{"id":4404,"date":"2026-03-30T10:44:29","date_gmt":"2026-03-30T02:44:29","guid":{"rendered":"https:\/\/aws-oncloudai.com\/?p=4404"},"modified":"2026-03-30T10:44:29","modified_gmt":"2026-03-30T02:44:29","slug":"aws-s3-bucket","status":"publish","type":"post","link":"https:\/\/aws-oncloudai.com\/zh_hk\/aws-s3-bucket\/","title":{"rendered":"AWS S3 \u5132\u5b58\u6876\u5b8c\u5168\u6307\u5357\uff1a\u5f9e\u57fa\u790e\u914d\u7f6e\u5230\u751f\u7522\u7d1a\u61c9\u7528"},"content":{"rendered":"<p><img fetchpriority=\"high\" decoding=\"async\" class=\"wp-image-4405  aligncenter\" src=\"http:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1-1024x559.png\" alt=\"\" width=\"623\" height=\"340\" srcset=\"https:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1-1024x559.png 1024w, https:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1-300x164.png 300w, https:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1-768x419.png 768w, https:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1-18x10.png 18w, https:\/\/aws-oncloudai.com\/wp-content\/uploads\/2026\/03\/generated-image-1-1.png 1408w\" sizes=\"(max-width: 623px) 100vw, 623px\" \/><\/p>\n<h2>AWS S3 \u5132\u5b58\u6876\u5b8c\u5168\u6307\u5357\uff1a\u5f9e\u57fa\u790e\u914d\u7f6e\u5230\u751f\u7522\u7d1a\u61c9\u7528<\/h2>\n<p>\u4e00\u5bb6\u8de8\u5883\u96fb\u5546\u7684CTO\u66fe\u544a\u8a34\u6211\u5011\uff0c\u4ed6\u5011\u6bcf\u6708\u5728\u96f2\u7aef\u5132\u5b58\u7684\u82b1\u8cbb\u9ad8\u9054\u6578\u5343\u7f8e\u5143\uff0c\u537b\u4e0d\u77e5\u9053\u54ea\u4e9b\u8cc7\u6599\u5728\u7528\u9ad8\u50f9\u5b58\u5132\uff0c\u54ea\u4e9b\u53ef\u4ee5\u6b78\u6a94\u3002\u5207\u63db\u5230AWS S3 \u5f8c\uff0c\u900f\u904e\u5408\u7406\u914d\u7f6e\u5132\u5b58\u985e\u5225\u548c\u751f\u547d\u9031\u671f\u7b56\u7565\uff0c<strong>\u7b2c\u4e00\u5e74\u5132\u5b58\u6210\u672c\u4e0b\u964d\u4e8668%<\/strong>\u3002<\/p>\n<p>AWS Simple Storage Service\uff08S3\uff09\u4e0d\u53ea\u300d\u96f2\u7aef\u786c\u789f\u300d\u3002\u5b83\u662f\u7269\u4ef6\u5132\u5b58\u7684\u4e8b\u5be6\u6a19\u6e96\uff0c\u652f\u63f4\u5f9e\u5716\u7247\u3001\u5f71\u7247\u3001\u65e5\u8a8c\uff0c\u5230\u975c\u614b\u7db2\u7ad9\u3001\u5927\u6578\u64da\u5206\u6790\u7b49\u591a\u7a2e\u5834\u666f\u3002<\/p>\n<p>\u4f46\u932f\u8aa4\u914d\u7f6eS3 \u53ef\u80fd\u5c0e\u81f4\u6210\u672c\u6fc0\u589e\u3001\u8cc7\u6599\u6d29\u9732\uff0c\u751a\u81f3\u670d\u52d9\u4e2d\u65b7\u3002<\/p>\n<p>\u672c\u6587\u5c07\u5f9e\u96f6\u958b\u59cb\uff0c\u6df1\u5165\u8aaa\u660e\u5982\u4f55\u6b63\u78ba\u914d\u7f6e\u548c\u6700\u4f73\u5316AWS S3 \u5132\u5b58\u6876\uff0c\u4e26\u63d0\u4f9b\u751f\u7522\u7d1a\u6700\u4f73\u5be6\u8e10\u3002<\/p>\n<hr \/>\n<h3>AWS S3 \u57fa\u790e\uff1a\u7269\u4ef6\u5132\u5b58\u8207\u6a94\u6848\u5132\u5b58\u7684\u5dee\u7570<\/h3>\n<p>\u5728\u50b3\u7d71\u6a94\u6848\u7cfb\u7d71\u4e2d\uff0c\u4f60\u7528\u8cc7\u6599\u593e\u548c\u5c64\u7d1a\u8def\u5f91\u5c0b\u627e\u6a94\u6848\u3002 S3 \u662f<strong>\u7269\u4ef6\u5132\u5b58<\/strong>\uff0c\u6bcf\u500b\u7269\u4ef6\u7531\u552f\u4e00\u9375\u3001\u8cc7\u6599\u548c\u5143\u8cc7\u6599\u7d44\u6210\u3002<\/p>\n<p><strong>\u95dc\u9375\u5dee\u7570\uff1a<\/strong><\/p>\n<table>\n<thead>\n<tr>\n<th>\u7dad\u5ea6<\/th>\n<th>S3\uff08\u5c0d\u8c61\u5132\u5b58\uff09<\/th>\n<th>EBS\/EFS\uff08\u6587\u4ef6\u5132\u5b58\uff09<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u8a2a\u554f\u6a21\u5f0f<\/td>\n<td>REST API\uff08HTTP\/HTTPS\uff09<\/td>\n<td>\u6a94\u6848\u7cfb\u7d71\u639b\u8f09<\/td>\n<\/tr>\n<tr>\n<td>\u5ef6\u6642<\/td>\n<td>\u6beb\u79d2\u5230\u79d2<\/td>\n<td>\u6beb\u79d2\u7d1a<\/td>\n<\/tr>\n<tr>\n<td>\u5f48\u6027<\/td>\n<td>\u7121\u9650\u64f4\u5c55<\/td>\n<td>\u9700\u9810\u914d\u5bb9\u91cf<\/td>\n<\/tr>\n<tr>\n<td>\u9069\u7528\u5834\u666f<\/td>\n<td>\u975c\u614b\u6a94\u6848\u3001\u5099\u4efd\u3001\u6b78\u6a94\u3001\u975c\u614b\u7db2\u7ad9<\/td>\n<td>\u8cc7\u6599\u5eab\u3001\u61c9\u7528\u7a0b\u5f0f\u8cc7\u6599\u3001\u5373\u6642\u8b80\u5beb<\/td>\n<\/tr>\n<tr>\n<td>\u6210\u672c<\/td>\n<td>$0.023\/GB \u8d77<\/td>\n<td>$0.125\/GB \u8d77\uff08EBS gp3\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5982\u679c\u4f60\u5b58\u653e\u7684\u662f\u4f7f\u7528\u8005\u4e0a\u50b3\u7684\u5716\u7247\u3001\u7522\u54c1CSV \u532f\u51fa\u3001\u5957\u7528\u65e5\u8a8c\u3001\u975c\u614b\u7db2\u9801\u8cc7\u6e90\uff0cS3 \u662f\u6700\u4f73\u9078\u64c7\u3002<\/p>\n<hr \/>\n<h3>\u5efa\u7acb\u7b2c\u4e00\u500bS3 \u5132\u5b58\u6876\uff1a\u9010\u6b65\u64cd\u4f5c<\/h3>\n<h4>\u900f\u904eAWS \u63a7\u5236\u53f0\u5275\u5efa<\/h4>\n<ol>\n<li>\u767b\u5165AWS \u7ba1\u7406\u63a7\u5236\u53f0\u2192 \u641c\u5c0b\u00a0<strong>S3<\/strong><\/li>\n<li>\u9ede\u9078\u00a0<strong>\u201c\u5275\u5efa\u5132\u5b58\u6876\u201d<\/strong><\/li>\n<li>\u586b\u5beb\u5fc5\u8981\u8cc7\u8a0a\uff1a\n<ul>\n<li><strong>\u5132\u5b58\u6876\u540d\u7a31<\/strong>\uff1a\u5168\u7403\u552f\u4e00\uff0c\u53ea\u80fd\u5c0f\u5beb\u5b57\u6bcd\u3001\u6578\u5b57\u3001\u9023\u5b57\u865f\uff08\u5982\u00a0<code class=\"\">myapp-assets-2026<\/code>\uff09<\/li>\n<li><strong>AWS \u5340\u57df<\/strong>\uff1a\u9078\u64c7\u96e2\u4f60\u7684\u7528\u6236\u6700\u8fd1\u7684\u5340\u57df\uff08\u4e2d\u570b\u51fa\u6d77\u63a8\u85a6\u00a0<code class=\"\">ap-singapore<\/code>\u00a0\u6216\u00a0<code class=\"\">ap-tokyo<\/code>\uff09<\/li>\n<li><strong>Block Public Access\uff08\u5c01\u9396\u516c\u5171\u5b58\u53d6\uff09<\/strong>\uff1a<strong>\u751f\u7522\u74b0\u5883\u52d9\u5fc5\u52fe\u9078\u5168\u90e8<\/strong>\uff0c\u518d\u55ae\u7368\u958b\u653e<\/li>\n<\/ul>\n<\/li>\n<li>\u9ede\u64ca\u201d\u5275\u5efa\u5132\u5b58\u6876\u201d<\/li>\n<\/ol>\n<p><strong>\u91cd\u8981\uff1a\u5132\u5b58\u6876\u540d\u7a31\u5168\u57df\u552f\u4e00<\/strong>\u00a0\u5373\u4f7f\u4f60\u5275\u5efa\u5728\u65b0\u52a0\u5761\u5340\u57df\uff0c\u540d\u70ba\u00a0<code class=\"\">company-data<\/code>\u00a0\u7684\u5132\u5b58\u6876\u5728\u5168\u7403\u5176\u4ed6AWS \u5e33\u6236\u90fd\u7121\u6cd5\u518d\u7528\u3002<\/p>\n<hr \/>\n<h3>S3 \u5132\u5b58\u6876\u914d\u7f6e\u8a73\u89e3<\/h3>\n<h4>1. \u6b0a\u9650\u7ba1\u7406\uff08Access Control\uff09<\/h4>\n<p>S3 \u6b0a\u9650\u5206\u70ba\u4e09\u90e8\u5206\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6b0a\u9650\u5c64\u7d1a<\/th>\n<th>\u8a2a\u554f\u5c0d\u8c61<\/th>\n<th>\u63a7\u5236\u65b9\u5f0f<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Bucket Policy<\/td>\n<td>\u5132\u5b58\u6876\u7d1a\u5225<\/td>\n<td>JSON \u7b56\u7565<\/td>\n<\/tr>\n<tr>\n<td>ACL<\/td>\n<td>\u55ae\u4e00\u5c0d\u8c61<\/td>\n<td>\u7c21\u55ae\u6b0a\u9650\u6e05\u55ae<\/td>\n<\/tr>\n<tr>\n<td>IAM Policy<\/td>\n<td>IAM \u4f7f\u7528\u8005\/\u89d2\u8272<\/td>\n<td>IAM \u7b56\u7565<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u751f\u7522\u74b0\u5883\u5efa\u8b70\u4f7f\u7528\u9806\u5e8f\uff1a<\/strong><\/p>\n<ol>\n<li>\u7528\u00a0<strong>IAM Policy<\/strong>\u00a0\u63a7\u5236\u5167\u90e8\u4f7f\u7528\u8005\/\u670d\u52d9<\/li>\n<li>\u7528\u00a0<strong>Bucket Policy<\/strong>\u00a0\u63a7\u5236\u8de8\u5e33\u6236\u6216\u533f\u540d\u8a2a\u554f<\/li>\n<li>\u76e1\u91cf\u4e0d\u4f7f\u7528\u00a0<strong>ACL<\/strong>\uff08AWS \u5df2\u4e0d\u5efa\u8b70\uff09<\/li>\n<\/ol>\n<p><strong>\u7bc4\u4f8bBucket Policy\uff08\u5141\u8a31CloudFront \u5b58\u53d6\uff09<\/strong><\/p>\n<p><strong>\u6ce8\u610f\uff1a\u4e0d\u4f7f\u7528\u7a0b\u5f0f\u78bc\u5340\u584a\uff0c\u7528\u6587\u5b57\u63cf\u8ff0<\/strong><\/p>\n<p>\u4ee5\u4e0b\u662f\u4e00\u500bJSON \u7b56\u7565\u7684\u67b6\u69cb\uff1a<\/p>\n<p>\u9996\u5148\u8072\u660e\u7248\u672c\u865f\uff0c\u901a\u5e38\u70ba\u00a0<strong>2012-10-17<\/strong>\u3002\u5176\u6b21\u52a0\u5165\u4e00\u500bStatement \u6578\u7d44\uff0c\u6bcf\u500bStatement \u5305\u542bSid\u3001Effect\u3001Principal\u3001Action \u548cResource\u3002<\/p>\n<p>\u5728Statement \u4e2d\uff0cSid \u662f\u63cf\u8ff0\u6027ID\uff0c\u4f8b\u5982\uff1a<strong>AllowCloudFrontOriginAccess<\/strong>\u3002 Effect \u6b04\u4f4d\u8a2d\u5b9a\u70baAllow\u3002 Principal \u4f7f\u7528\u661f\u865f\u8868\u793a\u5141\u8a31\u6240\u6709\uff0c\u4f46\u901a\u5e38\u9700\u9650\u5b9a\u70baCloudFront \u670d\u52d9\u6a19\u8b58\u3002<\/p>\n<p>Action \u9663\u5217\u5305\u542b\u00a0<strong>s3:GetObject<\/strong>\u00a0\u7b49\u6b0a\u9650\u3002 Resource \u5f15\u7528\u8cc7\u6e90ARN\uff0c\u683c\u5f0f\u70ba\u00a0<strong>arn:aws:s3:::\u4f60\u7684\u5132\u5b58\u6876\u540d\u7a31<\/strong>\u00a0\u6307\u5411\u6574\u500b\u5132\u5b58\u6876\uff0c\u6216 *<em>arn:aws:s3:::\u4f60\u7684\u5132\u5b58\u6876\u540d\u7a31\/\u6307\u5411\u6240\u6709\u5c0d\u8c61<\/em>\u3002<\/p>\n<p><strong>\u914d\u7f6e\u8981\u9ede<\/strong>\uff1aResource \u6b04\u4f4d\u5fc5\u9808\u6b63\u78ba\u586b\u5beb\u5132\u5b58\u6876ARN\uff0c\u5426\u5247\u6b0a\u9650\u7121\u6548\u3002 Principal \u53ef\u70ba\u7279\u5b9a\u670d\u52d9\uff0c\u4f8b\u5982CloudFront \u5206\u767c\u6642\u53ef\u4f7f\u7528OAI \u8b58\u5225\u3002<\/p>\n<h4>2. \u5132\u5b58\u985e\u5225\u9078\u64c7\uff08Storage Class\uff09<\/h4>\n<p>AWS S3 \u63d0\u4f9b\u591a\u7a2e\u5132\u5b58\u985e\u5225\uff0c\u6210\u672c\u8207\u5b58\u53d6\u983b\u6b21\u6210\u53cd\u6bd4\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5132\u5b58\u985e\u5225<\/th>\n<th>\u6bcf\u6708\u6bcfGB<\/th>\n<th>\u6700\u4f4e\u5132\u5b58\u6642\u9577<\/th>\n<th>\u9069\u7528\u5834\u666f<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>S3 Standard<\/td>\n<td>~$0.023<\/td>\n<td>\u7121<\/td>\n<td>\u71b1\u6578\u64da\uff0c\u7d93\u5e38\u8a2a\u554f<\/td>\n<\/tr>\n<tr>\n<td>S3 Intelligent-Tiering<\/td>\n<td>~$0.023 + \u76e3\u6e2c\u8cbb<\/td>\n<td>\u7121<\/td>\n<td>\u8a2a\u554f\u6a21\u5f0f\u672a\u77e5\u6216\u6ce2\u52d5<\/td>\n<\/tr>\n<tr>\n<td>S3 Standard-IA<\/td>\n<td>~$0.0125<\/td>\n<td>30\u5929<\/td>\n<td>\u4e0d\u5e38\u8a2a\u554f\uff0c\u4f46\u9700\u5feb\u901f\u8b80\u53d6<\/td>\n<\/tr>\n<tr>\n<td>S3 One Zone-IA<\/td>\n<td>~$0.01<\/td>\n<td>30\u5929<\/td>\n<td>\u5099\u4efd\uff0c\u53ef\u63a5\u53d7\u55aeAZ\u6545\u969c<\/td>\n<\/tr>\n<tr>\n<td>S3 Glacier<\/td>\n<td>~$0.0036<\/td>\n<td>90\u5929<\/td>\n<td>\u6b78\u6a94\uff0c\u6578\u5c0f\u6642\u5167\u53ef\u6062\u5fa9<\/td>\n<\/tr>\n<tr>\n<td>S3 Glacier Deep Archive<\/td>\n<td>~$0.001<\/td>\n<td>180\u5929<\/td>\n<td>\u6cd5\u898f\u6b78\u6a94\uff0c\u6578\u6708\u5167\u53ef\u6062\u5fa9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u9078\u64c7\u908f\u8f2f\uff1a<\/strong><\/p>\n<ul>\n<li>\u5716\u7247\u3001JS\/CSS \u975c\u614b\u8cc7\u6e90\u2192\u00a0<strong>S3 Standard<\/strong><\/li>\n<li>\u6bcf\u6708\u5831\u544a\u3001\u4f7f\u7528\u8005\u65e5\u8a8c\u2192\u00a0<strong>S3 Standard-IA<\/strong><\/li>\n<li>\u820a\u7248\u5099\u4efd\u3001\u6b77\u53f2\u8cc7\u6599\u2192\u00a0<strong>S3 Glacier<\/strong><\/li>\n<li>\u5408\u898f\u5b58\u6a94\u2192\u00a0<strong>S3 Glacier Deep Archive<\/strong><\/li>\n<\/ul>\n<h4>3. \u7248\u672c\u63a7\u5236\uff08Versioning\uff09<\/h4>\n<p>\u958b\u555f\u7248\u672c\u63a7\u5236\u5f8c\uff0cS3 \u6703\u4fdd\u7559\u6bcf\u500b\u7269\u4ef6\u7684\u820a\u7248\u672c\u3002<\/p>\n<ul>\n<li><strong>\u9632\u6b62\u8aa4\u522a<\/strong>\uff1a\u522a\u9664\u64cd\u4f5c\u6703\u65b0\u589e\u4e00\u500b\u522a\u9664\u6a19\u8a18\u800c\u975e\u771f\u522a\u9664<\/li>\n<li><strong>\u8cc7\u6599\u6062\u5fa9<\/strong>\uff1a\u53ef\u6062\u5fa9\u5230\u4efb\u4f55\u6b77\u53f2\u7248\u672c<\/li>\n<li><strong>\u526f\u4f5c\u7528<\/strong>\uff1a\u5132\u5b58\u6210\u672c\u589e\u52a0\uff08\u6240\u6709\u7248\u672c\u90fd\u6536\u8cbb\uff09<\/li>\n<\/ul>\n<p><strong>\u958b\u555f\u65b9\u6cd5<\/strong>\uff1a\u5132\u5b58\u6876\u2192\u00a0<strong>\u5c6c\u6027<\/strong>\u00a0\u2192\u00a0<strong>\u7248\u672c\u63a7\u5236<\/strong>\u00a0\u2192 \u555f\u7528<\/p>\n<p><strong>\u6700\u4f73\u5be6\u8e10<\/strong>\uff1a\u751f\u7522\u5132\u5b58\u6876\u90fd\u61c9\u958b\u555f\u7248\u672c\u63a7\u5236\uff0c\u914d\u5408\u751f\u547d\u9031\u671f\u7b56\u7565\u81ea\u52d5\u6e05\u7406\u820a\u7248\uff08\u5982\u4fdd\u7559\u6700\u65b03\u500b\u7248\u672c\uff09\u3002<\/p>\n<hr \/>\n<h3>\u5132\u5b58\u751f\u547d\u9031\u671f\u7b56\u7565\uff08Lifecycle Rules\uff09<\/h3>\n<p>\u751f\u547d\u9031\u671f\u7b56\u7565\u53ef\u81ea\u52d5\u9077\u79fb\u7269\u4ef6\u5230\u9069\u7576\u5132\u5b58\u985e\u5225\uff0c\u6216\u5728\u5230\u671f\u5f8c\u522a\u9664\uff0c\u662f\u6210\u672c\u512a\u5316\u7684\u6838\u5fc3\u5de5\u5177\u3002<\/p>\n<h4>\u5e38\u898b\u8a2d\u5b9a\u7bc4\u4f8b\uff1a<\/h4>\n<table>\n<thead>\n<tr>\n<th>\u898f\u5247\u540d\u7a31<\/th>\n<th>\u7269\u4ef6\u524d\u7db4<\/th>\n<th>\u52d5\u4f5c<\/th>\n<th>\u5929\u6578<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u65e5\u8a8c\u6b78\u6a94<\/td>\n<td><code class=\"\">logs\/<\/code><\/td>\n<td>\u9077\u79fb\u5230Standard-IA<\/td>\n<td>0<\/td>\n<td>\u65e5\u8a8c\u7acb\u5373\u9032\u51b7\u5b58\u5132<\/td>\n<\/tr>\n<tr>\n<td>\u8a2a\u554f\u65e5\u8a8c\u8f49\u6b78\u6a94<\/td>\n<td><code class=\"\">logs\/<\/code><\/td>\n<td>\u9077\u79fb\u5230Glacier<\/td>\n<td>30<\/td>\n<td>30\u5929\u5f8c\u8f49\u66f4\u4f4e\u50f9\u5b58\u5132<\/td>\n<\/tr>\n<tr>\n<td>\u522a\u9664\u820a\u7248\u672c<\/td>\n<td>\u7121\u524d\u7db4<\/td>\n<td>\u522a\u9664\u4e0d\u5b8c\u6574\u7684\u5206\u6bb5\u4e0a\u50b3<\/td>\n<td>7<\/td>\n<td>\u6e05\u7406\u672a\u5b8c\u6210\u4e0a\u50b3<\/td>\n<\/tr>\n<tr>\n<td>\u6e05\u7406\u6b77\u53f2\u7248\u672c<\/td>\n<td>\u7121\u524d\u7db4<\/td>\n<td>\u6c38\u4e45\u522a\u9664\u820a\u7248\u672c<\/td>\n<td>\u4fdd\u7559\u6700\u8fd13\u500b<\/td>\n<td>\u7248\u672c\u63a7\u5236\u512a\u5316<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u914d\u7f6e\u5165\u53e3<\/strong>\uff1a\u5132\u5b58\u6876\u2192\u00a0<strong>\u7ba1\u7406<\/strong>\u00a0\u2192\u00a0<strong>\u751f\u547d\u9031\u671f\u898f\u5247<\/strong><\/p>\n<hr \/>\n<h3>S3 \u975c\u614b\u7db2\u7ad9\u8a17\u7ba1\u5b8c\u6574\u914d\u7f6e<\/h3>\n<p>S3 \u53ef\u8a17\u7ba1\u7d14\u975c\u614b\u7db2\u7ad9\uff08HTML\/CSS\/JS\uff09\uff0c\u6210\u672c\u6975\u4f4e\uff0c\u9069\u5408\u884c\u92b7\u843d\u5730\u9801\u3001\u6587\u4ef6\u7db2\u7ad9\u3002<\/p>\n<h4>\u8a2d\u5b9a\u6b65\u9a5f\uff1a<\/h4>\n<ol>\n<li><strong>\u8a2d\u5b9a\u975c\u614b\u7db2\u7ad9\u8a17\u7ba1<\/strong>\n<ul>\n<li>\u5132\u5b58\u6876\u2192\u00a0<strong>\u5c6c\u6027<\/strong>\u00a0\u2192\u00a0<strong>\u975c\u614b\u7db2\u7ad9\u8a17\u7ba1<\/strong><\/li>\n<li>\u9078\u64c7\u201d\u555f\u7528\u201d<\/li>\n<li>\u6307\u5b9a\u7d22\u5f15\u6587\u6a94\uff1a<code class=\"\">index.html<\/code><\/li>\n<li>\u6307\u5b9a\u932f\u8aa4\u6587\u6a94\uff1a<code class=\"\">error.html<\/code><\/li>\n<\/ul>\n<\/li>\n<li><strong>\u914d\u7f6e\u6b0a\u9650\uff08\u5b89\u5168\u7b2c\u4e00\uff09<\/strong>\n<ul>\n<li>\u5132\u5b58\u6876\u2192\u00a0<strong>\u6b0a\u9650<\/strong>\u00a0\u2192\u00a0<strong>Bucket