SPL-205 - Version 1.0.3

Lab overview

Amazon S3 is object storage built to store and retrieve any amount of data from anywhere on the Internet. It’s a simple storage service that offers an extremely durable, highly available, and infinitely scalable data storage infrastructure at very low costs.

Cross-region replication (CRR) enables automatic, asynchronous copying of objects across buckets in different AWS Regions. Cross-Region Replication can help you do the following:

• Comply with compliance requirements — Although Amazon S3 stores your data across multiple geographically distant Availability Zones by default, compliance requirements might dictate that you store data at even greater distances. Cross-region replication allows you to replicate data between distant AWS Regions to satisfy these requirements.
• Minimize latency — If your customers are in two geographic locations, you can minimize latency in accessing objects by maintaining object copies in AWS Regions that are geographically closer to your users.
• Increase operational efficiency — If you have compute clusters in two different AWS Regions that analyze the same set of objects, you might choose to maintain object copies in those Regions.
• Maintain object copies under different ownership — Regardless of who owns the source object you can tell Amazon S3 to change replica ownership to the AWS account that owns the destination bucket. This is referred to as the owner override option. You might use this option restrict access to object replicas.

This lab demonstrates the process of configuring Cross-Region Replication (CRR) between two S3 buckets in separate regions.

Topics covered

By the end of this lab, you will be able to:

• Create a source and destination S3 bucket.
• Create a Cross-Region Replication policy.
• Enable replication for an entire bucket, specific folder, or specific tag.
• Identify the conditions necessary for replicating objects.
• Delete replicated files and understand how deletions are replicated.

Technical knowledge prerequisites

To successfully complete this lab, you should be familiar with basic navigation of the AWS Management Console and Amazon S3 buckets.

Task 1: Create and configure source and destination buckets

Before Cross-Region Replication (CRR) can be enabled, you must first create the source and destination buckets. Versioning must be enabled for both buckets in order to configure CRR. Any objects that reside in the bucket before versioning is enabled will not be replicated.

In this task, you will:

• Create the source and destination buckets.
• Enable versioning on each bucket.

3. At the top-left of the AWS Management Console, click the Services menu, and then click S3.

Note: You can also search for  at the top of the services menu.

4. Click Create bucket and then configure:

• Bucket name: 
• Replace NUMBER with a random four digit number
• Note: Bucket names cannot contain uppercase letters or spaces
• Region: US East (N. Virginia)

5. Click Create bucket to accept the default options and create the bucket.

6. Click the name of the bucket you created in the previous step, and then click the Properties tab.

7. Click the Versioning card, then:

• Select  Enable versioning

• Click Save

• Now that you have created the source bucket and enabled versioning on it, you will create the destination bucket to replicate to. The destination bucket must have versioning enabled as well, but this time you will enable it using the bucket creation wizard.

8. Click the Amazon S3 link at the top-left to return to the S3 console main page

9. Click Create bucket then configure:

• Bucket name: 
• Replace NUMBER with a random four digit number
• Region: US West (Oregon)

10. Click Create bucket

11. Click the name of your my-destination bucket.

12. Click the Versioning card, then:

• Select  Enable versioning
• Click Save

13. Click the Amazon S3 link at the top-left to return to the S3 console main page

Task 2: Enable Cross-Region Replication on a bucket

Now that the source and destination buckets have been created and configured, replication can be enabled. Cross-Region Replication policies are used to determine which objects in a bucket are replicated. You can replicate an entire bucket, a specific folder within a bucket, or any objects with a specified tab. However, objects that already exist in the bucket before replication is enabled will NOT be replicated.

In this task, you will:

• Create files to test replication with.
• Create a replication policy to enable replication of an entire bucket.
• Validate the object replicated properly.

14. On your local system, create four text files to use throughout this task:

15. On the S3 console main page, click the name of your source bucket.

16. Click  Upload

17. Click Add files and then browse to and select the pre-crr.txt file you created in step 1 of this task.

18. Click Upload

19. Verify the pre-crr.txt file is listed in the bucket.

20. Click the Management tab, and then click Replication

21. Click  Add rule and then configure:

• Set source: Entire bucket
• Click Next
• Destination bucket:
  •  Buckets in this account
  • Click your my-destination bucket - You may have to scroll down to see the bucket
• Click Next

22. On the Configure rule options screen, configure:

• IAM role: S3-CRR-Role
• Rule name: 

Note: In the search box, type  to find the IAM role.

23. Click Next

24. Review your settings, and then click Save

 If you receive the following warning message after you create the replication rule, you can safely ignore it.

Now that replication is enabled on the bucket, verify whether or not the file in the bucket has been replicated.

25. Click the Amazon S3 link at the top-left to return to the S3 console main page.

26. Click the name of your destination bucket to open it.

 Notice that the destination bucket is empty, even though replication is enabled and the source bucket contains a file. This is because only new files uploaded to the source bucket after replication is enabled will be replicated to the destination bucket.

27. Click the Amazon S3 link at the top-left to return to the S3 console main page.

28. Click the name of your source bucket.

29. Upload the crr-bucket.txt file to your bucket.

30. Click the Amazon S3 link at the top-left to return to the S3 console main page, and then click the name of your destination bucket to open it.

31. Notice that the destination bucket now contains the crr-bucket.txt file you uploaded to the source bucket.

If no files are listed, wait a few seconds, and then click the  refresh button at the top-right.

 Congratulations! You've successfully configured Cross-Region Replication for an entire S3 bucket.

Task 3: Configure replication of a single folder

In Amazon S3, folders are considered prefixes. For example, a folder in your S3 bucket named Source would be a prefix notated as Source/. A file inside that folder would be notated as Source/File.

