S3 Flashcards

1
Q

True/false: S3 cross‐region replication uses transfer acceleration.

A

S3 cross‐region replication transfers objects between different buckets. Transfer acceleration uses a CloudFront edge location to speed up transfers between S3 and the Internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True/false: If versioning is enabled on an S3 bucket, applying encryption to an unencrypted object in that bucket will create a new, encrypted version of that object.

A

True. Applying encryption to an unencrypted object will create a new, encrypted version of that object. Previous versions remain unencrypted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the typical use cases for S3?

A
  • Maintain backup archives, log files, and DR images
  • Running analytics on big data at rest
  • Hosting static website
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the difference between object and block storage?

A

With block storage, data on a raw physical storage device is divided into individual blocks whose use is managed by a file system, such as NTFS, ext4.

An object storage provides what you can think of as a flat surface on which to store your data. This simple design avoids some of the OS-related complications of block storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the metadata of an S3 object?

A

Metadata is made up of key-value pairs that establish system details like data permissions.

Metadata can only be set during object upload, and cannot be modified afterwards.

S3 object can have up to 2 KB of metadata.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a S3 bucket?

A

S3 objects are organized in buckets.

S3 bucket and its content exists only within a single AWS region.

The name of the S3 bucket must be globally unique within the entire S3 system.

An AWS account can have a maximum of 100 buckets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does the S3 object URL look like?

A

https: //s3.amazonaws.com//
s3: ///

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a S3 prefix and delimiter?

A

You can use prefixes and delimiter to organize the data that you store in Amazon S3 buckets.

For example, North America/Canada/Quebec/Montreal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the size limit of S3 object?

A

S3 object can not be larger than 5 TB.

Individual upload can not be larger than 5 GB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How to upload large objects to S3?

A

Multipart Upload breaks a large object into multiple smaller parts and transmits them individually to their S3 target. If one transmission should fail, it can be repeated without impacting the others.

  • Multipart Upload will be automatically used with AWS CLI or a high-level API.

Transfer Acceleration can speed up uploading large objects by routing uploads through geographically nearby AWS edge locations and from there, routed using Amazon’s internal network.

  • Amazon S3 Transfer Acceleration Speed Comparison tool
  • Special endpoint: .s3-accelerate.amazonaws.com
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the encryption options for S3 objects?

A

Server-side encryption:

  • SSE-S3
  • SSE-KMS
  • SSE-C

Client-side encryption:
- can be done using an AWS KMS-Managed Customer Master Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Are S3 events logged by default?

A

No, S3 buckets can see a lot of activities, and not every use case justifies the log data that S3 can generate.

When you enable logging, you will need to specify both a source bucket and a target bucket. Optionally, you can also specify delimiters and prefixes to better identify and organize logs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is S3 durability?

A

99.999999999% (11 nines)

If you have 10 million objects stored in S3, you can expect on average to lose 1 object every 10,000 years.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is S3 availability?

A
  • S3 Standard: 99.99%
  • S3 IA: 99.9%
  • S3 One-Zone IA: 99.5%
  • S3 Intelligent Tiering: 99.9%
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is S3 consistency model?

A

S3 uses eventually consistency for updates and deletes, because S3 replicates data across multiple locations in a region.

You should expect a delay of two seconds or less for updates and deletes.

Because there isn’t risk of corruption when creating new objects, S3 provides read-after-write consistency for creation PUT operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you manage the lifecycle of S3 objects?

A
  • Versioning

- Lifecycle Management

17
Q

What are S3 lifecycle rule actions?

A
  • Move current version
  • Move non-current versions
  • Expire current version
  • Permanant delete non-current versions
  • Delete expired object delete markers
  • Delete incomplete multipart uploads
18
Q

What are the options to restrict access to S3?

A
  • ACL rules (legacy)
  • Bucket policies
  • IAM policies
19
Q

When to use Bucket Policy to restrict access to S3?

A

Bucket policy makes sense when you want to control access to a single S3 bucket for multiple external accounts and users.

{
“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Principal”: {
“AWS”: [“arn:aws:iam::xxxxxxxxxxxx:root”,
“arn:aws:iam::xxxxxxxxxxxx:user/Steve”]
},
“Action”: “s3:”,
“Resource”: [“arn:aws:s3:::MyBucket”,
“arn:aws:s3:::MyBucket/
”]
}
]
}

20
Q

When to use IAM Policy to restrict access to S3?

A

IAM policy exists at the account level, and makes sense when you want to control the way individual users and roles access multiple AWS resources, including S3.

{
  "Version": "2012-10-17",
  "Statement":[{
    "Effect": "Allow",
    "Action": "s3:*",
    "Resource": ["arn:aws:s3:::MyBucket",
                 "arn:aws:s3:::MyBucket/*"]
    }
  ]
}
21
Q

What is S3 Access Point?

A

S3 Access Points are unique hostnames that are created to enforce distinct permissions and network controls for any request made through the Access Point.

22
Q

What is S3 Pre-signed URL?

A

S3 Pre-signed URL provides temporary access to an object that’s otherwise private.

23
Q

What are the equivalents of bucket and object in Glacier?

A

Bucket => Vault

Object => Archive

24
Q

What are the storage tiers of Glacier?

A
  • Glacier
  • Glacier Deep Archive
  • Glacier Instant Retrieval
25
Q

What are the retrieving tiers of Glacier?

A
  • Glacier Standard
  • Glacier Expedited
  • Glacier Bulk
  • Deep Archive Standard
26
Q

What are the difference between EFS and FSx?

A

EFS provides scalable and sharable file storage to Linux instances. EFS supports NFS.

FSx provides file share to Windows and Lustre. FSx supports SMB, NTFS, and Microsoft AD.

27
Q

What is AWS Storage Gateway?

A

AWS Storage Gateway provides on-premise applications with access to unlimited cloud storage.

28
Q

What is AWS Snowball?

A

AWS Snowball helps to migrate petabyte-scale data from on-premise to cloud.

29
Q

What is AWS DataSync?

A

AWS DataSync copies on-premise data to cloud over regular Internet connection.

AWS DataSync can handle transfer rates up to 10Gbps.

30
Q

What is the Static Web Hosting URL of S3 bucket?

A

http://.s3-website-.amazonaws.com

31
Q

Does S3 Static Web Hosting support HTTPS?

A

No

32
Q

What is default timeout of pre-signed url?

A

3600 seconds

33
Q

What is the maximum archive size in Glacier?

A

40 TB

34
Q

What are the key elements of a S3 object?

A
  • Key (i.e. name)
  • Value (i.e. file content)
  • Metadata
  • Version Number
35
Q

What is required to enable cross-region replication of S3 bucket?

A

Versioning.

36
Q

How can you schedule backups of EFS files?

A

Use AWS Backup Service.

37
Q

How can you schedule backups of EBS volumes?

A

Use AWS Data Lifecycle Manager to take snapshots of EBS volume on a regular basis.