Skip to main content
Launch this lab in the IP Lab Portal, then follow the steps below in the AWS console. Open IP Lab Portal

​
Overview

​
Lab Details:

  1. This lab familiarizes users with Amazon S3 (Simple Storage Service) and guides them through the process of creating an S3 bucket and enabling public access to objects within the bucket.
  2. Duration: 25 minutes
  3. AWS Region: US East (N. Virginia) us-east-1.

​
Introduction

​
What is S3?

  • S3 stands for Simple Storage Service.
  • It provides object storage through a web service interface.
  • Each object is stored as a file with its metadata included and is given an ID number.
  • Objects uploaded to S3 are stored in containers called Buckets, whose names are unique and they organize the Amazon S3 namespace at the highest level.
  • These buckets are region specific.
  • You can assign permissions to these buckets, in order to provide access or restrict data transaction.
  • Applications use this ID number to access an object.
  • Developers can access an object via a REST API.
  • Supports upload of objects.
  • Uses the same scalable storage infrastructure that Amazon.com uses to run its global e-commerce network.
  • Designed for storing online backup and archiving of data and applications on AWS.
  • It’s mainly designed with the minimal features in order to create web-scale computing in an easy way.
  • Storage classes provided are:
    • Standard
    • Standard_IA, i.e., Standard Infrequent Access
    • Intelligent_Tiering
    • OneZone_IA
    • Glacier
    • Deep_Archive
    • RRS, i.e., Reduced Redundancy Storage (not recommended by AWS)
  • Data access is provided through S3 console, which is a simple web-based interface.
  • Data stored can be either Public or Private based on user requirement.
  • Data stored can be encrypted.
  • We can define life-cycle policies which can help in automation of data transfer, retention and deletion.
  • Amazon Athena can be used to query S3 data as per demand.

​
Architecture diagram

​
Task details

  1. Sign in to AWS Management Console
  2. Create S3 Bucket.
  3. Upload an object to the bucket
  4. Change the object permission.
  5. Validation of the lab

​
Launching the lab environment

  1. To launch the lab environment, click on the Launch lab button.
  2. Please wait until the cloud environment is provisioned. It will take less than a minute to provision.
  3. Once the Lab is started, you will be provided with IAM username, Password, Access Key, and Secret Access Key.
You can only start one lab at any given time

​
Files you need

Download these before you start — the lab cannot be completed without them.

​
Lab guide

​
Lab steps

​
Task 1: Sign in to AWS Management Console

  1. Click on the Open console button, and you will get redirected to AWS Console in a new browser tab.
  2. On the AWS sign-in page,
    • Leave the Account ID as default. Never edit/remove the 12-digit Account ID present in the AWS Console. Otherwise, you cannot proceed with the lab.
    • Now copy your Username and Password in the Lab Console to the IAM Username and Password in AWS Console and click on the Sign-in button.
  3. Once Signed In to the AWS Management Console, make the default AWS Region as US East (N. Virginia) us-east-1.
If you face any issues, please go through FAQs and Troubleshooting.

​
#### Task 2: Creating S3 Bucket

In this task, we are going to guide users through the process of creating an S3 bucket.
  1. Navigate to the Services menu at the top and click on S3 in the Storage section.
  2. Click the Create Bucket and fill in the bucket details.
  • Bucket type select : General purpose
  • Bucket Name: Enter whizdemo123
  • (Note: The Bucket Name must be unique across all existing bucket names in Amazon S3)
  • Object ownership: Select ACLs enabled and select the Object writer as Object owner option
  • Bucket settings for Block Public Access: Uncheck the option, Block all public access and select the option of Acknowledgment.
  • Leave other settings as default, click on the Create bucket button.
  1. Your S3 Bucket is now created.

​
Task 3: Uploading Object to the Bucket

In this task, we are going to teach users how to upload objects (in this case, an image) to the S3 bucket they created.
  1. Click on your bucket name.
  2. In the Overview, You can see the following message
    • You don’t have any objects in this bucket.
  1. You can upload any image from your local storage or download this Smiley image.
  2. To upload a file to the S3 bucket,
    • Click on the Upload button.
    • Click on the Add files button.
    • Browse any local image or the image downloaded by the name smiley.jpg.
    • Click on the Upload button.
    • You can watch the progress of the upload from within the Transfer panel at the bottom of the screen.
    • Once your file has been uploaded, it will be displayed in the bucket.
  1. Now click on the Close button in the top right corner of the screen.
  2. Under Objects, click on smiley.jpg, You will see image details like owner, size, link, etc.
  3. A URL will be listed under Object URL
  4. Open image Link in a new tab.
    • You will see an AccessDenied message, which means the object is not publicly accessible.

​
Task 4: Change Object Permission

In this task, we are going to demonstrate how users can modify the permission settings of an object within an S3 bucket
  1. Go to your smiley.jpg object page.
  • Go to the Permissions tab.
  • Now click on the Edit button on the Right side of it.
  • Note: If the Edit button is disabled, change the bucket ownership to ACLs enabled and choose Object writer as the Object owner.
  • Everyone (public access) : check the Read checkbox of Objects.
  • Now scroll a little bit below and check I understand the effects of these changes on this object. Checkbox.
  • Now scroll to the bottom and click on Save Changes button.
  1. Now again Open image Object URL in a new tab or return to the browser tab that displayed Access Denied and refresh the page.
  2. You can see your image is loaded successfully and is publicly accessible now.
Do you know?Amazon S3 allows you to host a static website directly from an S3 bucket. By enabling public access to the objects in the bucket and configuring the bucket as a static website, you can serve your website content directly from S3, without the need for a separate web server.

​
Task 5: Validation Test

  1. Once the lab steps are completed, please click on the Check my work button on the left side panel.
  2. This will validate the resources in the AWS account and shows you whether you have completed this lab successfully or not.
  3. Sample output :

​
Completion and conclusion

  1. You have successfully created an S3 Bucket
  2. You have successfully uploaded an object to the bucket and set up the bucket permission.
  3. You have successfully given public access and tested the object’s accessibility.

​
End lab

  1. Sign out of the AWS Account.
  2. You have successfully completed the lab.
  3. Once you have completed the steps, click on End lab in the IP Lab Portal.

​
What gets checked

When you press Check my work, the platform verifies each of these:
  • Create Public AWS S3 Bucket — Check whether a Public S3 Bucket created or not
  • check s3 object — Check whether an object is uploaded to the S3 bucket.