Object storage deployment
Create several storage units with provider-aware commands.
BUCKET NAMEBLOCK PUBLICVERSIONINGENCRYPTION
# company-backups
aws s3api create-bucket --bucket company-backups --region eu-west-1 --create-bucket-configuration LocationConstraint=eu-west-1
aws s3api put-public-access-block --bucket company-backups --public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true
aws s3api put-bucket-versioning --bucket company-backups --versioning-configuration Status=Enabled
aws s3api put-bucket-encryption --bucket company-backups --server-side-encryption-configuration '{"Rules":[{"ApplyServerSideEncryptionByDefault":{"SSEAlgorithm":"AES256"}}]}'
# company-storage-2
aws s3api create-bucket --bucket company-storage-2 --region eu-west-1 --create-bucket-configuration LocationConstraint=eu-west-1
aws s3api put-public-access-block --bucket company-storage-2 --public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true
aws s3api put-bucket-versioning --bucket company-storage-2 --versioning-configuration Status=Enabled
aws s3api put-bucket-encryption --bucket company-storage-2 --server-side-encryption-configuration '{"Rules":[{"ApplyServerSideEncryptionByDefault":{"SSEAlgorithm":"AES256"}}]}'Review before deploymentCheck global name availability, lifecycle and retention rules, access policy, encryption keys, logging and expected storage or egress costs.