S3 - Introduciton Flashcards

1
Q

What are the uses cases of Amazon S3?

A
  • Backup and storage
  • Disaster Recovery
  • Archive
  • Hybrid Cloud storage
  • Application hosting
  • Media hosting
  • Data lakes & big data analytics
  • Software delivery
  • Static website
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What level are the S3 buckets defined?

A

Bucket names must be unique across al regions but bucket defines on REGION level..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the S3 bucket naming conventions?

A
  • No uppercase, No underscore
  • 3-63 characters long
  • Not an IP
  • Must start with lowercase letter or number
  • Must NOT start with the prefix xn–
  • Must NOT end with the suffix -s3alias
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Describe S3 Objects

A
  • Objects are the files that has been uploaded
  • The key is the full path: s3://my-bucket/my-file.txt
  • There are no actual directories
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the max object size in S3?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to upload a file that is more than 5 Gb?

A

Use the “multi–part upload”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What can you store with the S3 object?

A
  • Metadata
  • Tags (max 10)
  • Version id if enabled
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe the S3 Security

A
  • User-Based
  • IAM Policies
  • Resource-Based
  • Bucket Policies – bucket wide rules from the S3 console - allows cross account
  • Object Access Control List (ACL) – finer grain (can be disabled)
  • Bucket Access Control List (ACL) – less common (can be disabled)
  • Note: an IAM principal can access an S3 object if
  • The user IAM permissions ALLOW it OR the resource policy ALLOWS it
  • AND there’s no explicit DENY
  • Encryption: encrypt objects in Amazon S3 using encryption keys
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are S3 Bucket policies?

A

JSON based policies, similar to IAM Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you enable your bucket to other Amazon user outside your company?

A

Yes with Cross-Account Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does Amazon try to prevent data leaks?

A

“Block all public access” setting is always on by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you enable versioning on S3?

A

Versioning is enabled on bucket level, same key overwrite the version.
Easy roll back, protect from unintended dekletes
Not versioned files will have “null” as version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Define the S3 Replications

A
  • Must enable Versioning in source and destination buckets
  • Cross-Region Replication (CRR) - compliance, lower latency
  • Same-Region Replication (SRR) - log aggregation, live replica
  • Buckets can be in different AWS accounts
  • Copying is asynchronous
  • Must give proper IAM permissions to S3
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is S3 Batch Replciation?

A

After you enable S3 Replication, it enables to replicate existing objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Can you replicate delete markers in S3?

A

yes you can.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Can you chain S3 replication?

A

No, replication is not chained.

17
Q

What are the S3 Storage Classes?

A
  • Amazon S3 Standard - General Purpose
  • Amazon S3 Standard-Infrequent Access (IA)
  • Amazon S3 One Zone-Infrequent Access
  • Amazon S3 Glacier Instant Retrieval
  • Amazon S3 Glacier Flexible Retrieval
  • Amazon S3 Glacier Deep Archive
  • Amazon S3 Intelligent Tiering
18
Q

Describe S3 Standard General Purpose class

A
  • Used for frequently accessed data
  • Low latency and high throughput
  • Sustain 2 concurrent facility failures
  • Use Cases: Big Data analytics, mobile & gaming applications, content distribution…
19
Q

Describe S3 Standard Infrequent Access class

A
  • For data that is less frequently accessed, but requires rapid access when needed
  • Lower cost than S3 Standard
  • Amazon S3 Standard-Infrequent Access (S3 Standard-IA) -> DR, backup
  • Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA -> secodnary backup
20
Q

Describe S3 Glacier Storage Classes

A
  • Low-cost object storage meant for archiving / backup
  • Pricing: price for storage + object retrieval cost
  • Amazon S3 Glacier Instant Retrieval
  • Millisecond retrieval, great for data accessed once a quarter
  • Minimum storage duration of 90 days
  • Amazon S3 Glacier Flexible Retrieval (formerly Amazon S3 Glacier):
  • Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours) – free
  • Minimum storage duration of 90 days
  • Amazon S3 Glacier Deep Archive – for long term storage:
  • Standard (12 hours), Bulk (48 hours)
  • Minimum storage duration of 180 days
21
Q

Describe S3 Intelligent-Tiering

A
  • Moves objects automatically between Access Tiers based on usage
  • There are no retrieval charges in S3 Intelligent-Tiering
  • Frequent Access tier (automatic): default tier
  • Infrequent Access tier (automatic): objects not accessed for 30 days
  • Archive Instant Access tier (automatic): objects not accessed for 90 days
  • Archive Access tier (optional): configurable from 90 days to 700+ days
  • Deep Archive Access tier (optional): config. from 180 days to 700+ days