How can you secure the access to your S3 bucket-AWS Blog Info

-
  • ACL (Access Control List)
    ACL is used to manage the access of resources to buckets and objects. An object of each bucket is associated with ACL. It defines which AWS accounts have granted access and the type of access. When a user sends the request for a resource, then its corresponding ACL will be checked to verify whether the user has granted access to the resource or not.
    When you create a bucket, then Amazon S3 creates a default ACL which provides a full control over the AWS resources.
  • Bucket Policies
    Bucket policies are only applied to S3 bucket. Bucket policies define what actions are allowed or denied. Bucket policies are attached to the bucket not to an S3 object but the permissions define in the bucket policy are applied to all the objects in S3 bucket.

The following are the main elements of Bucket policy:

  • Sid
    A Sid determines what the policy will do. For example, if an action that needs to be performed is adding a new user to an Access Control List (ACL), then the Sid would be AddCannedAcl. If the policy is defined to evaluate IP addresses, then the Sid would be IPAllow.
  • Effect: An effect defines an action after applying the policy. The action could be either to allow an action or to deny an action.
  • Principal
    A Principal is a string that determines to whom the policy is applied. If we set the principal string as '*', then the policy is applied to everyone, but it is also possible that you can specify individual AWS account.
  • Action
    An Action is what happens when the policy is applied. For example, s3:Getobject is an action that allows to read object data.
  • Resource
    The Resource is a S3 bucket to which the statement is applied. You cannot enter a simply bucket name, you need to specify the bucket name in a specific format. For example, the bucket name is javatpoint-bucket, then the resource would be written as "arn:aws:s3""javatpoint-bucket/*".

Comments

Post a Comment

Popular posts from this blog

Amazon Route 53-AWS Blog Info

-
Image
Amazon Route 53  is a highly available and scalable Domain Name System (DNS) web service. It is designed for developers and corporates to route the end users to Internet applications by translating human readable names like  www.mydomain.com , into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other. How to Configure Amazon Route 53? Following are the steps to configure Route 53. Step 1  − Open the Amazon Route 53 console using this link −  https://console.aws.amazon. com/route53/ . Step 2  − Click create hosted zone option on the top left corner of the navigation bar. Step 3  − A form page opens. Provide the required details such as domain name and comments, then click the Create button. Step 4  − Hosted zone for the domain will be created. There will be four DNS endpoints called delegation set and these endpoints must be updated in the domain names Nameserver settings. Step 5  − If it is  godaddy.com  th...
Read more

Introduction To Amazon Web services-AWS Blog Info

-
Image
·   AWS stands for  Amazon Web Services . ·   The AWS service is provided by the Amazon that uses distributed IT infrastructure to provide different IT resources available on demand. It provides different services such as infrastructure as a service (IaaS), platform as a service (PaaS) and packaged software as a service (SaaS). ·   Amazon launched AWS, a cloud computing platform to allow the different organizations to take advantage of reliable IT infrastructure. Uses of AWS ·   A small manufacturing organization uses their expertise to expand their business by leaving their IT management to the AWS. ·   A large enterprise spread across the globe can utilize the AWS to deliver the training to the distributed workforce. ·   An architecture consulting company can use AWS to get the high-compute rendering of construction prototype. ·   A media company can use the AWS to provide different types of content such as ebox or audio files to t...
Read more

What is DNS(Domain name Services)-AWS Blog Info

-
Image
DNS stands for Domain Name System. DNS is used when you use an internet. DNS is used to convert human-friendly domain names (such as  https://www.javatpoint.com ) into an Internet Protocol (IP) address. IP addresses are used by computers to identify each other on the network. IP addresses are of two types,  i.e., Ipv4 and Ipv6. Top Level Domains Domains are seperated by a string of characters seperated by dots. For example,  google.com ,  gmail.com , etc. The last word in a domain name is known as a Top Level Domain. The second word in a domain name is known as a second level domain name. For example: .com:  .com is a top-level domain. .edu:  .edu is a top-level domain. .gov:  .gov is a top-level domain. . co.uk :  .uk is a top-level domain name while .co is a second level domain name. . gov.uk :  .uk is a top-level domain name while .gov is a second level domain name. The Top level domain names are controlled by IANA (Internet Assigned Numbe...
Read more