Please enable JavaScript.

Coggle requires JavaScript to display documents.

Amazon S3 - Coggle Diagram

- - - - delete specific previous
        version ID not replicated
      - can replicate delete marker (optional setting)
- - - - ~5 min downtime / month
    - - big data analytic, mobile & game, content
  - - - 99.5% available
        
        ~5h downtime / month
      - use case
        
        secondary backup, or data can recreate
    - - ~50 min downtime / month
    - - disaster recover, backup
  - - - 10mils file -> lose 1 file in 10.000 years
      - same for all class
    - - downtime
  - - - archiving / backup
    - - use case: once a quarter
      - min storage 90 day
    - - expedited (<5 min) - high cost, standard (<5 day), bulk(5h -> 0.5d) - free
      - min duration 90: day
    - - standard: 0.5d, bulk: 2day
      - min duration: 180 day (0.5 year)
- - - - full path:: s3://<bucket-name>/...
  - - - practical: multi-part upload for size > 100Mb
- - - - managed, owned by AWS S3
      - AES-256; must set x-amz-server-side-encryption: AES256
    - - managed, handled AWS KMS (key manage service)
      - advantage: user control + audit key usage
      - x-amz-server-side-encryption: aws:kms
      - limitation
        
        SSE-KMS: upload (GenerateDataKey) / download decrypt ->
        KMS quota / second: 5500~3000 req / s
    - - you manage key
      - send key in HTTPS header
      - must use CLI
    - - encyrpt before sending
  - - - Permisison > CORS setting
  - - - versioning enable
      - only bucket owner can enable/disable MFA
    - - Check: Properties > Edit Bucket Versioning > MFA delete
      - CLI: aws s3api put-bucket-versioning --bucket ... --versioning-configuration...
- - - - Actions > Share with presign URL
- - - - 6-36; not ip; no uppercase
        no underscore
- - - - wide rule from S3 console
        
        allow cross account
    - - can be disabled
    - - can be disabled
- - - - S3 add policy to logging bucket