Managing Access to Amazon S3 Resources with Amazon VPC Endpoints

In this lab, you will learn how to use Amazon VPC endpoints to control access to Amazon S3 resources from within a VPC.

Level

Intermediate

Duration

Course Objectives

In this course, you will learn how to:

• Implement VPC endpoints to facilitate communications between an EC2 instance in a private subnet and an S3 bucket
• Create a bucket policy to only allow connections to a bucket through a VPC endpoint
• Turn on Amazon S3 Versioning for a bucket
• Restore a deleted object

Intended Audience

This course is intended for:

• Architects
• Security Engineers

Prerequisites

We recommend that attendees of this course have the following prerequisites:

• Familiarity with AWS, as covered in the AWS Cloud Practitioner Essentials course
• Familiar with basic navigation of the AWS Management Console

Course Outline

• Task 1: Environment overview
• Task 2: Create a VPC endpoint
• Task 3: Create a bucket policy
• Task 4: Test connectivity and add instance permissions
• Task 5: Turn on S3 Versioning for the bucket and explore the effects