title: “S3 — Map of Content” created: 2026-07-20 updated: 2026-07-20 type: moc tags:
- aws
- s3
- moc
S3 — Map of Content
Everything related to Amazon S3, gathered from all domains in one place.
Training Source
- [[../training/Introduction-to-Amazon-Simple-Storage-Service-S3|Introduction to Amazon S3 (lab)]]
Storage — Core Concepts
- [[storage/s3-fundamentals|S3 Fundamentals]] — Object storage model, durability, key concepts
- [[storage/s3-bucket-configuration|S3 Bucket Configuration]] — Naming rules, region selection, object ownership
- [[storage/s3-object-operations|S3 Object Operations]] — Upload, download, metadata, Object URL
- [[storage/s3-versioning|S3 Versioning]] — Enable versioning, delete markers, recovering objects
Security — Access Control
- [[security/s3-block-public-access|S3 Block Public Access]] — BPA settings, hierarchy, interaction with ACLs/policies
- [[security/s3-access-control-lists|S3 Access Control Lists]] — Legacy ACLs, object ownership, making objects public
- [[security/s3-bucket-policies|S3 Bucket Policies]] — JSON policy structure, Policy Generator, common actions
- [[security/aws-arns|AWS ARNs]] — ARN format, S3-specific ARNs, common patterns
- [[security/iam-instance-profiles|IAM Instance Profiles]] — EC2 roles for S3 access, credential delivery via IMDS
- [[security/s3-access-without-public|S3 Access Without Public Exposure]] — Granting access via bucket policy while keeping BPA ON and ACLs disabled
DevOps — CLI & Tools
- [[devops/aws-cli-s3-commands|AWS CLI S3 Commands]] — s3 cp, s3 ls, s3 mb, high-level vs low-level commands
Review Questions
- What are the 3 mechanisms to control access to S3? (BPA, ACLs, Bucket Policies)
- How does an EC2 instance access S3 without hardcoded credentials?
- What happens when you delete a versioned object?
- What’s the difference between
s3://commands ands3apicommands?