Amazon S3 Introduction (associate)

Question 1

What are the Use cases for Amazon S3?

Answer 1

1. Backup and storage
2. Disaster recovery
3. Archive
4. Hybrid cloud storage
5. Application hosting
6. Media buying
7. Data lakes & big data analytics
   Etc

Question 2

What are the different security for Amazon S3?

Answer 2

1. User based
   - IAM Policies: which API calls should be allowed for a specific user from IAM
2. Resource -Based
   - Bucket policies : bucket wide rules from the the S3 console - allows Cross Account

• Object Access Control List (ACL): finer grain (can be disabled)
• Bucket access control list (ACL): less common (can be disabled)

3. Encryption: encrypt object in Amazon S3 using encryption keys

Question 3

An IAM principal can access an S3 object if what?

Answer 3

• The user IAM permissions allow it or the resource policy allows
• And there’s no explicit deny

Question 4

The S3 bucket policies are _________ based policies

Answer 4

JSON
- Resource buckets and objects
- Effect allow/ deny
- Actions: set of API to allow or deny
- Principal: the account or user to apply the policy to

-Use S3 bucket for policy to grant public access to the bucket

Question 5

__________ are setting that were created to prevent company data leaks

Answer 5

Block Public Access

Question 6

S3 can host ____________ and have them accessible on the internet

Answer 6

Static websites

• If you get a 403 forbidden error, make sure the bucket policy allows public reads

Question 7

What are some features of Amazon S3 versioning?

Answer 7

• You can version your files in Amazon S3
• It’s enabled at the bucket level
• Same key overwrite will change the “version”: 1,2,3
• It’s best practice to verison your buckets
• Protext against unintended deletes (ability to restore a version)
• Easy roll back to previous verison
• Any files that is not versioned prior to enabling versioning will have version “null”
• Suspending version g does not delete the previous versions

Question 8

What are the different types of Amazon S3 replication & its use case?

Answer 8

1. Must enable versions in source and destination buckets
2. Cross - Region replication (CRR)
3. Same region replication (SRR)
4. Buckets can be in different AWS accounts
5. Copying is asynchronous
6. Must give proper IAM permission to S3

Use cases:
1. CRR- compliance, lower latency access, replication across accounts

2. SRR- log aggregation, live replication between production & test accounts