Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help


title: “Amazon S3 Fundamentals” created: 2026-07-20 updated: 2026-07-20 type: knowledge tags:

  • aws
  • s3
  • storage
  • certification

Amazon S3 Fundamentals

What It Is

Amazon Simple Storage Service (Amazon S3) is an object storage service — not block storage (EBS) or file storage (EFS). It stores data as objects within buckets.

  • Object = file + metadata + unique key
  • Bucket = container for objects (flat namespace, no real folders — prefixes simulate hierarchy)

Why It Matters

S3 is one of the most foundational AWS services. It appears in nearly every certification exam and real-world architecture. Use cases span websites, mobile apps, backup/restore, archive, enterprise apps, IoT, and big data analytics.

Key Concepts

ConceptDetail
Durability99.999999999% (11 nines) — data is replicated across multiple AZs
AvailabilityVaries by storage class (99.99% for Standard)
Storage modelObject storage (not hierarchical file system)
Global namespaceBucket names are globally unique across all AWS accounts
Max object size5 TB (single PUT limited to 5 GB; use multipart for larger)
Region-boundObjects stay in a region unless explicitly transferred

How It Works

  1. You create a bucket in a specific AWS Region
  2. You upload objects (files) into the bucket
  3. Each object gets a unique key (its full path within the bucket)
  4. Access is controlled via IAM policies, bucket policies, ACLs, and Block Public Access
  5. Objects are accessed via HTTPS URLs: https://<bucket>.s3.<region>.amazonaws.com/<key>

Examples

  • Static website hosting
  • Data lake for analytics
  • Backup and disaster recovery
  • Log storage (CloudTrail, ELB, CloudFront)
  • Application data storage (reports pushed from EC2)

Gotchas

  • Bucket names are globally unique and immutable once created
  • S3 is eventually consistent for overwrite PUTs and DELETEs (though strong consistency was added in Dec 2020 for all operations)
  • Objects are private by default — you must explicitly grant access
  • Block Public Access (BPA) overrides any permissive ACL or policy

See Also

  • [[s3-bucket-configuration]]
  • [[s3-object-operations]]
  • [[s3-versioning]]
  • [[s3-block-public-access]]
  • [[s3-bucket-policies]]