Amazon Simple Storage Service (S3)

You can create between 1 and 1($) buckets in each AWS account. You can increase the bucket limit to a maximum of 2($) buckets by submitting a service limit increase.

To protect data, Amazon S3 automatically encrypts all objects on upload and applies server-side encryption with S3-managed keys as the base level of encryption for every bucket in Amazon S3 at no additional cost.

The 1($) model ensures that after a write (or update) to a data object (e.g., an S3 object or a database record), any subsequent reads will immediately reflect the latest write. This guarantees that once you write or update data, any read operation will return the most recent version of that data, with no delay or 2($) where older versions of the data might be temporarily visible.

• 1($) - Moves large amounts of data online between on premises and Amazon S3
  The service automates and accelerates the transfer of large datasets between on-premises storage and AWS services like S3 or EFS, simplifying data migration.

• 2($) - Supports SFTP, FTPS
  The service allows secure file transfers into AWS using SFTP, FTPS, or FTP, connecting easily with Amazon S3 and EFS without managing servers.

• 3($) - Secure transfer of files over long distance
  The service speeds up data uploads to S3 from distant locations using Amazon CloudFront’s global edge network.

• 4($) - New-real-time analytics with business intelligence
  The service streams real-time data into AWS services like S3 and Redshift, enabling fast, continuous data ingestion and transformation.

• 5($) - Continuously captures and stores TBs of data per hour
  The service enables real-time streaming data capture for analytics, providing scalable data processing as it flows into AWS services.

• 6($) - Use of third-party connectors

• 1($)
  AWS Snowcone is a small, rugged, portable device for edge computing and secure data transfer to AWS, ideal for limited space and bandwidth environments.

• 2($)
  AWS Snowball is a physical device used for transferring large amounts of data between your on-premises storage and AWS, supporting both storage and edge computing.

• 3($)
  AWS Snowmobile is an exabyte-scale data transfer service using a secure shipping container to move massive data volumes (up to 100 PB) to AWS for large-scale migrations.

You want to grant access to a user for an object in an S3 bucket for a limited time.  What security mechanism should you use?

• 1($)

  {
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Principal": {
          "AWS": "arn:aws:iam::123456789012:user/ExternalUser"
        },
        "Action": "s3:GetObject",
        "Resource": "arn:aws:s3:::my-bucket/*"
      }
    ]
  }
  

• 2($)

  {
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "s3:ListBucket",
          "s3:GetObject"
        ],
        "Resource": [
          "arn:aws:s3:::my-bucket",
          "arn:aws:s3:::my-bucket/*"
        ]
      }
    ]
  }