Section 8: S3 Flashcards
(40 cards)
AWS S3 use
Data storage
S3 buckets are similar to
Directories
S3 Objects are
Files
S3 object keys are
The full path of the object within the bucket
The 4 ways to implement S3 security
1) IAM Policies
2) Object Access Control List (ACL)
3) Bucket Access Control List (ACL)
4) Encryption
S3 bucket policy can be used to
- Grant public access to the bucket
- Force objects to be encrypted at upload
- Grant access to another account (Cross
Account)
The 2 types of S3 replication are
1) Cross-region replication
2) Same-region replication
The 7 S3 storage classes are
- Amazon S3 Standard - General Purpose
- Amazon S3 Standard-Infrequent Access (IA)
- Amazon S3 One Zone-Infrequent Access
- Amazon S3 Glacier Instant Retrieval
- Amazon S3 Glacier Flexible Retrieval
- Amazon S3 Glacier Deep Archive
- Amazon S3 Intelligent Tiering
S3 Standard – General Purpose
- 99.99% Availability
- Used for frequently accessed data
- Low latency and high throughput
- Sustain 2 concurrent facility failures
S3 Standard-Infrequent Access
- For data that is less frequently accessed, but requires rapid access when needed
- Lower cost than S3 Standard
- 99.9% Availability
- Use cases: Disaster Recovery, backups
S3 One Zone-Infrequent Access
- For data that is less frequently accessed, but requires rapid access when needed
- Lower cost than S3 Standard
- High durability (99.999999999%) in a single AZ; data lost when AZ is destroyed
- 99.5% Availability
- Use Cases: Storing secondary backup copies of on-premise data, or data you can recreate
Amazon S3 Glacier Storage Classes
- Low-cost object storage meant for archiving / backup
- Pricing: price for storage + object retrieval cost
Amazon S3 Glacier Instant Retrieval
- Millisecond retrieval, great for data accessed once a quarter
- Minimum storage duration of 90 days
Amazon S3 Glacier Flexible Retrieval
- Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours) – free
- Minimum storage duration of 90 days
Amazon S3 Glacier Deep Archive – for long term storage
- Standard (12 hours), Bulk (48 hours)
- Minimum storage duration of 180 days
S3 Intelligent-Tiering
- Small monthly monitoring and auto-tiering fee
- Moves objects automatically between Access Tiers based on usage
- There are no retrieval charges in S3 Intelligent-Tiering
The 2types of S3 encryption are
1) Server-side Encryption (default)
2)Client-side Encryption
Server-side Encryption occurs when
The server encrypts the file after receiving it
Client-side Encryption occurs when
The user encrypts the file before uploading it
IAM Access Analyzer for S3
- Ensures that only intended people have access to your S3 buckets
- Example: publicly accessible bucket, bucket shared with other AWS account…
- Evaluates S3 Bucket Policies, S3 ACLs, S3 Access Point Policies
- Powered by IAM Access Analyzer
AWS Snow Family includes
Highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS
The 3 Snow Family devices for Data Migration are
1) Snowcone
2) Snowball Edge
3) Snowmobile
The 2 Snow Family devices for Edge computing are
1) Snowcone
2) Snowball Edge
Snowball Edge is a
- Physical data transport solution: move TBs or PBs of data in or out
of AWS - Alternative to moving data over the network (and paying network
fees) - Pay per data transfer job * Provide block storage and Amazon S3
-compatible object storage