AWWWWSS Flashcards
Offers long term archiving of infrequently accessed data, such as backups that must be retained for years
S3 Glacier
Virtual appliance that seamlessly moves data back and forth between your on-premise servers and AWS S3. Uses industry standard storage protocols, making integration seamless.
AWS Storage Gateway
Hardware Storage appliance designed to physically move massive amounts of data to or from S3, particularly when transfering the data over a network would take days or weeks.
AWS Snowball
Lets you store and retrieve unlimited amounts of data fro anywhere in the world at any time.
Amazon Simple Storage Service (S3)
What can you use S3 for
store logs or retrieve data for processing, use to host static websites
Stores files, “Objects on disks in AWS data centers. Files can be text, images, videos, database files, etc. Each object can be 5 TB
Simple Storage Service (S3)
The filename of an object
Key. Each object key must be unique.
The level of durability and availability depends of an object depends on
It’s storage class
S3 Monthly Charges are based on what
the amount of data you store and the storage class that you use
S3 Storage Classes Are the following. Your choice of storage class depends on how frequently you’ll access them.
Standard——-use if need to access frequently & with minimal latency.
Standard_IA —infrequent access
Intelligent_Tiering —-infrequent access
ONEZONE_IA —-infrequent access
Glacier —–infrequent access
Reduced_Redundancy (RRS) - use if need to access frequently & with minimal latency
***Infrequently Accessed (IA) classes offer millisecond-latency access and high durability but the lowest availaility of all the classes. Designed for objects atleast 128 KB in size.
Default storage class. Highest availability or 99.99%, replicates objects across atleast three availability zones and is the most expensive
Standard
Storage class meant for data that can be easily replaced if needed to be replaced. Lowest durability of all classes. AWS recommends against using this one due to the low durability.
Reduced_Redundancy
Designed for important data that can’t be re-created. Objects are stored in multiple availability zones and have availability of 99.9%
Standard_IA
Objects stored using this storage class are kept in only one availability zone and consequently have the lowest availability of all of the classes (99.5%). Use this class only for data that you can re-create or have replicated.
OneZone-IA
Designed for long term archiving of objects that rarely need to be retrieved. Unlike other storage classes, you can’t retrieve an object in real time. Instead, you must initiate a restore request for the object and wait until the restore is complete, which can take 1 minute to 12 hour.
Glacier
S3 offers 1 storage class designed for both frequently and infrequently accessed objects. This storage class automatically moves objects to the most cost effective storage tier based on past access patterns. In addition to storage pricing, you’re charged a monthly monitoring and automation fee.
Intelligent_Tiering
S3 Offers 3 methods of controlling who may read, write, or delete objects stored in your S3 Bucket. Can use any combination of these, they are not mutually exclusive.
Bucket policies, User policies & bucket and object access control lists (ACLs)
A resource-based policy that you apply to a bucket. You can use this to grant access to all objects in a bucket or just specific objects in a bucket. Also who can read, write or delete objects.
Bucket policy
Use these policies to grant IAM principle access to S3 objects. Can apply these policies only to an IAM principal.
Identity and Access Management (IAM) user policies
Legacy access control methods that have mostly been superseded by bucket and user policies. Can be used to grant other AWS accounts and anonymous users access to your S3 resources. CANNOT be used to grant access to specific IAM principles
Bucket and Object Access Control Lists (ACLs)
S3 doesn’t change the content of an object when you upload it. If you want to add an added layer of security you have the option of encrypting objects before storing them in S3. This is called _____ and has 2 options for encrypting objects at rest _____
Encryption At Rest
- Server-Side Encryption
- Client-Side Encryption
When you create an object, S3 encrypts the object and saves only the encrypted content. Easiest to implement and doesn’t require you to keep track of encryption keys.
Server-Side Encryption