S3 Flashcards

1
Q

What is Amazon S3

A

Amazon Simple Storage Service - provides object storage through a web service interface.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

List use cases for S3

A
Backup and storage
Disaster Recovery
Archive 
Hybrid Cloud storage 
app hosting 
Media hosting 
Data lakes and big data analytics 
Software delivery
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a file called in Amazon S3

A

objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a directory called in amazon S3

A

buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When making a name for a bucket in amazon S3 does the name have to be globally unique across all regions all accounts ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Where are buckets defined at

A

at the region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe the naming conventions for buckets

A
No uppercase
no underscore
3-63 characters long 
Not an ip
Must start with lowercase letter or number
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a key in Amazon S3

A

The full path to an object (files)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Describe the parts of a key

A

PREFIX + object name

s3://my-bucket/ my_folder/another/folder/my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the maximum size of an object

A

5TB (5000GB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

In Amazon S3 what is metadata

A

List of text key / value pairs - system or user metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In Amazon S3 what is a tag

A

Unicode key /value pair - up to 10 - useful for security / lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Describe S3 User-based security policy

A

IAM policies - which API calls should be allowed for a specific user from IAM console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Describe Resource-Based Security policy in Amazon S3

A

Bucket policies - bucket wide rules from the S3 console - allows cross account
Object Access Control list (ACL) - finer grain
Bucket Access Control List ( ACL) - less common

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When can an IAM principal access an S3 object if

A

the user IAM permissions allow it OR the resource policy Allows it
AND there’s no explicit DENY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you encrypt objects in Amazon S3

A

using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are S3 bucket poilicies

A
Json based policy 
resources: buckets and objects 
Actions: Set of API to Allow or Deny
Effect:Allow / Deny 
Principal: The account or user to apply the policy to
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When should you use S3 bucket for a policy

A

Grant public access to the bucket
Force objects to be encrypted at upload
Grant access to another account (Cross Account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Describe amazon S3 websites

A

S3 can host static websites and have them accessible on the www

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Define how a Amazon S3 website URl format would look like

A

.s3-website-.amazonaws.com
OR
.s3-website..amazonaws.com
/\
|

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

If you get a 403 error code while trying to get to a website within S3 what should you do first

A

Make sure the bucket policy allows public reads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Describe versioning

A

Enabled at the bucket level
best practice to version your buckets
Protects against unintended deletes (ability to restore a version)
easy roll back to previous
Any file that is not versioned prior to enabling versioning will have version :null:
Suspending versioning does not delete the previous versions

23
Q

In Amazon S3 why would you want to have access logs

A

For audit purposes

24
Q

What kind of information will you find in an Access log for S3 buckets

A

Any request made to S3 from any account, authorized or denied, will be logged into another S3 bucket

25
What is Cross-Region Replication (RR)
every object uploaded to an S3 bucket is automatically replicated to a destination bucket in a different AWS region that you choose
26
What is Same region Replication (SRR)
Automatically replicates data between buckets within the same AWS Region
27
Why would you use CRR for
Compliance, lower latency access, replication across accounts
28
Why would you use SRR
Log aggregation, live replication between production and test acconts
29
Define durability in Amazon S3
How often you will lose a file High durability = (99.999999999, 11 9's) of objects across multiple AZ If you store 10,000 000 objects with Amazon S3 you can on average expect to incur a loss of a single object once every 10,000 years
30
What is availability in amazon S3
Measure how readily available a sservice is S3 standard has 99.99%, which means it will not be available 53 minutes a year Varies depending on storage class
31
Decribe S3 Standard - General Purposes
99.99% availability Used for frequently accessed data Low latency and high throughput Sustain 2 concurrent facility failures
32
When should use S3 standard - General purpose storage
Big data analytics, mobile and gaming apps, content distribution
33
Describe S3 Infrequent Access (IA)
Suitable for data that is less frequently accessed, but requires rapid access when needed 99.9% availibility Lower cost compared to amazon S3 standard, but retrieval fee Sustain 2 concurrent facility failures
34
When should you use S# - infrequent Access (IA)
As a data store for disaster recover, backups
35
Describe S3 Intelligent-Tiering
99.9% availability Same low latency and high throughput performance of S3 standard Cost-optimized by automatically moving objects between two access tiers based on changing access patterns resilient against events that impact an entire availabilty zone
36
Describe S3 One Zone - infrequent Access (IA)
Same as IA but data is stored in a single AZ 99.5% avail Low latency and high throughput performance Lower cost compared to S3-IA (by 20%)
37
When should you use S3 One Zone
Storing secondary backup copies of on-premise data, or storing data you can recreate
38
Describe Amazon Glacier and Glacier Deep Archive storage
Low cost object storage (in GB/Month) meant for archiving/ backup Data is retained for the longer term (years) Various retrieval options of time + fees for retrieval
39
What is S3 object lock
an Amazon S3 feature that allows you to store objects using a write once, read many (WORM) model.
40
What is Glacier Vault Lock
to lock your vault with a variety of compliance controls Lock the policy for future edits (Can no longer be changed ) Helpful for compliance and data retention
41
Describe S3 encryption
Server-side encryption - File is encrypted after the server receives it Client-side encryption - File is encrypted before it reaches server
42
What is amamzon responsible for in S3
Infrastructure config and vulnerability analysis Compliance validation
43
What are you responsible for in S3
``` Versioning Bucket policies replication setup Logging and Monitoring S3 storage classes Data encryption at rest and in transit ```
44
What is an AWS Snow Family
Highly secure, portable devices to collect and process data at the edge, and migrate data into and out of aws Offline devices to perform data migrations
45
When should you use AWS Snow family
If it takes more than a week to transfer over the network
46
Describe AWS Snow cone
Storage capacity 8 TB usable Migration Size Up to 24 Tb, online and offline Data sync agent Pre installed
47
Describe AWS Snowball edge
80 TB usable Up to petabytes, offline Up to 15 nodes
48
Describe Snowmobile
More than 100 PB | Up to exabytes, offline
49
What is edge computing
a distributed computing paradigm that brings computation and data storage closer to the sources of data
50
Describe Snow Family Edge computing Snowcone
2 cpus, 4gb of memory | USB-C poer using a cord or the optional battery
51
Describe Snow Family Edge computing Snowball edge Compute optimized
52 vCPU, 208 GIB of Ram Optional GPU 42TB usable storage
52
Describe Snow Family Edge computing Snowball edge Storage optimized
Up to 40 CPUs , 80 gib of ram | Object storage clustering available
53
What is hybrid cloud
Part of infrastructure on and premise and other part on the cloud
54
What is aws Storage gateway
Bridge between on-premise data and cloud data in S3