S3 - Introduciton Flashcards
What are the uses cases of Amazon S3?
- Backup and storage
- Disaster Recovery
- Archive
- Hybrid Cloud storage
- Application hosting
- Media hosting
- Data lakes & big data analytics
- Software delivery
- Static website
What level are the S3 buckets defined?
Bucket names must be unique across al regions but bucket defines on REGION level..
What are the S3 bucket naming conventions?
- No uppercase, No underscore
- 3-63 characters long
- Not an IP
- Must start with lowercase letter or number
- Must NOT start with the prefix xn–
- Must NOT end with the suffix -s3alias
Describe S3 Objects
- Objects are the files that has been uploaded
- The key is the full path: s3://my-bucket/my-file.txt
- There are no actual directories
What is the max object size in S3?
5TB
How to upload a file that is more than 5 Gb?
Use the “multi–part upload”
What can you store with the S3 object?
- Metadata
- Tags (max 10)
- Version id if enabled
Describe the S3 Security
- User-Based
- IAM Policies
- Resource-Based
- Bucket Policies – bucket wide rules from the S3 console - allows cross account
- Object Access Control List (ACL) – finer grain (can be disabled)
- Bucket Access Control List (ACL) – less common (can be disabled)
- Note: an IAM principal can access an S3 object if
- The user IAM permissions ALLOW it OR the resource policy ALLOWS it
- AND there’s no explicit DENY
- Encryption: encrypt objects in Amazon S3 using encryption keys
What are S3 Bucket policies?
JSON based policies, similar to IAM Policies
Can you enable your bucket to other Amazon user outside your company?
Yes with Cross-Account Access
How does Amazon try to prevent data leaks?
“Block all public access” setting is always on by default
How can you enable versioning on S3?
Versioning is enabled on bucket level, same key overwrite the version.
Easy roll back, protect from unintended dekletes
Not versioned files will have “null” as version
Define the S3 Replications
- Must enable Versioning in source and destination buckets
- Cross-Region Replication (CRR) - compliance, lower latency
- Same-Region Replication (SRR) - log aggregation, live replica
- Buckets can be in different AWS accounts
- Copying is asynchronous
- Must give proper IAM permissions to S3
What is S3 Batch Replciation?
After you enable S3 Replication, it enables to replicate existing objects.
Can you replicate delete markers in S3?
yes you can.