Create S3 Bucket

Create S3 Bucket

In this section, we will use CloudFormation to create resources for the lab. The CloudFormation stack will create service resources such as an EC2 instance, SNS Topic, and Lambda Function.

1. Download Template and Lambda Function

Download the CloudFormation template and Lambda Function.

2. After downloading the CloudFormation template and Lambda Function from the link above:

   • We will create an S3 bucket to store the source files.
   • Access the AWS Management Console, find and select S3.

3. In the S3 interface, select Create bucket.

4. In the Create bucket interface:

   • Enter Bucket name aws-backup-plan-2026, it must be a unique name; you can choose any name you like (If duplicate, it will cause an error and the bucket cannot be created).

Note: In this workshop, we will use the Singapore region (ap-southeast-1). If you want to use another region, make sure to switch to the region you want to use when creating workshop-related resources.

5. Keep the default configuration.

6. In the Default encryption section. For Encryption type, select Server-side encryption with Amazon S3 managed keys (SSE-S3).

   In the Bucket Key section, select Enable and finally select Create bucket.

7. Complete creating the S3 bucket.

8. Create a storage folder.

   • Select Create folder.

9. In the folder creation interface:

   • Enter the folder name Backup Plan. In the Server-side encryption section, select Don’t specify an encryption key

   • Finally select Create folder

10. Complete creating the folder.

11. In the newly created folder, Upload the downloaded and extracted files.

12. In the Upload section:

    • Select Add files.
    • Choose the files you want to upload.
    • Select Upload.

13. Complete uploading the files.

14. Configure Permissions for the S3 bucket:

    • For Block public access (bucket settings).

15. Uncheck Block all public access:

    • Then select Save changes.

16. Confirm by selecting confirm and then select Confirm.

17. Next, configure the Bucket policy:

    • Select Edit.

18. In the Edit bucket policy interface:

    • Enter the following code and replace with your Bucket ARN.

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "PublicReadGetObject",
                "Effect": "Allow",
                "Principal": "*",
                "Action": [
                    "s3:GetObject"
                ],
                "Resource": [
                    "arn:aws:s3:::Bucket-Name/*"
                ]
            }
        ]
    }
    

19. Select Save changes.

20. Verify that Permissions are set to Public.

21. Copy the path information of lambda_function.zip.

22. Copy the Object URL information of the backup-lab.yaml file.