AWS Architect > S3 > Flashcards

S3 Flashcards

S3 ProTips (57 cards)

Study These Flashcards
1
Q

What does S3 means?

A

Simple Storage Service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are S3 File Size Limit ?

A

0B to 5 TB. Unlimited Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

S3 Naming Convention / Buckets

A
  • Names use a universal namespace.
  • Names must be globally unique (not specific to a region)
  • Buckets are similar to folders
  • Data is stored in key-value pairs.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is S3 Data Consistency Model?

A
  1. Read after write for PUTS of new objects
  2. Eventual consistency for overwrite PUTS and DELETES (it can take some time to propagate)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the storage classes/tiers of S3?

A

S3 Standard General purpuse, (Durable, immediately available, frequently accessed).

S3 - Intelligent Tiering - Designed to optimize cost of unknown or changing access patterns, by automatically moving data to the most cost-effective tier.

S3-IA (Infrequently accessed) (Durable, immediately available, infrequently accessed).

S3-IA One Zone (Durable, immediately available, infrequently accessed, only available in one availability Zone).

S3 - Glacier - Secure, durable and low-cost for data archiving, retrieval from minutes to hours.

S3 - Glacier Deep Archive - Lowest cost storage, with retrieval of 12 hours acceptable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are S3 Encryption Capabilities:

A

In transit:

SSL/TLS

At Rest:

On the server side:

  • S3 Managed Keys SSE S3- Amazon manages all keys
  • S3 Key Managed Service - SSE KMS - Customer and AWS
  • S3 Customer Provided Keys - SSE - C

On the customer side:

  • You upload everything encrypted.
    1) Client Side Encryption 2) Server Side Encryption (SSE) 2a) Amazon S3 Managed keys (SSE-S3) 2b) KMS (SSE-KMS) (provides audit logs) 2c) Customer-Provided Keys (SSE-C)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you control Bucket Access ?

A

By default buckets are private and all objects stored inside them are private

You can grant access to them with:

1) Bucket ACLs
2) Bucket Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe S3 Versioning features.

A
  • Stores all versions of an object. (inclusive of writes and deletes)
  • A great backup tool
  • Can be integrated with life-cycle rules
  • You pay for each version of an object.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can versioning be disabled?

A

No, versioning can never be disabled, only suspended.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How does Versioning works with MFA?

A

Versioning can integrate MFA with the delete option.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does S3 CRR stands for?

A

Amazon S3 Cross Region Replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is S3 Cross Region Replication (CRR)?

A

It’s a feature that can be enabled in S3, to replicate data from one bucket in one region to another bucket in another region. This can be done for Disaster Recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are Cross Region Replication (CRR) Requirements?

A
  1. Versioning must be enabled on both the source and destination buckets.
  2. Regions must be unique.
  3. Existing Files in the bucket are not replicated automatically.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CRR Restrictions:

A
  1. You cannot replicate to multiple buckets.
  2. You cannot Daisy chain your multiple region buckets.
  3. Delete markers are not replicated, nor deleted versions.
  4. Deleting individual versions or delete markers will not be replicated.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is S3 Lifecycle Management?

A
  • It’s an S3 feature that allows to move objects accross storage classes, according to rules
  • Can be used in conjunction with versioning
  • Can be applied to current and previous versions.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Explain some usual S3 Lifecycle Management rules:

A
  • Move objects from Standard to IA storage class after 30 days of creation.
  • Archive to the Glacier storage Class after 30 days
  • Permanent delete of old objects
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

If you are looking to reduce storage costs how would you go about doing this?

A

Enable Lifecycle Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How can you Secure your S3 Buckets ?

A
  • They are set to private by default.
  • You can setup ACLs
  • You can create Bucket Policies S3
  • Buckets can be configured to create access logs which log all requests made to the S3 bucket.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is Snowball?

A

AWS Snowball is a data transport solution that accelerates moving terabytes to petabytes of data into and out of AWS using storage appliances designed to be secure for physical transport

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Snowball Edge ?

A

It is a snowball with compute functionality.

AWS DC in a box.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Snow Mobile?

A
  • This is a container on a truck, designed for massive amounts of data migration.
  • Peta and Exabyte sized storage.
  • USA only
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is S3 transfer acceleration?

A

Its an S3 feature that allows the usage of CloudFront Edge Locations, and then AWS uses it’s backbone to transfer data to the actual bucket.

Once enabled, it creates a distinct URL to upload your files.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the restrictions to use S3 as a static website?

Study These Flashcards
A
  • No PHP, no [dot]NET.
  • Websites that require DB connections cannot be hosted on S3.
24
Q

How can you protect S3 from deleting objects?

Study These Flashcards
A

Enabling Delete MFA.

