AWS Mastery on S3: Beginner to Expert

Discover S3 bucket business use cases for backups from on-premise to cloud, hosting front-end apps with CloudFront for regional delivery, and disaster recovery with near-customer data restoration.

Create an AWS S3 bucket using cloud shell or CLI, specifying the bucket name and region, then verify the bucket in the AWS console.

Upload a local file to an s3 bucket using aws cli, verify identity with sts get-caller-identity, list buckets, copy the file with aws s3 cp, and verify in the console.

Upload a file to an S3 standard storage bucket to demonstrate the standard storage class, low latency access, and replication across three zones.

Explore S3 standard storage practices: lifecycle management to move infrequently accessed data, versioning for backups, encryption and security with IAM and bucket policies, plus multi-upload performance and cost optimization.

Apply S3 lifecycle management to move unused data to infrequent access, enable versioning, encrypt with AWS keys, enforce least-privilege access, and optimize with multi-part uploads and Cost Explorer.

Discover how AWS S3 intelligent-tiering automatically moves not accessed objects to archive and deep archive access tiers after 90 and 180 days, reducing costs through bucket-based configurations.

Configure S3 intelligent tiering to move inactive objects from standard to archive after 90 days. Apply a folder-based rule to move to deep archive after 180 days.

Discover how S3 intelligent-tiering automates cost savings by avoiding retrieval fees and monitoring access patterns automatically, with optional monitoring service costs to consider.

Amazon S3 standard-ia infrequent access storage offers low cost, high durability, and replication across three availability zones, with low latency, high throughput, and 99.9% availability.

Discover amazon s3 one zone ia, a cost-saving infrequent-access storage in a single zone with features like standard ia, ideal for secondary backups and migrations through cross-region replication (secondary replication).

Explore S3 one zone-IA to store non-critical data in a single availability zone, lowering costs; the hands-on upload demonstrates selecting one zone-IA for a manifest file.

Learn about the three Amazon S3 Glacier classes—Instant Retrieval, Flexible Retrieval, and Deep Archive—covering retrieval times, minimum storage, and long-term archival use cases.

Explore Amazon Glacier instant retrieval for archiving, delivering millisecond data access and up to 68% cost savings, with lifecycle rules to move unused data after 90 days.

Explore Amazon S3 Glacier storage options, including instant retrieval, flexible retrieval, and deep archive, and learn to upload files and observe retrieval times from milliseconds to hours.

Explore Amazon S3 Glacier Flexible Retrieval, a second-tier storage class for backups and disaster recovery with 10% lower cost than Glacier, offering minutes-to-hours retrieval and lifecycle automation.

Explore AWS S3 archiving with Glacier flexible retrieval. Configure it in a bucket, upload files, and observe replication across three availability zones with retrieval times from minutes to hours.

Explore how objects are files stored in an S3 bucket, the core storage unit in AWS Mastery on S3. Store any file type, from notepads to websites.

Learn to upload a file to an S3 bucket via the AWS Management Console, review file size, format, permissions, and ownership, and inspect bucket properties such as region and URL.

Learn how to copy a file from one S3 bucket to another within the same account, using the copy action and selecting the destination bucket, as shown with manifest.json.

Learn how to switch an S3 object from standard to infrequent access to optimize storage costs, using the edit storage class action in the S3 bucket interface.

Learn to tag S3 buckets in the AWS management console by adding tags such as customer name, cost center, and project purpose to enable reports for data analytics.

Learn how to create a lifecycle rule in the AWS S3 management console to move current versions of all objects from standard to infrequent access after 30 days.

Learn to validate IAM user access on an S3 bucket by attaching policies at the user and object levels, then read, upload, and delete objects, noting versioning considerations.

Generate an S3 bucket policy with the policy generator, denying put object without server-side encryption, using the bucket ARN and a KMS key condition.

Explore the S3 access control list, detailing object and file level permissions and how the bucket owner grants read and write access, cross-account transfers from account B to account A.

Perform a hands-on lab to enable acl on a source bucket, grant account b read and write access via canonical id, and validate cross-account uploads.

Disables the ACL on the S3 bucket to follow best practice, saves the changes, and restores the previous state to prevent external access.

Learn how to grant access to an external user by creating a pre signed URL for an uploaded S3 object, configuring a time-limited link (e.g., five minutes) to share securely.

Explore how to grant public access to an S3 object, allowing access from outside the AWS account and across an S3 bucket architecture.

