Container Registry or the Docker Hub registry, you can modify your environment on your own to support additional build targets, such as the.NET Framework. This custom image can then be referred to in your build project.


Amazon Athena Interview Questions and Answers

AWS RedShift Interview Questions and Answers

AWS QuickSight Interview Questions and Answers

 

Ques. 3): How can I trace a failed build from the past?

Answer:

You can check the thorough logs produced throughout the build cycle to troubleshoot a build, or you can utilise CodeBuild Local to test and troubleshoot your builds locally.


AWS Cloud Practitioner Essentials Questions and Answers

AWS EC2 Interview Questions and Answers

AWS SQS Interview Questions and Answers

 

Ques. 4): How can CodeBuild distinguish between builds for different clients?

Answer:

CodeBuild executes your build in separate, brand-new environments free from other users, and it discards each environment after the build is finished. At both the infrastructure and execution levels, CodeBuild offers security and separation.


AWS Lambda Interview Questions and Answers

AWS Cloud Security Interview Questions and Answers

AWS AppFlow Interview Questions and Answers

 

Ques. 5): Why need I to utilise CodeBuild?

Answer:

Use CodeBuild's fully managed experience to avoid having to install, patch, and maintain the build server software yourself. Your build jobs are submitted to CodeBuild, which executes them in temporary compute containers that are freshly constructed with each build and then eliminated after use. You are not required to manage or create server software or hardware. Also, CodeBuild scales itself to accommodate your build volume. Each build you submit is promptly processed, and because it supports running several builds simultaneously, your builds are never held up in a queue.


AWS Simple Storage Service (S3) Interview Questions and Answers

AWS Fargate Interview Questions and Answers

AWS QLDB Interview Questions and Answers

 

Ques. 6): What occurs when a build is executed?

Answer:

A temporary compute container of the class defined in the build project will be created by CodeBuild, which will then load it with the specified runtime environment, download the source code, run the commands configured in the project, upload the generated artefact to an S3 bucket, and then destroy the compute container. CodeBuild will send the build output to the service console and Amazon CloudWatch throughout the build.

 

AWS SageMaker Interview Questions and Answers

AWS DynamoDB Interview Questions and Answers

AWS STEP Functions Interview Questions and Answers

 

Ques. 7): How can I look at previous build outcomes?

Answer:

Your previous build results are accessible via the console, CloudWatch, or API. The outcomes include build duration, output artefact location, success or failure, and log location. You can monitor metrics to comprehend build behaviour over time with the CodeBuild dashboard. The dashboard shows the total number of builds that have been tried, completed, and failed.


AWS Cloudwatch interview Questions and Answers

AWS Elastic Block Store (EBS) Interview Questions and Answers

Amazon Managed Blockchain Questions and Answers

 

Ques. 8): How can I get notified or alerted when something happens in AWS CodeBuild?

Answer:

For occurrences that have an effect on your build projects, you can generate notifications. Amazon SNS notifications will be used for notifications. Each notification will have a link to the resources whose event caused it, along with a status message. There is no additional price for notifications, but you can be charged for other AWS services that notifications uses, including Amazon SNS. Consult the alerts user guide to understand how to get started. Customers can also set up notifications to go to their Slack channels or Amazon Chime chat rooms when utilising the AWS Chatbot.


AWS Amplify Interview Questions and Answers

AWS Secrets Manager Interview Questions and Answers

AWS Message Queue(MQ) Interview Questions and Answers

 

Ques. 9): Can I automate my release process with CodeBuild?

Answer:

Yes. AWS CodePipeline and CodeBuild have been connected. You can add a build action and set up a cloud-based continuous integration and delivery workflow. Through the CodePipeline console, you can learn how to configure and keep an eye on your builds.

 

AWS Django Interview Questions and Answers

AWS Cloud Support Engineer Interview Question and Answers

AWS Serverless Application Model(SAM) Interview Questions and Answers

 

Ques. 10): Can CodeBuild be used with Jenkins?

Answer:

Yes. Jenkins jobs can incorporate CodeBuild using the CodeBuild Plugin for Jenkins. By sending the build jobs to CodeBuild, provisioning and managing the Jenkins worker nodes is no longer necessary.

