s3 directory bucket:

• this bucket will suppourt linux file system
• s3 express one zone (data will be store in one az)
• Availability Zone suffix (–use1-az4–x-s3) region+ --x-s3
• high thoughout put (faster storage)

Refer cli to create directory bucket

aws s3api create-bucket --bucket demo-qt--use1-az4--x-s3 --create-bucket-configuration "Location={Type=AvailabilityZone,Name=use1-az4},Bucket={DataRedundancy=SingleAvailabilityZone,Type=Directory}"

# out put 
{
    "Location": "https://demo-qt--use1-az4--x-s3.s3express-use1-az4.us-east-1.amazonaws.com/",
    "BucketArn": "arn:aws:s3express:us-east-1:998850986822:bucket/demo-qt--use1-az4--x-s3"
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Deny",
            "Principal": {
                "AWS": "arn:aws:iam::998850986822:user/storage-admin"
            },
            "Action": [
                "s3:DeleteObject",
                "s3:DeleteObjectVersion",
                "s3:DeleteObjectTagging",
                "s3:DeleteObjectVersionTagging"
            ],
            "Resource": "arn:aws:s3:::amzn-qt-demo-multicloud/*"
        },
        {
            "Sid": "Statement2",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::998850986822:user/storage-admin"
            },
            "Action": [
                "s3:PutObject",
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::amzn-qt-demo-multicloud/devops/**"
        }
    ]
}

aws s3 rm s3://amzn-qt-demo-multicloud/demo.md

Task

1. create 2 iam users and allow user s3 full access
2. create bucket and create bucket policy
3. upload files and check with user access file and delete files
4. first user need read only all files deny for wirte and delete
5. second user read and wirte permissions and deny delete object

“Principal”: { “Service”: “lambda.amazonaws.com” },

Adobe photo, pdf 

s3 - india ==> folder/id.png ==> proces 
            ==> output/id.png