AWS Storage Flashcards
The total amount of data you can store within a S3 bucket
5 TB
The size for Multipart uploads for objects
100 MB
To reduce the risk of data loss during data upload to cloud storage
Multipart Upload
If you need to transfer large files to Cloud S3, you can speed up transfers by routing through AWS edge locations within the AWS infrastructure.
Amazon S3 Transfer Acceleration
AWS uses its enterprise encryption standard to encrypt data in S3.
Amazon Server-Side Encryption (SSE-S3)
Encryption is performed using AWS KMS, which includes adding an envelope key and AWS Cloud Trail to track key usage. This setup also provides flexibility if you wish to import your own key.
Amazon KMS-Managed Keys (SSE-KMS)
Customers have the flexibility to use their own encryption standard to encrypt storage data.
Customer-Provided Keys (SSE-C)
You have the option to encrypt data before storing it in S3 using AWS KMS-Managed CMK.
Client-side Encryption
AWS will automatically move infrequently accessed data to a lower-cost storage solution.
S3 Intelligent-Tiering
This storage option could lead to archive bloat, it solves the issues of accidentally deleting objects by saving overwritten
Versioning
AWS allows you to manually set up life cycle rules for objects using automation to transition objects through storage classes.
S3 Intelligent-Tiering
Manages access requirements for objects from the perspective of external accounts and users.
S3 bucket policies
Managed at the account level to control the way individual users and roles access multiple resources
IAM policies
Controls how users and services access objects within your S3 buckets through a policy that dictates access using DNS names.
AWS Access point
A low latency way to route to multiple buckets in different regions through the use of AWS Global Accelerator.
Multi-Region Access point
Provides temporary access to a private S3 object.
Presigned-URL
Provides access to multiple private S3 objects.
Signed Cookies
Storage class encrypted by default, taking up to hours to retrieve data
Amazon S3 Glacier
Flexible file storage can be accessed from instances through your VPC and via a network file mount, which can also be accessed via on-prem and AWS direct connect.
Elastic File System (EFS)
High-performance file system for Linux
FSx for Lustre
A file system that supports SMB protocol and active directory
FSx for Windows File Server
Low latency way to access cached data from on-prem using the SMB protocol or directly through file share mount points (NFS)
AWS Storage Gateway
A simple and fast way to move large amounts of data online between prem and AWS storage, synchronizing through S3, EFS, and FSx
AWS DataSync
With versioning enabled and a configured destination S3 bucket, we can sync the contents of our storage from one region to another region.
S3 Replication
A feature of HTTP that uses headers to allow the browser to display contents in an S3 bucket pulled from another region, although the server is requesting from another region
S3 Cross-Origin Resource Sharing (CORS)