 

AWS Solution Architect Interview Questions and Answers

AWS Glue Interview Questions and Answers

AWS X-Ray Interview Questions and Answers

 

Ques. 11): Can I manage access to CodeBuild using Amazon Identity and Access Management (IAM)?

Answer:

Yes. With resource-level rights in IAM policies, you can restrict who has access to your build projects.

 

AWS Cloud Interview Questions and Answers

AWS VPC Interview Questions and Answers         

AWS Wavelength Interview Questions and Answers

 

Ques. 12): How should a construction project be configured?

Answer:

Configuring a build project can be done via the console or AWS CLI. You define the source repository's location, the build instructions, the runtime environment, the IAM role that the container will assume, and the compute class needed to execute the build. With a buildspec.yml file, you can optionally define the build commands.

 

AWS DevOps Cloud Interview Questions and Answers

AWS Aurora Interview Questions and Answers

AWS Outposts Interview Questions and Answers

 

Ques. 13): Which coding frameworks is CodeBuild compatible with?

Answer:

For supported versions of Java, Ruby, Python, Go, Node.js, Android,.NET Core, PHP, and Docker, CodeBuild offers preset environments. By building a Docker image and submitting it to the Docker Hub registry or the Amazon EC2 Container Registry, you can also modify your own environment. This custom image can then be referred to in your build project.

 

AWS Database Interview Questions and Answers

AWS ActiveMQ Interview Questions and Answers

AWS Lightsail Questions and Answers

 

Ques. 14): Why are the.NET Core for Windows build environments unable to support build.general1.small?

Answer:

The build does not have enough memory or processing capacity to support the.NET Core for Windows build environment. due to the size of the Windows Docker base container and additional libraries, general1.small compute instance type. There is no free tier for the.NET Core for Windows build environment as a result of this restriction.

 

AWS CloudFormation Interview Questions and Answers

AWS GuardDuty Questions and Answers

AWS Keyspaces Interview Questions and Answers

 

Ques. 15): Does CodeBuild support any particular source repositories?

Answer:

To pull source code for builds, CodeBuild may connect to AWS CodeCommit, S3, GitHub, GitHub Enterprise, and Bitbucket.

 

AWS Control Tower Interview Questions and Answers

AWS Lake Formation Interview Questions and Answers

AWS ElastiCache Interview Questions and Answers

 

Ques. 16): How do I configure my initial build?

Answer:

Create a build project, log in to the Amazon Management Console, and then execute a build. See Getting Started, which contains a step-by-step tutorial, for an introduction to CodeBuild. To test and troubleshoot your build locally, use CodeBuild Local.

 

AWS Data Pipeline Interview Questions and Answers

Amazon CloudSearch Interview Questions and Answers 

AWS ECR Interview Questions and Answers

 

Ques. 17): Can I encrypt the build artifacts stored by CodeBuild?

Answer:

Yes. Your artefacts can be encrypted using a key that is kept in the Amazon Key Management Service (AWS KMS).

 

AWS Transit Gateway Interview Questions and Answers

Amazon Detective Interview Questions and Answers

AWS DocumentDB Interview Questions and Answers

 

More on AWS:

 

Amazon EMR Interview Questions and Answers

Amazon OpenSearch Interview Questions and Answers

AWS EC2 Auto Scaling Interview Questions and Answers

AWS FinSpace Interview Questions and Answers

AWS MSK Interview Questions and Answers

AWS Compute Optimizer Interview Questions and Answers

AWS CodeStar Interview Questions and Answers

AWS CloudShell Interview Questions and Answers

AWS Batch Interview Questions and Answers

AWS App2Container Questions and Answers

AWS App Runner Questions and Answers

AWS Timestream Interview Questions and Answers

AWS PinPoint Questions and Answers

AWS Neptune Interview Questions and Answers

AWS MemoryDB Questions and Answers

AWS CodeGuru Interview Questions and Answers

AWS Braket Interview Questions and Answers

AWS RDS Interview Questions and Answers

AWS WorkSpaces Interview Questions and Answers

AWS SAR Interview Questions and Answers

AWS Corretto Interview Questions and Answers

AWS SES Interview Questions and Answers

AWS Migration Evaluator Interview Questions and Answers

AWS Application Migration Service(MGN) Interview Questions and Answers

AWS Migration Hub Interview Questions and Answers

AWS DataSync Interview Questions and Answers

AWS Device Farm Interview Questions and Answers

Red Hat OpenShift Services on AWS (ROSA) Interview Questions and Answers

Top AWS Copilot Interview Questions and Answers

 


