S3 Replication {Ans: - MUST enable Versioning in source and destination buckets - CRR (cross-region replication) - SRR (same-region replication) - Buckets can be in different AWS accounts - Copying is asynchronous - Must give proper IAM permissions to S3 Use cases: - CRR - compliance, lower latency access, replication across accounts - SRR - log aggregation, live replication between production and test accounts}CloudFormation Stack Policies {Ans: A Stack Policy is a JSON document that defines the update actions that are allowed on specific resources during Stack updates.}CloudFormation Mappings {Ans: - Mappings are fixed variables within your CloudFormation Template - They're very handy to differentiate between different environments (dev vs prod), regions (AWS regions), AMI types, etc - All the values are hardcoded within the template - Mappings are great when you know in advance all the values that can be taken and that they can be deduced from variables - Use !FindInMap [MapName, TopLevelKey, SecondLevelKey] to access value in map}EC2 Security Groups {Ans: Control how traffic is allowed into or out of our EC2 Instances. Only contain allowed rules. Regulate (1) access to ports, (2) authorize IP ranges and (3) control inbound and outbound traffic.}S3