S3 Flashcards

1
Q

A _______ is a container for objects.

A

bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

An _______ is a file and any metadata that describes that file

A

object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Every object in Amazon S3 is stored in a _____

A

bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Bucket name must be unique just within your account. T/F

A

False. Bucket name must be uniqueglobally/ within a partition - us, china, etc.,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Character length of bucket.

A

3-63 characters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

bucket name characters conditions.

A

Only lowercase, numbers, dots and hyphens; no upper case.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Bucket name must begin with ?

A

lower case alphabet or a number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Bucket name must end with ?

A

lower case alphabet or a number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Use IP address format for Website buckets. T/F

A

No. Bucket names must not be of IP address format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Buckets used with ____________ can’t have dots in their names.

A

S3 Transfer Acceleration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Best practice is to avoid using dots except for

A

Buckets used only for static web hosting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In terms of implementation, buckets and objects are ___________ and we have unique ids called _________

A

AWS resources and ARN (Amazon Resource Names)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

The AWS account that creates a resource owns that resource. T/F

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If you create an IAM user in your AWS account and grant the user permission to create a bucket, the user can create a bucket. Now, who owns the bucket?

A

The user does not own the bucket; the AWS account that the user belongs to owns the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If you create an IAM user in your AWS account and grant the user permission to create a bucket, the user can create a bucket. Can the user perform other activities on the bucket?

A

No. The user needs additional permission from the resource owner to perform any other bucket operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Public access is granted to buckets and objects through ____________ and ___________ or both.

A

access control lists (ACLs), and bucket policies,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

_____________ settings can override ACLs and bucket policies

A

Amazon S3 Block Public Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

You can apply Block Public Access settings to _________buckets in your account.

A

individual or all buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

You can configure object-level permissions by configuring _________ specific to that object.

A

An access control list (ACL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

cors

A

cross-origin resource sharing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does cors enable?

A

You can configure your bucket to allow cross-origin requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

s3 lifecycle

A

You can define lifecycle rules for objects in your bucket that have a well-defined lifecycle.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Server access logging S3

A

Server access logging provides detailed records for the requests that are made to a bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the default server access logs collection status?

A

By default, S3 doesn’t collect server access logs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Where does S3 delivers the server access logs for a target bucket ?

A

Into another bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Can target and source bucket reside in different regions and what must be the default retention period of a source bucket ?

A

The target and source bucket must reside in the same region. The source bucket must not have any default retention period.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is retention period?

A

A retention period specifies a fixed period of time during which an object remains locked.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What happens when a object is locked?

A

When your object is locked, your object is WORM protected and can’t be over-written or deleted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is WORM in object locking?

A

Write Once Read Many

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How many days can you apply for object locking?

A

You can apply for object locking in days or years with minimum value of 1 day to no max limit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Example situation of using object locking.

A

To keep the golden copy of the business records.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Charge for using object locking.

A

No charge for using object locking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are WORM Storage capabilities?

A

S3 Glacier Vault Lock and S3 Object lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is the unique feature of S3 Object lock?

A

Amazon S3 Object lock is the only cloud object storage WORM capability in the market today that gives you the flexibility to apply retention settings on individual objects in addition to default retention settings for all objects within an S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Amazon S3 object lock provides object retention by

A
  1. Retention period

2. A legal hold

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is a legal hold ?

A

A legal hold provides the same protection as retention period, but it has no expiration date. A legal hold remains in place until you explicitly remove it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Can a object version have a combination of both retention period and legal hold?

A

Yes. Ex: 1-Year retention period and legal hold.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What retention modes are available with Amazon S3 lock?

A
  1. Governance

2. Compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What does Governance mode entail?

A

Governance mode protects objects from being deleted by most of the users during a pre-defined retention period and at the same time some users with special permission will be able to alter the retention settings or delete the objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Users with _______ permission can override or remove governance-mode retention settings

A

s3:BypassGovernanceRetention

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Most customers use Governance mode over Compliance mode since

A

the customers don’t have compliant storage requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What does compliant mode entail ?