Policy<\/strong><\/li>\n<li>\u65b0\u589e\u7b56\u7565\u5141\u8a31\u516c\u958b\u8b80\u53d6\uff08\u50c5\u6b64\u5132\u5b58\u6876\uff0c\u4e0d\u5f71\u97ff\u5176\u4ed6\uff09<\/li>\n<\/ul>\n<\/li>\n<li><strong>\u81ea\u8a02\u7db2\u57df\u540d\u7a31\uff08\u53ef\u9078\uff09<\/strong>\n<ul>\n<li>\u914d\u7f6eCloudFront \u5206\u767c\u6307\u5411S3\uff0c\u4e26\u8207Route 53 \u7d81\u5b9a<\/li>\n<li>\u7121\u9700\u70baS3 \u5206\u914d\u8b49\u66f8\uff0c\u5728CloudFront \u4e2d\u8a2d\u5b9aSSL<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h4>\u6548\u80fd\u512a\u5316\u5efa\u8b70\uff1a<\/h4>\n<ul>\n<li><strong>\u555f\u7528CloudFront<\/strong>\uff1aS3 \u672c\u8eab\u7121CDN \u7de9\u5b58\uff0c\u5168\u7403\u5b58\u53d6\u5ef6\u9072\u4e0d\u7a69\u5b9a<\/li>\n<li><strong>\u58d3\u7e2e\u975c\u614b\u8cc7\u6e90<\/strong>\uff1a\u5728S3 \u5132\u5b58\u524dGzip \u58d3\u7e2eJS\/CSS<\/li>\n<li><strong>\u8a2d\u5b9a\u5feb\u53d6\u982d<\/strong>\uff1a\u900f\u904eCloudFront \u6216S3 \u5143\u8cc7\u6599\u8a2d\u7f6e\u00a0<code class=\"\">Cache-Control: max-age=31536000<\/code><\/li>\n<\/ul>\n<hr \/>\n<h3>\u751f\u7522\u7d1a\u5b89\u5168\u6700\u4f73\u5be6\u8e10<\/h3>\n<h4>1. \u7981\u6b62\u516c\u958b\u8a2a\u554f\uff08\u9664\u5fc5\u8981\u60c5\u6cc1\uff09<\/h4>\n<p>\u9810\u8a2d\u60c5\u6cc1\u4e0b\uff0c\u6240\u6709\u516c\u5171\u5b58\u53d6\u90fd\u61c9\u88ab\u963b\u6b62\u3002\u82e5\u9700\u958b\u653e\uff08\u5982\u7db2\u7ad9\u8a17\u7ba1\uff09\uff0c\u900f\u904e\u7d30\u7c92\u5ea6\u7b56\u7565\u63a7\u5236\u3002<\/p>\n<h4>2. \u555f\u7528AWS \u52a0\u5bc6\uff08SSE-S3\/AES-256\uff09<\/h4>\n<p>\u6240\u6709\u5beb\u5165S3 \u7684\u8cc7\u6599\u90fd\u61c9\u555f\u7528\u4f3a\u670d\u5668\u7aef\u52a0\u5bc6\u3002<\/p>\n<ul>\n<li><strong>SSE-S3<\/strong>\uff1aAWS \u7ba1\u7406\u7684\u91d1\u9470\uff0c\u96f6\u914d\u7f6e<\/li>\n<li><strong>KMS<\/strong>\uff1a\u81ea\u7ba1\u7406\u91d1\u9470\uff0c\u7b26\u5408\u5408\u898f\u8981\u6c42<\/li>\n<\/ul>\n<p><strong>\u958b\u555f\u65b9\u6cd5<\/strong>\uff1a\u5132\u5b58\u6876\u2192\u00a0<strong>\u5c6c\u6027<\/strong>\u00a0\u2192\u00a0<strong>\u9810\u8a2d\u52a0\u5bc6<\/strong>\u00a0\u2192 \u555f\u7528<\/p>\n<h4>3. \u8a2d\u5b9a\u5b58\u53d6\u65e5\u8a8c\uff08Server Access Logging\uff09<\/h4>\n<p>\u8a18\u9304\u6240\u6709\u5b58\u53d6\u8acb\u6c42\uff0c\u7528\u65bc\u5be9\u8a08\u548c\u5b89\u5168\u5206\u6790\u3002<\/p>\n<p><strong>\u914d\u7f6e<\/strong>\uff1a\u5132\u5b58\u6876\u2192\u00a0<strong>\u5c6c\u6027<\/strong>\u00a0\u2192\u00a0<strong>\u4f3a\u670d\u5668\u8a2a\u554f\u65e5\u8a8c<\/strong>\u00a0\u2192 \u9078\u64c7\u53e6\u4e00\u500b\u5132\u5b58\u6876\u5b58\u653e\u65e5\u8a8c<\/p>\n<h4>4. \u907f\u514d\u4f7f\u7528IAM \u4f7f\u7528\u8005\u5b58\u53d6\u5bc6\u9470<\/h4>\n<p>\u7528\u00a0<strong>IAM \u89d2\u8272<\/strong>\uff08\u5982EC2 \u5be6\u4f8b\u89d2\u8272\uff09\u66ab\u6642\u53d6\u5f97\u6b0a\u9650\uff0c\u800c\u975e\u786c\u7de8\u78bc\u5b58\u53d6\u91d1\u9470\u3002<\/p>\n<hr \/>\n<h3>\u6210\u672c\u76e3\u63a7\u8207\u6700\u4f73\u5316<\/h3>\n<h4>\u6bcf\u6708\u5e33\u55ae\u6aa2\u67e5\u9805\uff1a<\/h4>\n<ol>\n<li><strong>\u5132\u5b58\u8cbb\u7528<\/strong>\uff1a\u6309\u5132\u5b58\u985e\u5225\u548c\u5bb9\u91cf\u8a08\u8cbb<\/li>\n<li><strong>\u8acb\u6c42\u8cbb\u7528<\/strong>\uff1aPUT\/COPY\/POST\/LIST \u8acb\u6c42<\/li>\n<li><strong>\u8cc7\u6599\u50b3\u8f38<\/strong>\uff1a\u5230\u4e92\u806f\u7db2\u6216\u8de8\u5340\u57df<\/li>\n<li><strong>\u7ba1\u7406\u529f\u80fd<\/strong>\uff1a\u5982S3 Inventory\u3001\u5206\u6790\u67e5\u8a62<\/li>\n<\/ol>\n<h4>\u6210\u672c\u512a\u5316\u7b56\u7565\uff1a<\/h4>\n<table>\n<thead>\n<tr>\n<th>\u7b56\u7565<\/th>\n<th>\u9810\u671f\u7bc0\u7701<\/th>\n<th>\u9069\u7528\u5834\u666f<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u555f\u7528Intelligent-Tiering<\/td>\n<td>20%\u201340%<\/td>\n<td>\u8a2a\u554f\u6a21\u5f0f\u4e0d\u78ba\u5b9a<\/td>\n<\/tr>\n<tr>\n<td>\u8a2d\u5b9a\u751f\u547d\u9031\u671f\u7b56\u7565<\/td>\n<td>40%\u201370%<\/td>\n<td>\u6709\u660e\u78ba\u6578\u64da\u6dd8\u6c70\u9031\u671f<\/td>\n<\/tr>\n<tr>\n<td>\u58d3\u7e2e\u8cc7\u6599\u4e0a\u50b3<\/td>\n<td>30%\u201360%<\/td>\n<td>\u53ef\u58d3\u7e2e\u7684\u65e5\u8a8c\/\u6587\u5b57<\/td>\n<\/tr>\n<tr>\n<td>\u9650\u5236\u8de8\u5340\u57df\u50b3\u8f38<\/td>\n<td>\u907f\u514d\u610f\u5916\u8cbb\u7528<\/td>\n<td>\u4e0d\u5fc5\u8981\u7684\u8cc7\u6599\u8907\u88fd<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u5de5\u5177<\/strong>\uff1a\u4f7f\u7528\u00a0<strong>AWS Cost Explorer<\/strong>\u00a0\u7be9\u9078\u00a0<code class=\"\">Service=S3<\/code>\u00a0\u67e5\u770b\u7d30\u5206\u6210\u672c\u3002<\/p>\n<hr \/>\n<h3>\u5e38\u898b\u554f\u984c\u89e3\u7b54<\/h3>\n<h4>Q1\uff1aS3 \u5132\u5b58\u6876\u7a81\u7136\u7121\u6cd5\u5b58\u53d6\uff0c\u5982\u4f55\u6392\u67e5\uff1f<\/h4>\n<ol>\n<li>\u6aa2\u67e5\u00a0<strong>Bucket Policy<\/strong>\u00a0\u662f\u5426\u88ab\u8aa4\u6539<\/li>\n<li>\u6aa2\u67e5\u00a0<strong>IAM \u89d2\u8272<\/strong>\u6b0a\u9650\u662f\u5426\u904e\u671f<\/li>\n<li>\u67e5\u770b\u00a0<strong>CloudTrail<\/strong>\u00a0\u65e5\u8a8c\uff0c\u770b\u662f\u5426\u6709\u7570\u5e38\u64cd\u4f5c<\/li>\n<li>\u6aa2\u67e5\u00a0<strong>\u963b\u6b62\u516c\u5171\u8a2a\u554f<\/strong>\u00a0\u8a2d\u5b9a\u662f\u5426\u88ab\u8aa4\u958b<\/li>\n<\/ol>\n<h4>Q2\uff1a\u5982\u4f55\u5be6\u73fe\u8de8\u5340\u57df\u8907\u88fd\uff08Cross-Region Replication\uff09\uff1f<\/h4>\n<p>\u5728\u5132\u5b58\u6876\u2192\u00a0<strong>\u7ba1\u7406<\/strong>\u00a0\u2192\u00a0<strong>\u8907\u88fd\u898f\u5247<\/strong>\u00a0\u4e2d\u914d\u7f6e\u3002\u9700\u958b\u555f\u7248\u672c\u63a7\u5236\u3002\u9069\u5408\u5408\u898f\u8981\u6c42\u591a\u5099\u4efd\u7684\u5834\u666f\u3002<\/p>\n<h4>Q3\uff1aS3 \u5132\u5b58\u6876\u548c\u6a94\u6848\u6709\u5927\u5c0f\u9650\u5236\u55ce\uff1f<\/h4>\n<ul>\n<li>\u55ae\u4e00\u7269\u4ef6\u6700\u59275TB<\/li>\n<li>\u55ae\u4e00PUT \u8acb\u6c42\u6700\u59275GB\uff08\u5927\u65bc5GB \u9700\u7528<strong>\u5206\u6bb5\u4e0a\u50b3<\/strong>\uff09<\/li>\n<li>\u5132\u5b58\u6876\u5bb9\u91cf\u7121\u9650<\/li>\n<\/ul>\n<hr \/>\n<h3>\u7d50\u8a9e\uff1aS3 \u662fAWS \u751f\u614b\u7684\u201d\u6578\u64da\u6e56\u5fc3\u81df\u201d<\/h3>\n<p>\u6b63\u78ba\u914d\u7f6eS3 \u4e0d\u50c5\u80fd\u78ba\u4fdd\u8cc7\u6599\u5b89\u5168\uff0c\u66f4\u80fd\u5927\u5e45\u964d\u4f4e\u96f2\u7aef\u5132\u5b58\u6210\u672c\u3002\u5efa\u8b70\u6bcf\u500b\u51fa\u6d77\u4f01\u696d\u81f3\u5c11\u719f\u6089\uff1a<\/p>\n<ol>\n<li>\u5132\u5b58\u985e\u5225\u8207\u751f\u547d\u9031\u671f\u7b56\u7565<\/li>\n<li>\u6b0a\u9650\u7ba1\u7406\uff08Bucket Policy vs IAM\uff09<\/li>\n<li>\u975c\u614b\u7db2\u7ad9\u8a17\u7ba1\u8207CDN \u96c6\u6210<\/li>\n<\/ol>\n<p>\u9019\u4e09\u9ede\u638c\u63e1\u5f8c\uff0c\u4f60\u5c31\u80fd\u628aS3 \u5f9e\u300d\u7c21\u55ae\u7684\u6a94\u6848\u5132\u5b58\u300d\u5347\u7d1a\u70ba<strong>\u9ad8\u6548\u7387\u7684\u6578\u64da\u7ba1\u7406\u5e73\u53f0<\/strong>\u3002<\/p>\n<hr \/>\n<p>\ud83d\udd27\u00a0<strong>\u514d\u8cbb\u53d6\u5f97AWS S3 \u5132\u5b58\u6210\u672c\u8a3a\u65b7<\/strong><\/p>\n<p>AWS-onCloudAI \u63d0\u4f9b\u514d\u8cbb\u7684\u5132\u5b58\u67b6\u69cb\u5be9\u67e5\uff0c\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>\u5132\u5b58\u985e\u5225\u512a\u5316\u5efa\u8b70<\/li>\n<li>\u6b0a\u9650\u914d\u7f6e\u5b89\u5168\u6027\u5be9\u67e5<\/li>\n<li>\u751f\u547d\u9031\u671f\u7b56\u7565\u5236\u5b9a<\/li>\n<\/ul>\n<p>\ud83d\udc49 \u8a2a\u554f\u00a0<a href=\"https:\/\/aws-oncloudai.com\/zh_hk\/\" target=\"_blank\" rel=\"noopener noreferrer\">aws-oncloudai.com<\/a>\u00a0\u9810\u7d04\u514d\u8cbb\u8aee\u8a62<\/p>\n<p><em>\u672c\u6587\u7531AWS-onCloudAI \u96f2\u7aef\u67b6\u69cb\u5718\u968a\u64b0\u5beb\uff0c\u5c08\u6ce8\u65bc\u5354\u52a9\u4e2d\u570b\u4f01\u696d\u6709\u6548\u7387\u5730\u4f7f\u7528AWS \u96f2\u7aef\u670d\u52d9\uff0c\u964d\u4f4e\u6210\u672c\uff0c\u4e26\u589e\u5f37\u5b89\u5168\u3002<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>\u5b8c\u6574\u8b1b\u89e3AWS S3\u5132\u5b58\u6876\u5efa\u7acb\u65b9\u6cd5\u3001\u6b0a\u9650\u914d\u7f6e\u3001\u5132\u5b58\u6700\u4f73\u5316\u7b56\u7565\u8207\u975c\u614b\u7db2\u7ad9\u8a17\u7ba1\u914d\u7f6e\u3002\u5e6b\u52a9\u51fa\u6d77\u4f01\u696d\u6709\u6548\u7387\u7ba1\u7406\u96f2\u7aef\u6578\u64da\uff0c\u964d\u4f4e\u5132\u5b58\u6210\u672c\u3002<\/p>","protected":false},"author":1,"featured_media":4405,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4404","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/comments?post=4404"}],"version-history":[{"count":1,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4404\/revisions"}],"predecessor-version":[{"id":4406,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4404\/revisions\/4406"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media\/4405"}],"wp:attachment":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media?parent=4404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/categories?post=4404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/tags?post=4404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}