AWS Certified Solutions Architect – ProfessionalContinuously Improve Existing SolutionsMedium
A global e-commerce company uses Amazon S3 for storing product images, videos, and customer-uploaded content. With petabytes of data, they need a way to regularly audit and report on the objects stored in their buckets, including metadata, object size, and encryption status, for compliance and cost optimization. The current method of listing objects using the S3 API is too slow and expensive for their scale. Which AWS service should the Solutions Architect recommend to efficiently gather this information?
- ADevelop a custom AWS Lambda function to traverse all S3 buckets and collect object details.
- BEnable Amazon CloudWatch Logs for S3 access logs and analyze them with Amazon Athena.
- CConfigure AWS Config rules to monitor S3 bucket changes and report on object properties.
- DUtilize Amazon S3 Inventory to generate daily or weekly reports of object metadata.
Show answer & explanationAnswer & explanation
Correct answer: D. Utilize Amazon S3 Inventory to generate daily or weekly reports of object metadata.
Amazon S3 Inventory provides a flat-file list of objects in an S3 bucket, including metadata, object size, and encryption status. It's designed for large-scale auditing and reporting, offering a more efficient and cost-effective solution compared to repeatedly listing objects via the S3 API or custom scripts.
Why the other options are wrong
- A. A custom Lambda function to traverse petabytes of S3 data would be extremely slow, complex to manage, and potentially very expensive due to the sheer number of API calls required to list and describe objects at such a scale.
- B. S3 access logs record requests made to S3 objects, which is useful for auditing access patterns, but they do not provide a comprehensive inventory of object metadata, size, or encryption status in a reportable format.
- C. AWS Config monitors resource configurations and changes, and while it can report on bucket-level settings (like encryption being enabled), it does not provide a detailed, object-level inventory report, including individual object sizes and encryption status, for all objects within a bucket.
Amazon S3 Inventory
Amazon S3 Inventory provides a scheduled, flat-file list of objects in an S3 bucket or a shared prefix. It helps you manage your storage by auditing and reporting on the replication and encryption status of your objects.
- Generates daily or weekly reports of object metadata.
- Supports CSV, ORC, or Parquet output formats.
- Useful for auditing, compliance, and cost optimization at scale.
Memory trick: Inventory Inspects In-depth.