click below
click below
Normal Size Small Size show me how
S3
AWS S3
Question | Answer |
---|---|
Outline the Storage Tiers | Standard (default, high throughput, low latency) Standard-IA (disaster recovery) Standard-OneZone Glacier Instant Retrieval Glacier Flexible Retrieval (expedited, standard, bulk) Glacier Deep Archive (standard, bulk) Intelligent Tiering Lifecycle |
Define the basics of S3 | Items stored as objects in top level directories called buckets Max object size = 5TB Bucket names globally unique No folder system, each object has unique key |
What is the Shared Responsibility Model for S3? | AWS: infrastructure, updates, compliance validation, vulnerability analysis User: IAM and access policies, client-side encryption at rest and in transit, versioning, replication, logging/monitoring, storage class utilisation |
What is the Snow Family? | Snowcone: <24TBs, robust, portable, compute/storage optimised, offline/online Snowball Edge: up tp PBs, offline, compute/storage optimised, CLI or OpsHub Snowmobile: >10PB, no compute Edge computing & data transfer Faster than network for large data |
How does encryption work in S3? | Server-side: Default Client-side: Optional |
Website hosting in S3? | Can host a static website from an S3 bucket Populate bucket with HTML, images, code etc. Public access must be enabled |
Versioning in S3? | Capable of allowing versions of objects to be retained in S3 Opt-in If turned off, versions persist Useful for rolling back changes |
Replication in S3? | 2 different buckets with asynchronous replication CROSS region: low latency access, compliance SAME region: log aggregation, live replication between prod and test environments Can be CROSS-ACCOUNT Requires IAM permission to write to specific buckets |
Security in S3? | - User based: IAM policies - Resource based: Bucket policies, object/bucket access control lists - Encryption (server and client side) - Blocking public access |
Explain the concept of durability in S3 | The risk that an object will be lost by S3 11 9's retention Store 10m objects, you would lose one object every 10k years Same across all storage classes |
Explain the concept of availability in S3 | How accessible the stored data is Varies between storage classes |
What is S3 Gateway? | Services that allows on-prem storage to access the AWS cloud Makes use of services like EBS, S3, and Glacier Useful for disaster recovery, backups, compliance, tiered storage Types: - File Gateway - Volume Gateway - Tape Gateway |