AMAZON S3 Storage

What type of storage is Amazon S3?

Object Storage

Where are S3 objects stored?

Buckets

Which statement about an S3 bucket is TRUE?

A bucket is created in a specific AWS Region.

What uniquely identifies an S3 object?

Bucket + object key

Which statement about S3 directories is correct?

S3 objects are organized using keys; / creates a folder-like appearance. 

An S3 object consists of which of the following?

Body, metadata, tags, and potentially a version ID

A data engineer wants to upload a 20-GB file to S3. Which method is required?

Multipart upload

What is a major advantage of multipart upload?

It can parallelize uploads and improve transfer performance.

A company transfers very large files from a location geographically far from the S3 Region. Which feature can improve transfer speed by routing uploads through AWS edge locations?

S3 Transfer Acceleration

A data engineer needs to download only portions of a very large S3 object and parallelize the download. Which feature is appropriate?

Byte-range fetches

Which can be used to control access to S3 resources?

All of the above

An EC2 instance needs access to objects in S3. What is the preferred mechanism?

Attach an IAM role to the EC2 instance

A user in another AWS account needs access to a bucket. Which S3 mechanism can grant cross-account access?

Bucket policy

A company never wants a particular bucket to become publicly accessible. Which feature should be kept enabled?

S3 Block Public Access

Which statement about S3 authorization is MOST accurate?

Access can be allowed by identity/resource policies, but an explicit DENY prevents access.

A user accidentally overwrites an important S3 object. What should have been enabled to recover the previous version?

Versioning

Where is S3 Versioning enabled?

Bucket level

What happens when an object is deleted in a versioned bucket?

A delete marker can hide the current version while previous versions remain recoverable.

Versioning is suspended on a bucket. What happens to existing object versions?

They remain.

A company wants to replicate objects from one S3 Region to another Region. Which feature should it use?

CRR

A company wants to replicate objects between buckets in the same Region. Which feature should it use?

SRR

What must be enabled on both source and destination buckets for standard S3 replication?

Versioning

A company enables S3 replication today. What happens to existing objects by default?

Only new objects are replicated; Batch Replication can be used for existing objects.

A company needs predictable replication performance and wants monitoring/alerts when replication falls behind. Which feature should it consider?

S3 Replication Time Control

Which storage class is designed for frequently accessed data?

S3 Standard

A company needs inexpensive storage for data that is accessed infrequently but requires rapid retrieval. Which is MOST appropriate?

S3 Standard-IA

A company stores data that can be recreated and does not require multi-AZ storage. Which class may be appropriate?

S3 One Zone-IA

A company needs archived data with millisecond retrieval. Which class is designed for this?

Glacier Instant Retrieval

A company needs archive storage where retrieval can take minutes to hours. Which class is appropriate?

Glacier Flexible Retrieval

A company must retain compliance data for many years and rarely retrieves it. Which class is MOST appropriate?

Glacier Deep Archive

A company does not know how frequently its objects will be accessed and wants S3 to automatically move objects between access tiers. Which class is BEST?

S3 Intelligent-Tiering

Which Intelligent-Tiering feature distinguishes it from manually configured lifecycle transitions?

It automatically changes access tiers based on usage.

Which storage class stores data in a single Availability Zone?

S3 One Zone-IA

Which statement about S3 durability is TRUE?

S3 storage classes provide extremely high object durability.

A company wants objects to move from Standard to Standard-IA after 60 days and then to Glacier after six months. What should it configure?

S3 Lifecycle rules

Which lifecycle action permanently removes objects after a defined period?

Expiration

Which can S3 Lifecycle rules target?

All of the above

A company stores thumbnails that can easily be regenerated. They are needed for 60 days and then have no value. What is a cost-effective design?

Store in One Zone-IA and configure expiration after 60 days

A company needs deleted objects immediately recoverable for 30 days, then recoverable within 48 hours for another year. Which combination BEST fits?

Versioning + lifecycle transitions of noncurrent versions

A company wants recommendations about when objects should transition between Standard and Standard-IA. Which feature can help?

S3 Analytics / Storage Class Analysis

A company wants a Lambda function to run when an image is uploaded to S3. Which capability is appropriate?

S3 Event Notifications

Which destinations can receive S3 event notifications?

