S3 Flashcards
1
Q
S3 Use cases
A
- Backup and storage
- disaster recovery
- archive
- hybrid cloud storage
- application hosting
- media hosting
- data lakes & bug data analysis
- software delivery
- static website
1
Q
S3 bucket naming
A
- no uppercase, no underscore
- 3 to 63 characters long
- not an IP
- must start with lowercase letter or number
- must not start with prefix xn-
- must not end with suffix -s3alias
2
Q
S3 Object Properties
A
- key is path (prefix + object name)
- no directories, just keys with long names that contain /
- object values are content of body
- max object size 5TB
- if uploading more than 5GB, must be multipart
- metadata (key value pairs)
- 10 tages
- version ID
3
Q
S3 security contructs
A
- user-based (IAM policies)
- resource based
- bucket policies
- object access control list (ACL)
- bucket access control list (ACL)
- Encryption
4
Q
S3 bucket policies
A
- JSON
- resources: buckets and objects
- effect: allow/deny
- actions: set of API to allow or deny
- principal: account or user
use to
- grant access to bucket
- force objects to be encrypted
- grant access to another account
5
Q
S3 Replication
A
- must enable versioning in source and dest buckets
- CRR cross region (compliance, latency, replication)
- SRR same region (log aggregation, prod & test replication)
- Buckets can be in different AWS accounts
- Copying is async
- Must give proper IAM permissions to S3
6
Q
S3 storage classes
A
- S3 Standard
- S3 Standard Infrequent Access (IA)
- S3 One zone-infrequent access
- S3 Glacier instant retrieval
- S3 Glacier flexible retrieval
- S3 Glacier Deep archive
- S3 Intelligent Tiering
7
Q
S3 Standard
A
- 99.99%
- use for frequently access data
- low latency and high throughput
- sustain 2 concurrent facility failures
Big data analytics, mobile and gaming applications, content distribution
8
Q
S3 Infrequent Access
A
- S3 standard IA
- 99.9% available
- use for DR, backups
- one zone IA
- 99/5% availability
- secondary backups, or recreatable data
9
Q
S3 Glacier
A
- instant retrieval
- ms retrieval, great for quarterly data
- minimum storage duration 90 days
- flexible retrieval
- expedited (1-5m), standard (3-5h), bulk (5-12h) free
- minimum storage duration 90 days
- deep archive
- standard (12h) and bulk (48h)
- minimum storage duration 180 days
10
Q
S3 intelligent tiering
A
- Small monthly monitoring and auto-tiering fee
- moves objects between access tiers based on usage
- Frequent Access tier (automatic): default tier
- Infrequent Access tier (automatic): objects not accessed for 30 days
- Archive Instant Access tier (automatic): objects not accessed for 90 days
- Archive Access tier (optional): configurable from 90 days to 700+ days
- Deep Archive Access tier (optional): config. from 180 days to 700+ days
11
Q
IAM Access Analyzer for S3
A
- ensures only intended people have access to buckets
- evaluates S3 bucket policies, S3 ACLs, Acceess point policies
- Powered by IAM analyzer
12
Q
AWS Snowball edge
A
- physical data transport solution for TB to PBs in our out of AWS
- alternative to network
- pay per data transfer
- Edge storage optimized
- 80TB for block volume and S3 object storage
- Edge compute optimized
- 42TB
large migrations, decommissions, DR
13
Q
AWS Snowcone
A
- small portable computing anywhere
- light
- used for edge computing, storage, and data transfer
- snowcone 8TBs og HDD
- Snowcone SSD 14TB of SSD
- use snowcone where snowball doesn’t fit*
- send to AWS or connect to internet
14
Q
AWS snowmobile
A
- Transfer exabytes of data
- Each snowmobile has 100PB
- use multiple in parallel
- high security
- Better than snowball for > 10PB