Top AWS Copilot Interview Questions and Answers

 

        Developers may create, publish, and run production-ready containerized applications on Amazon ECS and AWS Fargate using the AWS Copilot CLI. From infrastructure to continuous delivery, Copilot takes best practises and makes them accessible to consumers from the convenience of their command line. Copilot enables you to use service patterns like a load balanced web service to provision infrastructure, deploy to multiple environments like testing or production, and even use an AWS CodePipeline release pipeline for automated deployments, whether you're setting up a single-service application or several micro-services applications. Also, you can scale up or down production services, inspect your service's status or logs, and set up a new environment for automated testing while keeping an eye on the health of your service. To add additional resources and operate the environment outside the CLI, customers can export the environment to AWS CloudFormation.


AWS(Amazon Web Services) Interview Questions and Answers

AWS Cloud Interview Questions and Answers

AWS EventBridge Interview Questions and Answers


Ques. 1): Why need I to utilise AWS Copilot?

Answer:

Customers may concentrate on developing their applications rather than configuring infrastructure thanks to AWS Copilot. Customers can run production-ready containerized services on Amazon ECS and AWS Fargate with only one command thanks to AWS Copilot, which will provision all the infrastructure they require.

For developers utilising containers, AWS Copilot offers a simple way to begin deploying to AWS. To deploy a common design, such as a load balanced web application, you don't need to install and use numerous tools, prepare your deployment pipeline step by step, or create a tonne of AWS resources and connect them together.This single CLI creates the step by step pipeline on your behalf, creates resources, and guides you in deploying containerized applications to the cloud. It is your entry point to building, managing, and running containers on Amazon ECS.


AWS AppSync Interview Questions and Answers

AWS Cloud9 Interview Questions and Answers

AWS Simple Notification Service (SNS) Interview Questions and Answers


Ques. 2): Amazon Copilot: Is it an independent AWS service?

Answer:

No, at the moment AWS Copilot is a CLI that launches applications on Amazon ECS and AWS Fargate. The EC2 launch type will shortly see deployments.


Amazon Athena Interview Questions and Answers

AWS RedShift Interview Questions and Answers

AWS QuickSight Interview Questions and Answers


Ques. 3): How can I help with AWS Copilot?

Answer:

Anybody is welcome to contribute to AWS Copilot by posting a pull request on our public GitHub repository.


AWS Cloud Practitioner Essentials Questions and Answers

AWS EC2 Interview Questions and Answers

AWS SQS Interview Questions and Answers


Ques. 4): What operating systems are supported by Amazon Copilot?

Answer:

By the use of package manager software, AWS Copilot services are accessible on Linux, Windows, and Macintosh.


AWS Lambda Interview Questions and Answers

AWS Cloud Security Interview Questions and Answers

AWS AppFlow Interview Questions and Answers


Ques. 5): How do the other AWS services compare to AWS Copilot?

Answer:

Other resources will be created on the user's behalf by AWS Copilot. These resources also include load balancers, VPCs, and ECR registries in addition to ECS clusters, tasks, and services (for EC2 and Fargate launch types). These resources can be updated if necessary, but by default they are set up according to our subjective best practises.


AWS Simple Storage Service (S3) Interview Questions and Answers

AWS Fargate Interview Questions and Answers

AWS QLDB Interview Questions and Answers


Ques. 6): Is Amazon Copilot free to use, and are there any costs involved?

Answer:

You receive AWS Copilot for free from Amazon thanks to an Open Source licence. As stated in the AWS Copilot repository, it is licenced in accordance with the rules of the Apache 2.0 licence. Its use or dissemination are free on Amazon. Clients only pay for the resources they generate via the CLI, such as Fargate tasks, Amazon VPC, or AWS CodePipeline, which are all charged at the respective resources' rates.


AWS SageMaker Interview Questions and Answers

AWS DynamoDB Interview Questions and Answers

AWS STEP Functions Interview Questions and Answers


Ques. 7): What should I do if I require AWS Copilot assistance?