All of the above

A company wants sophisticated event filtering and many AWS service destinations for S3 events. Which service should it consider?

Amazon EventBridge

Which S3 encryption method uses keys managed and owned by AWS?

SSE-S3

A company wants AWS KMS to manage its encryption keys and wants key usage auditable through CloudTrail. Which option should it choose?

SSE-KMS

A customer wants to provide and manage its own encryption keys while S3 performs server-side encryption. Which option is appropriate?

SSE-C

A company wants to encrypt the data before it ever leaves its environment and retain complete control of the encryption process. Which approach is MOST appropriate?

Client-side encryption

Which encryption method requires the customer-provided key to accompany requests and requires HTTPS?

SSE-C

A company has extremely high S3 request volume and uses SSE-KMS. The workload begins hitting KMS request quotas. What is the likely bottleneck?

KMS API request limits

Which protocol provides encryption in transit when communicating with S3?

HTTPS/TLS

A large company has one S3 bucket containing finance, sales, and analytics data. Each group needs different access permissions. What feature can simplify managing access to the same bucket?

S3 Access Points

Each S3 Access Point can have its own:

DNS name and access point policy

A company wants an S3 Access Point accessible only from its VPC. What additional capability is required?

VPC endpoint

A workload requires extremely high request rates and single-digit millisecond latency and can tolerate single-AZ storage. Which S3 storage class should be considered?

S3 Express One Zone

Which is a defining characteristic of S3 Express One Zone?

High-performance storage in a single Availability Zone

What is Apache Iceberg?

A table format for data lakes

Which capability is associated with Apache Iceberg?

All of the above

A data lake team needs row-level updates/deletes, schema evolution, and historical table queries. Which technology is particularly relevant?

Apache Iceberg

What is a primary purpose of S3 Tables?

Purpose-built storage for tabular lakehouse data

S3 Tables provides managed table optimization capabilities such as compaction and snapshot management. What problem does this primarily address?

Managing table-format data efficiently in a lakehouse

A company wants organization-wide visibility into S3 storage usage, cost efficiency, and data-protection practices. Which feature should it use?

S3 Storage Lens

Which can S3 Storage Lens analyze?

All of the above

A company wants to identify buckets containing incomplete multipart uploads and objects that could potentially move to cheaper storage. Which Storage Lens category is especially useful?

Cost-optimization metrics

A company wants metrics showing whether buckets have versioning, SSE-KMS, and cross-region replication configured. Which Storage Lens category is relevant?

Data-protection metrics

A company stores customer image in S3. The original images must be immediately retrievable for 60 days. After 60 days, customers can tolerate retrieval taking several hours. Thumbnails can be recreated and are needed for only 60 days.

Which design is BEST?

Originals → Standard, then Glacier after 60 days; thumbnails → One Zone-IA, then expire after 60 days

A company wants to protect S3 data from accidental deletion, retain old versions, and automatically move old versions to cheaper storage.

What combination should it use?

Versioning + Lifecycle

A company needs to share one S3 bucket across multiple departments. Finance needs access only to /finance, Sales needs /sales, and Analytics needs read access to the entire bucket. What is the BEST solution?

Use S3 Access Points with separate policies.

A company needs to copy newly created objects from an S3 bucket in us-east-1 to another bucket in eu-west-1 for compliance. What should it configure?

CRR

The company then discovers that objects created before replication was enabled were not copied. What should it use?

S3 Batch Replication

A company receives unpredictable access patterns for millions of S3 objects. It wants automatic cost optimization without manually determining when each object should transition.

Which is BEST?

Intelligent-Tiering

A company has a 100-TB file that must be uploaded to S3. The network connection is slow and unreliable. Which combination can improve the transfer?

Multipart upload and S3 Transfer Acceleration

An organization needs to protect highly sensitive data at rest, use customer-controlled KMS keys, and audit key usage. Which S3 encryption option is BEST?

SSE-KMS

A company needs to prevent public access to an S3 bucket regardless of accidental configuration changes made by developers. Which feature should be enabled?

S3 Block Public Access

A data-processing workload reads only a small portion of a very large S3 object. The application wants to avoid retrieving the entire object. Which capability should it consider?

S3 Select

A company wants to trigger different AWS workflows based on S3 object creation, deletion, and other events with sophisticated JSON filtering and multiple destinations.

EventBridge