使用 Amazon S3 Storage Lens 存储统计管理工具的帮助程序文件 - Amazon Simple Storage Service

使用 Amazon S3 Storage Lens 存储统计管理工具的帮助程序文件

为您的示例使用以下 JSON 文件及其关键输入。

JSON 格式的 S3 Storage Lens 存储统计管理工具示例配置

config.json

config.json 文件包含 S3 Storage Lens 存储统计管理工具组织级高级指标和建议配置的详细信息。要使用以下示例,请将 user input placeholders 替换为您自己的信息。

注意

高级指标和建议需支付额外费用。有关详细信息,请参阅高级指标和建议

{ "Id": "SampleS3StorageLensConfiguration", //Use this property to identify your S3 Storage Lens configuration. "AwsOrg": { //Use this property when enabling S3 Storage Lens for AWS Organizations. "Arn": "arn:aws:organizations::123456789012:organization/o-abcdefgh" }, "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "DetailedStatusCodesMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "DetailedStatusCodesMetrics": { "IsEnabled":true }, "PrefixLevel":{ "StorageMetrics":{ "IsEnabled":true, "SelectionCriteria":{ "MaxDepth":5, "MinStorageBytesPercentage":1.25, "Delimiter":"/" } } } } }, "Exclude": { //Replace with "Include" if you prefer to include Regions. "Regions": [ "eu-west-1" ], "Buckets": [ //This attribute is not supported for AWS Organizations-level configurations. "arn:aws:s3:::amzn-s3-demo-source-bucket" ] }, "IsEnabled": true, //Whether the configuration is enabled "DataExport": { //Details about the metrics export "S3BucketDestination": { "OutputSchemaVersion": "V_1", "Format": "CSV", //You can add "Parquet" if you prefer. "AccountId": "111122223333", "Arn": "arn:aws:s3::: amzn-s3-demo-destination-bucket", // The destination bucket for your metrics export must be in the same Region as your S3 Storage Lens configuration. "Prefix": "prefix-for-your-export-destination", "Encryption": { "SSES3": {} } }, "CloudWatchMetrics": { "IsEnabled": true } } }

JSON 格式的 S3 Storage Lens 存储统计管理工具示例配置(带 Storage Lens 组)

config.json

config.json 文件包含在使用 Storage Lens 组时,要应用于 Storage Lens 存储统计管理工具配置的详细信息。要使用该示例,请将 user input placeholders 替换为您自己的信息。

要将所有 Storage Lens 组附加到您的控制面板,请使用以下语法更新 Storage Lens 存储统计管理工具配置:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": {}, "IsEnabled": true }

要在 Storage Lens 存储统计管理工具控制面板配置中仅包含两个 Storage Lens 组(slg-1slg-2),请使用以下语法:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": { "SelectionCriteria": { "Include": [ "arn:aws:s3:us-east-1:111122223333:storage-lens-group/slg-1", "arn:aws:s3:us-east-1:444455556666:storage-lens-group/slg-2" ] }, "IsEnabled": true }

要仅将某些 Storage Lens 组排除在您的控制面板配置之外,请使用以下语法:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": { "SelectionCriteria": { "Exclude": [ "arn:aws:s3:us-east-1:111122223333:storage-lens-group/slg-1", "arn:aws:s3:us-east-1:444455556666:storage-lens-group/slg-2" ] }, "IsEnabled": true }

JSON 格式的 S3 Storage Lens 存储统计管理工具示例标签配置

tags.json

tags.json 文件包含要应用于 S3 Storage Lens 存储统计管理工具配置的标签。要使用此示例,请将 user input placeholders 替换为您自己的信息。

[ { "Key": "key1", "Value": "value1" }, { "Key": "key2", "Value": "value2" } ]

S3 Storage Lens 存储统计管理工具示例配置 IAM 权限

permissions.json – 特定控制面板名称

此示例策略显示具有指定的特定控制面板名称的 S3 Storage Lens 存储统计管理工具 IAM permissions.json 文件。将 value1us-east-1your-dashboard-nameexample-account-id 替换为您自己的值。

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetStorageLensConfiguration", "s3:DeleteStorageLensConfiguration", "s3:PutStorageLensConfiguration" ], "Condition": { "StringEquals": { "aws:ResourceTag/key1": "value1" } }, "Resource": "arn:aws:s3:us-east-1:example-account-id:storage-lens/your-dashboard-name" } ] }
permissions.json – 没有特定的控制面板名称

此示例策略显示了未指定特定控制面板名称的 S3 Storage Lens 存储统计管理工具 IAM permissions.json 文件。将 value1us-east-1example-account-id 替换为您自己的值。

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetStorageLensConfiguration", "s3:DeleteStorageLensConfiguration", "s3:PutStorageLensConfiguration" ], "Condition": { "StringEquals": { "aws:ResourceTag/key1": "value1" } }, "Resource": "arn:aws:s3:us-east-1:example-account-id:storage-lens/*" } ] }