Laboratorio: simple storage service (S3)

Curso de Introducción a AWS: Cómputo, Almacenamiento y Bases de Datos

Introducción

¿Ya tomaste el curso de Fundamentos de Cloud Computing?

Cómputo

Cómputo en AWS

Conoce qué es Amazon EC2

Contenedores de software

AWS Lambda

Almacenamiento

Almacenamiento de datos en AWS

S3 y S3 Glacier

Explicando el Amazon Elastic File System (EFS)

AWS Storage Gateway

Laboratorio: crea tu primer bucket de S3 para guardar objetos

Laboratorio: versionamiento

Bases de Datos

Bases de datos en AWS

Ventajas de Amazon RDS

La base de datos DynamoDB

¿Qué es ElastiCache?

Próximos pasos

Toma el Curso de Redes, Gobernanza y Machine Learning

You don't have access to this class

Keep learning! Join and start boosting your career

If you already have an account,

Resources

You already know the capabilities of AWS S3, now get started! Let's create our first S3 bucket to store objects.

Create your bucket

Once on the S3 page, click on Create Bucket. You will be presented with a menu like the following:
Menú creación de bucket

You will need to choose a unique name for the bucket. For example, test-[your-name]-[random numbers]. You can leave the default region. In the object ownership part, leave ACL disabled (recommended).

Then, in the section ""Public access blocking settings for this bucket"", uncheck the box for Block all public access, and check the box for current configuration acknowledgement.

configuración de bloqueo de acceso público

Enable the bucket version control (we will need it for the next lab). Finally, click on Create Bucket.

Upload your first object

Once created, click on the name of your bucket, and then on Upload. You can click Add Files, or drag the file you want to upload. Once uploaded, click Upload.
Cargar archivo
When it finishes uploading, you can click on the object's name, which will show you its properties, including the object's URL. If you try to access it from your browser, you may get an access denied page.

Although when we create the bucket we unblock public access, this is at the bucket level. At the object level, we must allow this access.

We have two alternatives: to allow it from the object permissions, or to create a policy at bucket level to allow public access to the files.

Change the object permissions

If we go to the permissions section, we will see a box indicating that since we left the ACL (access control list) disabled during the creation of the bucket, we must change the object permissions through bucket level policies. We can change this by enabling the ACL in the permissions section of the bucket, in the "Object Property" section.

When we enable the ACL, we simply go back to the object's page, to the permissions section. Click on Edit, and enable the object to be read by everyone.
habilitar lectura pública

Implement bucket-level access policy

To create an access policy, we can use the AWS Policy Generator, a tool that allows us to generate AWS access policies.

In the tool, under Select Policy Type, select S3 Bucket Policy. In Principal, we write an asterisk (*). In Actions, we locate the getObject action. In Amazon Resource Name (ARN), we place the ARN of our bucket followed by slash and asterisk (/*). The ARN can be obtained in bucket -> properties -> Bucket Overview -> Amazon Resource Name (ARN).

Then we click on Add Statement, and then on Generate policy. We copy the JSON that appears on the screen. It should look like this.

{ " "Id"": ""Policy1649360360676835"", " "Version"": ""2012-10-17"", " "Statement"": [ { "" Sid"": ""Stmt1649360360674639"", "" Action"": [ "" s3:GetObject""], "" Effect"": ""Allow"", "" Resource"": ""arn:aws:s3::::ciro-platzi-123/*"", "" Principal"": ""*""} } ] }

We go to the Bucket permissions -> Bucket policy. Click on edit, paste the JSON code generated by the tool, and save changes.

If you did everything right, you should get ""Publicly accessible"" just below the name of your bucket.
Bucket accesible públicamente

Congratulations! You created your first S3 bucket, added your first object and made it publicly accessible.

Contribution created by: Ciro Villafraz.

Contributions 65

Questions 17

Sort by:

Want to see more contributions, questions and answers from the community?

Alba Montilva

3 years ago

Subió sin ningun problema, genial.

Javier Ricardo Becerra Bedoya

3 years ago

Yo creé una página web estática en mi bucket de S3, compré un dominio y usé Route 53 para redireccionar el dominio comprado al bucket de S3
PD: Esto se hizo en un Platzi Live

Juan David Acosta González

3 years ago

Me gusto mucho, la explicación y el uso del manejo de las políticas para dar acceso a todos los objetos almacenados en un bucket. Esa parte del manejo de políticas y de permisos es bastante importante.