Best Practices for Data Protection on Amazon S3: Configuring and Managing Amazon S3 Replication

Amazon S3 provides highly durable storage for mission-critical and primary data storage, and is designed to provide 99.999999999% (11 9's) of durability and 99.99% availability of objects over a given year. Learn best practices for configuring S3 Replication for regulatory compliance, security, and business continuity. Discover how S3 Replication can help you meet compliance requirements, minimize latency, increase operational efficiency, and maintain object copies under different ownership. In this tech talk you will learn how to protect your data on Amazon S3 by leveraging S3 Object Lock, S3 Replication, Versioning, Multi-Factor Authentication, and other features to ensure your data meets compliance and regulatory requirements.

Learning Objectives:
*Understand how Amazon S3 is designed to protect your data
*Hear about the S3 data protection features to ensure your data meets compliance requirements
*Learn best practices that you can implement today to keep your data protected against unintended deletions

Follow Amazon Web Services:

☁️ AWS Online Tech Talks cover a wide range of topics and expertise levels through technical deep dives, demos, customer examples, and live Q&A with AWS experts. Builders can choose from bite-sized 15-minute sessions, insightful fireside chats, immersive virtual workshops, interactive office hours, or watch on-demand tech talks at your own pace. Join us to fuel your learning journey with AWS.

#AWS

[AznGlenny]

Very good info! Thank you for the video!

[kedargalande]

Great detailed video. like it! concepts are pretty cleared

[yalvar]

I have followed along and it works as expected when you use the aws kms keys, however, when you try the same with a customer kms key for each region it does not work. In the replication rule we specify the customer kms rule for the source region to decrypt and the destination one for encrypting the destination bucket objects. It might be necessary to add some kind of permissions to the kms policy to allow the role created by the replication policy to access the kms customer keys???

[Diamondhands]

Is there a way to replicate a source bucket into a specific folder in destination bucket?

[tomorrowd]

I've set up the replication between two AWS accounts in the same region with initial batch replication of all objects filtered by a prefix. Only half of the folders in the prefix were replicated to the destination bucket and even those contain way less objects than were expected. Manifest was generated by S3. What might be the reason of such behavior?

[andyo]

I've been trying to make the prefix work for 2 days - hopefully someone has the syntax?