Learn how server side encryption protects files stored in an S3 bucket by encrypting data with a key before storage and decrypting with the same key.

Learn how to encrypt S3 objects to protect confidential data, using server-side and client-side encryption with 256-bit keys, via the AWS Console, CLI, and SDK.

Learn to perform client-side encryption before uploading to S3 using AWS SDK or CLI, ensuring the file is encrypted on the client and stored securely.

Learn how server-side encryption protects files uploaded to Amazon S3 using AWS or native keys, enabling secure encryption and controlled decryption with proper permissions.

Encrypt files on upload using server-side encryption with S3 managed keys, select SSE-S3 during upload, verify the encryption in properties, and store securely in the S3 bucket.

Encrypt the object in S3 using the AWS S3 managed key, upload with the standard storage class, and verify the encryption property on the object.

Learn to encrypt files on upload by enabling server-side encryption with S3 managed keys (SSE-S3) in an S3 bucket, selecting a managed key and verifying encryption in properties.

Learn about AWS S3 bucket versioning, where uploading the same file creates tracked versions. Roll back to earlier versions and restore data as needed.

Learn how object lock in AWS S3 protects files from modification for compliance and governance, with bucket level or object level settings and days to keep.

Learn how S3 object lock provides governance and compliance modes, retention periods, and legal holds to protect financial and medical data from overwrite or deletion for specified durations.

Demonstrates configuring an s3 bucket with versioning and object lock, applying compliance and governance retention, and using the aws cli in cloud shell to protect and manage objects.

Explore how object lock in compliance and governance modes controls deletion and overwriting in s3 buckets, with versioning, object logs, and bucket policies for retention overrides.

Apply legal hold on an aws s3 object to prevent deletion or overwriting, even under governance or compliance scenarios; it preserves versions and blocks permanent deletion.

Explore cross-region replication for AWS S3 to automatically replicate existing and new files from a source bucket to a destination in another region, via console or CLI.

Practice hands-on AWS S3 replication rules to set up a source and destination bucket across regions, configure a replication rule with a role, and enable CloudWatch reporting.

Delete a replication rule in the AWS Management Console to prevent unnecessary data replication to the destination folder and avoid extra costs, demonstrated through a hands-on cleanup.

Explore aws s3 transfer acceleration, using edge locations to create endpoints near customer regions that reduce latency and speed up data transfers for data migration, backups, and big data analysis.

Configure S3 event notifications to trigger a lambda on any object creation at the bucket root, with optional folder or extension filters, and monitor results in CloudWatch logs.

Perform a hands-on demo on enabling S3 server access logging, configuring destination folders by date, uploading files, and verifying logs populate after policy updates.

Disable S3 server access logs to stop billing for unused resources, then delete the stored log objects and confirm removal to complete the cleanup.

Learn to clean up cloudtrail configurations on an s3 bucket, removing cloudtrail settings to stop log pushing and avoid ongoing charges.

Learn to monitor AWS S3 with CloudWatch by defining storage metrics, tracking the number of objects, and creating bar charts to visualize S3 data in CloudWatch.

Configure Amazon EventBridge with S3 bucket events to notify on object creation or deletion and push modifications to CloudWatch log groups for compliance.

Analyze storage class usage in an AWS S3 bucket to identify cost drivers and optimize spending with standard and standard IA, supported by graphical and CSV reports.

Configure S3 inventory to track bucket changes, object size, encryption, and lifecycle rules, and use the glue ETL workflow for reporting, auditing, and cost optimization through storage class moves.

Create an S3 inventory for a bucket with current version only, weekly CSV reports stored at a chosen path, capturing attributes like size, replication, encryption, and storage class.

Learn to use cost explorer for granular AWS spending by service and time, drilling down to daily or hourly S3 costs across accounts and regions to identify charges and act.

Explore AWS Lambda logging with a Python function that pushes application logs to an S3 bucket, with potential routing to CloudWatch or log streams from a subnet-hosted AWS Lambda.

Learn to attach an AWS Lambda execution role by navigating to IAM roles, selecting administration permissions, and enabling logging to a log stream and writing it to an S3 bucket.

Learn to use an AWSLambda function with the AWS SDK to read logs from an S3 bucket, download to temp, parse them in Python, and count information and errors.

Learn to host a static website on an S3 bucket via CloudFront, access through a CloudFront DNS name, and enable edge caching and WAF security for nearby users.

Learn to build an AWS S3 data pipeline using a glue crawler to read a CSV, define a classifier and IAM role, and query results in Athena with ETL updates.