Amazon Web Services Hands On S3 January, 2012

Transcription

1 Amazon Web Services Hands On S3 January, 2012 Copyright , Amazon Web Services, All Rights Reserved Page 1-8

2 Table of Contents Overview... 3 Create S3 Bucket... 3 Upload Content and Set Permissions... 4 View Content Directly From S3... Error! Bookmark not defined. Reference S3 Content from EC2... Error! Bookmark not defined. Linux Web Server... Error! Bookmark not defined. Windows Web Server... Error! Bookmark not defined. Terminate Billable Services... 8 Copyright , Amazon Web Services, All Rights Reserved Page 2-8

3 Overview This lab will walk the user through creating and using the Simple Storage Service (S3) for storing and retrieving objects with AWS. The following is high-level overview of this lab: Create an S3 Bucket Upload Content and Set Permissions View content directly from S3 Reference S3 content from an EC2 Instance Create S3 Bucket 1. In the AWS Management Console, select the S3 tab and click on Create Bucket. 2. On the first dialog, enter <lastname>-<firstname> as Bucket Name and click Create Copyright , Amazon Web Services, All Rights Reserved Page 3-8

4 Upload Content and Set Permissions 1. Ensure the new bucket is selected under Buckets and click on the Upload button. 2. In the dialog box that opens, click on the Add Files button and choose a file of your choice. You may upload more than one file. For example here private-document.pdf 3. Next, click on the Set Permission button. 4. We decide to make this file private by only checking the Grant me full control permission and unchecking the Make everything public permission. Next select Add more permissions and Grant the Open/Download rights to Authenticated Users. Copyright , Amazon Web Services, All Rights Reserved Page 4-8

5 5. Click on Start Upload to upload the file 6. Wait until the upload has finished. You can monitor the upload process by clicking on the Transfer button. 7. In the S3 AWS console click on your public bucket and then click on the object name you just uploaded. If the Property pane is not enabled, click on the Properties button. 8. The details pane shows the object URL in the Link field. You should get an Access Denied page if you click on the link as we did not grant public access to this object 9. Next we are going to go back to the Console root by clicking on the icon in the top left hand corner. 10. We are going to open our Identity and Access Management tool by clicking on IAM. IAM is a service that allows you to securely delegate permissions to other users or to your servers. 11. Click on Roles. A Role is used to delegate permissions to an EC2 instance. 12. Click on Create New Role. 13. Name the new role signs3, and click Continue. 14. Click on the Select button to the right of Amazon EC This is where you would build your own IAM policy. You can do that with wizards or you can type in your policy. We are going to type it in, so select the option for Custom Policy and click Select. 16. Give your new policy a name of Access Objects. This name is different from the role name since one role can have many policies. For the policy document, please copy and paste in this text making sure to replace <bucket Name> with the name of the bucket that you created earlier: { "Statement": [ Copyright , Amazon Web Services, All Rights Reserved Page 5-8

6 { "Action": [ "s3:getobject" ], "Effect": "Allow", "Resource": [ "arn:aws:s3:::<bucket Name>/*" ] } ] } 17. Click Continue, then click Create Role. 18. Next we need to create an EC2 instance with this new role. So click on the icon in the top left corner and then select EC2. And then click on Launch Instance. 19. We want to use the Classic Wizard so click on Continue. Then select the Amazon Linux AMI. 20. Since the files will actually be hosted by S3 we don t need much of a server so a T1 micro will be plenty. All other default options are fine so click on Continue. 21. For the IAM Role select the option for signs3. Then paste the following text into the User Data field: #!/bin/bash yum -y install php apache service httpd start cd /usr/share/php wget wget wget wget wget wget wget wget wget wget mkdir /tmp/awscache chmod -R 777 /tmp/awscache/ Copyright , Amazon Web Services, All Rights Reserved Page 6-8

7 22. The above text will install the Apache web server, install the PHP programming language, and download and configure the parts of the AWS SDK for PHP that we need. With everything set on that screen click on Continue. Keep accepting the defaults until you get to the option to select your SSH key. Ensure that you have selected a key pair that you have access to and then press Continue. Select the Lab Web Tier security group then click on Continue then Launch. 23. Once the instance has finished starting we will need to SSH into it to finish some configuration. 24. In the list of running instances click on the newly created instance and then right click Connect and login to the server as before. Once logged in you need to become root by typing sudo su 25. Next we are going to create the index page for our new site. Type in vi /var/www/html/index.php 26. Press the i button to go to insert mode, then paste in the following text replacing <bucket Name> with the name of your bucket and <file name> with the name of the uploaded file: <?php require_once("sdk.class.php"); require_once("s3.class.php"); require_once("utilities.class.php"); require_once("credential.class.php"); require_once("credentials.class.php"); require_once("cachecore.class.php"); require_once("cachefile.class.php"); require_once("icachecore.interface.php"); require_once("requestcore.class.php"); require_once("request.class.php"); $options = array( "default_cache_config" => "/tmp/awscache", ); $s3 = new AmazonS3($options); $url = $s3->get_object_url('<bucket Name>', '<file name>', '+3 minutes'); print $url;?> 27. After you have pasted that in, press the Escape key to exit insert mode, then type :wq to write the file and then quit. 28. Go back to the webbrowser and copy the DNS name of the EC2 instance into your clipboard. The name will end in amazonaws.com. Then take that name and paste it into your webbroswer. 29. The server will respond with a very long URL. Copy that URL and paste it into another window. Your uploaded image will display. 30. Now, wait five minutes and try to refresh the window that has the image displayed. You should now get an error stating that the link has expired. Copyright , Amazon Web Services, All Rights Reserved Page 7-8

8 Terminate Billable Services In order to stop all charges after this workshop, you must delete all S3 objects and EC2 instances in all regions. Copyright , Amazon Web Services, All Rights Reserved Page 8-8