S3 Flashcards
What is Amazon S3
Amazon Simple Storage Service - provides object storage through a web service interface.
List use cases for S3
Backup and storage Disaster Recovery Archive Hybrid Cloud storage app hosting Media hosting Data lakes and big data analytics Software delivery
What is a file called in Amazon S3
objects
What is a directory called in amazon S3
buckets
When making a name for a bucket in amazon S3 does the name have to be globally unique across all regions all accounts ?
Yes
Where are buckets defined at
at the region level
Describe the naming conventions for buckets
No uppercase no underscore 3-63 characters long Not an ip Must start with lowercase letter or number
What is a key in Amazon S3
The full path to an object (files)
Describe the parts of a key
PREFIX + object name
s3://my-bucket/ my_folder/another/folder/my_file.txt
What is the maximum size of an object
5TB (5000GB)
In Amazon S3 what is metadata
List of text key / value pairs - system or user metadata
In Amazon S3 what is a tag
Unicode key /value pair - up to 10 - useful for security / lifecycle
Describe S3 User-based security policy
IAM policies - which API calls should be allowed for a specific user from IAM console
Describe Resource-Based Security policy in Amazon S3
Bucket policies - bucket wide rules from the S3 console - allows cross account
Object Access Control list (ACL) - finer grain
Bucket Access Control List ( ACL) - less common
When can an IAM principal access an S3 object if
the user IAM permissions allow it OR the resource policy Allows it
AND there’s no explicit DENY
How do you encrypt objects in Amazon S3
using encryption keys
What are S3 bucket poilicies
Json based policy resources: buckets and objects Actions: Set of API to Allow or Deny Effect:Allow / Deny Principal: The account or user to apply the policy to
When should you use S3 bucket for a policy
Grant public access to the bucket
Force objects to be encrypted at upload
Grant access to another account (Cross Account)
Describe amazon S3 websites
S3 can host static websites and have them accessible on the www
Define how a Amazon S3 website URl format would look like
.s3-website-.amazonaws.com
OR
.s3-website..amazonaws.com
/\
|
If you get a 403 error code while trying to get to a website within S3 what should you do first
Make sure the bucket policy allows public reads