
#### Table of Contents

1. Modify the S3 bucket policy
2. For Single IP Address
3. S3 Bucket with Multiple IP Address
4. Conclusion

S3, Amazon Simple Storage Service is an object cloud storage service can store
data on the cloud and designed of 99.999999999 (11 9's ) of durability. For
example you can host image files, you can eitehr make the S3 bucket public so
the images is public available so you can access to the file, or you can keep
the remain the S3 as private but use the CloudFront to access the S3 file,
this blog just shows how to make it public with specific IP Address.

## Modify the S3 bucket policy

If you have a S3 bucket and want to get access by the specific IP address, you
can modify the bucket policy as following, replace the bucket name and IP
adress.

### For Single IP Address

```
{
    "Version": "2012-10-17",
    "Id": "S3PolicyId1",
    "Statement": [
        {
            "Sid": "IPAllow",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": "arn:aws:s3:::{Your-S3-Bucket-Name}/*",
            "Condition": {
                "IpAddress": {
                    "aws:SourceIp": "{Your-IP-Address}/24"
                }
            }
        }
    ]
}
```

### S3 Bucket with Multiple IP Address

If you have multiple IP Address you want to provide access, you can do as
following.

```
{
    "Version": "2012-10-17",
    "Id": "S3PolicyId1",
    "Statement": [
        {
            "Sid": "IPAllow",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": "arn:aws:s3:::{Your-Bucket-Name}/*",
            "Condition": {
                "IpAddress": {
                    "aws:SourceIp": [
                        "{Your-IP-Address-1}",
                        "{Your-IP-Address-2}"
                    ]
                }
            }
        }
    ]
```

### Conclusion

It is very easy to use aws:SourceIP section to limit specific IP Address to
access to the S3 bucket, if you just S3 bucket want to test it out, but dont'
want to make it to the public so everyone can access then, you can simply add
the IP address at the S3 policy editor.


S3, Amazon Simple Storage Service is an object cloud storage service can store data on the cloud and designed of 99.999999999 (119's ) of durability. For example you can host image files, you can eitehr make the S3 bucket public so the images is publicavailable so you can access to the file, or you can keep the remain the S3 as private but use the CloudFront to access the S3file, this blog just shows how to make it public with specific IP Address.

How To Enable S3 Bucket Access With IP Address


#### Table of Contents

1. Source Bucket Setup
2. Destination Bucket Setup
3. Setup Custom Policy
4. Create a User and Attach the Policy
5. AWS Configure
6. Execute the Command
7. Conclusion

This blog shows how to move S3 Bucket content from one AWS account to another
AWS account.

Scenario, this blog assumes to move S3 bucket
**technoapple.images**from AWS Account xxx to AWS Account yyy's
S3 bucket **ta.images**. It basically provides cross-account
access to S3 buckets.

## Source Bucket Setup

First, need to go to Account A's bucket, in this blog's example, should be
**technoapple.images**bucket. Next, we'll need to add the Bucket
policy to account A's bucket but will also replace few values so Account B can
access it.

Replace following **ACCOUNT-B-ID** to account B's id, replace
**ACCOUNT-B-USER** to the account B's user which later will
perform S3 file sync. **ACCOUNT-A-Bucket-Name** replaces the
**technoapple.images**.

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::{ACCOUNT-B-ID}:user/{ACCOUNT-B-USER}"
            },
            "Action": [
                "s3:ListBucket",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::{ACCOUNT-A-Bucket-NAME}/*",
                "arn:aws:s3:::{ACCOUNT-A-Bucket-NAME}"
           ]
        }
    ]
}
```

## Destination Bucket Setup

### Setup Custom Policy

For the destination bucket setup, we need to set up a user and has permission
to perform bucket sync. Following policy just tell that we'll have access to
both buckets.

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::technoapple.images",
                "arn:aws:s3:::technoapple.images/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource": [
                "arn:aws:s3:::ta.images",
                "arn:aws:s3:::ta.images/*"
            ]
        }
    ]
}
```

### Create a User and Attach the Policy

### AWS Configure

Here, you'll run AWS configure and add use the user who has the custom
policy.

### Execute the Command

At this point, both buckets should be ready and we can run the command to copy
files from account A's bucket to account B's bucket.

```
aws s3 sync s3://{source bucket name} s3://{target bucket name} --source-region {source region} --region {target region}
// following is example
aws s3 sync s3://technoapple.images s3://ta.images --source-region us-west-2 --region us-west-1
```

### Conclusion

This blog shows how to move a bucket's file from one account to another
account. This will be useful if you want to retire one account and move files
from one account to another account, or move S3 content between each
development environment.


