S3

Question 1

S3 Use cases

Answer 1

• Backup and storage
• disaster recovery
• archive
• hybrid cloud storage
• application hosting
• media hosting
• data lakes & bug data analysis
• software delivery
• static website

Question 1

S3 bucket naming

Answer 1

• no uppercase, no underscore
• 3 to 63 characters long
• not an IP
• must start with lowercase letter or number
• must not start with prefix xn-
• must not end with suffix -s3alias

Question 2

S3 Object Properties

Answer 2

• key is path (prefix + object name)
• no directories, just keys with long names that contain /
• object values are content of body
• • max object size 5TB
• • if uploading more than 5GB, must be multipart
• metadata (key value pairs)
• 10 tages
• version ID

Question 3

S3 security contructs

Answer 3

• user-based (IAM policies)
• resource based
• • bucket policies
• • object access control list (ACL)
• • bucket access control list (ACL)
• Encryption

Question 4

S3 bucket policies

Answer 4

• JSON
• • resources: buckets and objects
• • effect: allow/deny
• • actions: set of API to allow or deny
• • principal: account or user

use to

• grant access to bucket
• force objects to be encrypted
• grant access to another account

Question 5

S3 Replication

Answer 5

• must enable versioning in source and dest buckets
• CRR cross region (compliance, latency, replication)
• SRR same region (log aggregation, prod & test replication)
• Buckets can be in different AWS accounts
• Copying is async
• Must give proper IAM permissions to S3

Question 6

S3 storage classes

Answer 6

• S3 Standard
• S3 Standard Infrequent Access (IA)
• S3 One zone-infrequent access
• S3 Glacier instant retrieval
• S3 Glacier flexible retrieval
• S3 Glacier Deep archive
• S3 Intelligent Tiering

Question 7

S3 Standard

Answer 7

• 99.99%
• use for frequently access data
• low latency and high throughput
• sustain 2 concurrent facility failures

Big data analytics, mobile and gaming applications, content distribution

Question 8

S3 Infrequent Access

Answer 8

• S3 standard IA
• • 99.9% available
• • use for DR, backups
• one zone IA
• • 99/5% availability
• • secondary backups, or recreatable data

Question 9

S3 Glacier

Answer 9

• instant retrieval
• • ms retrieval, great for quarterly data
• • minimum storage duration 90 days
• flexible retrieval
• • expedited (1-5m), standard (3-5h), bulk (5-12h) free
• • minimum storage duration 90 days
• deep archive
• • standard (12h) and bulk (48h)
• • minimum storage duration 180 days

Question 10

S3 intelligent tiering

Answer 10

• Small monthly monitoring and auto-tiering fee
• moves objects between access tiers based on usage
• Frequent Access tier (automatic): default tier
• Infrequent Access tier (automatic): objects not accessed for 30 days
• Archive Instant Access tier (automatic): objects not accessed for 90 days
• Archive Access tier (optional): configurable from 90 days to 700+ days
• Deep Archive Access tier (optional): config. from 180 days to 700+ days

Question 11

IAM Access Analyzer for S3

Answer 11

• ensures only intended people have access to buckets
• evaluates S3 bucket policies, S3 ACLs, Acceess point policies
• Powered by IAM analyzer

Question 12

AWS Snowball edge

Answer 12

• physical data transport solution for TB to PBs in our out of AWS
• alternative to network
• pay per data transfer
• Edge storage optimized
• • 80TB for block volume and S3 object storage
• Edge compute optimized
• • 42TB

large migrations, decommissions, DR

Question 13

AWS Snowcone

Answer 13

• small portable computing anywhere
• light
• used for edge computing, storage, and data transfer
• • snowcone 8TBs og HDD
• • Snowcone SSD 14TB of SSD
• use snowcone where snowball doesn’t fit*
• send to AWS or connect to internet

Question 14

AWS snowmobile

Answer 14

• Transfer exabytes of data
• Each snowmobile has 100PB
• use multiple in parallel
• high security
• Better than snowball for > 10PB

Question 15

Snowball usage process

Answer 15

• request from AWS
• install snowball client on servers
• connect snowball to servers and copy files
• ship back to AWS
• data is loaded into S3 bucket
• Snowball data is destroyed

Question 16

AWS OpsHub

Answer 16

Replaces CLI for managing snow devices

• unlocking or configuring devices
• transferring files
• launching and managing instances
• monitor metrics
• launch services like EC2, NFS, etc.

Question 17

AWS storage gateway

Answer 17

• Bridge between on-prem and cloud data
• hybrid storage services
• use for DR, backup and restore, tiered storage
• • file gateway
• • volume gateway
• • tape gateway