S3 Flashcards
What is an ”infinitely scaling” storage?
S3
How can S3 be used?
As backbone to websites or integrated with AWS services
What are the use cases of S3?
- Backup and storage
- Disaster Recovery
- Archive
- Hybrid Cloud storage
- Application hosting
- Media hosting
- Data lakes & big data analytics
- Software delivery
- Static website
What storage directories require globally unique name but are defined at the region level?
S3 buckets
What has keys?
S3 objects
Where can you find the key of an S3 object? what about the object name?
Object key: The part after s3://my-bucket/
Object name: the last bit after the final “/”
How can you ensure security of S3?
• User based
• IAM policies - which API calls should be allowed for a specific user from IAM (with EC2 Instance Role)
console
• Resource Based
• Bucket Policies - bucket wide rules from the S3 console - allows cross account
• Object Access Control List (ACL) – finer grain
• Bucket Access Control List (ACL) – less common
• Note: an IAM principal can access an S3 object if
• the user IAM permissions allow it OR the resource policy ALLOWS it
• AND there’s no explicit DENY
• Encryption: encrypt objects in Amazon S3 using encryption keys
What are the tools for S3 versioning? And, what model do they adopt? And, at what level do they occur?
S3 Object Lock & Glacier Vault Lock
- Adopt a WORM (Write Once Read Many) model
- Bucket-level
S3 Replication:
- Cross region replication
- Same region replication
- Across different accts & regions
What lock is good for S3 compliance and data retention, and why?
Glacier Vault Lock because vault lock policy prevents objects from being deleted
What is the key difference between S3 Object Lock and Glacier Vault Lock?
S3 Object Lock blocks an object version deletion for a specific amount of time vs. never!
What should you check if you get a 403 (Forbidden) error on S3 websites?
Ensure bucket policy allows public reads
What can host static websites and have them accessible on the www?
S3
What stores any request made to S3, from any account, authorized or denied, will be logged into another S3 bucket? What is this used for?
S3 Access Logs
Root cause analysis, audit usage, and viewing of suspicious patterns
What are the S3 storage classes?
- Amazon S3 Standard - General Purpose
- Amazon S3 Standard-Infrequent Access (IA)
- Amazon S3 One Zone-Infrequent Access
- Amazon S3 Intelligent Tiering
- Amazon Glacier
- Amazon Glacier Deep Archive
What has 99.999999999% (eleven 9s) durability and 99.99% availability? Is it the same for all storage classes?
S3; same durability and different availability across the storage classes except for One Zone - IA which has 99.5%
What has 99.99% availability and is used for frequent data access due to its low latency and high throughput, and is able to sustain 2 concurrent facility failures?
Amazon S3 Standard - General Purpose
What are the use cases for Amazon S3 Standard - General Purpose?
Big Data analytics, mobile & gaming applications, content distribution
What has 99.99% availability and is suitable for data that is less frequently accessed, but requires rapid access when needed; and has lower cost than S3 standard but is subject to retrieval fee, and can sustain 2 concurrent facility failures?
S3 Standard - Infrequent Access
What are the use cases for S3 Standard - Infrequent Access?
As a data store for disaster recovery, backups
Which S3 storage class has 99.5% availability and 1 zone?
S3 One Zone - IA
How many S3 Storage classes do most have at minimum?
3
Which S3 Storage classes charge for retrieval?
S3 Std IA
S3 One Zone IA
S3 Glacier
S3 Glacier Deep Archive
What can you use to automate moving objects between S3?
lifecycle configuration
What is AWS responsible for as part of Shared Responsibility Model for S3?
- Infrastructure (global security, durability, availability, sustain concurrent loss of data in two facilities)
- Configuration and vulnerability analysis
- Compliance validation
What are you responsible for as part of Shared Responsibility Model for S3?
- S3 Versioning
- S3 Bucket Policies
- S3 Replication Setup
- Logging and Monitoring
- S3 Storage Classes
- Data encryption at rest and in transit
What is a highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS
AWS Snow Family
What does Snow Family support?
Data migration & edge computing
What snow family supports data migration?
Snowcone, Snowball edge, and Snowmobile
What snow family supports edge computing?
Snowcone, Snowball edge
What challenges does the AWS Snow Family help overcome? What’s a good rule of thumb for using it?
- Limited connectivity
- Limited bandwidth
- High network cost
- Shared bandwidth (can’t maximize the line)
- Connection stability
If it takes more than 1 wk to transfer over network
What is a small, portable computing, anywhere, rugged & secure, withstands harsh environments that can handle 8TB of usable storage?
AWS Snowcone
How can you send data with AWS Snowcone?
Can be sent back to AWS offline, or connect it to
internet and use AWS DataSync
What is a the largest data migration option that can handle exabytes and has almost 100PB of usable storage, as well as high security?
Snowmobile
What can you use as an alt to moving data over network if you need to move TB or PB of data in/out of AWS?
Snowball edge
What are the 2 types of snowball edge? Which has how many TB?
Storage optimized and compute optimized.
Storage has 80TB vs. Compute’s 42 TB
What devices do you set up to do edge computing?
Snowball edge/snowcone
How can you manage Snow Family Devices for edge computing?
AWS OpsHub & CLI
What can you do with AWS Ops Hub?
• Unlocking and configuring single or clustered devices
• Transferring files
• Launching and managing instances running on Snow
Family Devices
• Monitor device metrics (storage capacity, active
instances on your device)
• Launch compatible AWS services on your devices
(ex: Amazon EC2 instances, AWS DataSync,
Network File System (NFS))
What storage cloud native options exist for block, file, and object?
Block: EBS & Instance Store
File: EFS
Object: S3 & Glacier
What is a bridge between on-premise data and cloud
data in S3, a hybrid storage service to allow o-prem to be used in AWS Cloud?
AWS Storage Gateway
What types of storage gateway are there and what are the use cases?
Types: file, volume, tape
Use cases: disaster recovery, backup &
restore, tiered storage
global unique name, tied to a region
S3 Buckets vs Objects
What ensures S3 security?
IAM policy, S3 Bucket Policy (public access), S3 Encryption
multiple versions for files, prevent accidental deletes
S3 Versioning
What logs requests made within your S3 bucket?
S3 Access logs
transition objects between classes
S3 Lifecycle Rules