Answer:

On the AWS Copilot GitHub website, create an issue and connect with Amazon Web Services. You can go there to discover what else is planned for AWS Copilot and to report any bugs, problems, or feature requests.


AWS Cloudwatch interview Questions and Answers

AWS Elastic Block Store (EBS) Interview Questions and Answers

Amazon Managed Blockchain Questions and Answers


Ques. 8): Are my existing ECS and Fargate services available in the CLI?

Answer:

Currently only services created through the CLI are available to manage. AWS are working on the capability to migrate existing AWS resources including clusters, tasks, and VPCs to be usable in the CLI.


AWS Amplify Interview Questions and Answers

AWS Secrets Manager Interview Questions and Answers

AWS Message Queue(MQ) Interview Questions and Answers


More on AWS:


AWS Django Interview Questions and Answers

AWS Cloud Support Engineer Interview Question and Answers

AWS Serverless Application Model(SAM) Interview Questions and Answers

AWS Solution Architect Interview Questions and Answers

AWS Glue Interview Questions and Answers

AWS X-Ray Interview Questions and Answers

AWS Cloud Interview Questions and Answers

AWS VPC Interview Questions and Answers         

AWS Wavelength Interview Questions and Answers

AWS DevOps Cloud Interview Questions and Answers

AWS Aurora Interview Questions and Answers

AWS Outposts Interview Questions and Answers

AWS Database Interview Questions and Answers

AWS ActiveMQ Interview Questions and Answers

AWS Lightsail Questions and Answers

AWS CloudFormation Interview Questions and Answers

AWS GuardDuty Questions and Answers

AWS Keyspaces Interview Questions and Answers

AWS Control Tower Interview Questions and Answers

AWS Lake Formation Interview Questions and Answers

AWS ElastiCache Interview Questions and Answers

AWS Data Pipeline Interview Questions and Answers

Amazon CloudSearch Interview Questions and Answers 

AWS ECR Interview Questions and Answers

AWS Transit Gateway Interview Questions and Answers

Amazon Detective Interview Questions and Answers

AWS DocumentDB Interview Questions and Answers

Amazon EMR Interview Questions and Answers

Amazon OpenSearch Interview Questions and Answers

AWS EC2 Auto Scaling Interview Questions and Answers

AWS FinSpace Interview Questions and Answers

AWS MSK Interview Questions and Answers

AWS Compute Optimizer Interview Questions and Answers

AWS CodeStar Interview Questions and Answers

AWS CloudShell Interview Questions and Answers

AWS Batch Interview Questions and Answers

AWS App2Container Questions and Answers

AWS App Runner Questions and Answers

AWS Timestream Interview Questions and Answers

AWS PinPoint Questions and Answers

AWS Neptune Interview Questions and Answers

AWS MemoryDB Questions and Answers

AWS CodeGuru Interview Questions and Answers

AWS Braket Interview Questions and Answers

AWS RDS Interview Questions and Answers

AWS WorkSpaces Interview Questions and Answers

AWS SAR Interview Questions and Answers

AWS Corretto Interview Questions and Answers

AWS SES Interview Questions and Answers

AWS Migration Evaluator Interview Questions and Answers

AWS Application Migration Service(MGN) Interview Questions and Answers

AWS Migration Hub Interview Questions and Answers

AWS DataSync Interview Questions and Answers

AWS Device Farm Interview Questions and Answers

Red Hat OpenShift Services on AWS (ROSA) Interview Questions and Answers


April 25, 2022

Top 20 AWS VPC Interview Questions and Answers

 

VPC (Virtual Private Cloud) is one of the AWS services that is gaining traction in the tech employment market these days. Knowing the fundamentals of VPC might provide job seekers who want to work for Amazon Web Services an advantage. It is our responsibility to prepare you for this. As a result, we've compiled a list of the finest AWS VPC interview questions that frequently appear in AWS interviews. Before we get into that, let's go over some of the fundamentals of this technology that a newbie should be aware of while taking AWS training.