Knowing this allows you to create a replication policy based on a prefix, which will include all objects in the folder. Choosing a folder to replicate allows you to replicate a specific set of objects easily, rather than an entire bucket.

In this task, you will:

• Create a replication policy to enable replication of the contents of a folder (prefix).
• Create the folder to replicate and upload a file into it.
• Validate the object replicated properly.

32. If you are not already on the S3 console main page, click the Amazon S3 link at the top-left to navigate to it.

33. Click the name of your source bucket.

34. Click  Create folder and then configure:

• Folder name: 
• Click Save

35. Click the Management tab, and then click Replication

36. Select the  crr-full-bucket policy you created previously.

37. Click the Actions  menu, and then click Disable rule.

38. Click Confirm to disable the rule.

39. Click  Add rule

40. Under Set source, click  Prefix or tags, and then:

• Enter 
• Click prefix crr-test
• Click Next

41. On the Set destination screen, verify your destination bucket is displayed, and then click Next

42. On the Configure rule options screen, configure:

• Rule name: 
• Click Next

43. On the Review screen, verify your settings, and then click Save

44. Click the Overview tab to return to the bucket file list.

45. Open the crr-test folder.

46. In the crr-test folder, upload your crr-folder.txt file.

47. Navigate to your my-destination bucket.

48. You should see two objects listed in the destination folder:

• crr-test (folder)
• crr-bucket.txt (file)

49. Open the crr-test folder. You should see the crr-folder.txt file you uploaded to the source bucket.

50. Click the Amazon S3 link at the top-left to return to the S3 console main page

 Congratulations! You've successfully configured Cross-Region Replication for a single folder within an S3 bucket.

Task 4: Configure replication using tags

Tags can be used to identify specific objects to replicate, rather than replicating the entire bucket or folder.

In this task, you will:

• Create a replication policy to replicate any object with a specific tag.
• Upload a file and add the tag to it.
• Validate the object replicated properly.

 Much like versioning, objects with tags must be uploaded to the source bucket after the replication policy using tags has been created and enabled. Objects that are uploaded and tagged prior to the policy being created will not replicate.

51. If you are not already on the S3 console main page, click the Amazon S3 link at the top-left to navigate there.

52. On the S3 console main page, click the name of your source bucket.

53. Click the Management tab, and then click Replication

54. Click  Add rule and then configure:

• Set source:

  •  Prefix or tags
  • Enter 
  • Click tag replicate
  • Enter 
  • Press Enter

•  Tag keys and values are case sensitive. Refer to the additional resources section at the end of the lab for more information.

55. Click Next

56. On the Set destination screen, verify your destination bucket is displayed, and then click Next

57. On the Configure rule options screen, configure:

• Rule name: 
• Click Next

58. On the Review screen, verify your settings, and then click Save

59. Click the Overview tab.

60. Click  Upload

61. Click Add files

62. Select the crr-tag.txt file you created previously, and then click Next

63. On the Set permissions screen, accept the defaults, and then click Next

64. On the Set properties screen, scroll down to the Tag section.

65. In the Tag section, configure:

• Key: 
• Value: 

 Tags are case-sensitive.

66. Click Save and then click Next

67. On the Review screen, review the settings, and then click Upload

68. Verify the crr-tag.txt file was uploaded successfully.

69. Navigate to your destination bucket.

70. You should notice that the destination bucket now contains the crr-tag.txt file you just uploaded to the source bucket.

If no files are listed, wait a few seconds, then click the  refresh button at the top-right.

71. Click the Amazon S3 link at the top-left to return to the S3 console main page.

 Congratulations! You've successfully configured Cross-Region Replication using a tag.

Task 5: Deleting Replicated Files

To protect against malicious intent and accidental deletion, object deletions that occur in a source bucket are not replicated to the destination bucket.

In this task, you will:

• Delete a file that has been replicated, then observe the results.

72. If you are not already on the S3 console main page, click the Amazon S3 link at the top-left to navigate there.

73. Navigate to your source bucket.

74. In your source bucket:

• Select  crr-tag.txt
• Click the Actions menu, and then click Delete.

75. In the confirmation window that opens, click Delete

76. Verify the crr-tag.txt file has been deleted from the source bucket.

77. Navigate to your destination bucket.

78. You should notice that the crr-tag.txt file still exists in the destination bucket.

 Congratulations! You've discovered that deleting an object from a source bucket does not delete it from the destination bucket.

Conclusion

 Congratulations! You now have successfully:

• Configured S3 buckets for versioning.
• Created S3 Cross-Region Replication policies.
• Replicated objects with policies for full buckets, folders, and tags.
• Observed how the replication of deletions are handled.

End Lab

Follow these steps to close the console, end your lab, and evaluate the experience.

79. Return to the AWS Management Console.

80. On the navigation bar, click awsstudent@<AccountNumber>, and then click Sign Out.

81. Click End Lab

82. Click OK

83. (Optional):

• Select the applicable number of stars 
• Type a comment

• Click Submit

  • 1 star = Very dissatisfied
  • 2 stars = Dissatisfied
  • 3 stars = Neutral
  • 4 stars = Satisfied
  • 5 stars = Very satisfied

You may close the dialog if you don't want to provide feedback.

Additional resources

• Amazon S3 Cross-Region Replication
• AWS Training and Certification

• Tags

• For more information about AWS Training and Certification, see  http://aws.amazon.com/training/ .

• For more AWS Self-Paced Labs, see  http://amazon.qwiklabs.com .

For feedback, suggestions, or corrections, please email us at [email protected].