S3

import boto3
from botocore.config import Config

# S3 클라이언트 생성 (리전별 설정)
s3 = boto3.client('s3',
    region_name='ap-northeast-2',
    config=Config(
        retries={'max_attempts': 3},
        signature_version='s3v4'
    )
)

# 버킷 생성 (서울 리전)
s3.create_bucket(
    Bucket='my-app-files-2024',
    CreateBucketConfiguration={'LocationConstraint': 'ap-northeast-2'}
)

# 파일 업로드 (메타데이터, 암호화 포함)
s3.upload_file(
    Filename='./report.pdf',
    Bucket='my-app-files-2024',
    Key='documents/2024/01/report.pdf',
    ExtraArgs={
        'ContentType': 'application/pdf',
        'ServerSideEncryption': 'AES256',
        'Metadata': {'author': 'kaitrust'}
    }
)

# Presigned URL 생성 (다운로드용, 1시간 유효)
url = s3.generate_presigned_url(
    'get_object',
    Params={
        'Bucket': 'my-app-files-2024',
        'Key': 'documents/2024/01/report.pdf'
    },
    ExpiresIn=3600
)

# Presigned POST (업로드용, 클라이언트 직접 업로드)
presigned_post = s3.generate_presigned_post(
    Bucket='my-app-files-2024',
    Key='uploads/${filename}',
    Conditions=[
        ['content-length-range', 0, 10485760],  # 최대 10MB
        ['starts-with', '$Content-Type', 'image/']
    ],
    ExpiresIn=3600
)

# 멀티파트 업로드 (대용량 파일)
from boto3.s3.transfer import TransferConfig
config = TransferConfig(
    multipart_threshold=100 * 1024 * 1024,  # 100MB 이상시 멀티파트
    max_concurrency=10
)
s3.upload_file('large_file.zip', 'bucket', 'key', Config=config)

import {
  S3Client,
  PutObjectCommand,
  GetObjectCommand,
  DeleteObjectCommand
} from '@aws-sdk/client-s3';
import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
import { Upload } from '@aws-sdk/lib-storage';

// S3 클라이언트 설정
const s3 = new S3Client({
  region: 'ap-northeast-2',
  credentials: {
    accessKeyId: process.env.AWS_ACCESS_KEY_ID,
    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY
  }
});

// 파일 업로드
async function uploadFile(buffer, key, contentType) {
  const command = new PutObjectCommand({
    Bucket: 'my-app-files-2024',
    Key: key,
    Body: buffer,
    ContentType: contentType,
    ServerSideEncryption: 'AES256',
    CacheControl: 'max-age=31536000'
  });

  await s3.send(command);
  return `https://my-app-files-2024.s3.ap-northeast-2.amazonaws.com/${key}`;
}

// 스트리밍 업로드 (대용량)
async function uploadLargeFile(readableStream, key) {
  const upload = new Upload({
    client: s3,
    params: {
      Bucket: 'my-app-files-2024',
      Key: key,
      Body: readableStream
    },
    queueSize: 4,
    partSize: 10 * 1024 * 1024  // 10MB chunks
  });

  upload.on('httpUploadProgress', (progress) => {
    console.log(`Uploaded: ${progress.loaded}/${progress.total}`);
  });

  return upload.done();
}

// Presigned URL 생성
async function getDownloadUrl(key, expiresIn = 3600) {
  const command = new GetObjectCommand({
    Bucket: 'my-app-files-2024',
    Key: key
  });
  return getSignedUrl(s3, command, { expiresIn });
}

# S3 버킷 + 보안 설정 Terraform
resource "aws_s3_bucket" "app_files" {
  bucket = "my-app-files-2024"

  tags = {
    Environment = "production"
    Team        = "platform"
  }
}

# 버전 관리 활성화
resource "aws_s3_bucket_versioning" "app_files" {
  bucket = aws_s3_bucket.app_files.id
  versioning_configuration {
    status = "Enabled"
  }
}

# 서버 측 암호화 (기본값)
resource "aws_s3_bucket_server_side_encryption_configuration" "app_files" {
  bucket = aws_s3_bucket.app_files.id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "aws:kms"
      kms_master_key_id = aws_kms_key.s3_key.arn
    }
  }
}

# 퍼블릭 액세스 차단
resource "aws_s3_bucket_public_access_block" "app_files" {
  bucket = aws_s3_bucket.app_files.id

  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

# Lifecycle 정책 (비용 최적화)
resource "aws_s3_bucket_lifecycle_configuration" "app_files" {
  bucket = aws_s3_bucket.app_files.id

  rule {
    id     = "archive-old-files"
    status = "Enabled"

    transition {
      days          = 90
      storage_class = "STANDARD_IA"
    }

    transition {
      days          = 180
      storage_class = "GLACIER"
    }

    noncurrent_version_expiration {
      noncurrent_days = 30
    }
  }
}