As most of you are aware, Amazon Web Services (AWS) is an Amazon subsidiary that offers cloud computing services based on user demand. Users must pay a monthly subscription fee. Amazon offers a variety of services that allow you to effortlessly integrate your local resources with the cloud. AWS S3 (Simple Storage Service) is an Amazon Web Services (AWS) service that offers object storage using several web service interfaces such as SOAP, BitTorrent, and others. Knowing how to respond to common AWS interview questions can give you an advantage over other candidates vying for a spot on the AWS team.


AWS(Amazon Web Services) Interview Questions and Answers

AWS Cloud Interview Questions and Answers


Ques. 1): Is there a limit to how many VPCs, VPNs, Subnets, and Gateways I can create?

Answer:

Those things are unquestionably constrained in their production. In a single region, you can only construct five VPCs. If you want to increase the limit, you'll need to increase the internet gateway as well.

VPNs, elastic IP addresses, NAT gateways, and internet gateways all have a maximum limit of five. The maximum number of subnets per VPC is 200.

Furthermore, there is a maximum of 50 customer portals per area.


AWS RedShift Interview Questions and Answers


Ques. 2): What Is It That Sets AWS VPC Apart From Other Private Clouds?

Answer:

The following two qualities distinguish AWS VPC from other cloud computing services:

When you need a private network in the cloud, it eliminates the need to set up and manage physical data centres, hardware, and/or virtual private networks.

AWS VPC is extremely secure against security and privacy threats because to its comprehensive security measures.


AWS Cloud Practitioner Essentials Questions and Answers


Ques. 3): What exactly is the meaning of the phrase "VPC"?

Answer:

VPC stands for Virtual Private Cloud, and it's a private network space within the Amazon cloud where you can deploy AWS resources. It's Amazon EC2's actual networking layer, which we've already talked about. Each virtual network in the cloud that you construct will be logically separated from other virtual networks in the cloud.

Although the layout of a VPC is similar to that of a typical network in a data centre, a VPC will benefit from AWS's scalable architecture. Another significant benefit of VPC is that it is completely customizable. You can create subnets, set up root tables, configure network gateways, setup network access control lists, choose IP address range, and many more in a Virtual Private Cloud.


AWS EC2 Interview Questions and Answers


Ques. 4): What is a Network Address Translation (NAT) Device?

Answer:

In your VPC, a NAT device will allow instances in the private subnet to send outward IPv4 traffic to other AWS services/the internet while preventing inbound traffic from the internet. When traffic is sent to the internet, the IP address is replaced by the address of the NAT device, and when the response is returned to the instances, the device translates the instances' addresses back to private IP addresses. There are two types of NAT devices available on AWS: NAT instance and NAT gateway. NAT instances are configured on Linux AMIs. IPv6 is not supported by NAT.


AWS Lambda Interview Questions and Answers


Ques. 5): What Are My Vpc's Connectivity Options?

Answer:

You can link your VPC to the following resources:

  • The World Wide Web (via an Internet gateway)
  • Using a Hardware VPN connection to access to your business data centre (via the virtual private gateway)
  • The Internet as well as your company's data centre (utilizing both an Internet gateway and a virtual private gateway)
  • AWS's other services (via Internet gateway, NAT, virtual private gateway, or VPC endpoints)
  • Other Virtual Private Clouds (via VPC peering connections)


AWS Cloud Security Interview Questions and Answers


Ques. 6): Is it possible to use Amazon VPC with Amazon Ec2 Reserved Instances?

Answer:

Yes. When you buy Reserved Instances, you can reserve an instance in Amazon VPC. AWS does not distinguish between instances running on Amazon VPC and normal Amazon EC2 when calculating your charge. AWS optimises which instances are charged at the reduced Reserved Instance rate, ensuring you pay the least amount possible. However, your instance reservation will be specific to Amazon VPC; for more information, visit the Reserved Instances page.


AWS Simple Storage Service (S3) Interview Questions and Answers


Ques. 7): Is it possible for Amazon Ec2 instances within a Vpc to communicate with Amazon Ec2 instances outside of the Vpc?

Answer:

Yes, it is correct. If an Internet gateway is set up, Amazon VPC traffic destined for Amazon EC2 instances outside of a VPC passes through the Internet gateway before entering the public AWS network to reach the EC2 instance. The traffic traverses the VPN connection, egresses from your datacenter, and then re-enters the public AWS network if an Internet gateway has not been established, or if the instance is in a subnet configured to route through the virtual private gateway.


