AWS S3 Cheatsheet
Complete AWS S3 reference: buckets, objects, permissions, security, sync and presigned URLs.
| Command/Item | Description | Example | Category |
|---|---|---|---|
| aws s3 ls | List all S3 buckets | aws s3 ls | Bucket |
| aws s3 mb | Create a bucket | aws s3 mb s3://my-bucket | Bucket |
| aws s3 rb | Remove a bucket | aws s3 rb s3://my-bucket --force | Bucket |
| aws s3 cp | Copy files to/from S3 | aws s3 cp file.txt s3://my-bucket/file.txt | Objects |
| aws s3 mv | Move/rename objects | aws s3 mv file.txt s3://my-bucket/ | Objects |
| aws s3 rm | Delete an object | aws s3 rm s3://my-bucket/file.txt | Objects |
| aws s3 sync | Sync local folder & bucket | aws s3 sync ./dist s3://my-bucket | Sync & Transfer |
| S3 ACL | Access control for objects/buckets | aws s3api put-bucket-acl --bucket my-bucket --acl public-read | Permissions |
| Bucket Policy | JSON policy to control access | aws s3api put-bucket-policy --bucket my-bucket --policy file.json | Permissions |
| IAM Roles | Access via AWS roles instead of keys | Attach S3FullAccess to an IAM Role | Security |
| KMS Encryption | Encrypt S3 objects with KMS | aws s3 cp file s3://bucket --sse aws:kms | Security |
| Presigned URL | Generate temporary read/write links | aws s3 presign s3://my-bucket/file.txt | URL & Access |
| Object Versioning | Keep history of object versions | aws s3api put-bucket-versioning --bucket my-bucket --versioning-configuration Status=Enabled | Security |