Amazon S3 Mastery Bootcamp 2025

Explore Amazon S3 as a scalable object storage service, creating buckets to store objects with unique keys, and using features like versioning, tags, multi-part uploads, bucket policies, and public access.

Create a json-based bucket policy and attach it to your S3 bucket to enable public access, while understanding policy parameters like version, id, statement, principal, effect, action, and resource.

Enable static website hosting on an S3 bucket, attach a public-read bucket policy, upload index.html, and access the region-specific website endpoint to publish a live site.

Enable bucket versioning to maintain versions of objects and recover from accidental deletions. Learn how to view version IDs, manage delete markers, and restore prior file versions in S3.

Learn how to asynchronously replicate objects from one S3 bucket to another using cross region replication or same region replication, with versioning enabled on both buckets.

Explore S3 storage classes, including standard, standard infrequent access, one zone infrequent access, glacier instant retrieval, glacier flexible retrieval, glacier deep archive, and intelligent-tiering, with hands-on transitions and lifecycle rules.

Create S3 lifecycle rules to automatically transition objects across storage classes, such as standard to intelligent tiering or Glacier, and set expirations for current and non-current versions.

Learn to set up S3 event notifications for object creation, route them to an SQS queue, adjust access policies, and verify delivery by uploading files.

Learn about Amazon S3 performance, including baseline throughput per partition prefix, multi-part uploads for large files, transfer acceleration with edge locations, and byte fetch ranges.

Learn how to use S3 Select to filter the contents of S3 objects with SQL, retrieving data subsets and reducing data transfer, cost, and latency through server-side filtering.

Explore the four S3 encryption methods—server-side encryption with S3 managed keys, server-side encryption with KMS, server-side encryption with customer-provided keys, and client-side encryption—along with default encryption and HTTPS considerations.

Explore cross-origin resource sharing (cors) in Amazon S3, compare same-origin and cross-origin requests, and implement pre-flight checks with bucket policies and headers in hands-on demos.

Perform a hands-on demo on enabling and disabling S3 MFA delete by enabling bucket versioning and using AWS CLI with a virtual MFA device, since the console cannot toggle it.

Learn how to enable S3 server access logging, store logs in a separate logging bucket in the same region, and avoid logging loops while applying bucket policies.

Learn how to generate pre-signed URLs for S3 objects using the S3 console or AWS CLI, set expiration, and grant temporary access by inheriting the generator's permissions.

Explore s3 access points and how they simplify security management by assigning domain names and policies for applications and users, with vpc origin access points, endpoints, and restricted public access.

Explore glacier vault lock and object lock in S3: set a vault policy to enforce write-once, read-many, and apply two retention modes—compliance and governance—along with legal hold for unlimited protection.

Learn how S3 Object Lambda attaches a Lambda function to an S3 object access point to modify and transform data on get and list requests without storing a copy.

Perform bulk tasks on all objects in an S3 bucket with one request using batch operations, listing objects with inventory, filtering with S3 Select, and applying actions via a job.