Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
Object storage with 11 nines of durability and effectively unlimited capacity.
Why it matters
The backbone of data lakes, static sites, backups and pipelines.
When to use it
Use for objects/blobs. Use EBS for block (a disk for one instance) and EFS for shared file systems.
Example
aws s3 cp ./report.pdf s3://my-bucket/reports/ \ --storage-class INTELLIGENT_TIERING --sse aws:kms
Gotcha (exam trap)
S3 is private by default — public exposure is almost always a misconfigured policy or disabled Block Public Access, not an S3 flaw.
A realistic main.tf for this mission. Read it top to bottom — it mirrors the concepts above.
# S3 Security: Policies, ACLs & Encryption
# BleepxCloud — AWS · Intermediate
# Realistic starter — adapt names, regions and CIDRs to your environment.
terraform {
required_providers { aws = { source = "hashicorp/aws", version = "~> 5.0" } }
}
provider "aws" {
region = "eu-west-1" # pick a region close to users / data-residency rules
}
# FinOps: mandatory cost-allocation tags on every resource.
locals {
common_tags = {
Project = "bleepx-cloud"
Domain = "core"
Mission = "s3-security"
ManagedBy = "terraform"
CostCenter = "REPLACE_ME"
}
}
data "aws_caller_identity" "current" {}
# Private bucket: encryption + versioning + public access blocked.
resource "aws_s3_bucket" "data" {
bucket = "bleepx-${data.aws_caller_identity.current.account_id}-data"
tags = local.common_tags
}
resource "aws_s3_bucket_public_access_block" "data" {
bucket = aws_s3_bucket.data.id
block_public_acls = true
block_public_policy = true
ignore_public_acls = true
restrict_public_buckets = true
}
resource "aws_s3_bucket_server_side_encryption_configuration" "data" {
bucket = aws_s3_bucket.data.id
rule { apply_server_side_encryption_by_default { sse_algorithm = "aws:kms" } }
}
Finish the walkthrough above to unlock the check.
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.