AWS-5

AWS-S3-2

Key Features

Storage and Security

• Amazon S3 stores data as objects within resources called "buckets." You can store as many objects asyou want within a bucket, and write, read, and delete objects in your bucket. Objects can be up to 5
terabytes in size.
• You can control access to the bucket (who can create, delete, and retrieve objects in the bucket for
example), view access logs for the bucket and its objects, and choose the AWS region where a bucket
is stored to optimize for latency, minimize costs, or address regulatory requirements
Cross-Region Replication
• Cross-region replication (CRR) provides automated, fast, reliable data replication across AWS regions.
Every object uploaded to an S3 bucket is automatically replicated to a destination bucket in a
different AWS region that you choose
Event Notifications
• Amazon S3 event notifications can be sent when objects are uploaded to or deleted from Amazon
S3
Versioning
• Amazon S3 allows you to enable versioning so you can preserve, retrieve, and restore every
version of every object stored in an Amazon S3 bucket.
Lifecycle Management
• Amazon S3 provides a number of capabilities to manage the lifecycle of your data, including
automated migration of older data from S3 Standard to S3 Standard - Infrequent Access and
Amazon Glacier
Encryption
• Amazon S3 encrypts data in transit via SSL-encrypted endpoints and can also encrypt data at rest
with three options for managing encryption keys: directly by S3, through AWS Key Management
Service (AWS KMS), or you can provide your own keys
Security and Access Management
• Amazon S3 provides several mechanisms to control and monitor who can access your data as well as how, when, and where they can access it. VPC endpoints allow you to create a secure connection
without a gateway or NAT instances
Cost Monitoring and Controls
• Amazon S3 has several features for managing and controlling your costs, including bucket
tagging to manage cost allocation and integration with Amazon CloudWatch to receive billing
alerts
Flexible Storage Options
• Amazon S3 is designed for 99.999999999% durability and up to 99.99% availability of objects over a given year.
• In addition to S3 Standard, there is a lower-cost Standard - Infrequent Access option for
infrequently accessed data, and Amazon Glacier for archiving cold dataat the lowest possible cost
Time-limited Access to Objects
• Amazon S3 supports query string authentication by devs, which allows you to provide a URL that is
valid only for a length of time that you define. This time limited URL can be useful for scenarios such as software downloads or other applications where you want to restrict the length of time users
have access to an object
Data Lifecycle Management
• Lifecycle management of data refers to how your data is managed and stored from creation and
initial storage to he it’s o lo ger eeded a d deleted
Transferring Large Amounts of Data
• AWS Import/Export accelerates moving large amounts of data into and out of AWS. AWS transfers
your data directly onto and off of storage devices using A azo ’s high-speed internal network and
bypassing the Internet.
• You can use AWS Import/Export for migrating data into the cloud, distributing content to your
customers, sending backups to AWS, and disaster recovery.
You can also use AWS Direct Connect to transfer large amounts of data to Amazon S3.