25
What is previous name of S3 One Zone IA?
S3 Reduce Redundancy Storage (S3 RRS)
26
What can developers don with S3 that can't do with on-premises solutions?
S3 enables any developer to leverage Amazon’s own benefits of massive scale with no up-front investment or performance compromises. No matter how successful their business become, their data will be accessible, available and secure.
27
How is S3 data Organized?
* S3 is a simple key-based object storage. * When data is stored, you assign a unique object key that can be later be used to retrieve your data. * You can use as well Object Tagging to organize your data.
28
What kind of storage is S3 suitable for?
it's an Object-based storage, suited to upload files from anywhere on the internet, not to be used for OS nor Databases.
29
What status code an upload to S3 generates?
HTTP 200 status code
30
What is S3 Object Lock?
It's an S3 feature that allows to save objects using a WORM model.
31
What is the S3 Object-Lock WORM model?
Write Once Read Many, prevents the object from being deleted or overwritten for a fixed amount of time or indefinetely.
32
What happens to S3 permissions when you upload a new version of files to S3?
If it was public, new version will return it to private.
33
What happens when you delete a file inside a bucket with Versioning enabled?
A new version of the file is added, with a "delete marker", that prevent us from seeing the file in the "regular" view.
34
How can you enhance prevention of accidental deletion of files?
By enabling MFA delete capability
35
How can you specify which objects will be processed by a Lifecycle management rule?
* By using prefix or tags. * By targeting current and/or previous versions.
36
What are 2 actions you can apply to S3 objects with Lifecycle management?
* Transition them to cheaper Storage tiers after a defined time. * Expire and delete them permanently.
37
What options do you have when setting up a bucket Cross Region Replication?
* You can replicate either the entire bucket or just prefix or tags. * You can replicate to the same or to a different account. * You can choose the destination region * You can change the Storage class. * You can change the destination ownership
38
What is AWS Storage Gateway?
It's a service that connects an on-premises appliance to AWS Storage Infrastructure. Theres are physical or software appliances (vmware/Hyper-V)
39
What types of Storage Gateways exist?
3 types: * File Gateway (SMB & NFS) * Volume Gateway (iSCSI) * Stored Volumes * Cached Volumes * Tape Gateway (VTL)
40
Describe S3 Storage Gateway - File Gateway service
Provides an SMB/NFS server on your data center, that stores all files in an S3 bucket, that works just as a regular Bucketn in AWS.
41
What is AWS Storage Gateway Volume Gateway?
It's a service that presents iSCSI volumes to your applications locally. Data written will be asynchronously backed-up as EBS snapshots stored in S3. There are 2 options - Stored Volumes and Cached. Only changed blocks are replicated, and storage is compressed.
42
Describe AWS Storage Gateway, Volume Gateway Stored Volume?
* All data is stored locally. * Provides low-latency to the entire dataset. * Asynchronously replicates to S3 as EBS snapshots. * 1-16 TB volumes.
43
Describe AWS Storage Gateway, Volume Gateway Cached Volume?
* All data is stored in S3, with frequently acced data cached to your local storage * Provides low-latency for frequently accesed data. * 1-32 TB volumes.
44
Describe AWS Storage Getaway - Tape Gateway
* Works with major backup software. * Offers iSCSI and VTL protocols.
45
What is AWS Athena?
* It's a query service that can be used to query S3. * it's serverless (nothing to install) * Pay per query / per TB scanned. * Commonly used to analyze Logs saved to S3.
46
What is PII and examples?
Personal Identifiable Information * SSN * email address * phone number * credit card number
47
What is AWS Macie?
It's a AWS Service that uses ML and NLP to discover, classify and protect sensitive data stored in S3.
48
What can Macie do?
* Security Dashboards, Reporting and Alerts * Work directly with S3 data * Can analyze CloudTrail logs * Helps on PCI - DSS audits * Prevents ID theft
49
How to manage S3 logs?
S3 buckets can be configured to create access logs, which will log all requests made to the bucket. These logs can be sent to another bucket.
50
What information is saved for each object in a bucket?
* Key (name) * value (actual data of the object) * Version ID * Metadata * subresources * ACLs * Torrents
51
Describe 3 ways of sharing S3 buckets accross accounts
* Using bucket policies and IAM * Applies to entire bucket * Programmatic access only * Using Bucket ACLs & IAM * Individual Objects * Programmatic access only * Cross-Account IAM roles * Applies to entire bucket. * Programmatic and Console access.
52
What is an S3 Lifecycle policy?
* Automates moving objects accross S3 storage Tiers. * Can be used in conjunction with versioning. * Can be applied to current and/or previous versions.
53
What is an S3 ACL?
* An Account Control List (ACL), is a subresource attached to every bucket and object in S3. * Defines what Accounts and Groups are granted access to this resource and the type of access. * It's saved in an XML format
54
What is the limit of PUTS per second on an S3 bucket?
3500 PUTS per second.
55
What are the 4 ways you can present an S3 URI?
* Virtual Hosted Style * Path-Style Access * Static Web Site * Legacy Global Endpoint URL
56
With a bucket named "mybucket", what would be virtual style and path style URLs?
Virtual: ***mybucket***.s3.***region***.amazonaws.com/ Path-Style: s3.***region***.amazonaws.com/***mybucket***/
57
How many buckets can you create in a single account?
100 by default, up to 1000 raising a service ticket.
AWS Architect
flashcards
Decks in class (21)
# Cards
Brainscape helps you reach your goals faster, through stronger study habits.
© 2026 Bold Learning Solutions. Terms and Conditions