A

With compliance mode, no user, including the root user in AWS account will be able to delete the objects during the pre-defined retention period.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is the only way to delete the object under Compliance mode within the retention period?

A

To delete the AWS account it is associated to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

When to actually use legal hold

A

Use legal hold when you aren’t sure how long you would like the objects to stay immutable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Use compliance mode if you have______ data

A

compliant.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is the retention period of legal hold.

A

The retention period of legal hold is infinite. Only users with special permissions are able to lift the hold.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

How does S3 object lock apply for Cross-region replication?

A

In addition to locking objects, you can configure your S3 buckets to enable automatic, asynchronous copying of locked data and associated metadata to a bucket in a different aws region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

S3 objects can only be locked if the respective bucket is configured to use object lock.

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Amazon S3 Object lock only works for buckets that have _________ enabled.

A

Versioning.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Can you turn on AWS S3 Object support for old buckets? If yes, how do you do that?

A

You can only enable S3 Object lock only to new bucket. To enable object locking for old buckets, contact AWS Support.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Can anyone put objects with object lock into a bucket which is configured with object lock?

A

No. Only users with special permissions can add immutable objects to the respective bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

When a bucket is configured with Object lock and retention mode, does it apply to all the objects that are placed in the bucket ?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Can I change retention mode and period for a specific object ?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Object Lock settings can’t be specified on _____ using the S3 console

A

upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

When you create a bucket with Object Lock enabled, Amazon S3 automatically enables ______ for the bucket.

A

versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

If you create a bucket with Object Lock enabled, you can’t _____________

A

disable Object Lock or suspend versioning for the bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

If you want to automatically protect object versions that are placed in the bucket, you can configure a ______.

A

default retention period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

If you want to enforce the bucket default retention mode and period for all new object versions placed in a bucket, then ________

A

set the bucket defaults and deny users permission to configure object retention settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Bucket default settings require both a ________ and _______

A

mode and a period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

After the object is created, its retention period is ________ from the bucket’s default retention period.

A

independent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

f you configure a default retention period on a bucket, requests to upload objects in such a bucket must include the ___________

A

Content-MD5 header.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

By enabling server access logging, S3 console will automatically update your _________ to include access to the ________

A

bucket access control list (ACL), S3 log delivery group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Server access logs don’t record information about ____________

A

wrong-region redirect errors for Regions that launched after March 20, 2019.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

How are S3 logs delivered?

A

Amazon S3 periodically collects access records, consolidates the records in log files, and then uploads the log files to your target bucket as log objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Which account does S3 use to write access logs?

A

Log Delivery Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Server access log records are delivered on a _________

A

best effort basis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Most log records are delivered within _______

A

a few hours of the time that they are recorded, but they can be delivered more frequently.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

The completeness and timeliness of server logging is guaranteed. T/F

A

False. Possibility of missing logs, rare but possible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

If you change the target bucket for logging from bucket A to bucket B, logs for the next hour might continue to be delivered to

A

Some logs for the next hour might continue to be delivered to bucket A, while others might be delivered to the new target bucket B.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is Canonical userid

A

An alpha-numeric identifier, such as 79a59df900b949e55d96a1e698fbacedfd6e09d98eacf8f8d5218e7cd47ef2be

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

When is canonical userid used?

A

You can use this ID to identify an AWS account when granting cross-account access to buckets and objects using Amazon S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Amazon S3 event notifications are designed to be delivered _________

A

at least once.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What events can AWS publish notifications for S3

A
  1. New object created events
  2. Object removal events
  3. Restore object events
  4. Reduced Redundancy Storage (RRS) objects lost events
  5. Replication events.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Amazon S3 sends event notifications for replication configurations that have _________ enabled.

