This page is only for existing customers of the S3 Glacier service using Vaults and the original REST API from 2012.
If you're looking for archival storage solutions we suggest using the S3 Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see S3 Glacier storage classes
Working with Vaults in Amazon S3 Glacier
A vault is a container for storing archives. When you create a vault, you specify a vault name and the Amazon Web Services Region in which you want to create the vault. For a list of the Amazon Web Services Regions supported by S3 Glacier, see Amazon S3 Glacier endpoints and quotas in the Amazon General Reference.
You can store an unlimited number of archives in a vault.
Important
S3 Glacier does provide a console. However, any archive operation, such as upload, download, or deletion, requires you to use the Amazon Command Line Interface (Amazon CLI) or write code. There is no console support for archive operations. For example, to upload data, such as photos, videos, and other documents, you must either use the Amazon CLI or write code to make requests, by using either the REST API directly or by using the Amazon SDKs.
To install the Amazon CLI, see Amazon Command Line Interface
Topics
- Vault Operations in S3 Glacier
- Creating a Vault in Amazon S3 Glacier
- Retrieving Vault Metadata in Amazon S3 Glacier
- Downloading a Vault Inventory in Amazon S3 Glacier
- Configuring Vault Notifications in Amazon S3 Glacier
- Deleting a Vault in Amazon S3 Glacier
- Tagging Your S3 Glacier Vaults
- S3 Glacier Vault Lock
Vault Operations in S3 Glacier
S3 Glacier supports various vault operations. Vault operations are specific to particular Amazon Web Services Regions. In other words, when you create a vault, you create it in a specific Amazon Web Services Region. When you list vaults, S3 Glacier returns the vault list from the Amazon Web Services Region that you specified in the request.
Creating and Deleting Vaults
An Amazon Web Services account can create up to 1,000 vaults per Amazon Web Services Region. For a list of the Amazon Web Services Regions supported by S3 Glacier, see Amazon S3 Glacier endpoints and quotas in the Amazon General Reference.
You can delete a vault only if there are no archives in the vault as of the last inventory that S3 Glacier computed and if there have been no writes to the vault since the last inventory.
Note
S3 Glacier prepares an inventory for each vault periodically, every 24 hours. Because the inventory might not reflect the latest information, S3 Glacier ensures that the vault is indeed empty by checking if there were any write operations since the last vault inventory.
For more information, see Creating a Vault in Amazon S3 Glacier and Deleting a Vault in Amazon S3 Glacier.
Retrieving Vault Metadata
You can retrieve vault information such as the vault creation date, number of archives in the vault, and the total size of all the archives in the vault. S3 Glacier provides API calls for you to retrieve this information for a specific vault or all the vaults in a specific Amazon Web Services Region in your account. For more information, see Retrieving Vault Metadata in Amazon S3 Glacier.
Downloading a Vault Inventory
A vault inventory refers to the list of archives in a vault. For each archive in the list, the inventory provides archive information, such as the archive ID, creation date, and size. S3 Glacier updates the vault inventory once a day, starting on the day that the first archive is uploaded to the vault. A vault inventory must exist for you to be able to download it.
Downloading a vault inventory is an asynchronous operation. You must first initiate a job to download the inventory. After receiving the job request, S3 Glacier prepares your inventory for download. After the job is completed, you can download the inventory data.
Given the asynchronous nature of the job, you can use Amazon Simple Notification Service (Amazon SNS) notifications to notify you when the job is completed. You can specify an Amazon SNS topic for each individual job request or configure your vault to send a notification when specific vault events occur.
S3 Glacier prepares an inventory for each vault periodically, every 24 hours. If there have been no archive additions or deletions to the vault since the last inventory, the inventory date is not updated.
When you initiate a job for a vault inventory, S3 Glacier returns the last inventory that it generated, which is a point-in-time snapshot and not real-time data. You might not find it useful to retrieve vault inventory for each archive upload. However, suppose that you maintain a database on the client-side that contains metadata associated with the archives that you upload to S3 Glacier. In that case, you might find the vault inventory useful to reconcile information in your database with the actual vault inventory.
For more information about retrieving a vault inventory, see Downloading a Vault Inventory in Amazon S3 Glacier.
Configuring Vault Notifications
Retrieving anything from S3 Glacier, such as an archive from a vault or a vault inventory, is a two-step process. First, you initiate a job. After the job is completed, you download the output. To learn when your job is complete, you can use S3 Glacier notifications. S3 Glacier sends notification messages to an Amazon Simple Notification Service (Amazon SNS) topic that you provide.
You can configure notifications on a vault and identify vault events and the Amazon SNS topic to be notified when the event occurs. Anytime the vault event occurs, S3 Glacier sends a notification to the specified Amazon SNS topic. For more information, see Configuring Vault Notifications in Amazon S3 Glacier.