S3 Flashcards
What is an ”infinitely scaling” storage?
S3
How can S3 be used?
As backbone to websites or integrated with AWS services
What are the use cases of S3?
- Backup and storage
- Disaster Recovery
- Archive
- Hybrid Cloud storage
- Application hosting
- Media hosting
- Data lakes & big data analytics
- Software delivery
- Static website
What storage directories require globally unique name but are defined at the region level?
S3 buckets
What has keys?
S3 objects
Where can you find the key of an S3 object? what about the object name?
Object key: The part after s3://my-bucket/
Object name: the last bit after the final “/”
How can you ensure security of S3?
• User based
• IAM policies - which API calls should be allowed for a specific user from IAM (with EC2 Instance Role)
console
• Resource Based
• Bucket Policies - bucket wide rules from the S3 console - allows cross account
• Object Access Control List (ACL) – finer grain
• Bucket Access Control List (ACL) – less common
• Note: an IAM principal can access an S3 object if
• the user IAM permissions allow it OR the resource policy ALLOWS it
• AND there’s no explicit DENY
• Encryption: encrypt objects in Amazon S3 using encryption keys
What are the tools for S3 versioning? And, what model do they adopt? And, at what level do they occur?
S3 Object Lock & Glacier Vault Lock
- Adopt a WORM (Write Once Read Many) model
- Bucket-level
S3 Replication:
- Cross region replication
- Same region replication
- Across different accts & regions
What lock is good for S3 compliance and data retention, and why?
Glacier Vault Lock because vault lock policy prevents objects from being deleted
What is the key difference between S3 Object Lock and Glacier Vault Lock?
S3 Object Lock blocks an object version deletion for a specific amount of time vs. never!
What should you check if you get a 403 (Forbidden) error on S3 websites?
Ensure bucket policy allows public reads
What can host static websites and have them accessible on the www?
S3
What stores any request made to S3, from any account, authorized or denied, will be logged into another S3 bucket? What is this used for?
S3 Access Logs
Root cause analysis, audit usage, and viewing of suspicious patterns
What are the S3 storage classes?
- Amazon S3 Standard - General Purpose
- Amazon S3 Standard-Infrequent Access (IA)
- Amazon S3 One Zone-Infrequent Access
- Amazon S3 Intelligent Tiering
- Amazon Glacier
- Amazon Glacier Deep Archive
What has 99.999999999% (eleven 9s) durability and 99.99% availability? Is it the same for all storage classes?
S3; same durability and different availability across the storage classes except for One Zone - IA which has 99.5%
What has 99.99% availability and is used for frequent data access due to its low latency and high throughput, and is able to sustain 2 concurrent facility failures?
Amazon S3 Standard - General Purpose
What are the use cases for Amazon S3 Standard - General Purpose?
Big Data analytics, mobile & gaming applications, content distribution
What has 99.99% availability and is suitable for data that is less frequently accessed, but requires rapid access when needed; and has lower cost than S3 standard but is subject to retrieval fee, and can sustain 2 concurrent facility failures?
S3 Standard - Infrequent Access
What are the use cases for S3 Standard - Infrequent Access?
As a data store for disaster recovery, backups
Which S3 storage class has 99.5% availability and 1 zone?
S3 One Zone - IA
How many S3 Storage classes do most have at minimum?
3
Which S3 Storage classes charge for retrieval?
S3 Std IA
S3 One Zone IA
S3 Glacier
S3 Glacier Deep Archive
What can you use to automate moving objects between S3?
lifecycle configuration
What is AWS responsible for as part of Shared Responsibility Model for S3?
- Infrastructure (global security, durability, availability, sustain concurrent loss of data in two facilities)
- Configuration and vulnerability analysis
- Compliance validation