A

S3 replication metrics or S3 Replication Time Control (S3 RTC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Amazon S3 supports __________ destinations where it can publish events

A
  1. Amazon Simple Notification Service (Amazon SNS)
  2. Amazon Simple Queue Service (Amazon SQS) queue
  3. AWS Lambda
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What is Amazon Simple Notification Service (Amazon SNS)

A

Amazon SNS is a flexible, fully managed push messaging service using which, you can push messages to mobile devices or distributed services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Main feature of SNS

A

With SNS you can publish a message once, and deliver it one or more times. Pub-Sub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What version of SNS is currently allowed and not allowed in S3

A

Currently Standard SNS is only allowed as an S3 event notification destination, whereas SNS FIFO is not allowed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

What is Amazon Simple Queue Service (Amazon SQS) queue ?

A

Amazon SQS offers reliable and scalable hosted queues for storing messages as they travel between computers. You can use SQS to transmit any volume of data without requiring other services to be always available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

What version of SQS is currently allowed and not allowed in S3

A

Currently, Standard SQS queue is only allowed as an Amazon S3 event notification destination, whereas FIFO SQS queue is not allowed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What causes an execution loop?

A

If your notification writes to the same bucket that triggers the notification, it could cause an execution loop.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

To send S3 notifications to SNS, you must configure a _______ on SNS’s end where you can write to notifications to.

A

Topic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

In which region must be the SNS topic to which the S3 notifications are sent to.

A

The SNS topic must be in the same region as the S3 bucket, which notifications it delivers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

Before you use the AWS SNS topic as event notification destination, what information do we need ?

A
  1. ARN of SNS topic

2. A valid SNS topic subscription.( The topic subscribers are notified when a message is published to your SNS topic.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

In which region must be the SQS queue to which the S3 notifications are sent to.

A

The Amazon SQS queue must be in the same Region as your Amazon S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

Before we can use the SQS queue as the event notification destination, what information do we need ?

A

ARN of the SQS Queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

To grant Amazon S3 permissions to publish messages to the SNS topic or SQS queue, you attach an __________ to the destination SNS topic or SQS queue.

A

AWS Identity and Access Management (IAM) policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Enabling notifications is a ______ level operation.

A

bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

You store notification configuration information in the _______ associated with a bucket.

A

notification subresource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

After creating or changing the bucket notification configuration, typically you must wait ______ for the changes to take effect.

A

5 minutes

91
Q

Amazon S3 stores the notification configuration as ____ in the_______associated with a bucket.

A

XML , notification subresource

92
Q

By default, to which events are the notifications enabled?

A

By default the notifications are not enabled for any type of event.

93
Q

What configuration is stored in the notification subresource by default and why?

A

By default the notification subresource is empty since the notifications are not enabled for any type of events by default.

94
Q

Price of SQS

A

Free. All customers can make 1 million Amazon SQS requests for free each month.

95
Q

Price to setup SNS

A

No upfront costs.

96
Q

SNS charges

A

SNS charges you based on the number of messages you publish, the number of messages you deliver, and any additional API calls for managing topics and subscriptions.

97
Q

The notification message that Amazon S3 sends to publish an event is in the ______ format.

A

JSON

98
Q

What is Managing your storage lifecycle

A

To manage your objects so that they are stored cost effectively throughout their lifecycle

99
Q

What is 3 Lifecycle configuration

A

An S3 Lifecycle configuration is a set of rules that define actions that Amazon S3 applies to a group of objects.

100
Q

What are the types of actions defined by the S3 lifecycle configuration?

A
  1. Transition actions

2. Expiration actions

101
Q

What are transition actions?

A

Transition actions define when an object transition from one storage class to another storage class.

102
Q

What are expiration actions?

A

Expiration actions define when objects expire. S3 deletes expired objects on your behalf.

103
Q

Each object in Amazon S3 has a ______ class associated with it.

A

storage

104
Q

Which storage classes offer high durability?

A

All storage classes offer high durability.

105
Q

What storage classes does AWS offer for Frequently accessed data

A
  1. S3 Standard

2. Reduced Redundancy

106
Q

What is S3 Standard storage class?

A

S3 standard is the default storage class. When you don’t specify any storage class, your object is associated with S3 Standard storage class.

107
Q

What is reduced redundancy storage class?

