Amazon S3 - Master course

Explore how Amazon S3 bucket and user policies grant or deny access to bucket objects, using explicit denies, conditional permissions, and elements like resources, actions, principal, and conditions.

Learn to create an S3 bucket policy that denies uploads of non-encrypted objects, test enforcement by uploading unencrypted and encrypted files, and validate policy behavior in a lab setup.

Learn how S3 access logging records bucket requests for security and audits, storing logs in target bucket via a log delivery group; enabling logging is free, though storage costs apply.

Enable server access logging for an S3 bucket, configure a destination bucket for logs, and understand log contents like source IP, operation, status, and timing for audit and troubleshooting.

Learn how S3 encryption protects data at rest and in transit, with default bucket encryption and server-side options using customer master keys or keys stored in a management service.

Explore S3 encryption, including default encryption and server-side encryption with AWS KMS or S3 managed keys. Experiment with per-object encryption and observe encryption at object and packet levels.

Understand how S3 versioning preserves multiple object versions in a bucket, enabling recovery and history. Learn how MFA delete adds hardware-based authentication to prevent accidental or intentional deletions.

Learn how Amazon S3 versioning handles object keys, including uploading duplicates, viewing current and previous versions, and how suspending versioning affects future uploads.

Enable and configure MFA delete on an Amazon S3 bucket, manage security credentials, upload objects, and delete versioned objects under multifactor authentication.

Enable S3 cross region replication to copy objects from a source bucket to a destination bucket across regions, with in transit encryption and replication only for new objects.

Set up cross region replication in Amazon S3 by creating source and replicate buckets, configuring replication rules with filters or all objects, and testing replication of new objects.

Leverage S3 lifecycle management to automatically transition objects between storage classes and expire them after a set period, guided by versioning-aware rules across buckets.

Set up and manage S3 bucket lifecycle rules to automatically transition objects between storage classes, handle current and previous versions, manage incomplete multipart uploads, and schedule expirations with cost warnings.

Learn how to configure Amazon S3 event notifications to trigger on object creation, removal, restoration, and replication events, and deliver messages to SNS, SQS, Lambda, or push notification services.

Learn to configure Amazon S3 event notifications in a lab, set SQS as the destination, define object created events, and adjust access policies to enable message delivery.

Learn how to host static content with Amazon S3, enable static website hosting, configure endpoints and redirects, and appreciate the low-cost, secure, scalable benefits.

Set up a static website on Amazon S3 by uploading files and configuring the index document. Enable public access with bucket permissions and a policy generated via the policy generator.