View a markdown version of this page

使用 Amazon S3 Storage Lens 存储统计管理工具的帮助程序文件 - Amazon Simple Storage Service

使用 Amazon S3 Storage Lens 存储统计管理工具的帮助程序文件

为您的示例使用以下 JSON 文件及其关键输入。

JSON 格式的 S3 Storage Lens 存储统计管理工具示例配置

例 config.json

config.json 文件包含 S3 Storage Lens 存储统计管理工具组织级高级指标和建议配置的详细信息。要使用以下示例,请将 user input placeholders 替换为您自己的信息。

注意

高级指标和建议需支付额外费用。有关详细信息,请参阅高级指标和建议。

{ "Id": "SampleS3StorageLensConfiguration", //Use this property to identify your S3 Storage Lens configuration. "AwsOrg": { //Use this property when enabling S3 Storage Lens for AWS Organizations. "Arn": "arn:aws:organizations::123456789012:organization/o-abcdefgh" }, "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "DetailedStatusCodesMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "DetailedStatusCodesMetrics": { "IsEnabled":true }, "PrefixLevel":{ "StorageMetrics":{ "IsEnabled":true, "SelectionCriteria":{ "MaxDepth":5, "MinStorageBytesPercentage":1.25, "Delimiter":"/" } } } } }, "Exclude": { //Replace with "Include" if you prefer to include Regions. "Regions": [ "eu-west-1" ], "Buckets": [ //This attribute is not supported for AWS Organizations-level configurations. "arn:aws:s3:::amzn-s3-demo-source-bucket" ] }, "IsEnabled": true, //Whether the configuration is enabled "DataExport": { //Details about the metrics export "S3BucketDestination": { "OutputSchemaVersion": "V_1", "Format": "CSV", //You can add "Parquet" if you prefer. "AccountId": "111122223333", "Arn": "arn:aws:s3::: amzn-s3-demo-destination-bucket", // The destination bucket for your metrics export must be in the same Region as your S3 Storage Lens configuration. "Prefix": "prefix-for-your-export-destination", "Encryption": { "SSES3": {} } }, "CloudWatchMetrics": { "IsEnabled": true } } }

JSON 格式的 S3 Storage Lens 存储统计管理工具示例配置(带 Storage Lens 组)

例 config.json

config.json 文件包含在使用 Storage Lens 组时,要应用于 Storage Lens 存储统计管理工具配置的详细信息。要使用该示例,请将 user input placeholders 替换为您自己的信息。

要将所有 Storage Lens 组附加到您的控制面板,请使用以下语法更新 Storage Lens 存储统计管理工具配置:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": {}, "IsEnabled": true }

要在 Storage Lens 存储统计管理工具控制面板配置中仅包含两个 Storage Lens 组(slg-1 和 slg-2),请使用以下语法:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": { "SelectionCriteria": { "Include": [ "arn:aws:s3:us-east-1:111122223333:storage-lens-group/slg-1", "arn:aws:s3:us-east-1:444455556666:storage-lens-group/slg-2" ] }, "IsEnabled": true }

要仅将某些 Storage Lens 组排除在您的控制面板配置之外,请使用以下语法:

{ "Id": "ExampleS3StorageLensConfiguration", "AccountLevel": { "ActivityMetrics": { "IsEnabled":true }, "AdvancedCostOptimizationMetrics": { "IsEnabled":true }, "AdvancedDataProtectionMetrics": { "IsEnabled":true }, "BucketLevel": { "ActivityMetrics": { "IsEnabled":true }, "StorageLensGroupLevel": { "SelectionCriteria": { "Exclude": [ "arn:aws:s3:us-east-1:111122223333:storage-lens-group/slg-1", "arn:aws:s3:us-east-1:444455556666:storage-lens-group/slg-2" ] }, "IsEnabled": true }

JSON 格式的 S3 Storage Lens 存储统计管理工具示例标签配置

例 tags.json

tags.json 文件包含要应用于 S3 Storage Lens 存储统计管理工具配置的标签。要使用此示例,请将 user input placeholders 替换为您自己的信息。

[ { "Key": "key1", "Value": "value1" }, { "Key": "key2", "Value": "value2" } ]

S3 Storage Lens 存储统计管理工具示例配置 IAM 权限

例 permissions.json – 特定控制面板名称

此示例策略显示具有指定的特定控制面板名称的 S3 Storage Lens 存储统计管理工具 IAM permissions.json 文件。将 value1、us-east-1、your-dashboard-name 和 example-account-id 替换为您自己的值。

JSON
{ "Version":"2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetStorageLensConfiguration", "s3:DeleteStorageLensConfiguration", "s3:PutStorageLensConfiguration" ], "Condition": { "StringEquals": { "aws:ResourceTag/key1": "value1" } }, "Resource": "arn:aws:s3:us-east-1:111122223333:storage-lens/your-dashboard-name" } ] }
例 permissions.json – 没有特定的控制面板名称

此示例策略显示了未指定特定控制面板名称的 S3 Storage Lens 存储统计管理工具 IAM permissions.json 文件。将 value1、us-east-1 和 example-account-id 替换为您自己的值。

JSON
{ "Version":"2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetStorageLensConfiguration", "s3:DeleteStorageLensConfiguration", "s3:PutStorageLensConfiguration" ], "Condition": { "StringEquals": { "aws:ResourceTag/key1": "value1" } }, "Resource": "arn:aws:s3:us-east-1:111122223333:storage-lens/*" } ] }