CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Amazon S3 — Object Storage: When to Use What (And How the Exam Tests It)
Understand Amazon S3 object storage options and how to prepare for SAA-C03 exam questions effectively.
Amazon S3 is the go-to for scalable object storage. With 99.999999999% durability, it suits a range of data types. Knowing when to use S3 and its different storage classes is vital for the AWS Certified Solutions Architect - Associate (SAA-C03) exam.
When to Use Amazon S3
Amazon S3 excels with various data types. Here’s when to reach for it:
- Any blob: This includes images, logs, backups, and data-lake files.
- Static website assets: Store and serve HTML, CSS, and JavaScript files with ease.
- CloudFront origin: Use S3 as a source for delivering content through CloudFront.
- Lifecycle-tiered archives: Transition data to lower-cost storage as it ages.
Key Architectural Decisions
Understanding S3's storage classes will guide your choices:
| Storage Class | Access Pattern | Use Case |
|---|---|---|
| Standard | Frequent access | Active data |
| Intelligent-Tiering | Unknown or changing access | Data with unpredictable access patterns |
| Standard-IA | Infrequent access | Data accessed less than once a month |
| One Zone-IA | Infrequent access, non-critical | Cost-effective for infrequent access |
| Glacier | Long-term archive | Data rarely accessed, archival storage |
| Deep Archive | Long-term archival | Cost-effective for very rare access |
Lifecycle rules are essential. They automate transitions and expirations of objects. This helps manage costs efficiently.
Security is critical in S3. Always start with Block Public Access enabled. Use bucket policies and SSE-KMS for encryption. Enforce TLS with aws:SecureTransport.
Gotchas & Exam Traps
Be wary of common pitfalls:
- Block Public Access: This setting overrides permissive ACLs and bucket policies. A common exam trap is asking why an object remains private despite seemingly open permissions.
- IP limits: Remember that the 5 IPs reserved per subnet applies to EC2/VPC, not S3. Confusing these can lead to mistakes.
- Gateway VPC endpoint: Use this to access S3 privately. It helps avoid NAT data charges, a detail exam writers may test you on.
How the Exam Tests This
Expect questions focused on choosing the correct storage class based on access patterns. You may also encounter scenarios where you must identify the impact of lifecycle policies on costs. Look out for questions that test your knowledge on security settings and their implications.
The Rule to Remember
S3 is almost always the right choice for durability; plan lifecycle policies from day one for ongoing cost optimization.
For further practice, Take the free SAA-C03 mock exam.