What is the difference between an AWS Region and an Availability Zone?
A Region is a geographic area. An Availability Zone is an isolated location within a Region that can help separate workloads for resilience.
What is the difference between a public and private subnet in AWS?
A public subnet has a route to an internet gateway. A private subnet lacks that direct route. Individual resources also need appropriate addressing and permissions to communicate.
Why use IAM least privilege?
Grant only the actions and resources a workload needs. This limits the impact of mistakes or compromised credentials.
What is Amazon CloudWatch used for?
CloudWatch collects and presents operational data such as metrics and logs. An alarm can notify a team when a metric crosses a threshold.
What is a Kubernetes Pod?
A Pod is the smallest deployable unit in Kubernetes. It contains one or more containers that share a network identity and can share storage.
What does a Kubernetes Deployment manage?
It manages the desired set of replicated Pods and helps roll out changes to them.
What is infrastructure as code?
It describes infrastructure in files that can be versioned, reviewed and applied consistently.
Why pin a container image version?
Pinning a version or digest makes builds and deployments easier to reproduce. Update the pin deliberately when you need security fixes or features.
What should I check when a container exits immediately?
Read its logs and exit code. Check whether the main command failed or simply finished its work.
What should I document after a cloud lab?
Record the architecture, commands, verification steps and cleanup. Confirm that temporary resources have been removed.
See the beginner Q&A guide for related topics.
