LearnDevOpsHands-On Labs
Back to All Interview Tracks
29 QuestionsDevOps & Cloud

AWS Interview Questions

29 AWS questions from real DevOps and cloud interviews, sorted by seniority: IAM, VPC networking, EC2 and scaling, S3 durability, ECS, EKS and Lambda.

IAM Policies & RolesVPC & SubnetsAuto Scaling & ALBsS3 Storage ClassesECS Fargate & EKSCloudWatch & Cost
Showing 29 of 29 questions
•
#1

What is the difference between a Region and an Availability Zone?

Junior

A Region is a geographic location with its own isolated set of infrastructure. An Availability Zone is one or more discrete data centres inside a Region, with independent power, cooling and networking.

RegionAvailability Zone
ScopeA geography, such as eu-west-1A failure domain inside one, such as eu-west-1a
IsolationAlmost total. Most services do not replicate across Regions by defaultIndependent power, cooling and network
Latency betweenTens to hundreds of millisecondsSingle-digit milliseconds
Used forData residency, disaster recoveryHigh availability within a Region

The consequence worth stating: spreading across AZs is how you survive a data centre failure and it is cheap, whereas spreading across Regions is how you survive a Region failure and it is expensive and complicated. Most designs should do the first and very few need the second.

One detail that catches people out: AZ names are mapped per account, so eu-west-1a in your account is not necessarily the same physical zone as in someone else's.

link
#2

What is an IAM role, and why use one instead of access keys?

#3

What is the difference between a security group and a network ACL in AWS?

#4

Why is S3 not a filesystem, and why does that matter?

#5

What is the difference between stopping and terminating an EC2 instance?

#6

What is the difference between an IAM user, a group and a role?

#7

Walk me through a VPC design for a three-tier application.

#8

How does an EC2 instance in a private subnet reach the internet?

#9

When would you use an ALB, an NLB or CloudFront?

#10

When would you choose EBS, instance store, EFS or S3?

#11

How does AWS Auto Scaling actually decide to add an instance?

#12

You get an IAM AccessDenied but the policy looks right. How do you debug it?

#13

What is the difference between an RDS Multi-AZ deployment and a read replica?

#14

How do you make an S3 bucket genuinely private?

#15

The AWS bill doubled. How do you find out why?

#16

What is a Lambda cold start, and when does it actually matter?

#17

Walk me through how IAM evaluates a request.

#18

How would you structure AWS accounts for an organisation, and why?

#19

What breaks in your design when an Availability Zone fails, and when a Region fails?

#20

Where does AWS Lambda stop being cheaper than containers?

#21

How do you handle secrets on AWS?

#22

When would you use Spot instances, and how do you use them safely?

#23

What are AWS service quotas, and why do they cause production incidents?

#24

What is the difference between CloudWatch, CloudTrail and Config?

#25

How would you deploy a container workload on AWS, and how do you choose?

#26

What does the AWS shared responsibility model actually mean?

#27

How does Route 53 health checking and failover work?

#28

How do S3 storage classes and lifecycle policies actually save money?

#29

When would you choose DynamoDB over RDS?