S3 Flashcards
S3 Facts
Objects stay within an AWS region and are synced across all AZ’s for extremely high availability and durability.
S3 Objects
each object must be assigned a storage type, which determines the object’s availability, durability, and cost.
S3 Foolders
FOR SIMPLICITY, S3 supports the concept of “folders”.
This is done only as a means of grouping objects.
amazon s3 does this by using key-name prefixes for objects.
S3 has a flat structure, there is no hierarchy like you would see in a typical file system.
S3 permissions
- all buckets and objects are private by default
- The resources owner can grant access to the resource through S3 “resource based policies” or a traditional IAM user policy
Bucket policies
- only attached to the S3 bucket.
- the permissions in the policy are applied to all objects in the bucket.
- The policy specifies what actions are allowed or denied for a particular user of that bucket.
S3 access control lists
- grant access to users in other AWS accounts or to the public.
- Both buckets and objects has ACLs.
Object ACLs allow us to share an S3 object with the public via a URL link.
S3 Versioning
on bucket level.
Lifecycle policies
a set of rules that automate the migration of an object’s storage class to a different storage class(or deletion), based on specified time intervals.
S3 event Notifications
S3 events notification allow you to setup automated communication between S3 and other AWS services when a selected event occurs in an S3 bucket.
Common event notification triggers
RRSObjectLost
ObjectCreated – Put, Post, Copy, COmpleteMultiPartUpload, Delete, Delete Marker Created, Object delete.
Events notification sends to AWS service
SNS, SQS, Lambda.
Static Web Hosting
route 53 can also map huma-readable domain name to static web hosting buckets, which are ideal for DNS failover solutions.
CORS
is a method of allowing a web application located in one domain to access and use resources in another domain.
- This allows web applications running javascript or HTML5 to access resources in an S3 bucket without using a proxy server.
Storage Gateway
Connects local data center software appliance to cloud based storage such as Amazon S3.
Gateway-Cached Volumes
- -Create storage volumes and mount them as iSCSI devices on the on-premise servers.
- -The gateway will store the data written to this volume in Amazon S3 and will cache frequently access data on-premise in the storage device.