Amazon S3 Introduction Flashcards

1
Q

What do you use S3 for?

A

Backup/storage
DR
Archive
Hybrid Cloud storage
App hosting
Media hosting
Data lakes & big data analytics
Software delivery
Static Website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does S3 save data in?

A

Buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does S3 save in buckets?

A

Objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do Buckets MUST have globally?

A

Unique name - across all regions all accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where are buckets defined?

A

Region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Region Level mean in S3 Buckets?

A

That they are tied & created in a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What do objects have?

A

Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which part is the key of s3://my-bucket/my_file.txt?

A

/my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Key composed of?

A

Prefix & object name

s3://my-bucket/my_folder1/another_folder/my_file.txt

prefix = my_folder1/another_folder

key = /my_file.txt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Do S3 have directories within buckets?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the max object size?

A

5 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What do you have to do if uploading more than 5GB?

A

Multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What do objects include?

A

Metadata (key-value pairs)
Tags (unicode key/value pair)
Version ID (if enabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is User-Based security for S3?

A

IAM Policies - which API calls should be allowed for a specific user from IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Resource-Based security in S3?

A

Bucket Policies - bucket wide rules from S3 console - allows cross account

Object ACL - finer grain (can be disabled)

Bucket ACL - less common (can be disabled)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When can an IAM principal access an S3 object?

A

If the user IAM permissions ALLOW ir, OR the resource policy ALLOWS it AND there is no explicit DENY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How can you encrypt objects in S3?

A

Using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what do S3 Bucket Policies look like?

A

JSON based policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What can you do with a bucket policy?

A

Grant public access to bucket
Force objects to be encrypted at upload
Grant access to another acc (cross acc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How can you give public to S3?

A

Via Bucket Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What can you do to give access to an S3 bucket within your account for a user within your acc?

A

Assign an IAM policy to the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How can you allow an EC2 instance to access the S3 bucket?

A

By assigning EC2 instance role with the correct IAM permissions to the ec2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How can you give cross acc access to S3 bucket?

A

Assign S3 Bucket Policy to the bucket that allows cross acc access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How can you block public access of an S3 bucker?

A

It is a setting created by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What can you do if you know your bucket should never be public?
Set the Block Public Access setting in the acc level
26
What does it mean if you get a 403 when you visit your website?
You have not enabled public reads via a bucket policy
27
What is Versioning in S3?
Every time you upload something in the bucket it creates a newer version of that item instead of deleting it
28
Where is Versioning enabled in S3?
Bucket level
29
Why is versioning important?
Protects against unintended deletes (restore versions) Easy roll back to previous version
30
What version do files have before enabling versioning?
Null
31
what happens if you delete an object?
It creates a delete marker
32
How do you restore a deleted object?
You delete the "delete marker"
33
What is S3 CRR?
Cross Region Replication
34
?What is SRR
Same Region Replication
35
How does Replication Work?
You have an S3 bucket in one region, and another one in another region and you want to set up asynchronous replication between the two.
36
What are the requirements for S3 replication?
Versioning must be enabled in both source & destination buckets.
37
What kind of copying happens when replicating S3?
Asynchronous
38
Can buckets be in different AWS accounts in order for replication to work?
Yes they can be
39
What permissions do S3 must have for replication?
IAM
40
CRR use cases
compliance lower latency access replication across accounts
41
SRR use cases
log aggregation live replication between prod and test accounts
42
Which objects get replicated once you enable Replication?
Only new ones
43
How can you replicate already existing objects?
S3 Batch Replication
44
What does S3 Batch Replication do?
Replicates existing objects and objects that failed replication
45
How does DELETE operation work in Replication?
You can only replicate delete markers from source to target
46
Which Deletions are not replicated?
Ones with Version ID (to avoid malicious deletes
47
What does no "chaining" of replication mean?
If bucket 1 has replication into bucket 2, and bucket 2 to bucket 3. Objects from Bucket 1 are not replicated to bucket 3
48
S3 Standard - General Purpose
99.99 availability Used for frequently accessed data low latency and high throughput sustain 2 concurrent facility failures
49
S3 Standard - General Purpose use cases?
big data analytics mobile gaming apps content distribution
50
S3 Infrequent Access
Less frequently accessed data but rapid access when needed lower cost than s3 standard Cost on retrieval
51
How do cost happens for S3 IA?
On retrieval
52
S3 IA use cases
99.9 availability DR & Backups
53
S3 One Zone IA
High durability in single AZ data lost when AZ is destroyed 99.5 availability
54
S3 One Zone IA use cases
storing secondary backup copies of on-prem data or data you can recreate
55
S3 Glacier Storage
Low cost object storage meant for archiving / backup
56
Pricing of Glacier Storage
price for storage & retrieval cost
57
S3 Glacier Instant Retrieval
Millisecond retrieval, great for data accessed once a quarter Minimun storage duration 90 days
58
S3 Glacier Flexible Retrieval - 3 retrieval modes
Expedited (1-5 mins) Standard (3-5 hours) Bulk (5-12 hours) - free Minimum storage duration of 90 days
59
S3 Glacier Deep Archive - long term storage
Standard (12 hours, Bulk (48 hours) minimum storage 180 days
60
S3 Intelligent-Tiering
Small monthly monitoring and auto-tiering fee moves objects automatically between Access Tiers based on usage No retrieval charges
61
S3 Intelligent-Tiering (5 tiers)
Frequent Access (automatic) - default Infrequent access (automatic) - objects not accessed for 30 days Archive Instant Access (automatic) objects not accessed for 90 days Archive Access (optional) configurable from 90 - 700+ days Deep Archive Access (optional) config from 180 - 700+ days