S3 Flashcards
What feature can you use to be notified is someone unarchived a file from Glacier?
Set up an S3 notification
What are the S3 Classes from most expensive to least expensive?
- S3 Standard - most workloads
- S3 IA - Infrequently accessed - backups, disaster recover files etc.
- S3 One-zone IA - Same as above, but only one AZ - noncritical
- S3 Intelligent Tiering - unknown access patterns
- S3 Glacier. long term, minutes or hrs access, a retrieval fee
- S3 Glacier deep archive - long-term, 12h+ access
What is the size range of S3 Files
0 bytes to 5Tb
What are the parts of File Object stored in S3
- Key
- Value
- Version ID (when versioning is enabled)
- Metadata
What is the
- durability of S3
- availability of S3
- 11 9’s
- 99.95% - 99.99%
What is the
- durability of S3
- availability of S3
- 11 9’s
- 99.95% - 99.99%
Whats the use case of S3 Standard
- Most frequently used
- Accessed often
- Highly durable
What methods can you use to secure your data stored in an S3 bucket?
- Server Side Encryption
- Access Control Lists (which groups have access and what they have access to
- Bucket policies
Down to what level can you assign Access Control Lists?
Object level within a bucket
What consistency model does S3 utilize?
Strong read-after-write
What can you NOT use S3 for?
- No operating system
- No database
With S3 Versioning enabled, how can you provide extra security against deletion
Enable two factor authentication for deleting objects
When using S3 with versioning, How do you restore a deleted Version ?
Delete the delete marker
When using S3 Versioning what happens when you delete a version?
A delete marker is added.
Does each version of an object in S3 have its own URL?
Yes
Can you disable versioning in S3?
No, once enabled you can only suspend it.
What does lifecycle do for S3?
Allows you to transition objects (or delete them) to cheaper tiers. You can only go from more to less expensive, not the reverse.
Can S3 Lifecycle work with versioning? What is an example of that?
Yes. You can move previous versions of an object to a cheaper tier
(S3 Object Lock) What is WORM
Write Once Read Many - Helps you prevent the deletion or modification of an object for a fixed time or indefinitely.
What is S3 Object Lock?
Allows you to force the retention of S3 Object to meet regulatory requirements or governance requirements
What are the two modes of S3 Object Lock
- Governance Mode - Only the root user can alter or delete a file
- Compliance Mode - No one, not even root can alter modify or delete an object for a period of time
What is the retention period in S3 Object Lock
Tells you how long the object lock is in effect
What is a “Legal Hold”?
It’s an object lock with no retention period. It has to be removed.
What is Glacier Vault Lock
It’s S3 Vault Lock for Glacier.
