Frequently Asked Questions

Amazon S3 Glacier Basics

What is Amazon S3 Glacier and how is it used for backup?

Amazon S3 Glacier is a low-cost cloud storage service designed for data archiving and long-term backup. It is optimized for data that is infrequently accessed but must be retained for compliance or business continuity. Organizations use S3 Glacier to store large volumes of data at a fraction of the cost of traditional on-premises storage. Common use cases include data archiving, backup and disaster recovery, media asset storage, and long-term digital preservation. Note: S3 Glacier is not suitable for data that requires frequent or immediate access due to its retrieval times.

What are the main benefits of using Amazon S3 Glacier for backup?

Key benefits of Amazon S3 Glacier include cost efficiency (pay-as-you-go pricing for rarely accessed data), high durability (99.999999999% durability across multiple AWS regions), and built-in security (AES-256 encryption by default, with support for IAM policies and vault locks). S3 Glacier is specifically designed for long-term storage, offering flexible retrieval options to balance cost and access time. Note: Retrieval times can range from minutes to hours, which may not be suitable for urgent, frequent-access workloads.

How does Amazon S3 Glacier differ from Amazon S3 Standard?

Amazon S3 Standard is intended for frequently accessed data, offering low latency and high throughput, making it suitable for dynamic applications. Amazon S3 Glacier is optimized for long-term storage of infrequently accessed data, providing lower storage costs but longer retrieval times (from minutes to hours). S3 Standard supports instant access, while S3 Glacier is best for archiving, compliance, and disaster recovery. Note: S3 Glacier is not recommended for workloads requiring immediate data access.

Features & Capabilities

What retrieval options does Amazon S3 Glacier offer?

Amazon S3 Glacier provides three retrieval options: Expedited (1-5 minutes for urgent access), Standard (3-5 hours), and Bulk (5-12 hours for large datasets at the lowest cost). This allows organizations to balance retrieval speed and cost based on business needs. Note: Retrieval times are not instantaneous and may not meet all recovery time objectives.

How does Amazon S3 Glacier ensure data durability and security?

Amazon S3 Glacier automatically replicates data across multiple AWS regions, providing 99.999999999% durability. Data is encrypted by default using AES-256 both in transit and at rest. Additional security can be implemented with IAM policies and vault locks, which enforce compliance and prevent accidental or unauthorized deletion. Note: While S3 Glacier provides strong security, organizations are responsible for configuring IAM and compliance settings appropriately.

What is the data model for Amazon S3 Glacier (vaults, archives, jobs, notifications)?

Amazon S3 Glacier organizes data into vaults (containers for archives), with each archive representing an individual data object. Retrieval or inventory operations are managed as jobs, which are processed asynchronously. Notifications can be configured to alert users of job status changes via Amazon SNS. Note: Understanding this model is important for automating workflows and managing access controls.

Best Practices & Implementation

What are best practices for using Amazon S3 Glacier for backups?

Best practices include implementing a defined backup schedule aligned with data retention policies, using AWS Backup or lifecycle policies to automate data movement, monitoring storage costs with AWS Cost Explorer, and securing data with encryption and IAM policies. Regularly test data restoration to ensure backups are recoverable. Note: Lifecycle policies and regular audits are essential to avoid unnecessary costs and ensure compliance.

How do you create and manage backups in Amazon S3 Glacier?

To use Amazon S3 Glacier, create an S3 bucket, upload data selecting the Glacier storage class, and configure lifecycle policies for automated transitions. Retrieval involves initiating a restore operation and selecting the appropriate retrieval option (Expedited, Standard, Bulk). Clean up unused data and buckets to avoid unnecessary costs. Note: Retrievals are not instant and incur additional charges based on speed and volume.

How can N2W help optimize Amazon S3 Glacier backup and costs?

N2W Backup & Recovery automates data tiering to Amazon S3 Glacier and Glacier Deep Archive, helping organizations optimize backup costs by archiving infrequently accessed data. N2W also provides tools for scheduling backups, monitoring storage usage, and automating compliance reporting. Note: N2W is best suited for AWS and Azure environments; organizations with other cloud providers may need alternative solutions.

