2023-01-10 · 4분
This post is over 2 years old. The content may be outdated.
Amazon S3 is object storage built to store and retrieve any amount of data from anywhere. It's a simple storage service that offers industry-leading durability, availability, performance, security, and virtually unlimited scalability at very low cost. — official Amazon docs
S3 — Simple Storage Service — plays the role of a file server. As a service grows, file-server traffic grows and you'd normally have to add servers; S3 solves that. It also lets you set access permissions on files, preventing the service from being abused as generic hosting.
This is S3's main page. Click the red box to create a bucket.
You can set the bucket's name and region.
Access List settings — choose to disable Block all public access.
When creating for testing, you can disable Block all public access so the AWS S3 URL is easy to reach. Leave the rest at defaults.
This is the bucket page after creation. Click the red box.
On this page you can drag in the files you want to upload.
Dragging takes you to the upload page automatically as shown above. Press Upload to proceed.
You can see it uploaded successfully.
Then go back into the bucket, open Properties, and click Edit on Static website hosting at the very bottom.
Fill it in properly according to the format and press Save changes.
Once done, you can see a domain was generated as in the picture above.
If you get a 403 like above, it's the public access block. Just follow along below.
Go back into the bucket page and open Permissions. Then click Edit on "Block public access (bucket settings)".
Uncheck Block all public access and press Save changes.
Then click Edit on Bucket policy right below.
Click the bucket ARN to copy it in advance, then open the Policy generator. Since we're fetching individual files (objects), we need to set a getObject policy.
Change it to match the picture above. If you paste the copied ARN as-is, you'll get an error later when applying, as in the picture below — because the resource path isn't specified. If arn:aws:s3:::demo-web1-bucket is the base, then to allow access to the whole bucket you must write arn:aws:s3:::demo-web1-bucket/*, and to target a specific folder, write it like arn:aws:s3:::demo-web1-bucket/DirecotryName/*.
You can see it was generated fine. Now press Generate Policy.
Copy the contents of that JSON verbatim and paste it into the bucket-policy edit box from earlier.
Then refresh the web host you made — it renders perfectly.
Original (Korean): tistory — published 2023-01-10, migrated to this blog. This translation was generated with the help of AI.
…