AWS -S3 -study group 1 Flashcards
S3 permissions (True or False)
All buckets and objects are private by default
True
The resources owner can grant access to the resource through S3 “resource based policies” or a traditional IAM user policy are called?
Permissions
Grants access to users in other AWS accounts or to the public.
access control lists
S3 (True or False)
Both buckets and objects has ACLs.
True
S3 (True or False)
Object ACLs allow us to share an S3 object with the public via a URL link.
True
a set of rules that automate the migration of an object’s storage class to a different storage class(or deletion), based on specified time intervals.
Lifecycle policies
Connects local data center software appliance to cloud based storage such as Amazon S3.
Storage Gateway
Is a method of allowing a web application located in one domain to access and use resources in another domain.
This allows web applications running javascript or HTML5 to access resources in an S3 bucket without using a proxy server.
CORS
S3 Bucket Name Format
What is displayed last in the https;// bucket name format? The “Region” or the “Bucketname”?
https: //s3-REGION.amazonaws.com/BUCKETNAME
https: //s3-eu-west-1.amazonaws.com/stevesbucket
HTTP response code for successful upload
HTTP 200
Two ways to secure data in S3
Access Control Lists
Bucket Policies
What are you charged for with S3?
storage requests storage management pricing (tags) data transfer pricing (moving data within S3, inter-region) transfer acceleration
S3 Versioning, do you pay for each stored version?
Yes
Can versioning be disabled?
No. Only suspended. Have to delete bucket to fully remove versioning
Does cross-region replication require versioning?
yes
S3 File Size limits
0 bytes to 5 Terabytes
S3 is a universal namespace (True or False)
False - names must be globally unique
When using S3 - These type of updates will
provide…
You get new data or old data.
You Don’t get partial or corrupted data
S3 has atomic updates
Cloudfront edge location
where content is cached
- only attached to the S3 bucket.
- the permissions in the policy are applied to all objects in the bucket.
- The policy specifies what actions are allowed or denied for a particular user of that bucket.
Bucket policies
- Store all the data locally(on-premise) in storage volumes.
- - Gateway will periodically take snapshots of the data as incremental backups and stores them on Amazon S3.
Gateway-Stored Volumes
- Create storage volumes and mount them as iSCSI devices on the on-premise servers.
- -The gateway will store the data written to this volume in Amazon S3 and will cache frequently access data on-premise in the storage device.
Gateway-Cached Volumes
Secure, durable, highly-scalable object storage.
Web service interface to store & retrieve any amount of data from anywhere on the web
S3 Description
media streaming
RTMP distributions
Is S3 Object-Based?
Yes
Are edge locations read-only
no.
can write to them
How long are objects cached on Edge location
depends on the TTL
default is 24 hours
EC2 storage
For file systems, booting
Block-Based storage
Uses NFS
For storing flat files on S3
File Gateway
iSCSI storage. Block based storage
Presents your apps with disk volumes using iSCSI
1GB - 16TB volume size
Entire dataset stored on-site and asynchronously backed up to S3
Data can be stored as EBS snapshots
Volume Gateway - Stored Volumes
What type of storage is this?
30 days after going to IA.
If not using IA, can go immediately after going into S3
Rules for archiving to Glacier storage class
Used for backups
iSCSI presentation to backup programs
Gateway Virtual Tape Library (VTL)
Storage and compute (can run Lambda)
mini version of AWS data center
Snowball Edge
origin of all files the CDN will distribute Route 53 S3 bucket EC2 instance ELB
Cloudfront origin
How to speed uploads to S3
Allows larger files.
use multipart upload
Name of the CDN, consists of collection of edge locations
Cloudfront Distribution
Default amount of buckets per account
100
Do individual objects inherit the bucket’s tags?
no
Are existing files in a bucket replicated automatically?
No.
All subsequent files replicate automatically
Can ACL’s apply to individual objects as well as buckets?
yes
