Lab: S3 storage with LocalStack

What you will learn in this TP

• Use LocalStack and awslocal
• Secure a bucket (versioning, encryption, policy)
• Automate object lifecycle

Introduction #

What you will learn in this section

• Use LocalStack and awslocal
• Secure a bucket (versioning, encryption, policy)
• Automate object lifecycle

Context. Your team wants to store exports and publish static documentation. Before touching the real account, you validate the setup on LocalStack.

Prerequisites: Docker, the AWS CLI and LocalStack (pip install localstack awscli-local terraform-local): everything runs locally, with no AWS account or charges  ·  Estimated time: 45 min

A bucket following best practices and a static site served locally.

Hands-on #

Guided steps, with their solution.

1. 1. Start LocalStack

   Why? LocalStack exposes all emulated services on port 4566; awslocal is the AWS CLI preconfigured for this endpoint.

   Start LocalStack in the background, check service status and the returned identity.

2. 2. Create a versioned, encrypted bucket

   Why? Versioning protects against accidental deletions; default encryption applies to every new object.

   Create exports-equipe, enable versioning and default encryption, upload a file twice and list its versions.

3. 3. Enforce TLS with a bucket policy

   Why? Denying unencrypted requests is a classic security audit control.

   Apply a policy denying any request where aws:SecureTransport is false, then read it back.

4. 4. Automate the lifecycle

   Why? Moving old exports to a cheaper class reduces the bill without manual work.

   Add a rule: STANDARD_IA at 30 days, DEEP_ARCHIVE at 180 days, delete old versions at 90 days.

5. 5. Publish a static site and share a temporary link

   Why? S3 serves static sites; a presigned link grants time-limited access without making the bucket public.

   Create the docs-site bucket, enable website hosting, sync a folder and open the site; generate a 15-minute presigned link to the report.

Difficulty level : ●●○○○ (2/5)