S3 Flashcards
What is S3
(Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance.
What is the max object size?
Max. Object Size is 5TB (5000GB)
If uploading more than 5GB, must use “multi-part upload”
Explain the S3 Security policies
User-Based
- IAM Policies – which API calls should be allowed for a specific user from IAM
Resource-Based
- Bucket Policies – bucket wide rules from the S3 console - allows cross account
- Object Access Control List (ACL) – finer grain (can be disabled)
- Bucket Access Control List (ACL) – less common (can be disabled)
Encryption
What are S3 Bucket Policies?
An S3 bucket policy is an JSON object that allows you to manage access to specific Amazon S3 storage resources. You can specify permissions for each resource to allow or deny actions requested by a principal (a user or role).
When can be S3 Bucket Policies be used?
- Grant public access to the bucket
- Force objects to be encrypted at upload
- Grant access to another account (Cross Account)
The Amazon S3 Block Public Access feature?
Provides settings for access points, buckets, and accounts to help you manage public access to Amazon S3 resources. By default, new buckets, access points, and objects don’t allow public access
S3 versioning is?
S3 Versioning helps to keep multiple versions of an object in the same bucket and can be used to preserve, retrieve, and restore every version of every object stored in the S3 bucket. S3 Object Versioning can be used to protect from unintended overwrites and accidental deletions.
What does mean when an object has an version ID of null?
Objects that are stored in a bucket before versioning is have a version ID of null
What is a delete marker
A delete marker is a placeholder (marker) for a versioned object named in a simple DELETE request.
What is S3 Replication
Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets.
Buckets that are configured for object replication can be owned by the same AWS account or by different accounts. You can replicate objects to a single destination bucket or to multiple destination buckets. The destination buckets can be in different AWS Regions or within the same Region as the source bucket.
Explain the two replication types
With Amazon S3 Replication, you can configure Amazon S3 to automatically replicate S3 objects across different AWS Regions by using S3 Cross-Region Replication (CRR) or between buckets in the same AWS Region by using S3 Same-Region Replication (SRR).
What are use cases of S3 Replication
- CRR – compliance, lower latency access, replication across accounts
- SRR – log aggregation, live replication between production and test accounts
What are storage classes?
Amazon S3 offers a range of storage classes that you can choose from based on the data access, resiliency, and cost requirements of your workloads.
S3 storage classes are purpose-built to provide the lowest cost storage for different access patterns
Key features and use cases of S3 Standard – General Purpose
- Low latency and high throughput performance
- Designed for durability of 99.999999999% of objects across multiple Availability Zones
- Resilient against events that impact an entire Availability Zone
- Designed for 99.99% availability over a given year
- Backed with the Amazon S3 Service Level Agreement for availability
- Supports SSL for data in transit and encryption of data at rest
- S3 Lifecycle management for automatic migration of objects to other S3 Storage Classes
- Use Cases: Big Data analytics, mobile & gaming applications, content distribution…
Key feautres and use cases of S3 Standard-Infrequent Access (S3 Standard-IA
- Same low latency and high throughput performance of S3 Standard
- Designed for durability of 99.999999999% of objects across multiple Availability Zones
- Resilient against events that impact an entire Availability Zone
- Data is resilient in the event of one entire Availability Zone destruction
- Designed for 99.9% availability over a given year
- Backed with the Amazon S3 Service Level Agreement for availability
- Supports SSL for data in transit and encryption of data at rest
- S3 Lifecycle management for automatic migration of objects to other S3 Storage Classes
- Use cases: Disaster Recovery, backups