Deep Dive into Amazon Simple Storage Service (Amazon S3)

Course description

This self-paced course provides you with the knowledge to use, manage, secure, monitor, and optimize Amazon S3 for your storage. You explore buckets, objects, storage classes, security policies, and the storage management capabilities of Amazon S3. You discover other AWS security services and tools and how they can be used to help monitor and secure Amazon S3.

     • Course level: Advanced      • Duration: 11 hours

Intended Audience

This course is intended for:      • Storage engineers      • Systems administrators      • Cloud architects      • Other IT professionals

Course objectives

In this course, you will learn to:      • Use and manage Amazon S3      • Compare and contrast Amazon S3 storage classes      • Secure your data in Amazon S3      • Monitor and analyze your data Amazon S3      • Optimize performance for Amazon S3

Prerequisites

We recommend that attendees of this course have the following prerequisites:      • General AWS knowledge      • General knowledge of Amazon S3      • General knowledge of object storage      • General knowledge of IT storage systems      • General IT business knowledge

Activities

This course includes self-paced training and knowledge checks. This course also includes one or more optional self-paced labs hosted at amazon.qwiklabs.com. Labs must be paid for with credits, which cost $1 USD per credit. Labs typically cost up to 15 credits. This cost is not included with free digital training on aws.training. You will need to create a Qwiklabs account to purchase credits and take a lab.

Curriculum outline

Getting Started with Amazon S3 (60 minutes)      • Storage fundamentals      • Amazon S3 fundamentals      • Interfacing with Amazon S3      • Amazon S3 data management      • Data management and security

Lab: Introduction to Amazon Simple Storage Service (S3) (90 minutes)       • Create a bucket in Amazon S3       • Add an object to a bucket       • Manage access permissions on an object and a bucket       • Create a bucket policy       • Use bucket versioning

Amazon S3 Storage Classes Deep Dive (60 minutes)      • Amazon S3 storage classes      • Storage classes for frequently accessed data      • Storage classes for infrequently accessed data      • Storage classes for unknown or changing access      • Storage classes for archiving objects      • Amazon S3 pricing      • Storage class performance comparison

Managing Access to Amazon S3 (30 minutes)      • Resource-Based and User-Based Policies      • Policy Language      • Access Control Lists

Encryption in Amazon S3 (10 minutes)      • Data at Rest Encryption      • Server-Side Encryption      • Client-Side Encryption      • VPC Endpoints

Auditing Amazon S3 Security (60 minutes)      • Monitoring API calls      • Auditing configurations      • Monitoring access policies      • Follow best practices

Managing Amazon S3 (90 minutes)       • Keeping track of Amazon S3 activity with object-level and server access logging       • Using tagging in Amazon S3       • Auditing your storage with Amazon S3 inventory       • Working with Amazon S3 event notifications       • Executing complex operations on your S3 objects with batch operations       • Monitoring Amazon S3 storage and performance using CloudWatch

Lab: Using Amazon S3 event notifications and batch operations (45 minutes)       • Create an Amazon S3 batch operations job       • Run an S3 batch operations job and verify job completion       • Create an AWS Lambda function       • Create an Amazon S3 event notification that invokes an AWS Lambda function       • Invoke the Lambda function by triggering your bucket’s event notification

Amazon S3 Cost Optimization (60 minutes)       • Optimizing storage costs       • Implement an archiving solution for cost savings

Amazon S3 Performance Optimization (60 minutes)       • Optimizing for high request rates       • Optimizing large uploads performance       • Minimizing latency       • Monitoring performance

Lab: Exploring Amazon S3 Data Access Techniques (60 minutes)       • Use S3 Select to retrieve data from CSV and GZIP files       • Explore parallelization       • Use Amazon CloudFront to securely deliver frequently accessed content

Course Assessment (20 minutes)