A

Reduced Redundancy Storage class or RRS is used for non-critical, reproducible data that can be stored with less redundancy than the S3 Standard class.

108
Q

Which Frequently accessed storage class does AWS doesn’t recommend.

A

Reduced Redundancy Storage.

109
Q

Which is the most cost effective frequently-accessed data storage class

A

S3 Standard

110
Q

What is the loss percent of objects associated to RRS class?

A

0.01

111
Q

If a RRS object is lost and if requests are made to that object then ________

A

s3 returns 405 error

112
Q

What is S3 Intelligent tiering?

A

S3 Intelligent Tiering helps to optimize storage costs by automatically moving the data to the most cost effective access tier with no operational overhead.

113
Q

When access patterns change, _________ moves data on a granular object level between access tiers for cost savings.

A

S3 Intelligent Tiering.

114
Q

_____________ is a perfect storage class to optimize cost for unknown or changing access patterns.

A

S3 Intelligent Tiering.

115
Q

What is the (additional?) fee the user is subject to when using S3 Intelligent tiering

A

Small monthly object monitoring and automation fee.

116
Q

Objects that are uploaded or transitioned to S3 Intelligent-Tiering are automatically stored in the _______ tier.

A

Frequent Access

117
Q

How does Intelligent tiering move object from Frequent access tier to in-frequent access tier?

A

S3 Intelligent tiering monitors the access patterns and then moving the objects that have not been accessed in the last 30 consecutive days to infrequent access tier.

118
Q

After you activate one or both of the archive access tiers, S3 Intelligent-Tiering automatically moves objects that haven’t been accessed for _________ to the Archive Access tier, and after ______ of no access, to the Deep Archive Access tier.

A

90 consecutive days, 180 consecutive days

119
Q

To access objects that have moved to the Intelligent-Tiering Archive Access tier, you must move them back to the _______ which can take _______

A

Frequent Access tier , 3 - 5 hours, Standard option and not expedited option.

120
Q

Is expedited option available to move Intelligent Tiering Archive Access tier to Frequent Access Tier ?

A

Yes

121
Q

To access objects that have moved to the Intelligent-Tiering Deep Archive Access tier, you must restore them back to the ________ which can take up to _____

A

Frequent Access tier, 12 hours

122
Q

Is expedited option available to move Intelligent Tiering Deep Archive Access tier to Frequent Access Tier ?

A

No

123
Q

The S3 Intelligent-Tiering storage class is suitable for objects ______ KB that you plan to store for at least _____

A

larger than 128KB; 30 days

124
Q

If the size of an object is less than 128 KB, it is not eligible for _________

A

auto-tiering.

125
Q

Smaller objects, less than 128 KB can be stored, but they are always charged at the _______rates in the S3 Intelligent-Tiering storage class.

A

frequent access tier

126
Q

If you delete an object before the end of the 30-day minimum storage duration period, you are charged for ________

A

30 days.

127
Q

The __________ storage classes are designed for long-lived and infrequently accessed data.

A

S3 Standard-IA and S3 One Zone-IA

128
Q

S3 Standard-IA and S3 One Zone-IA objects are available for _________ (similar to the_____________).

A

millisecond access; S3 Standard storage class

129
Q

Amazon S3 charges a retrieval fee for __________ objects, so they are most suitable for ____ accessed data.

A

S3 Standard IA, One zone IA ;infrequently

130
Q

Best use case for Standard-IA and One Zone IA

A
  1. For storing backups

2. For data that is accessed infrequently but still needs to be accessed with millisecond frequency

131
Q

Difference between Standard-IA and One Zone-IA

A

Standard-IA stores in object data redundantly in separate AZs where as One Zone IA stores data only in one AZ. That is why it is less expensive, less resillient and less available than the S3 Standard-IA.

132
Q

When to use S3 Standard-IA

A

Use for primary or only copy of data that cannot be recreated.

133
Q

When to use One Zone-IA

A

Use to store the data that can be re-created if an AZ fails or for Object replicas when setting S3-Cross Region Replication.

134
Q

Storage classes for low-cost archiving objects

A

S3 Glacier or S3 Glacier Deep Archive.

