AWS CLI S3 Cheat Sheet

aws s3 ls

# List S3 buckets in the account.

aws s3 ls s3://my-bucket/

# List top-level objects and prefixes in a bucket.

aws s3 cp ./app.log s3://my-bucket/logs/app.log

# Copy a local file into a bucket.

aws s3 cp s3://my-bucket/backups/db.dump ./db.dump

# Copy an object from S3 to local disk.

aws s3 cp ./dist s3://my-bucket/site/ --recursive

# Copy a local directory tree to S3.

aws s3 sync ./public s3://my-bucket/public/

# Synchronize a local directory to a bucket prefix.

aws s3 sync ./public s3://my-bucket/public/ --delete

# Delete extra destination objects during sync.

aws s3 rm s3://my-bucket/tmp/data.csv

# Remove a single object from S3.

aws s3 rm s3://my-bucket/tmp/ --recursive

# Remove all objects under a prefix.

aws s3 mv s3://my-bucket/tmp/file.txt s3://my-bucket/archive/file.txt

# Move an object within S3 or between S3 and local paths.

aws s3api create-bucket --bucket my-bucket --region us-west-2 --create-bucket-configuration LocationConstraint=us-west-2

# Create a new bucket using the low-level API command.

aws s3api head-bucket --bucket my-bucket

# Probe a bucket with HEAD.

aws s3api get-bucket-location --bucket my-bucket

# Show the bucket's region or location constraint.

aws s3api put-bucket-versioning --bucket my-bucket --versioning-configuration Status=Enabled

# Turn on object versioning for a bucket.

aws s3api get-bucket-versioning --bucket my-bucket

# Inspect the versioning configuration on a bucket.

aws s3api put-bucket-encryption --bucket my-bucket --server-side-encryption-configuration '{"Rules":[{"ApplyServerSideEncryptionByDefault":{"SSEAlgorithm":"AES256"}}]}'

# Configure bucket default server-side encryption.

aws s3api get-bucket-encryption --bucket my-bucket

# Read the default encryption settings on a bucket.

aws s3api put-public-access-block --bucket my-bucket --public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true

# Enable all four bucket public access block settings.

aws s3api put-bucket-policy --bucket my-bucket --policy file://bucket-policy.json

# Set a bucket policy from a local JSON file.

aws s3api delete-bucket --bucket my-bucket

# Remove a bucket after it has been emptied.

aws s3api put-object --bucket my-bucket --key docs/readme.txt --body ./README.md

# Put a single object using low-level API options.

aws s3api get-object --bucket my-bucket --key backups/db.dump ./db.dump

# Fetch an object to a local file.

aws s3api head-object --bucket my-bucket --key backups/db.dump

# Inspect metadata for a specific object.

aws s3api copy-object --bucket my-bucket --copy-source source-bucket/path/file.txt --key copies/file.txt

# Copy an object within S3 using low-level API syntax.

aws s3api delete-object --bucket my-bucket --key tmp/file.txt

# Delete a single object by key.

aws s3api list-object-versions --bucket my-bucket --prefix app/

# Show versions in a versioned bucket.

aws s3api delete-object --bucket my-bucket --key app/config.json --version-id 3Lg..example

# Remove one version from a versioned bucket.

aws s3 presign s3://my-bucket/reports/monthly.pdf --expires-in 3600

# Create a temporary signed download URL for an object.