AWS Global vs Regional vs AZ Resources
AWS Global, Regional, AZ Resource Availability
AWS offers many services. These services can be accessed only within the Availability Zone, or they can be accessed globally. A majority of AWS managed services are local based (except for IAM and Route53, CloudFront, WAF, etc).
Global vs. Regional vs. AZ Resource locationsIAMUsers Groups, Roles Accounts – GlobalSame account, users, groups, and roles can all be used in all regions
Key Pairs – Global and RegionalAmazon EC2 key pairs are specific to each region
You can upload an RSA key pair that can be used in any region.
Virtual Private CloudVPC – RegionalVPC are created within one region
Subnet – Availability zoneSubnet can only span a single availability zone
Security groups – RegionalA security team is tied to a specific region and can only be assigned to instances within that region.
VPC Endpoints-Regional
VPC peering – RegionalVPC peering can be done across VPC accounts of different AWS accounts, but only within the same area. They cannot be used in different regions.
VPC peering can now be done in inter-regional locations
Regional Elastic IP Address – RegionalElastic IP addresses can only be assigned to instances in the region
EC2Resource Identifiers – RegionalEach resource identifier (such as an AMI ID or instance ID, EBS volumeID, or EBS snapshotID) is tied to its region. It can only be used in the region where it was created.
Instances – Area of Availability ZoneAn instance is tied with the area in which it was launched. It is important to note that the instance ID is tied with the region.
EBS Volumes – Availability ZoneAmazon EBS volume can only be attached to instances within the same Availability zone.
EBS Snapshot – RegionalAn EBS Snapshot is tied to its region. It can only be used in the same region to create volumes. If needed, it must be copied from one region to another
RegionalAMI provides templates for launching EC2 instances through AMIs
AMI is tied with the Region where its files are stored with Amazon S3. AMI can be copied to other regions for use in different regions.
Auto Scaling – RegionalAuto Scaling can span multiple Availability Zones within a single region, but not across regions
RegionalElastic Load Balancing – Elastic Load Balancing distributes traffic across multiple instances in multiple availability zones in the same region
Cluster Placement Groups – Availability ZoneCluster placement groups can span across Instances within the exact same Availability Zones
S3 – Global, but Data is RegionalS3 buckets can be created within the region.
Objects are stored in Availability Zones to ensure high durability. However, they are not replicated cross-region unless explicitly requested.
Route53 – GlobalRoute53 services can be found at AWS edge locations. They are available worldwide
DynamoDb RegionalAll data objects are stored in the same region and replicated across multiple availability zones within the same area
Cross-region replication allows data objects to be replicated explicitly across regions.
WAF – GlobalWeb Application Firewall (WAF), protects web applications against common web exploits. These services are available at AWS edge locations and can be accessed globally
CloudFront – GlobalCloudFront is the global content distribution network (CDN) that is offered at AWS edge locations
Storage Gateway – RegionalAWS Storage Gateway stores volume and snapshot data in the AWS region where the gateway is activated
AWS Config – Regional
AWS GuardDuty Regional AWS Certification Exam Practice Question
Questions are collected via the Internet. The answers are marked according to my knowledge and understanding (which may differ from yours).
AWS services are constantly updated and the answers and questions may be out of date soon. So make sure to research accordingly.
AWS exam questions cannot be updated to k