Glacier

• S3 Glacier is a secure, durable, and extremely low-cost S3 storage class for data archiving and long-term backup.

• With S3 Glacier, customers can store their data cost effectively for months, years, or even decades.

• S3 Glacier enables customers to offload the administrative burdens of operating and scaling storage to AWS.

• Data at rest stored in S3 Glacier is automatically server-side encrypted using AES-256 with keys maintained by AWS.

Archive

• An archive can be any data such as a photo, video, or document and is a base unit of storage in S3 Glacier.

• Each archive has a unique ID and an optional description.

Vault

• In S3 Glacier, a vault is a container for storing archives.

• When you create a vault, you specify a name and choose an AWS Region where you want to create the vault.

Job

• S3 Glacier jobs can perform a select query on an archive, retrieve an archive, or get an inventory of a vault.

Vault Locking Overview

• You can specify controls such as “write once read many” (WORM) in a vault lock policy and lock the policy from future edits.

• Once locked, the policy can no longer be changed.

• You must complete the vault locking process within 24 hours after the vault lock enters the InProgress state.

• After the 24 hour window ends, the lock ID expires, the vault automatically exits the InProgress state, and the vault lock policy is removed from the vault.

• After a vault lock is in the Locked state, you cannot initiate a new vault lock for the vault.

• You can set a vault lock by calling initiate-vault-lock.

• You can abort the vault locking process by calling AbortVaultLock.

• You can get the state of the vault lock by calling GetVaultLock.