135
Q

Is the durability and resilience of Glacier and Glacier Deep Archive objects less than Standard Storage?

A

No. It provides the same durability and resilience as S3 Standard Storage. Its just the retrieval time that is different.

136
Q

With expedited retrieval option, Glacier archive data can be accessed in __________

A

1-5 minutes

137
Q

If you are data is stored in S3 Glacier and you either deleted the data or moved the data different storage class before the 90-day minimum, you are charged for ________

A

90 days

138
Q

Minimum storage duration for data stored in Glacier deep archive is

A

180 days.

139
Q

Retrieval time for Glacier Deep Archive data is ______

A

12 Hours.

140
Q

What is lowest Archive storage class

A

S3 Glacier Deep Archive Storage.

141
Q

You can lower the cost of the Glacier Deep Archive retrieval costs by using ___________ and it takes ________

A

Bulk retrieval; 48 hours

142
Q

Which storage classes are available for real time retrieval

A

S3 Standard, S3 Standard-IA, One Zone-IA, RRS and Intelligent Tiering.

143
Q

Data from which storage classes are not available for real-time access?

A

Glacier and Glacier Deep Archive

144
Q

What are AWS Outposts

A

AWS Outposts is a fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience.

145
Q

The ___________ is only available for objects stored in buckets on AWS Outposts.

A

S3 Outposts storage class;

146
Q

If you try to use this S3 Outposts Storage class with an S3 bucket in an AWS Region, it results in an __________error.

A

InvalidStorageClass

147
Q

If you try to use other S3 storage classes with S3 on ________ , it results in this InvalidStorageClass error response.

A

Outposts

148
Q

Objects stored in the __________storage class are always encrypted using _______________

A

S3 Outposts (OUTPOSTS) ; server-side encryption with Amazon S3 managed encryption keys (SSE-S3).

149
Q

Which storage classes have the most durability?

A
  1. S3 Standard
  2. S3 Standard-IA
  3. One Zone-IA
  4. Intelligent Tiering
  5. Glacier
  6. Glacier Deep Archive
    with 99.999999999%
150
Q

Which storage classes have the least durability?

A
  1. Reduced Redundancy Storage

99. 99%

151
Q

What Storage classes have the most availability?

A
  1. S3 Standard
  2. Glacier (After the objects are restored)
  3. Glacier Deep Archive (After the objects are restored)
  4. Reduced Redundancy Storage.
    with 99.99% availability
152
Q

What storage classes have the least availability

A
  1. One-Zone IA

with 99.50%

153
Q

Which storage classes have 99.90% availability?

A
  1. S3 Standard-IA

2. Intelligent Tiering

154
Q

Availability Zone

A

Except for One Zone IA, all other have availability zones of >=3 zone

155
Q

Which storage classes have no minimum storage duration?

A
  1. S3 Standard

2. RRS

156
Q

Minimum of 30 Days storage duration?

A
  1. S3 Standard-ia
  2. One Zone-IA
  3. Intelligent Tiering
157
Q

Mimmum storage duration for S3 Glacier and S3 Glacier Storage Deep Archive

A

90 days and 180 days

158
Q

All of the storage classes except for ________ are designed to be resilient to simultaneous complete data loss in a single Availability Zone and partial loss in another Availability Zone.

A

S3 One Zone-IA

159
Q

To manage your objects so that they are stored cost effectively throughout their lifecycle, configure their ____________

A

Amazon S3 Lifecycle.

160
Q

What are the Supported lifecycle transitions?

A
  1. S3 Standard Storage class to any other storage class.
  2. Any storage class to S3 Glacier or S3 Glacier Deep Archive.
  3. S3 Standard-IA storage class to Intelligent Tiering class or One Zone -IA class.
  4. Intelligent Storage class to One Zone-IA class
  5. S3 Glacier Storage class to S3 Glacier Deep Archive Storage class
161
Q

What are Unsupported lifecycle transitions?

