Concepts for directory buckets in Local Zones - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Concepts for directory buckets in Local Zones

Before creating a directory bucket in a Local Zone, you must have the Local Zone ID where you want to create a bucket. You can find all Local Zone information by using the DescribeAvailabilityZones API operation. This API operation lists information about Local Zones, including their Local Zone IDs, parent Region names, network border groups, and opt-in status. After you have your Local Zone ID and you are opted in, you can create a directory bucket in the Local Zone. A directory bucket name consists of a base name that you provide and a suffix that contains the Zone ID of your bucket location, followed by --x-s3.

A Local Zone is connected to the parent Region using a private network. Parent Zone ID is the ID of the zone that handles the Local Zone control plane operations. Network Border Group is a unique group from which Amazon advertises public IP addresses. For more information about Local Zones, parent Region, and parent Zone ID, see Amazon Local Zones concepts in the Amazon Local Zones User Guide.

All directory buckets use the s3express namespace, which is separate from the s3 namespace for general purpose buckets. For directory buckets, requests are routed to either a Regional endpoint or a Zonal endpoint. The routing is handled automatically for you if you use the Amazon Web Services Management Console, Amazon CLI, or Amazon SDKs.

Most bucket-level API operations (such as CreateBucket and DeleteBucket) are routed to Regional endpoints, and are referred to as Regional endpoint API operations. Regional endpoints are in the format of s3express-control.ParentRegionCode.amazonaws.com.cn. All object-level API operations (such as PutObject) and two bucket-level API operations (CreateSession and HeadBucket) are routed to Zonal endpoints, and are referred to as Zonal endpoint API operations. Zonal endpoints are in the format of s3express-LocalZoneID.ParentRegionCode.amazonaws.com.cn. For a complete list of API operations by endpoint type, see Directory bucket API operations.

S3 is available in the Beijing Local Zone:

Parent Region Name Parent Region Code Parent Zone IDs Local Zone Group Long Name Local Zone Code Local Zone ID Network Border Group Example bucket ARN Regional endpoint Zonal endpoint Storage class
China (Beijing) cn-north-1 cnn1-az1 China (Beijing) cn-north-1-pkx-1a cnn1-pkx1-az1 cn-north-1-pkx-1 arn:aws-cn:s3express:cn-north-1:123456789012:bucket/amzn-s3-demo-bucket--cnn1-pkx1-az1--x-s3 s3express-control.cn-north-1.amazonaws.com.cn s3express-cnn1-pkx1-az1.cn-north-1.amazonaws.com.cn S3 One Zone-Infrequent Access (S3 One Zone-IA; Z-IA)

To access directory buckets in Local Zones from your virtual private cloud (VPC), you can use gateway VPC endpoints. There is no additional charge for using gateway endpoints. To configure gateway VPC endpoints to access directory buckets and objects in Local Zones, see Private connectivity from your VPC.