tech/aws/storage

STORAGE

AWS storage — S3 object storage, EBS block storage, EFS file system, Glacier archival.

production
requires: tech/aws
improves: tech/aws

AWS Storage

Stub — full skill pending. Core patterns documented below.

Services

ServiceTypeUse case
S3ObjectFiles, backups, static assets, data lake staging, Lambda deployment packages
EBSBlockEC2 root volumes, databases requiring low-latency block I/O
EFSFile (NFS)Shared file system across multiple EC2/ECS tasks
Glacier / S3 GlacierArchiveLong-term retention, compliance archival, low-cost cold storage

S3 essentials (most common)

# Create bucket in af-south-1
aws s3api create-bucket \
  --bucket my-bucket-name \
  --region af-south-1 \
  --create-bucket-configuration LocationConstraint=af-south-1

# Enable versioning
aws s3api put-bucket-versioning \
  --bucket my-bucket-name \
  --versioning-configuration Status=Enabled

# Block all public access (default for new buckets — confirm explicitly)
aws s3api put-public-access-block \
  --bucket my-bucket-name \
  --public-access-block-configuration \
    BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true

# Upload file
aws s3 cp ./file.txt s3://my-bucket-name/path/file.txt

# Generate presigned URL (15-minute expiry)
aws s3 presign s3://my-bucket-name/path/file.txt --expires-in 900

POPIA note

Store personal data only in af-south-1 buckets. Add a bucket policy condition denying replication outside af-south-1 if required by your data residency policy.