A
  1. Any storage class to S3 Standard Storage class
  2. Any storage class to Reduced Redundancy storage class.
  3. S3 Intelligent Tiering class to S3 Standard-IA class
  4. S3 One Zone-IA to S3 Standard-IA or to S3 Intelligent Tiering classes.
162
Q

Which transitions have a cost benefit of transitioning of large objects?

A
  1. From S3 Standard or S3 Standard-IA to Intelligent Tiering.
  2. S3 Standard to S3 Standard-IA or One Zone IA
163
Q

Which transitions doesn’t transition objects less than 128 KB because they are not cost effective?

A
  1. S3 Standard or S3 Standard-IA to Intelligent Tiering.

2. S3 Standard storage class to S3 Standard-IA or One Zone-IA

164
Q

Amazon S3 doesn’t transition objects within the___________ because _________

A

first 30 days; newer objects are often accessed more frequently or deleted sooner than is suitable for S3 Standard-IA or S3 One Zone-IA storage.

165
Q

How are encrypted objects treated during the transition process?

A

Encrypted objects remain encrypted throughout the transition process.

166
Q

How are archive objects retrieved and accessed?

A
  1. Before an archive object is accessed, you must create a temporary copy of the object.
  2. The restored object copy is only available only for the duration you specify in the restore request.
  3. After that AWS S3 deletes the temporary copy and the object remains archive in S3 Glacier.
167
Q

How do you restore an object from Glacier Archive?

A
  1. You can only transition an object from Glacier Archive to Glacier Deep Archive.
  2. To transition an object from Glacier Archive to a different storage class, you first retrieve a copy of the archived object using the retrieve operation.
  3. Then use the copy operation to overwrite the object specifying the S3 Standard, Standard-IA, One Zone IA, Inteliigent Tiering or RRS as the storage class.
168
Q

How to transition from Glacier Deep Archive?

A

You cannot use S3 Lifecycle Configuration rules for transition from Glacier Deep Archive to any other storage class. For the transition to happen, the transition must happen through a temporary copy creation.

169
Q

Storage overhead charges for archiving objects

A

When objects are transitioned to Glacier or Glacier Deep Archive, a fixed amount of storage is added to accommodate to manage metadata for managing the object.
1. For each object transitioned to Glacier or Glacier Deep Archive, S3 uses 8KB of storage for the name of the object and other metadata. S3 uses this metadata to get the real time list of the objects archived in Glacier and Glacier Deep Archive.
2. For each object that is archived in Glacier and Glacier Deep Archive, S3 adds 32 KB of storage for index and related metadata which helps to identify and restore the object.
You are charged for S3 Glacier and S3 Glacier Deep Archive rates for this additional storage.
If you are archiving large number of small objects, consider aggregating the small objects into Large objects.

170
Q

Number of days you plan to keep the objects archived?

A

For Glacier it is 90 days and Glacier Deep Archive it is 180 days. If you plan on deleting the objects after the minimum period, it is free. However if you delete before the minimum duration, aws still charges you a prorated deleted fee.

171
Q

What are the transition request charges for archiving objects?

A

For each object that is transitioned to Glacier and Glacier Deep archive, constitutes one transition request.
There is a cost for each such request.
If you plan on transitioning large number of objects, consider the transition costs and try aggregating the small objects to larger objects.

172
Q

Life cycle management - transition to Glacier and Glacier Deep Archive cost considerations.

A
  1. Storage Overhead Charges
  2. Number of days you plan on keeping the objects archived.
  3. S3 Glacier and S3 Glacier Deep Archive transition request charges.
  4. S3 Glacier and S3 Glacier Deep Archive data restore charges.
173
Q

How are S3 objects archived using Lifecycle management.

A

When you archive objects to S3 Glacier by using Life Cycle Management, S3 transitions each object asynchronously. There might be a delay from when the transition is initiated and when the object is physically transitioned.

174
Q

What is propagation delay?

A

When you add an Life cycle configuration to a bucket, there is usually some lag before new or updated lifecycle configuration is fully propagated to all the S3 systems. Expect a delay of minutes.