What are some expert tips for using Amazon S3 Glacier effectively?

Expert tips include combining S3 Glacier with S3 Standard or S3 Intelligent-Tiering for hybrid storage strategies, using S3 Object Lock for immutable backups, leveraging multipart uploads for large files, implementing cross-region replication for disaster recovery, and defining custom retrieval plans based on data criticality. Note: Each of these strategies may incur additional AWS charges and require careful configuration.

N2W Product & Integration

How does N2W integrate with Amazon S3 Glacier?

N2W integrates with Amazon S3 Glacier by automating the transition of backup data to Glacier or Glacier Deep Archive storage classes. This is managed through N2W's intelligent storage tiering and policy-based automation, reducing long-term backup costs by up to 92%. Note: N2W's Glacier integration is available for AWS environments; Azure users should verify Glacier support for their workloads.

What security and compliance features does N2W offer for Glacier backups?

N2W supports immutable backups using S3 Object Lock, automated compliance reporting, and end-to-end encryption for all backup data, including data archived to Glacier. N2W is ISO/IEC 27001:2022 certified and supports compliance with HIPAA, GDPR, FedRAMP, ITAR, and CJIS. Note: Customers are responsible for configuring compliance settings and may need to request certification documentation for audits.

What are the limitations of using Amazon S3 Glacier for backup and how does N2W address them?

Limitations of S3 Glacier include longer retrieval times (minutes to hours), potential additional costs for expedited retrieval, and the need for careful lifecycle policy management to avoid unnecessary charges. N2W addresses these by automating lifecycle transitions, providing cost monitoring tools, and supporting granular restore and compliance reporting. Note: S3 Glacier is not suitable for workloads requiring instant access; N2W cannot change AWS retrieval speeds.

Competition & Comparison

How does N2W compare to AWS Backup for Glacier-based backups?

N2W offers features not available in AWS Backup, such as immutable backups (air-gapped, tamper-proof), cross-cloud recovery (AWS and Azure), granular file/folder-level restore, intelligent storage tiering, and multi-tenancy for MSPs. AWS Backup requires Lambda scripting for automation and does not support immutable backups or file-level recovery. Note: AWS Backup may be preferable for organizations with simple, AWS-only environments and basic backup needs; N2W is best for multi-cloud, compliance-driven, or MSP use cases. Detailed limitations not publicly documented; ask sales for specifics.

Use Cases & Success Stories

What types of organizations benefit most from using N2W with Amazon S3 Glacier?

N2W with Amazon S3 Glacier is best suited for enterprises, public sector entities, healthcare, finance, retail, education, nonprofits, and managed service providers (MSPs) that require cost-effective, compliant, and scalable long-term backup solutions. Notable customers include Johnson & Johnson, Dyson, HP, Western Union, Skechers, City of Oakland, and St. John's University. Note: Organizations with real-time access needs or outside AWS/Azure may require alternative solutions.

Can you share a real-world example of cost savings or improved backup using N2W and Glacier?

Skechers standardized backup and recovery across a complex, multi-cloud IT estate using N2W, streamlining costs and enhancing data protection. St. John's University eliminated legacy tape-based storage, improved backup reliability, and achieved rapid recovery from accidental data deletion. Gett saved 50% on cloud costs using N2W's Resource Control. Note: Results may vary based on environment size and configuration. See N2W case studies for more details.

Amazon S3 Glacier Backup: A Practical Guide

By leveraging Amazon S3 Glacier, organizations can store large volumes of data at a fraction of the cost of traditional on-premises storage solutions.
Share post:

What Is Amazon S3 Glacier? 

Amazon S3 Glacier is a low-cost cloud storage service for data archiving and long-term backup. It is optimized for data that is infrequently accessed but must be stored for long durations, for example data needed to meet compliance requirements. By leveraging Amazon S3 Glacier, organizations can store large volumes of data at a fraction of the cost of traditional on-premises storage solutions.

Amazon S3 Glacier offers various retrieval options to balance cost with access time. Users can choose expedited, standard, or bulk retrieval options depending on how quickly they need the data.