AWS Fargate Interview Questions and Answers


Ques. 8): What is ELB (Elastic Load Balancing) and how does it effect Virtual Private Cloud?

Answer:

ELB is a load balancer service for AWS deployments, as the name implies. A load balancer spreads the amount of work that a computer must complete into other computers, allowing it to be completed faster. ELB distributes incoming application traffic to numerous destinations, such as EC2 instances, in the same way.

There are three types of ELBs that assure scalability, availability, and security for fault-tolerant applications. There are three types of load balancers: traditional, network, and application load balancers. VPC can be used in conjunction with network and application load balancers, which can route traffic to targets within VPCs.


AWS SageMaker Interview Questions and Answers


Ques. 9): What Are The Amazon Vpc Components?

Answer:

Amazon VPC comprises a variety of objects that will be familiar to customers with existing networks:

  • A Virtual Private Cloud (VPC): A logically isolated virtual network in the AWS cloud. You define a VPC’s IP address space from a range you select.
  • Subnet: A segment of a VPC’s IP address range where you can place groups of isolated resources.
  • Internet Gateway: The Amazon VPC side of a connection to the public Internet.
  • NAT Gateway: A highly available, managed Network Address Translation (NAT) service for your resources in a private subnet to access the Internet.
  • Hardware VPN Connection: A hardware-based VPN connection between your Amazon VPC and your datacenter, home network, or co-location facility.
  • Virtual Private Gateway: The Amazon VPC side of a VPN connection.
  • Customer Gateway: Your side of a VPN connection.
  • Router: Routers interconnect subnets and direct traffic between Internet gateways, virtual private gateways, NAT gateways, and subnets.
  • Peering Connection: A peering connection enables you to route traffic via private IP addresses between two peered VPCs.
  • VPC Endpoint for S3: Enables Amazon S3 access from within your VPC without using an Internet gateway or NAT, and allows you to control the access using VPC endpoint p
  • LI>Egress-only Internet Gateway: A stateful gateway to provide egress only access for IPv6 traffic from the VPC to the Internet.


AWS DynamoDB Interview Questions and Answers


Ques. 10): In a VPC, what IP address range can be used?

Answer:

For the principal CIDR block, you can use any IPv4 address range, including RFC 1918 or publicly routable IP ranges. Certain restrictions apply to secondary CIDR blocks. Publicly routable IP blocks can only be reached via the Virtual Private Gateway and cannot be reached via the Internet gateway. Customer-owned IP address blocks are not advertised on the Internet by AWS. Call the necessary API or use the AWS Management Console to assign an Amazon-provided IPv6 CIDR block to a VPC.


AWS Cloudwatch interview Questions and Answers


Ques. 11): What Is The Difference Between A Vpc's Security Groups And Network Acls?

Answer:

A VPC's security groups define which communication is permitted to and from an Amazon EC2 instance. Network ACLs assess traffic entering and exiting a network at the subnet level. Allow and Deny rules can be set using network ACLs. Traffic between instances in the same subnet is not filtered by network ACLs. Furthermore, network ACLs filter in a stateless manner, whereas security groups filter in a stateful manner.


AWS Elastic Block Store (EBS) Interview Questions and Answers


Ques. 12): You Really Want To Use My Ec2 Account's Default Vpc? Is that even conceivable?

Answer:

Yes, but we can only enable an existing account for a default VPC if that account has no EC2-Classic resources in that region. All non-VPC deployed Elastic Load Balancers, Amazon RDS, Amazon ElastiCache, and Amazon Redshift resources in that region must also be terminated. All future resource launches, including instances created via Auto Scaling, will be placed in your default VPC after your account has been configured for a default VPC. Contact AWS Support to get your existing account set up with a default VPC. To see if you're eligible for a default VPC, we'll look at your request as well as your existing AWS services and EC2-Classic presence.


AWS Amplify Interview Questions and Answers


Ques. 13): What Is The Best Way To Tell If My Account Is Set To Use A Default Vpc?

