Glacier

S3 Glacier is a secure, durable, and extremely low-cost S3 storage class for data archiving and long-term backup.
With S3 Glacier, customers can store their data cost effectively for months, years, or even decades.
S3 Glacier enables customers to offload the administrative burdens of operating and scaling storage to AWS.
Data at rest stored in S3 Glacier is automatically server-side encrypted using AES-256 with keys maintained by AWS.

Vault

In S3 Glacier, a vault is a container for storing archives.
When you create a vault, you specify a name and choose an AWS Region where you want to create the vault.

S3 Glacier jobs can perform a select query on an archive, retrieve an archive, or get an inventory of a vault.

You can specify controls such as “write once read many” (WORM) in a vault lock policy and lock the policy from future edits.
Once locked, the policy can no longer be changed.
You must complete the vault locking process within 24 hours after the vault lock enters the InProgress state.
After the 24 hour window ends, the lock ID expires, the vault automatically exits the InProgress state, and the vault lock policy is removed from the vault.
After a vault lock is in the Locked state, you cannot initiate a new vault lock for the vault.
You can set a vault lock by calling initiate-vault-lock.
You can abort the vault locking process by calling AbortVaultLock.
You can get the state of the vault lock by calling GetVaultLock.

Last updated 4 years ago

Was this helpful?

S3 Glacier is a secure, durable, and extremely low-cost S3 storage class for data archiving and long-term backup.
With S3 Glacier, customers can store their data cost effectively for months, years, or even decades.
S3 Glacier enables customers to offload the administrative burdens of operating and scaling storage to AWS.
Data at rest stored in S3 Glacier is automatically server-side encrypted using AES-256 with keys maintained by AWS.

In S3 Glacier, a vault is a container for storing archives.
When you create a vault, you specify a name and choose an AWS Region where you want to create the vault.

S3 Glacier jobs can perform a select query on an archive, retrieve an archive, or get an inventory of a vault.

You can specify controls such as “write once read many” (WORM) in a vault lock policy and lock the policy from future edits.
Once locked, the policy can no longer be changed.
You must complete the vault locking process within 24 hours after the vault lock enters the InProgress state.
After the 24 hour window ends, the lock ID expires, the vault automatically exits the InProgress state, and the vault lock policy is removed from the vault.
After a vault lock is in the Locked state, you cannot initiate a new vault lock for the vault.
You can set a vault lock by calling initiate-vault-lock.
You can abort the vault locking process by calling AbortVaultLock.
You can get the state of the vault lock by calling GetVaultLock.

Last updated 4 years ago

Was this helpful?