Amazon S3 Glacier is widely used for backup, offering a reliable and scalable solution for storing secondary copies of critical data at a low cost. Organizations can automate the backup process using AWS services like AWS Backup, ensuring that important data is regularly copied and stored in S3 Glacier for long-term retention. The service’s flexibility in retrieval options allows businesses to balance cost with the need for timely data access.

This is part of a series of articles about S3 backup.

In this article:

What Are the Common Uses of Amazon S3 Glacier? 

S3 Glacier is often used for:

  • Data archiving: Involves storing data that is rarely accessed but must be retained for long durations. Companies often use Amazon S3 Glacier to offload historical data, such as logs, transaction records, and old project files. 
  • Backup and disaster recovery: S3 Glacier’s low cost and reliable infrastructure make it suitable for storing secondary copies of critical data. In the event of data loss or corruption, organizations can retrieve backups quickly using expedited retrieval options.
  • Disaster recovery planning: Involves creating a backup strategy, using S3 Glacier’s scalable storage capabilities to support diverse backup requirements.
  • Media asset storage: Media files, such as videos, images, and audio recordings, require significant storage space and must be preserved for extended periods. 
  • Long-term storage for digital preservation: Involves maintaining the integrity and accessibility of digital information over long periods. S3 Glacier provides the infrastructure to ensure that data remains intact and available for future use, storing critical documents, research data, and other digital assets.

Benefits of Using Amazon S3 Glacier for Backup 

Cost Efficiency

Amazon S3 Glacier offers a highly affordable storage option for data that is rarely accessed. Unlike traditional on-premises storage solutions, which require significant upfront investments in hardware and ongoing maintenance costs, S3 Glacier operates on a pay-as-you-go model. This allows organizations to store large volumes of data without incurring high capital expenses. 

✅ Pro Tip: For even greater savings, use automated lifecycle policies or N2W Backup & Recovery to seamlessly transition older, less-accessed data to Glacier or Glacier Deep Archive.

Durability

Amazon S3 Glacier provides high durability and robust security features, ensuring that data is protected over the long term. The service automatically replicates data across multiple geographically dispersed AWS regions, reducing the risk of data loss due to hardware failures or regional disasters. With a durability of 99.999999999% (11 nines), S3 Glacier guarantees that stored data remains intact and retrievable whenever needed.

Security

S3 Glacier encrypts data by default, both in transit and at rest, using AES-256 encryption. Organizations can also implement additional security measures, such as AWS Identity and Access Management (IAM) policies, to control access to their archived data. These features make S3 Glacier a reliable and secure choice for storing sensitive information over extended periods.

Long-Term Storage Benefits

Amazon S3 Glacier is specifically designed for long-term storage, making it ideal for organizations that need to retain data for years or even decades. The service offers flexible retrieval options that accommodate various use cases, from expedited access for urgent needs to bulk retrieval for large datasets that can be retrieved over several hours. 

S3 Glacier’s integration with other AWS services, such as AWS Backup and Amazon S3, simplifies data management and ensures that long-term storage strategies align with broader data governance and compliance requirements.

✅ Pro Tip: N2W’s automated backup and data tiering capabilities can ensure that your long-term data storage remains aligned with compliance needs and business continuity goals.

Tips from the Expert
Picture of Sebastian Straub
Sebastian Straub
Sebastian is the Principle Solutions Architect at N2WS with more than 20 years of IT experience. With his charismatic personality, sharp sense of humor, and wealth of expertise, Sebastian effortlessly navigates the complexities of AWS and Azure to break things down in an easy-to-understand way.

Amazon S3 vs Amazon S3 Glacier 

Amazon S3 and Amazon S3 Glacier are both storage services provided by AWS, but they cater to different needs and use cases.