Answer:

The Amazon EC2 console shows you which platforms you can use to launch instances in the selected region, as well as whether you have a default VPC there. In the navigation bar, make sure the region you'll be using is selected. Look under "Account Attributes" on the Amazon EC2 console dashboard for "Supported Platforms." If both EC2-Classic and EC2-VPC are present, you can start instances on either platform. You can only launch instances into EC2-VPC if there is only one value, EC2-VPC. If your account is configured to use a default VPC, your default VPC ID will be presented under "Account Attributes". You can also use the EC2 DescribeAccountAttributes API or CLI to describe your supported platforms.


AWS Secrets Manager Interview Questions and Answers


Ques. 14): How to build a custom VPC?

Answer:

In order to build a custom VPC, the following steps must be followed:

  • Create a Virtual Private Cloud
  • Then create Subnets
  • Further create an Internet Gateway
  • Attach this new Gateway to your VPC
  • Create a new Route Table
  • Add the gateway as a route to the new route table
  • Add a subnet to the route table’s subnet association
  • Create a web server for public subnet and a database server for the private subnet
  • Create a new security group for the NAT
  • Add HTTP and HTTPS inbound rules that let in traffic from the private subnets IP
  • Create a NAT for public subnet
  • Create an elastic IP
  • Associate this IP to the NAT
  • Disable destination/source checks for the NAT
  •  Add NAT to the initial VPC route table as a route.


Top 20 AWS Django Interview Questions and Answers


Ques. 15): When it comes to filtering, what's the difference between stateful and stateless?

Answer:

Stateful filtering keeps track of the origin of a request and can send the response back to the original machine automatically. A stateful filter that enables inbound traffic to TCP port 80 on a web server, for example, will allow return traffic on a higher-numbered port (e.g., destination TCP port 63, 912) to pass through the stateful filter between the client and the webserver. The filtering device keeps track of the origin and destination port numbers and IP addresses in a state table. On the filtering device, only one rule is required: Allow inbound traffic on TCP port 80 to the web server.

Stateless filtering, on the other hand, merely looks at the source or destination IP address, as well as the destination port, regardless of whether the traffic is a new request or a response to a request. In the case above, the filtering device would need to implement two rules: one to allow traffic incoming to the web server on TCP port 80, and another to allow traffic outward from the web server (TCP port range 49, 152 through 65, 535).


AWS Cloud Support Engineer Interview Question and Answers


Ques. 16): What is Classiclink, exactly?

Answer:

VPC (Virtual Private Cloud) by Amazon (VPC) ClassicLink allows EC2 instances running on the EC2-Classic platform to communicate with VPC instances through private IP addresses. To use ClassicLink, you must first enable it for a VPC in your account and then link a Security Group from that VPC to an EC2-Classic instance. All of your VPC Security Group's policies will apply to communications between EC2-Classic instances and VPC instances.


AWS Solution Architect Interview Questions and Answers


Ques. 17): What is the best way to link a VPC to my corporate datacenter?

Answer:

By establishing a hardware VPN connection between your existing network and Amazon VPC, you can communicate with Amazon EC2 instances within a VPC as if they were on your local network. On Amazon EC2 instances in a VPC accessible via a hardware VPN connection, AWS does not execute network address translation (NAT).


AWS Glue Interview Questions and Answers


Ques. 18): How do I specify the Availability Zone in which my Amazon EC2 instances will be launched?

Answer:

When you create an Amazon EC2 instance, you must provide the subnet on which the instance will run. The instance will be deployed in the Availability Zone that corresponds to the subnet given.


AWS Aurora Interview Questions and Answers


Ques. 19): Why can't you ping the router that joins my subnets, or my default gateway?

Answer:

Ping (ICMP Echo Request and Echo Reply) requests to your VPC's router are not supported. Pinging between Amazon EC2 instances within a VPC is possible if your operating system's firewalls, VPC security groups, and network ACLs allow it.


AWS DevOps Cloud Interview Questions and Answers


Ques. 20): Is It Possible To Control And Manage Amazon Vpc Using The AWS Management Console?

Answer:

Yes, it is correct. VPCs, subnets, route tables, Internet gateways, and IPSec VPN connections can all be managed through the AWS Management Console. You can also construct a VPC with the help of a simple wizard.

AWS RDS Interview Questions and Answers