S3 Flashcards
What feature can you use to be notified is someone unarchived a file from Glacier?
Set up an S3 notification
What are the S3 Classes from most expensive to least expensive?
- S3 Standard - most workloads
- S3 IA - Infrequently accessed - backups, disaster recover files etc.
- S3 One-zone IA - Same as above, but only one AZ - noncritical
- S3 Intelligent Tiering - unknown access patterns
- S3 Glacier. long term, minutes or hrs access, a retrieval fee
- S3 Glacier deep archive - long-term, 12h+ access
What is the size range of S3 Files
0 bytes to 5Tb
What are the parts of File Object stored in S3
- Key
- Value
- Version ID (when versioning is enabled)
- Metadata
What is the
- durability of S3
- availability of S3
- 11 9’s
- 99.95% - 99.99%
What is the
- durability of S3
- availability of S3
- 11 9’s
- 99.95% - 99.99%
Whats the use case of S3 Standard
- Most frequently used
- Accessed often
- Highly durable
What methods can you use to secure your data stored in an S3 bucket?
- Server Side Encryption
- Access Control Lists (which groups have access and what they have access to
- Bucket policies
Down to what level can you assign Access Control Lists?
Object level within a bucket
What consistency model does S3 utilize?
Strong read-after-write
What can you NOT use S3 for?
- No operating system
- No database
With S3 Versioning enabled, how can you provide extra security against deletion
Enable two factor authentication for deleting objects
When using S3 with versioning, How do you restore a deleted Version ?
Delete the delete marker
When using S3 Versioning what happens when you delete a version?
A delete marker is added.
Does each version of an object in S3 have its own URL?
Yes
Can you disable versioning in S3?
No, once enabled you can only suspend it.
What does lifecycle do for S3?
Allows you to transition objects (or delete them) to cheaper tiers. You can only go from more to less expensive, not the reverse.
Can S3 Lifecycle work with versioning? What is an example of that?
Yes. You can move previous versions of an object to a cheaper tier
(S3 Object Lock) What is WORM
Write Once Read Many - Helps you prevent the deletion or modification of an object for a fixed time or indefinitely.
What is S3 Object Lock?
Allows you to force the retention of S3 Object to meet regulatory requirements or governance requirements
What are the two modes of S3 Object Lock
- Governance Mode - Only the root user can alter or delete a file
- Compliance Mode - No one, not even root can alter modify or delete an object for a period of time
What is the retention period in S3 Object Lock
Tells you how long the object lock is in effect
What is a “Legal Hold”?
It’s an object lock with no retention period. It has to be removed.
What is Glacier Vault Lock
It’s S3 Vault Lock for Glacier.
What kinds of encryption can we use for S3
- Encryption in Transit
- HTTPS
- SSL
- Encryption at rest
- Server Side Encryption
- SSE-S3 - S3 manages it
- SSE-KMS - KMS manages the encryption
- SSE-C - Customer manages
- Client side - the customer deals with it.
- Server Side Encryption
How can you enforce server-side encryption?
- On the console
- Using bucket policies
What parameter should you look for when dealing with enforcing server-side encryption
- x-amz-server-side-encryption (AES256 or KMS)
- The policy would look for this parameter that denies put requests without this parameter in the header
What is an S3 Prefix?
Its a subfolder in a bucket.
How can you speed up reads using prefixes?
- Upload to multiple folders
- Each one has a capacity of 3500 PUTS/POSTS/DELETES per second, 5500 GETS per second
- Spread the reads across prefixes!
How would you optimize a large 5gb upload?
Use multipart upload
When using SSE-KME, What are the limits in KMS?
- Depends on the region.
- Cannot increase this
- 5,500-30,000 requests per second
for what size objects is multi part upload recommended? Required?
- Recommended 100mb+
- Required over 5gb
Other than prefixes, how can you optimize your downloads?
Use byte-range fetches
Can you replicate within an S3 region?
Yes. It used to be called cross-region replication but no more.
Whats required to leverage S3 replication?
Versioning in the source and destination?
Do existing objects get replicated when you turn on replication?
No
Are delete markers replicated?
Nope
How do you add https to an S3 hosted static website?
Use CloudFront which uses HTTPS natively.
What 3 destinations are supported with S3 notifications?
- SQS Queue
- SNS Topic
- Lambda Function
What are valid destinations for S3 notifications?
- SQS
- Lambda
- SNS
