Infosys AWS Devops Engineer Interview Questions, Process, and Tips

Grant access to S3 bucket securely by using IAM policies and roles.

• Create an IAM policy with specific permissions for the S3 bucket

• Attach the IAM policy to an IAM role

• Assign the IAM role to the user or group that needs access

• Use bucket policies for more granular control if needed

IAM role is used to grant permissions to entities, while IAM group is used to group users with similar permissions.

• IAM role is used to delegate permissions to entities like EC2 instances or Lambda functions

• IAM group is used to group users with similar permissions for easier management

• IAM role can be assumed by trusted entities, while IAM group is used for managing user permissions

Kubernetes networking is the way in which different pods and services communicate with each other within a Kubernetes cluster.

• Kubernetes networking allows pods to communicate with each other across nodes in the cluster.

• It uses a flat network model where each pod gets its own IP address.

• Kubernetes networking can be implemented using various plugins like Calico, Flannel, or Cilium.

• Network policies can be defined to contr...read more

Pods communicate with other pods through network communication within the same Kubernetes cluster.

• Pods can communicate with each other using services, which provide a stable endpoint for communication.

• Pods can use DNS names to communicate with other pods within the same cluster.

• Pods can also communicate directly using IP addresses within the cluster network.

• Communication between pods can be secured using network polici...read more

Ingress controller is a Kubernetes resource that manages external access to services within a cluster.

• Ingress controller acts as a traffic manager, routing incoming traffic to the appropriate services based on rules defined in the Ingress resource.

• It allows for the configuration of HTTP and HTTPS routing, load balancing, SSL termination, and more.

• Popular Ingress controllers include Nginx Ingress Controller, Traefik, an...read more

Ingress controls the external access to services in a cluster, while service defines a set of pods and how they can be accessed.

• Ingress manages external access to services in a cluster

• Service defines a set of pods and how they can be accessed

• Ingress can provide load balancing, SSL termination, and routing based on hostnames or paths

• Service can be of type ClusterIP, NodePort, LoadBalancer, or ExternalName