175
Q

Lifecycle configuration for __________ buckets is not supported.

A

MFA-enabled.

176
Q

Which buckets can lifecycle configurations be applied? Version or Unversioned

A

Both versioned and unversioned.

177
Q

How are Amazon S3 Lifecycle actions captured by CloudTrail?

A

Amazon S3 Lifecycle actions are not captured by CloudTrail.

178
Q

How are Amazon S3 Lifecycle actions captured in logs?

A

Server Access Logs.

179
Q

Why does CloudTrail doesn’t capture Lifecycle actions?

A

CloudTrail captures API requests made to external end points whereas Lifecycle actions are performed using internal S3 endpoints.

180
Q

What is Amazon S3 Inventory?

A

Amazon S3 Inventory is one of the tools provided by S3 to manage your storage. You can use it to audit and report on the replication and encryption status of your objects.

181
Q

AWS S3 inventory provides ______ format files

A

CSV, ORC, Parquet

182
Q

AWS S3 inventory provides file on a ________ basis for an ___________

A

Daily or Weekly; S3 bucket.

183
Q

Source and destination buckets in AWS S3 Inventory

A

Source buckets - The bucket for which the inventory is generated.
Destination bucket - The bucket to which the inventory for source bucket is written to

184
Q

You can use __________ to query Amazon S3 Inventory.

A

Athena

185
Q

What is replication in AWS S3?

A

Replication enables automatic, asynchronous copying of S3 objects across S3 buckets.

186
Q

What is replicated by default?

A

By default, replication only supports copying new S3 objects after it is enabled.

187
Q

To replicate the existing objects and replicate them to a different bucket, you must ___________

A

Contact AWS support center

188
Q

To enable S3 replication, the following configuration must be provided:

A
  1. Destination bucket/s where you want to replicate the S3 objects.
  2. IAM Role that S3 can assume to replicate the objects on your behalf.
189
Q

How to create a duplicate version while maintaining the original metadata?

A

Replicate the S3 object.

190
Q

Can you replicate an object to a different storage class?

A

Yes

191
Q

What is owner override?

A

While replicating the object, you can change the ownership of the object to a different aws account.

192
Q

For compliance requirements, if you would like to create a copy of the object in a different region without modifying the original metadata?

A

Replication

193
Q

What is S3 RTC

A

AWS S3 RTC stands for Replication Time Control that is used to replicate your data within your AWS region or across different regions in a predictable time frame.

194
Q

What is the SLA of S3 RTC for replication.

A

S3 RTC replicates 99.99% of the new objects stored in S3 within 15 minutes.

195
Q

When to use Cross region replication?

A
  1. Meet compliance requirements.
  2. Minimize latency
  3. Increase operational efficiency.
196
Q

When to use same region replication? SRR

A
  1. Aggregate logs into a single bucket.
  2. Configure live replication between the production and test accounts.
  3. Abide by data sovereignty laws.
197
Q

What are the requirements for replication - either cross origin or same region.

A
  1. The source bucket owner must have the source and destination AWS regions enabled for their account. The destination bucket owner must have the destination region enabled for their account.
  2. Both Source and destination buckets must have version enabled.
  3. Amazon S3 must have permissions to replicate the objects from source bucket and destination bucket.
  4. If the owner of the source bucket doesn’t own the object , the object owner must grant bucket owner READ and READ_ACP with object Access Control List
  5. If the object has Object Lock enabled, the destination bucket must also have the S3 Object Lock enabled.
198
Q

Additional replication configuration in cross-account scenario where source and destination buckets are owned by different AWS accounts

A
  1. The owner of the destination bucket must grant the owner of the source bucket permissions to replicate the bucket policy.
  2. The destination bucket cannot be configured as Requestor Pays bucket
199
Q

What is or can be replicated in S3

A
  1. Objects created after you add replication configuration.
  2. Unencrypted objects.
  3. Objects encrypted at rest under AWS S3 Managed Keys or Customer Managed Keys stores in KMS.
  4. Object metadata from the source objects to replicas.
  5. Only objects in the source bucket for which the bucket owner has permissions to read object and access control lists.
  6. Object ACL updates, unless you direct Amazon S3 to change the replica ownership when source and destination buckets aren’t owned by the same accounts.
  7. Object tags, if any
  8. S3 Object Lock retention information
200
Q

In general, _______ pay for all Amazon S3 storage and data transfer costs that are associated with their bucket

A

bucket owners

201
Q

With requestor pays buckets, _________ pays for storing the data

A

Bucket owners

202
Q

If you enable Requester Pays on a bucket, __________ to that bucket is not allowed.

