AWS FSx for Windows
- Amazon FSx for Windows File Server provides fully managed, highly reliable, and scalable file storage that is accessible over the industry-standard Service Message Block (SMB) protocol.
- Built on Windows Server, delivering a wide range of administrative features such as user quotas, end-user file restore, ACLs and Microsoft Active Directory (AD) integration.
- Amazon FSx provides high levels of throughput and IOPS, and consistent sub-millisecond latencies.
- Amazon FSx is accessible from Windows, Linux, and MacOS compute instances and devices.
- Amazon FSx provides concurrent access to the file system to thousands of compute instances and devices
- Amazon FSx can connect the file system to EC2, VMware Cloud on AWS, Amazon WorkSpaces, and Amazon AppStream 2.0 instances.
- Integrated with CloudWatch to monitor storage capacity and file system activity
- Integrated with CloudTrail to monitor all Amazon FSx API calls
- Amazon FSx was designed for use cases that require Windows shared file storage, like CRM, ERP, custom or .NET applications, home directories, data analytics, media and entertainment workflows, web serving and content management, software build environments, and Microsoft SQL Server.
- Amazon FSx file systems is accessible from the on-premises environment using an AWS Direct Connect or AWS VPN connection
- Amazon FSx is accessible from multiple VPCs, AWS accounts, and AWS Regions using VPC Peering connections or AWS Transit Gateway
- Amazon FSx provides consistent sub-millisecond latencies with SSD storage, and single-digit millisecond latencies with HDD storage
- Amazon FSx supports Microsoft’s Distributed File System (DFS) to organize shares into a single folder structure up to hundreds of PB in size
FSx for Windows Security
- Amazon FSx works with Microsoft Active Directory (AD) to integrate with existing Windows environments, which can either be an AWS Managed Microsoft AD or self-managed Microsoft AD
- Amazon FSx provides standard Windows permissions (full support for Windows Access Controls ACLS) for files and folders.
- Amazon FSx for Windows File Server supports encryption at rest for the file system and backups using KMS managed keys
- Amazon FSx encrypts data-in-transit using SMB Kerberos session keys, when accessing the file system from clients that support SMB 3.0
- Amazon FSx supports file-level or folder-level restores to previous versions by supporting Windows shadow copies, which are snapshots of your file system at a point in time
- Amazon FSx supports Windows shadow copies to enable your end-users to easily undo file changes and compare file versions by restoring files to previous versions, and backups to support your backup retention and compliance needs.
FSx for Windows Availability and durability
- Amazon FSx automatically replicates the data within an Availability Zone (AZ) to protect it from component failure,
- Amazon FSx continuously monitors for hardware failures, and automatically replaces infrastructure components in the event of a failure.
- Amazon FSx supports Multi-AZ deployment
- automatically provisions and maintains a standby file server in a different Availability Zone.
- Any changes written to disk in the file system are synchronously replicated across AZs to the standby.
- helps enhance availability during planned system maintenance
- helps protect the data against instance failure and AZ disruption.
- In the event of planned file system maintenance or unplanned service disruption, Amazon FSx automatically fails over to the secondary file server, allowing data accessibility without manual intervention.
- Amazon FSx supports automatic backups of the file systems, which are incremental storing only the changes after the most recent backup
- Amazon FSx stores backups in Amazon S3.
AWS Certification Exam Practice Questions
- Questions are collected from Internet and the answers are marked as per my knowledge and understanding (which might differ with yours).
- AWS services are updated everyday and both the answers and questions might be outdated soon, so research accordingly.
- AWS exam questions are not updated to keep up the pace with AWS updates, so even if the underlying feature has changed the question might not be updated
- Open to further feedback, discussion and correction.
- A data processing facility wants to move a group of Microsoft Windows servers to the AWS Cloud. Theses servers require access to a shared file system that can integrate with the facility’s existing Active Directory (AD) infrastructure for file and folder permissions. The solution needs to provide seamless support for shared files with AWS and on-premises servers and allow the environment to be highly available. The chosen solution should provide added security by supporting encryption at rest and in transit. The solution should also be cost-effective to implement and manage. Which storage solution would meet these requirements?
- An AWS Storage Gateway file gateway joined to the existing AD domain
- An Amazon FSx for Windows File Server file system joined to the existing AD domain
- An Amazon Elastic File System (Amazon EFS) file system joined to an AWS managed AD domain
- An Amazon S3 bucket mounted on Amazon EC2 instances in multiple Availability Zones running Windows Server and joined to an AWS managed AD domain