Please enable JavaScript.

Coggle requires JavaScript to display documents.

Amazon S3 (FUNCTION (Storage (Storage Class (Standard - IA (durable,…

- - - - enable static website hosting
      - upload index.html
      - set permission to index.html
      - select make public
      - enable CORS for Cross Domain Access
    - - <BUCKETNAME>.s3-website-<REGION>.amzonAWS.com
  - - - DELETE
        
        large number of objects
        
        use Multi-Object Delete
        
        Eventual Consistency :pencil2:
        
        MFA Delete capability could be configured
        
        additonal layer of security
        
        quite complex to set it up
      - PUT
        
        new Object
        
        Read After Write Consistency :pencil2:
        
        immediately readable
      - UPDATE
        
        overwrite put an delete
        
        Eventual Consistency :pencil2:
        
        you might get the old object after update
        
        can take some time to propagate
    - - either get old data or new data
      - never get partial or corrupted data
    - - Standard
        
        durable
        
        immediately available
        
        frequently accessed
        
        autom. distributed accross min. 3 AZ
      - Standard - IA
        
        durable
        
        immediately available
        
        infrequently accessed
        
        min. object size 128KB
        
        performance like Standard
      - Reduced Redundancy (RRS)
        
        noncritical data
        
        durability of 99.99%
        
        Handling lost objects
        
        s3:ReducedRedundandancyLostObject Notification
        
        use SNS with SQS subscribtion endpoint with a worker instance
        
        replaces lost RRS objects
      - Glacier
        
        not available in every region
        
        archive data
        
        store file for compliance reason
        
        no imedately access
        
        3-4 hr to retrieve
      - One Zone-IA
        
        less expensive
        
        for data that does not need extra level of protection
        
        not resilient to the physical loss of an AZ
    - - Files
        
        not enabled = null
        
        older files get no version while enabling
        
        version number starts with 1
      - Great Backup Tool :pencil2:
      - can download every version directly
      - can be enabled for every bucket
      - once installed: can only be disabled, but not removed :pencil2:
        
        disable it and move data to new bucket
    - - https://{region}.amazonaws.com/{bucketname}
    - - lifecycle rules :pencil2:
        
        can be used in conjunction with versioning
        
        can be applied to current versions and previous versions
        
        possible actions
        
        Transition to Standard
        
        Infrequent Access (IA) Storage Class
        
        30 days after creation date
        
        Archive to Glacier Storage Class
        
        30 days after IA
        
        permanent deletion
      - automate transition to tiered storage
      - expire objects
  - - - all request to bucket
      - can be stored in another bucket
  - - - All contents
      - prefix (folder)
      - destination
        
        in same account
        
        in other account
    - - but not the deletion of a deletion marker
  - - - accellerate uploads to S3
    - - distinct URL
      - transfered to S3 in the background
- - - - could be increased by AWS
  - - - use mulitpart upload for big files
        
        recommended for file >= 100MB
        
        required for files > 5GB
        
        parts not reassempled until CompleteMultipartUpload called
    - - Files from 0 Bytes to 5 TB
    - - only lowercase characters
      - must start with letter or number
      - 3-63 characters
      - no underscores allowed
      - can contain char, number,periods, dashes
      - no dash at the end of the name
    - - not transferable
      - owner can grant access to others
    - - globally
      - bucket names must be unique
- - - - AWS.Referer key
        
        access restricted to domains
      - requires principal
    - - public
      - restricted
        
        presigned URL
  - - - TLS/SSL
    - - S3 Managed Keys (SSE-S3)
        
        uses AES 256
        
        most common
        
        encrypt object with unique key
        
        encrypted masterkey
        
        rotates regulary
        
        enable encrypt, Amazon handle the keys
        
        request header
        
        x-amz-server-side-encryption :fire:
      - AWS Key Management Service, Managed Keys (SSE-KMS)
        
        like SSE-S3 with additional features
        
        extra charge :warning:
      - with Customer Provided Keys (SSE-C)
        
        customer have to manage his keys
        
        AWS provides encryption and decryption mechanism
    - - encrypt data on client side
      - encrypt before upload
      - decrypt after download
- - - - OK (success)
    - - redirect
    - - bad request
    - - Conflict
        
        bucket not empty while deletion
        
        bucket already exists
        
        bucket names are unique
        
        BucketAlreadyOwnedByYou
        
        InvalidBucketState
    - - internal server error
    - - Forbidden
        
        Access Denied
        
        Account problem