AWS Interview Questions — All Categories
58 questions tagged with AWS as a technology, across every category it appears in
A Lambda function times out for about 2% of invocations, seemingly at random, but works fine when you test it manually. How would you track down the cause?
IntermediateAWSLambda10 min
How would you tune a hedge-request delay so it targets genuine cold-start tail latency without firing on every normal request?
AdvancedAWSLambda7 min
How would you audit all S3 buckets in an account for their current Block Public Access and policy configuration, at scale?
AdvancedAWSS37 min
How would you handle the allowlisting process for intentionally-public S3 buckets so it doesn't become its own source of friction or forgotten debt?
IntermediateAWSS36 min
What's the difference between S3 Block Public Access and a restrictive bucket policy, and why is Block Public Access the stronger tool during an active exposure incident?
IntermediateAWSS36 min
What's the difference between S3's 'block public ACLs' and 'restrict public buckets' as individual Block Public Access settings?
IntermediateAWSS36 min
How would you decide whether an S3 public-write exposure is a supply-chain security incident requiring broader notification, versus a contained issue?
AdvancedAWSS37 min
How would you determine, after an S3 public-write exposure, exactly which objects were added, modified, or deleted if versioning wasn't enabled?
AdvancedAWSS37 min
How would you measure whether an S3 public-exposure alerting system is actually working, short of waiting for a real incident?
IntermediateAWS6 min
What preventive controls would make an S3 public-write exposure incident less damaging in the future — bucket policies, Object Lock, or something else?
IntermediateAWSS36 min
A security scanner just flagged one of your production S3 buckets as publicly readable. Walk through how you'd respond in the first hour and prevent a repeat.
AdvancedAWSS3Security10 min
How would you design alerting so a public S3 exposure is caught within minutes, rather than being discovered by an external scanner or a customer report?
AdvancedAWSS38 min
How would your incident response differ if an exposed S3 bucket allowed public write access, not just public read?
AdvancedAWSS38 min
How would you scale S3 public-exposure alerting for an organization with hundreds of AWS accounts, where per-account Config rules alone don't scale operationally?
ExpertAWS8 min
Why might an organization choose not to enable account-level S3 Block Public Access by default, and what legitimate use case would that block?
IntermediateAWSS36 min
A script needs cloud CLI credentials (like AWS/Azure/gcloud auth) that are normally provided by an interactive session's environment. How do you handle that for a cron-scheduled script?
IntermediateBashAWS7 min
When does autoscaling actually save money compared to a well-chosen fixed capacity, and when can it end up costing more?
IntermediateAWSKubernetes6 min
Your architecture serves a large volume of data out to end users and other services, and data transfer/egress costs have become one of your largest line items. What architectural decisions actually reduce this?
AdvancedAWS8 min
Leadership wants to adopt a multi-cloud strategy specifically to reduce vendor lock-in and negotiate better pricing. What are the real cost trade-offs they might not be accounting for?
AdvancedAWSAzureGCP7 min
How would you decide what mix of Reserved Instances, Spot Instances, and On-Demand capacity to use across a workload with both steady baseline traffic and unpredictable spikes?
IntermediateAWS7 min
An audit finds most of your EC2 instances are running at under 15% average CPU utilization. How would you approach rightsizing them without risking a performance incident?
IntermediateAWS6 min
This month's cloud bill came in 3x higher than usual, with no corresponding increase in traffic or deliberate infrastructure change. How do you actually track down the cause?
IntermediateAWS8 min
How would you design the data layer differently for an active-active multi-region architecture versus an active-passive (failover) one?
ExpertAWS10 min
What's the actual difference between RPO and RTO, and how does each change depending on whether you're designing for multi-AZ or multi-region failover?
IntermediateAWS6 min