This blog shows how to move S3 Bucket content from one AWS account to another AWS account.

How to Sync S3 Bucket to Different AWS Account


#### Table of Contents

1. Attach IAM role to private EC2 Instance
2. Create a new role and select the AmazonS3FullAccess.
3. enter the name and create the role
4. Attach the role to the private EC2 Instance
5. Create VPC EndPoint
6. Endpoints
7. SSH into Private EC2 Instance

This blog shows how to use VPC Endpoint from private EC2 Instance to S3
without going through the internet, with VPC Endpoint access s3 should be
within AWS service which will be no charge.

## Attach IAM role to private EC2 Instance

Since we'll need to access s3 from EC2 private instance, we'll need to set up
an s3 full access role for EC2 instance.

### Create a new role and select the AmazonS3FullAccess.

![](http://res.cloudinary.com/dmwrakaup/image/upload/c_fit,h_600,q_80,w_900/uupxrgghfivz1gfqrk65)

### enter the name and create the role

![](http://res.cloudinary.com/dmwrakaup/image/upload/c_fit,h_600,q_80,w_900/fseyxhqceun1jnyiklqc)

### Attach the role to the private EC2 Instance

![](http://res.cloudinary.com/dmwrakaup/image/upload/c_fit,h_600,q_80,w_900/bkpxw5dbuwhs5dx6zqwg)

## Create VPC EndPoint

### Endpoints

Go to VPC, click the **Endpoints** from Virtual private cloud. At
the Create Endpoint page, choose as following.

  - Service category: AWS services

  - Service name: choose s3, since we only want to access for s3 in this blog,
find the s3 from the list.

  - VPC: choose the VPC you created earlier.

  - Configure route tables: choose the private EC2 instance's route table,
should be the private route table

![](http://res.cloudinary.com/dmwrakaup/image/upload/c_fit,h_600,q_80,w_900/ongwitu8ubczp6uxxvol)

S3 full access role to private EC2

## SSH into Private EC2 Instance

Now, your private EC2 instance should be able to access to s3. Let's type ssh
into ec2 instance and type **aws s3 ls**. This command should
list of s3 buckets if has any.


VPC End Point - Use S3 from Private EC2 Instance


1. Find out what's font you'd like to use

2. google fonts page

3. Go to above link to check what's the font want to use.

4. For instance, i'm using Light 300 for Open Sans![](https://d1p0mp3f1fx0hz.cloudfront.net/_xdmsaodzj.png)

5. Add code to your Web Application

6. Add google api link & add font family to the css

7. ![](https://d1p0mp3f1fx0hz.cloudfront.net/_3pvffyv8f.png)

8. Code of link

9.

10. Code example of add to the css, bootstrap SASS

11. ```
$font-family-sans-serif:  "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif !default;
$font-family-serif:       Georgia, "Times New Roman", Times, serif !default;
```


  12. Example UI


    13. Following is the layout after I update the google font api.![](https://d1p0mp3f1fx0hz.cloudfront.net/_u8lpkc44y.png)




Furthermore, if you need more information about google fonts, see following
  links.


Getting Started Google Fonts


How to add Google Fonts to Your WebSite


if you want to apply following media specific style to the site, you could use
CSS3 media query.

/* apply these style when width is greater than 240px */
@media only screen and (min-width : 240px)
{
}

Check the detail document from following url, CSS media queries.

Also,
CSS3 media queries' specification.

In additional, probably should use modernizr at your site. see
modernizr.js. Media Query is CSS3 features, but if the browser doesn't support it you
might have to do something your own at your site.


How to Use CSS3 Media Query


sample code for apply style only for tablet, mobile, inserting cotent between
links by css.

a example code of adding content seperater '|' between links and use media
query apply style for width less than 1024px;

```
@media (max-width: 1024px){
    .my-footer ul li{
        display:inline;
    }

    .my-footer ul li a{
        margin-right:1px;
    }

    .my-footer ul > li > a::after{
        content: " | ";
    }

    .my-footer ul > li:last-child a::after{
        content: "";
    }
}


```

How it looks like

![](https://d1p0mp3f1fx0hz.cloudfront.net/_7smptsa8y.png)


sample code for apply style only for tablet, mobile, inserting cotent between links by css.

Category CSS3

How To Enable S3 Bucket Access With IP Address

How to Sync S3 Bucket to Different AWS Account

VPC End Point - Use S3 from Private EC2 Instance

How to add Google Fonts to Your WebSite

How to Use CSS3 Media Query

CSS Add Content Between Links