Best Practices for Data Protection on Amazon S3: Configuring and Managing Amazon S3 Replication

[@AznGlenny07]

Very good info! Thank you for the video!

[@andyo64]

I've been trying to make the prefix work for 2 days - hopefully someone has the syntax?

[@awssupport]

Hello, Andy! 👋 I've shared your question and feedback internally with our team for review. In the meantime, you may find this user guide helpful: go.aws/47409s1. 📖 ^MO

[@awssupport]

Hi, Andy! We wanted to follow up and share this doc our team recommended: go.aws/3SltBpz. The instructions of that doc should help you with the configuration. ✅ ^MO

[@kedargalande3193]

Great detailed video. like it! concepts are pretty cleared

[@yalvar]

I have followed along and it works as expected when you use the aws kms keys, however, when you try the same with a customer kms key for each region it does not work. In the replication rule we specify the customer kms rule for the source region to decrypt and the destination one for encrypting the destination bucket objects. It might be necessary to add some kind of permissions to the kms policy to allow the role created by the replication policy to access the kms customer keys???

[@AmanSingh92]

Yes, that's the issue I'm facing. The bucket is encrypted with customer mangaed key and I've tried adding the role as KMS user from KMS console. Still it's not working, and I can't find any documentation about it either on AWS or outside. Were you able to solve this issue ?

[@Diamondhands2020]

Is there a way to replicate a source bucket into a specific folder in destination bucket?

[@awssupport]

Hello! 👋 Replication might not be possible. However, copying it still an option. Replication will involve replication of all the new items uploaded to the bucket with the same folder/prefix, object key and metadata. For further assistance, you're welcome to reach out to us on re:Post, here: go.aws/aws-repost. ^RZ

[@tomorrowd7]

I've set up the replication between two AWS accounts in the same region with initial batch replication of all objects filtered by a prefix. Only half of the folders in the prefix were replicated to the destination bucket and even those contain way less objects than were expected. Manifest was generated by S3. What might be the reason of such behavior?

[@awssupport]

Sorry to hear you're having issues with this. 😔 Feel free to reach out to our re:Post community of experts & engineers with your query, as they're always keen to share their knowledge: go.aws/aws-repost. 🤓 ^RF