An S3 bucket is a container for storing objects in Amazon S3.
When creating a bucket, you specify its name and the Region where it will reside.
Benefits
- Virtually unlimited storage
- Object lifecycle management
- Broad range of use cases
Security and Privacy Management
Everything stored in S3 is private by default. The ff. are ways you can grant permissions to access S3 objects:
- Bucket policies
- resource-based policies that can only be attached to S3 buckets
- a bucket policy specifies which actions are allowed or denied on the bucket and every object within the bucket.
- Identity-based policies
- policies attached to identities
- you can use these policies to specify which S3 buckets and objects users can access and what actions they can perform.
- Encryption
- to protect data both at rest and in transit.