  • Purpose and use cases: Amazon S3 is primarily for frequently accessed data, offering low latency and high throughput. It’s ideal for applications requiring quick access, such as hosting websites, content distribution, and data lakes. Amazon S3 Glacier is optimized for the long-term storage of infrequently accessed data. It provides lower storage costs at the expense of longer retrieval times, making it best suited for archiving, compliance storage, and disaster recovery.
  • Data retrieval: Amazon S3 provides instant access to data with minimal latency, suitable for dynamic and interactive applications. Amazon S3 Glacier’s data retrieval times vary from minutes to hours, depending on the retrieval option chosen. This makes it less suitable for use cases requiring immediate data access.
  • Data management: Amazon S3 offers data management features like lifecycle policies, versioning, and replication. Users can automate data transfers to Amazon S3 Glacier for cost-effective long-term storage. Amazon S3 Glacier, however, focuses on secure, low-cost data archiving with features like vault locks for compliance. It integrates with Amazon S3 lifecycle policies for data transitions.

Amazon S3 Glacier Data Model 

In order to use Amazon S3 Glacier for backup, it is important to understand how it stores and manages data.

Vault

A vault is a container used to organize archives in Amazon S3 Glacier. Each AWS account can create multiple vaults, each with a unique name within a region. Vaults serve as a focal point for managing archives, including access policies and retrieval options.

Vault locks can enforce compliance requirements and alter management policies, providing additional security. This capability ensures that once data is stored, it cannot be deleted or modified until the lock is lifted, protecting critical data from accidental or intentional alterations.

Archive

An archive represents individual data objects stored in Amazon S3 Glacier. Each archive is assigned a unique ID upon upload, ensuring precise tracking. Archives can be any data format, including documents, images, or backups.

While archives are designed for long-term storage, they can be retrieved through various options based on urgency. This flexibility allows users to access archived data as needed while keeping storage costs low.

Learn more in our detailed guide to S3 archive

Job

Jobs in Amazon S3 Glacier refer to tasks for retrieving archives or obtaining inventory lists of vault contents. When a retrieval request is made, a job is created and processed asynchronously. Users can then monitor job status and retrieve data upon completion.

Creating jobs allows efficient data management and retrieval processes, ensuring users can access necessary data promptly. Understanding the job mechanism is crucial for automating workflows and optimizing data access strategies.

Notification Configuration

Notification configurations enable Amazon S3 Glacier to send alerts about job status changes or other events. Users can configure notifications to be sent to Amazon SNS topics, keeping stakeholders informed of significant events or completed tasks.

Configuring notifications helps automate system monitoring and enhances operational efficiency. By receiving timely updates, users can respond swiftly to job completions or critical events, ensuring seamless data management workflows.

Tutorial: Getting Started with Amazon S3 Glacier 

This tutorial will guide you through the process of using Amazon S3 Glacier for long-term data storage, from creating a bucket to managing and retrieving your data.

Creating an S3 Bucket

To begin using Amazon S3 Glacier, the first step is to create an Amazon S3 bucket that will act as a container for your data.

  1. Sign in to the AWS Management Console and navigate to the S3 service.
  2. From the menu on the left, select Buckets.
  3. Click on Create Bucket.
  4. Enter a unique name for your bucket and choose a region. The region should align with your compliance and latency requirements.
  5. In the bucket settings, leave most options at their default. You can choose to disable bucket versioning for simplicity.
  6. Click Create Bucket to finish.

Uploading Data to the Bucket

After setting up the bucket, you can upload files that you wish to store using the Amazon S3 Glacier storage class:

  1. From the S3 dashboard, select your bucket under Buckets.
  2. Click Upload under the Objects tab to add files or folders. 
  3. Click on Add files. Drag and drop your data or select files from your local system.
  4. In the Storage Class section, choose Glacier Flexible Retrieval. This option ensures your data is stored in S3 Glacier with flexible retrieval options, balancing cost and access time.
  5. After configuring any optional settings like encryption, click Upload to store your files in the Glacier storage class.

Your data is now securely stored in S3 Glacier and will remain there until you decide to retrieve or delete it.

Restoring Data

If you need to retrieve files stored in Amazon S3 Glacier, the process involves initiating a restore operation:

  1. Navigate to the S3 console and select the bucket containing your Glacier-stored data.
  2. Find the object you want to restore, right-click, and select Initiate Restore.
  3. Choose the retrieval option based on your urgency:
    • Expedited: Retrieve data in 1-5 minutes for urgent needs.
    • Standard: Data will be available within 3-5 hours.
    • Bulk: Most cost-effective, retrieving data in 5-12 hours for large datasets.
  4. Specify the duration you want the restored copy to be available, then click Restore.
  5. You will receive a notification when the restore process is complete, and the data will be temporarily available in your S3 bucket for download.

