S3

Question 1

Buckets must have a ___ unique name

Answer 1

Globally

Question 2

Buckets are defined at the ___ level

Answer 2

Region

Question 3

Max Object size in S3

Answer 3

5TB

Question 4

If uploading more than 5GB, must use ___

Answer 4

Multi-part upload

Question 5

Versioning is enabled at the ____

Answer 5

Bucket level

Question 6

Any file that is not versioned prior to enabling versioning will have version ___

Answer 6

Null

Question 7

Encrypts S3 objects using keys handled & managed by AWS

Answer 7

SSE-S3

Question 8

Leverage KMS to manage encryption keys

Answer 8

SSE-KMS

Question 9

Manage your own encryption keys

Answer 9

SSE-C

Question 10

HTTPS must be used for this encryption

Answer 10

SSE-C

Question 11

SSE-C encryption key must be provided in ___ for every request

Answer 11

HTTP headers

Question 12

Clients must encrypt data themselves before sending to S3

Answer 12

Client Side Encryption

Question 13

An IAM principal can access S3 object if

Answer 13

• User IAM permissions allow it OR resource policy allows it

- AND there’s no explicit DENY

Question 14

Bucket wide rules from the S3 console - allows cross account

Answer 14

Bucket Policies

Question 15

If you receive 403 forbidden error, make sure ____

Answer 15

Bucket policy allows public reads

Question 16

Read after write consistency for ___ of ___ objects

Answer 16

PUTS; New

Question 17

Eventual Consistency for ____ of ___ objects

Answer 17

DELETES & PUTS; Existing