A

anonymous access

203
Q

Requester Pays buckets do not support the following:

A
  1. Anonymous requests
  2. SOAP requests
  3. Using a Requester Pays bucket as the target bucket for end-user logging, or vice versa. However, you can turn on end-user logging on a Requester Pays bucket where the target bucket is not a Requester Pays bucket.
204
Q

The requester pays for the data transfer and the request, and the bucket owner pays for the data storage. However, the bucket owner is charged for the request under the following conditions:

A
  1. The requester doesn’t include the parameter x-amz-request-payer in the header (GET, HEAD, or POST) or as a parameter (REST) in the request (HTTP code 403).
  2. Request authentication fails (HTTP code 403).
  3. The request is anonymous (HTTP code 403).
  4. The request is a SOAP request.
205
Q

What is Transfer Acceleration?

A

Amazon S3 Transfer Acceleration is a bucket-level feature that enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket.

206
Q

Transfer Acceleration takes advantage of the_____________. As the data arrives at an edge location, the data is______________

A

globally distributed edge locations in Amazon CloudFront.

routed to Amazon S3 over an optimized network path.

207
Q

You might want to use Transfer Acceleration on a bucket for various reasons:

A
  1. Your customers upload to a centralized bucket from all over the world.
  2. You transfer gigabytes to terabytes of data on a regular basis across continents.
  3. You can’t use all of your available bandwidth over the internet when uploading to Amazon S3
208
Q

Bucket ownership rule

A

An Amazon S3 bucket is owned by the AWS account that created it. Bucket ownership is not transferable to another account.

209
Q

Can you change the bucket name or region after a bucket is created?

A

No

210
Q

Default number of buckets allowed in aws account

A

100, with a max limit of 1000 buckets upon request

211
Q

Number of objects that can be stored in a bucket

A

No Maximum limit

212
Q

The ___________ uniquely identifies the object in an Amazon S3 bucket.

A

object key (or key name)

213
Q

_________ is a set of name-value pairs

A

Object metadata

214
Q

Length of object keys in bytes

A

1024 bytes

215
Q

The Amazon S3 data model is a ___________

A

flat structure

216
Q

There are two kinds of metadata in Amazon S3

A

system-defined metadata and user-defined metadata.

217
Q

System-defined object metadata

A

For each object stored in a bucket, Amazon S3 maintains a set of system metadata. Amazon S3 processes this system metadata as needed. For example, Amazon S3 maintains object creation date and size metadata and uses this information as part of object management.

218
Q

User-defined object metadata

A

When uploading an object, you can also assign metadata to the object. You provide this optional information as a name-value (key-value) pair when you send a PUT or POST request to create the object.

219
Q

The maximum size of a file that you can upload by using the Amazon S3 console is __________

A

160 GB.

220
Q

To upload a file larger than 160 GB, use the _____________

A

AWS CLI, AWS SDK, or Amazon S3 REST API.

221
Q

Upload an object in a single operation using the AWS SDKs, REST API, or AWS CLI

A

With a single PUT operation, you can upload a single object up to 5 GB in size.

222
Q

Upload a single object using the Amazon S3 Console

A

With the Amazon S3 Console, you can upload a single object up to 160 GB in size.

223
Q

Upload an object in parts using the AWS SDKs, REST API, or AWS CLI

A

Using the multipart upload API, you can upload a single large object, up to 5 TB in size.

224
Q

Later Multipart upload, which data cannot be replicated, Monitoring, security, best practices.

A

Read later