Appearance
S3 Buckets
Amazon:
ixdf--assets: (Public CDN, serving usingpublic-assets.interaction-design.orgdomain). It is thes3-assetsdisk in the application (download archives, ebook, PDFs, etc.). Use the relevant subdirectory for specific file uploads.ixdf--images: (Public CDN, serving usingpublic-images.interaction-design.orgdomain). ImageKit is connected for image transformations.ixdf--backups: IxDF-web application backups. It’s located in another region (US West) than other buckets (as backups should).idf--email-marketing: Used by newsletters (upload images for newsletters). Consider using another bucket instead.idf--video-processed: (has a custom access policy that can be removed)idf--video-upload: Bucket to store raw lossless video files to be compressed by Coconut or other tools. Publicly accessible, because of Coconut integration requirements.idfvideo: raw videos (just a storage of original and compressed files), not integrated with the app. Linked toprivate-media.information-architecture.orgdomain.idf-notifications: There are two use-cases. 1) Store email content; 2) Store notification content cache.people-and-culture: A bucket for PaC app. Isolated for security reasons. All PaC-related files should be stored here.
⛔️ Amazon, Deprecated buckets (do not upload new content to them):
idf--assets: (Public CDN, serving usingpublic-media.interaction-design.orgdomain). Replacement:ixdf--imagesbucket. ImageKit is connected for image transformations. ❓ What do we need to remove it? Public CDN.idf--backup: Old not encrypted IxDF-web application backups. Replacement:ixdf--backupsbucket. It’s located in another region (US West) than other buckets (as backups should). Ideally, we should protect them by a password and move to the main bucket for backups.idf-logs: used to debug and store logs of CDN, probably deletable.ixdf--temp: used as a temporary storage for files that safe to remove anytime.idfprofilepictures: Probably unused, probably deprecated version ofidf--assets. Linked domain:private-media.interaction-design.org.
On DigitalOcean, we have a Space for backups:
File path for public access
Once a file is uploaded to a relevant folder, you'll find the file path under the 'Key'. For example, files uploaded to the 'Course Documents' folder will be available for public access at https://public-assets.interaction-design.org/ + key + filename.pdf, for example: https://public-assets.interaction-design.org/course-documents/TAPT-form-2022.pdf
When to create a new bucket?
- different access rules (e.g. public/private)
- by a reason to delete/cleanup
- different expiration/rotation rules
Credentials
We have two sets of credentials:
non-production: Has read access to all S3 bucketsproduction: Has write access to all S3 buckets
Note: Use production credentials only on the production server.