Amazon S3 Flashcards
How many bytes can files be in S3?
0 bytes to 5 TB
You create your buckets within a _____
You create your buckets within a Region
There’s no ____ for objects within a bucket
There’s no ____ for objects within a bucket
hierarchy
S3 delivers strong ___ ___ ____ consistency
read-after-write consistency
You can use an object key name (prefix) to _____ folders
You can use an object key name (prefix) to mimic folders
What is the max default bucket amount per account?
100 buckets per account by default
What file type does S3 support?
any file type
Each object is ____ and _______ by a unique key
Each object is ____ and _______ by a unique key
stored, retrieved
Objects are stored in the region they are setup in unless you setup __________
setup replication
Bucket Policies are _________-based policies
Bucket Policies are resource-based policies
Bucket policies can only be attached to Amazon __ _______
Bucket policies can only be attached to Amazon S3 buckets
AWS generally recommends using ___ _____ policies or ___ policies rather than ACLS
AWS generally recommends using S3 bucket policies or IAM policies rather than ACLS
;
Use IAM policies if you have numerous S3 buckets that require ________ permissions
Use IAM policies if you have numerous S3 buckets that require different permissions
Bucket policies allow you to grant ____-______ access to your S3 environment, without using IAM _____
Bucket policies allow you to grant cross-account access to your S3 environment, without using IAM roles
Versioning-enabled buckets enable you to recover objects from accidental ________ or ________
Versioning-enabled buckets enable you to recover objects from accidental deletion or overwrite
Transition actions are when objects transition to another _______ _____
Transition actions are when objects transition to another storage class
Expiration actions are when an object ______ or gets ______ by S3
Expiration actions are when an object expires or gets deleted by S3
You can transition any storage class to which two storage classes?
S3 Glacier or S3 Glacier Deep Archive
You can’t transition any storage class to
S3 standard
You can’t transition the S3 One Zone-IA storage class to which two storage classes?
Standard-IA or S3 Intelligent-Tiering storage classes
MFA Delete Adds MFA requirement for bucket owners to perform the following actions: (2)
- Changing the __________ state of a bucket
- Permanently _______ an object version
Changing the versioning state of a bucket
- Permanently deleting an object version
The second factor of MFA Delete is a _____ _________ by a hardware device or ________ program
The second factor of MFA Delete is a token generated by a hardware device or software program
Versioning can be enabled by: (3)
- _____ owners
- AWS account that ________ the bucket
- _________ IAM users
- Bucket owners
- AWS account that created the bucket
- Authorized IAM users
MFA delete can be enabled by the ______ owner or ____ account
MFA delete can be enabled by the Bucket owner or root account
MFA-protected API access is used to enforce the ___________ factor (MFA code) when accessing AWS ________
MFA-protected API access is used to enforce the authentication factor (MFA code) when accessing AWS resources
ServerSideEncryption SSE-S3 works by using ___ existing encryption key for ________
ServerSideEncryption SSE-S3 works by using S3’s existing encryption key for AES-256
With ServerSideEncryption Client SSE-C you upload your own _______ encryption key which S3 uses when it ______ objects
With ServerSideEncryption Client SSE-C you upload your own AES-256 encryption key which S3 uses when it writes objects
ServerSideEncryption SSE-KMS uses a key generated and managed by ___ ___
ServerSideEncryption SSE-KMS uses a key generated and managed by AWS KMS