Download as rtf, pdf, or txt
Download as rtf, pdf, or txt
You are on page 1of 4

S3 is an object based storage

The url of the bucket would be as below:

https://s3.amazonaws.com/bukcetname/
objectname

https://
bucketname.s3.regioncode.amazonaws.com/
objectname

2 types of encryption for s3

1. Encryption in transit: Amazon by default uses


HTTPS mechanism to make your objects
accessible to you.
2. Encryption at rest

a. Server side encryption: You are using your


own encryption keys or encryption keys
provided by amazon to encrypt your bucket.
i. Amazon s3-managed keys (SSE-S3):
Encryption key created by amazon. : Simplest
option to go about.
ii. AWS Key management service key
(SSE-KMS): KMS, you create your keys or
import your keys and use those keys to
encrypt the s3 bucket
b. Client side encryption: Before you upload
object, you encrypt with your keys and
upload encrypted file to s3.

=====

Storage classes in S3:

Standard: It is used for the data which is going


to be frequently accessed. In this case, the
charges to store the data is on higher side.
But, whenever you are accessing the data, its
very very less charge being applied.
Infrequently accessed storage class (IA): Its used for
the data that is infrequently being accessed
may be once in 2 months/3 months is what
your access pattern is. The charge to store
the data is very less compared to s3 standard
but you will be charged a retrieval fee
whenever you want to access the data.
One zone IA: Same as S3 -IA with just one
difference in this case the data is stored only
in one availability zone. Lesser availability %
compared to IA storage class.
Glacier: Is typically used to archive the data.
You want to store the data purely for
compliance reasons. Here we have 3 options
for retrieval.
Standard: 3-5 hours wait time before
you can access the data.
Expedited retrieval: You can be able
to access the data in 5 mins aprox.
Bulk retrieval: 5-12 hours is waiting
time.

Intelligent tiering: It can smartly move the


objects from standard to IA storage class
based on access pattern. This option you can
use it whenever you are not sure of the
access pattern.

RRS: Reduced redundancy storage class: There is a


possibility of customers losing some files.

=============
Versioning
bucket1: hello.txt: no version id: null: 1TB
enabled version
:hello.txt: 00000001: 1.1TB
suspended the versioning
:hello.txt: 1.2 TB

1+1.1+1.2TB
:hello.txt: 1.3 TB
1+1.1+1.3TB = 3.4TB

Versioning can be enabled but cannot be


disabled. It can only be suspended and this
means the older versions will continued to be
present until you manually clean them up.

You might also like