| Question | Answer |
| Outline the Storage Tiers | Standard (default, high throughput, low latency)
Standard-IA (disaster recovery)
Standard-OneZone
Glacier Instant Retrieval
Glacier Flexible Retrieval (expedited, standard, bulk)
Glacier Deep Archive (standard, bulk)
Intelligent Tiering
Lifecycle |
| Define the basics of S3 | Items stored as objects in top level directories called buckets
Max object size = 5TB
Bucket names globally unique
No folder system, each object has unique key |
| What is the Shared Responsibility Model for S3? | AWS: infrastructure, updates, compliance validation, vulnerability analysis
User: IAM and access policies, client-side encryption at rest and in transit, versioning, replication, logging/monitoring, storage class utilisation |
| What is the Snow Family? | Snowcone: <24TBs, robust, portable, compute/storage optimised, offline/online
Snowball Edge: up tp PBs, offline, compute/storage optimised,
CLI or OpsHub
Snowmobile: >10PB, no compute
Edge computing & data transfer
Faster than network for large data |
| How does encryption work in S3? | Server-side: Default
Client-side: Optional |
| Website hosting in S3? | Can host a static website from an S3 bucket
Populate bucket with HTML, images, code etc.
Public access must be enabled |
| Versioning in S3? | Capable of allowing versions of objects to be retained in S3
Opt-in
If turned off, versions persist
Useful for rolling back changes |
| Replication in S3? | 2 different buckets with asynchronous replication
CROSS region: low latency access, compliance
SAME region: log aggregation, live replication between prod and test environments
Can be CROSS-ACCOUNT
Requires IAM permission to write to specific buckets |
| Security in S3? | - User based: IAM policies
- Resource based: Bucket policies, object/bucket access control lists
- Encryption (server and client side)
- Blocking public access |
| Explain the concept of durability in S3 | The risk that an object will be lost by S3
11 9's retention
Store 10m objects, you would lose one object every 10k years
Same across all storage classes |
| Explain the concept of availability in S3 | How accessible the stored data is
Varies between storage classes |
| What is S3 Gateway? | Services that allows on-prem storage to access the AWS cloud
Makes use of services like EBS, S3, and Glacier
Useful for disaster recovery, backups, compliance, tiered storage
Types:
- File Gateway
- Volume Gateway
- Tape Gateway |
