S3 Flashcards

1
Q

Is S3 object or block based?

A

S3 is object based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Storage limit in S3

A

There is unlimited storage in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are you asked when creating a bucket?

A

Bucket name, region, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Scope of the S3 buckets names

A

Bucket names must be unique globally.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is one of the formats of the S3 objects URL?

A

https://[bucketName].s3.[region].amazonaws.com/[objectName]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Data consistency model of Amazon S3

A

Amazon S3 buckets in all Regions provide read-after-write consistency for PUTS of new objects and eventual consistency for overwrite PUTS and DELETES.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 storage classes/tiers

A
  • S3 Standard
  • S3-IA
  • S3 One Zone-IA
  • S3 Glacier
  • S3 Glacier Deep Archive
  • S3 Intelligent-Tiering
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 object’s fundamentals

A

Key (name)
Value (data)
Version Id
Metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can be versioning on S3 disabled?

A

No. It can only be suspended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the file size limits in S3?

A

Files can be from 0 bytes to 5 TB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the HTTP PUT size limit in S3?

A

5G

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is an alternative to upload big objects to S3 apart from a single PUT?

A

The Multipart Upload API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How much time is needed to restore from Glacier?

A

A few hours or minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the costs associated with S3?

A
Storage
Requests
Storage Management Pricing (tags)
Data Transfer Pricing (on cross-region replication)
Transfer Acceleration (using CloudFront)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is S3 versioning incremental?

A

No. Stores all versions of an object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is required for Cross Region Replication?

A

Versioning enabled on the source and target buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Does versioning is required for Lifecycle rules?

A

No. Lifecycle rules can be used in conjunction with versioning but is not required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When you activate Cross Region Replication, does existing objects are replicated?

A

No. Existing objects will not be replicated. Cross-Region Replication replicates every future upload of every object to another bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What can be done with Lifecycle Management?

A

Automate moving the objects between storage classes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Are S3 buckets by default public or private?

A

By default, all newly created buckets are private (and also all objects stored inside them)

21
Q

How can you setup access control to a bucket?

A

Using:

  • Bucket policies
  • Access control lists
22
Q

How can you audit the access to S3 resources?

A

S3 buckets can be configured to create access logs which log all requests made to the S3 bucket. This can be done to another bucket (even in another AWS account)

23
Q

What encryption methods are supported for “in transfer” S3 resources?

A

SSL/TLS

24
Q

What encryption methods are supported for the Server Side Encryption (“at rest”) of S3 resources?

A
  • Server-side encryption
  • SSE-S3 (Managed keys)
  • SSE-KMS (Key Management Service)
  • SSE-C (Customer Provided Keys)
25
Q

What’s an additional security measure to prevent accidental deletions of S3 objects?

A

Versioning’s MFA delete capability

26
Q

Are lifecycle rules available only for the current version?

A

No. Lifecycle rules are also available for previous versions.

27
Q

Can S3 be used to host static websites?

A

Yes (serverless, very cheap, scales automatically, no dynamic site hosting)

28
Q

What’s the HTTP status code for a successful S3 write?

A

HTTP 200 OK

29
Q

Which is the URL format for S3 static website hosting?

A

http://[bucket name].s3-website-[region].amazonaws.com

30
Q

How am I charged for using Versioning?

A

Normal Amazon S3 rates apply for every version of an object stored or requested.

31
Q

Are deletions (delete markers) replicated in S3 Replication?

A

Not by default

32
Q

What’s an expected “limit” for PUT/POST/DELETEs and GETs per second in S3? How can performance be increased with prefixes?

A

There’s no hard limit. Your application can achieve at least 3,500 PUT/POST/DELETE and 5,500 GET requests per second per prefix in a bucket. There are no limits to the number of prefixes in a bucket. It is used to increase your read or write performance exponentially. For example, if you create 2 prefixes in an Amazon S3 bucket to parallelize reads, you could scale your read performance to 11,000 read requests per second.

33
Q

Does Multipart Upload deliver improved throughput?

A

Yes. You can upload parts in parallel to improve throughput.

34
Q

How can you make individual objects public?

A

Using object ACLs

35
Q

How can you make entire buckets public?

A

Using bucket policies

36
Q

What do you need to keep in mind when using SSE-KMS to encrypt your objects in S3?

A

The KMS limits. Uploading/Downloading will count towards the KMS quota

37
Q

How can performance be increased when downloading large files from S3?

A

Using S3 byte-range fetches

38
Q

What kind of versions are stored for an object when versioning is enabled?

A

All versions of an object are stored in S3. This includes all writes and even if you delete an object

39
Q

Can Lifecycle Management be only applied to current versions?

A

No. Can be applied to current versions and previous versions

40
Q

What can S3 Object Lock be used for?

A

To store objects using a WORM model: Write once, read many

41
Q

How can S3 Object Lock be applied? To individual objects or to an entire bucket?

A

Both. Object Lock can be on individual objects or applied across the bucket as a whole

42
Q

What are the two possible S3 Object Lock modes?

A

Compliance mode and governance mode

43
Q

How does S3 Object Lock Governance Mode work?

A

Users can’t overwrite or delete an object version or alter its lock settings unless they have special permissions

44
Q

How does S3 Object Lock Compliance Mode work?

A

A protected object version can’t be overwritten or deleted by any user, including the root user in your AWS account

45
Q

How can WORM be implemented in S3 and Glacier?

A

WORM -> S3 -> Object lock

WORM -> Glacier -> Vault lock

46
Q

How does S3 Glacier Vault Lock work?

A

S3 Glacier Vault Lock allows you to easily deploy and enforce compliance controls for individual S3 Glacier vaults with a vault lock policy. You can specify controls, such as WORM, in a vault lock policy and lock the policy from future edits. Once locked, the policy can no longer be changed.

47
Q

How much time is needed to restore from Glacier Deep Archive?

A

12 hours

48
Q

How can encryption be enforced with a Bucket Policy?

A

A bucket policy can deny all PUT requests that don’t include the x-amz-server-side-encryption parameter in the request header

49
Q

When do multipart uploads should and must be used?

A

Should be used for any files over 100MB and must be used for any file over 5GB.