Amazon S3 Flashcards
S3
Advertised as ”infinitely scaling” storage
What do Buckets (directories) do?
stores objects (files)
What must you use when uploading more than 5GB?
Must use “multi-part upload”
What is an Amazon S3 User-Based security?
IAM Policies
What are three types of Amazon S3 Resource-Based security?
- Bucket Policies
- Object Access Control List
- Bucket Access Control List
What does an IAM principal need to access an S3 object?
The user IAM permissions ALLOW it
OR
the resource policy ALLOWS it
AND
there’s no explicit DENY
What is necessary for object encryption in Amazon S3?
Encryption keys
What allows you to:
1. Grant public access to the bucket
2. Force objects to be encrypted at upload
3. Grant access to another account (Cross account)
S3 bucket policies
S3 can host ………….. and have them……….
static websites, accessible on the Internet
What does Versioning do?
Allows safe updating of website
CRR
Cross-Region Replication
SRR
Same-Region Replication
Permanent deletion of a specific version does noes not replicate. True or False.
True
Durability is the…… for all ………
same, storage classes
Availability varies depending on storage class. True or false?
True
Which storage features:
- 99.99% Availability
- Used for frequently accessed data
- Low latency and high throughput
- Sustain 2 concurrent facility failures
General Purpose
- Low-cost object storage meant for archiving / backup
- Pricing: price for storage + object retrieval cost
Amazon S3 Glacier Storage Classes
- Millisecond retrieval, great for data accessed once a quarter
- Minimum storage duration of 90 days
Amazon S3 Glacier Instant Retrieval
- Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours) – free
- Minimum storage duration of 90 days
Amazon S3 Glacier Flexible Retrieval (formerly Amazon S3 Glacier)
- Standard (12 hours), Bulk (48 hours)
- Minimum storage duration of 180 days
Amazon S3 Glacier Deep Archive – for long term storage
- For data that is less frequently accessed, but requires rapid access when needed
- Lower cost than S3 Standard
S3 Storage Classes – Infrequent Access
- 99.9% Availability
- Use cases: Disaster Recovery, backups
Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
- High durability (99.999999999%) in a single AZ; data lost when AZ is destroyed
- 99.5% Availability
- Use Cases: Storing secondary backup copies of on-premises data, or data you can recreate
Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
What has these use cases?:
- Backup and storage
- Disaster Recovery
- Archive
- Hybrid Cloud storage
- Application hosting
- Media hosting
- Data lakes & big data analytics
- Software delivery
- Static website
Amazon s3
Where are buckets defined?
Defined at the region level
S3 looks like a ….. but buckets are created in a…..
global service, region
What results in an “Access Denied” message due to the bucket’s security settings.
Attempting to open the file using a public URL.
What doesn’t carry authentication?
A bucket’s public URL
Why does using the AWS console not results in an “Access Denied” message due to the bucket’s security settings
The AWS console uses pre-signed URLs that include a signature verifying the user’s permissions.
What does an IAM policy do?
Allows API calls for a specific user from IAM
What are Bucket Policies?
Bucket wide rules from the S3 console.
What type of Resource based security allows cross account access?
Bucket Policies
Which kind of Bucket Policy allows finer grain control & can be disabled?
Object Access Control List (ACL)
Which Bucket Policy is less common and can be disabled?
Bucket Access Control List (ACL)
Replication use cases:
1. compliance
2. lower latency access
3. replication across accounts
CRR (Cross-region Replication)
Replication use cases:
1. log aggregation
2. live replication between production
3. test accounts
SRR (Same-Region Replication)
Both CRR & SRR must enable…….. in……. and…….. buckets
Versioning, source, destination
Both CRR & SRR buckets can be in…… AWS accounts
different
Is CRR & SRR asynchronous?
Yes
Both CRR & SRR must give proper ……… to S3
IAM permissions
Why does permanent deletion of a specific version not replicate?
This ensures the file remains in the replica bucket.
What represents how many times an object is lost?
Durability
…….. durability of objects across multiple AZ
High
What measures how readily available a service is?
Availability
S3 Standard General Purpose storage has 99.99% Availability. True or False.
True
Use Cases for which storage:
-Big Data analytics
-mobile & gaming applications
-content distribution…
General Purpose
