Amazon S3 Flashcards
S3
Advertised as ”infinitely scaling” storage
What do Buckets (directories) do?
stores objects (files)
What must you use when uploading more than 5GB?
Must use “multi-part upload”
What is an Amazon S3 User-Based security?
IAM Policies
What are three types of Amazon S3 Resource-Based security?
- Bucket Policies
- Object Access Control List
- Bucket Access Control List
What does an IAM principal need to access an S3 object?
The user IAM permissions ALLOW it
OR
the resource policy ALLOWS it
AND
there’s no explicit DENY
What is necessary for object encryption in Amazon S3?
Encryption keys
What allows you to:
1. Grant public access to the bucket
2. Force objects to be encrypted at upload
3. Grant access to another account (Cross account)
S3 bucket policies
S3 can host ………….. and have them……….
static websites, accessible on the Internet
What does Versioning do?
Allows safe updating of website
CRR
Cross-Region Replication
SRR
Same-Region Replication
Permanent deletion of a specific version does noes not replicate. True or False.
True
Durability is the…… for all ………
same, storage classes
Availability varies depending on storage class. True or false?
True
Which storage features:
- 99.99% Availability
- Used for frequently accessed data
- Low latency and high throughput
- Sustain 2 concurrent facility failures
General Purpose
- Low-cost object storage meant for archiving / backup
- Pricing: price for storage + object retrieval cost
Amazon S3 Glacier Storage Classes
- Millisecond retrieval, great for data accessed once a quarter
- Minimum storage duration of 90 days
Amazon S3 Glacier Instant Retrieval