AWS · Infrastruttura · YoctoIT tech page

S3

The global standard for object storage: eleven 9s of durability, classes for every data temperature and the immutability that stops ransomware.

FOCUS · IMMUTABILITYObject Lock and versioning: the off-site copy nobody can encrypt or delete
YoctoIT material for clients and partners · AWS e i nomi dei servizi sono marchi di Amazon.com, Inc.
01 · What it is

Amazon S3, made clear.

S3 is the service that defined object storage: practically unlimited buckets, 99.999999999% durability and an ecosystem building data lakes, backups and content delivery on top. Storage classes automatically move data to the right cost.

11 nines
of designed durability: data survives the loss of entire data centers
8 classes
from Standard to Glacier Deep Archive: every piece of data at its price
Object Lock
WORM: the immutability that makes backups ransomware-proof
Icona ufficiale AWS — Amazon S3
OFFICIAL AWS ICON · S3
02 · How to use it well

The things that make the difference.

The storage classes

S3 Standardhot data, frequent access
Intelligent-Tiering
Standard-IA
One Zone-IA
automatic tiering does the work
Glacier Instant / Flexiblearchive at minimal cost, retrieval in minutes/hours
Glacier Deep Archivelong-term archive: cents per TB
From hot data to the ten-year archive

Versioning & Object Lock

Every version kept and, with the lock, undeletable: the base of our third anti-ransomware tier in the cloud.

Lifecycle policy

Rules that move and delete data by themselves: storage that administers itself.

Cross-region replication

The bucket that copies itself to another region: data disaster recovery with a flag.

Security by default

Automatic encryption, Block Public Access and granular policies: the accidentally exposed bucket is history.

03 · In depth

Classes, consistency and protection

S3 is a strongly consistent object store with 11 nines of durability: classes (Standard, Standard-IA, One Zone-IA, Glacier Instant/Flexible/Deep Archive) are chosen by access pattern, or delegated to Intelligent-Tiering. Versioning and Object Lock (governance/compliance) protect against deletions and ransomware; lifecycle policies move and delete on their own; replication (SRR/CRR) copies across buckets and regions.

  • Strong consistency — read-after-write on everything: no eventual surprises
  • Intelligent-Tiering — automatic per-object tiering: pay for the monitoring, save on the rest
  • Object Lock — WORM for retention: the bucket ransomware cannot rewrite
  • Lifecycle policy — declarative transitions and expirations: storage that governs itself
  • Replication CRR — asynchronous cross-region copy: data DR with a replication SLA
  • S3 Express One Zone — the low-latency class for intensive workloads: single-digit milliseconds
04 · Numbers and lifecycle

The numbers that matter.

11 nines
the design durability (99.999999999%)
8
the storage classes: the choice is architecture
5 TB
the maximum size per object
0
app changes for Intelligent-Tiering: just switch it on
S3 is cheap if designed: classes, lifecycle and locks set up in IaC — and the data lake doesn't become a dump.
05 · Use cases

Where it really pays off.

Off-site backup

The immutable destination for Veeam and on-prem backups: the copy ransomware can't touch.

Data lake

The foundation of analytics and AI: raw data in S3, queried by Athena, Redshift and BigQuery-likes.

Legal archives

Documents and logs kept for years at negligible cost, with the immutability regulations demand.

S3 is the cloud shore of our protection plans: immutable, replicated and verified — the 3-2-1-1-0 rule closed properly.