Cleaning Up

After completing your tasks, it’s a good idea to clean up to avoid unnecessary costs:

  1. Return to the S3 bucket and delete any restored objects or Glacier data you no longer need.
  2. To confirm the deletion, select enter “permanently delete” into the confirmation box.
  3. Optionally, delete the S3 bucket itself if you no longer require it for storage. To do this, select the bucket, choose Delete, and confirm the action by entering the bucket’s name in the confirmation box, then click Delete bucket.

Best Practices for Using Amazon S3 Glacier for Backups 

Implement a Backup Schedule

To effectively use Amazon S3 Glacier for backups, it’s crucial to implement a well-defined backup schedule. This schedule should align with your organization’s data retention policies and recovery objectives. Start by identifying critical data that needs regular backups and determining the frequency—whether daily, weekly, or monthly—based on how often the data changes. Use AWS services like AWS Backup to automate the scheduling of these backups, ensuring consistency and reducing the risk of manual errors.

Additionally, consider using Amazon S3 lifecycle policies to automatically transition data from frequent-access storage classes to Amazon S3 Glacier after a specified period. This approach not only ensures data is regularly backed up but also optimizes storage costs by moving infrequently accessed data to a more economical storage solution.

✅ Pro Tip: With N2W, you can also implement these schedules across accounts and regions, helping streamline compliance and disaster recovery.

Monitor and Manage Storage Costs

Cost management is a key consideration when using Amazon S3 Glacier, especially since storage needs can grow over time. To keep costs in check, regularly monitor your storage usage through AWS Cost Explorer and set up budget alerts to receive notifications when spending exceeds predefined thresholds.

Implementing lifecycle policies can also help manage costs by automatically moving data between different storage classes based on usage patterns. For example, data that is no longer frequently accessed can be transitioned to Amazon S3 Glacier or S3 Glacier Deep Archive, further reducing costs. Additionally, periodically review your storage data to identify and delete any redundant or obsolete archives, ensuring that you only pay for necessary storage.

✅ Pro Tip: N2W can assist with optimizing storage class transitions to Glacier, automatically moving data based on custom policies.

Secure Your Archived Data

Securing archived data in Amazon S3 Glacier is essential to protect against unauthorized access and data breaches. Start by enabling encryption for your data both in transit and at rest. Amazon S3 Glacier uses server-side encryption with Amazon S3-managed keys (SSE-S3) by default, but you can also use AWS Key Management Service (KMS) for additional control over encryption keys.

Access control is another critical aspect of security. Implement AWS Identity and Access Management (IAM) policies to restrict access to your vaults and archives, ensuring that only authorized users can retrieve or manage data. Additionally, consider using vault locks to enforce compliance controls and prevent accidental or unauthorized deletion or modification of data.

✅ Pro Tip: In addition to encryption, implement IAM policies and consider N2W for creating immutable backups, making data tamper-resistant through Object Lock. 

Regularly Test Data Restoration

Regular testing of data restoration processes is vital to ensure that your backups are reliable and can be retrieved when needed. Schedule periodic restoration tests to validate that your data can be successfully recovered within your required timeframes. This testing should cover various retrieval options, such as expedited, standard, and bulk, to verify that each meets your organization’s recovery objectives.

Document the results of these tests and use them to refine your backup and restoration strategies. By regularly testing and validating your data restoration processes, you can ensure that your disaster recovery plans are effective and that your archived data is always accessible in an emergency.

✅ Pro Tip: With N2W, you can conduct restoration tests across multiple AWS regions, validating your disaster recovery setup.

Interested in Glacier backup for its cost-saving benefits?

For a deeper dive into optimizing AWS backup costs, download our free AWS Cost Optimization Guide. This guide covers 7 practical strategies—including lifecycling to Amazon S3 Glacier—to keep your backups resilient and cost-effective.

You might also like

Choosing the right backup & DR tool for your cloud

Choose the right backup & DR

Get the criteria to evaluate your best options