AWS S3
Amazon Simple Storage Service (S3) is an object storage service with industry-leading scalability, data availability, security, and performance.
What is S3? (Simple Explanation)
Think of S3 like a massive online hard drive. You can upload files of any size and access them from anywhere. It's like Google Drive or Dropbox, but for applications — your app stores images, videos, backups, and logs here.
When Would You Use S3?
- Data lakes & analytics
- Backup & disaster recovery
- Static website hosting
- Content distribution origin
- Archive & compliance storage
Who Uses S3?
From startups to enterprises, S3 powers:
What Makes S3 Powerful
S3 Pricing & Free Tier
Free Tier: 5GB Standard storage, 20,000 GET requests, 2,000 PUT requests (12 months). After that, ~$0.023/GB/month.
S3 Best Practices
- 1Block all public access by default (never grant s3:* to *)
- 2Enable versioning and MFA delete on critical buckets
- 3Use lifecycle policies to automatically tier to Glacier after 90 days
- 4Encrypt at rest with SSE-KMS (not SSE-S3)
- 5Enable S3 Access Logs or CloudTrail data events for audit trail
Getting Started with S3 in 5 Minutes
- 1Open the AWS Console and navigate to S3
- 2Click "Create bucket" or "Create file system"
- 3Name your resource (globally unique for S3) and choose a region
- 4Configure public access settings (block all public access by default) and click "Create"
S3 CLI Quick Reference
5 production-ready commands. Full CLI Library (225+ services) →
aws s3 lsList all S3 buckets in the accountaws s3 cp myfile.txt s3://my-bucket/path/Upload a file to S3aws s3 sync ./local-folder s3://my-bucket/ --deleteSync local folder to S3 (mirror — deletes remote files not in local)aws s3api get-bucket-policy --bucket my-bucket --query Policy --output textView a bucket policy documentaws s3api put-bucket-encryption --bucket my-bucket --server-side-encryption-configuration '{"Rules":[{"ApplyServerSideEncryptionByDefault":{"SSEAlgorithm":"aws:kms","KMSMasterKeyID":"arn:aws:kms:..."}}]}'Enable default KMS encryption on a bucketPros & Cons of S3
Pros
- 11 9s durability (99.999999999%)
- Storage classes: Standard, IA, Glacier, Glacier Deep Archive
- S3 Intelligent-Tiering for automatic cost optimization
- S3 Object Lock for WORM compliance
- S3 Access Points for shared datasets with per-access policies
Cons
- ✕Storage costs compound over time — data tends to grow, not shrink
- ✕Cross-region replication adds latency and egress costs
- ✕Inexperienced users can accidentally expose data publicly (misconfigured bucket policies)
S3 vs Alternatives
S3 vs EBS
Choose S3 for object storage: files, backups, data lakes, static websites, and data shared across multiple instances. Scales infinitely and durable across AZs.
Choose EBS for block storage: boot volumes, databases, and applications requiring a filesystem (ext4, NTFS) mounted to a single EC2 instance.
S3 vs EFS
Choose S3 for object storage accessed via API (REST, SDK), public data, or analytics with Athena/Redshift Spectrum.
Choose EFS for shared file storage that multiple EC2 instances mount via NFS simultaneously, with POSIX permissions.
Services That Work with S3
S3 is rarely used alone. It is typically combined with:
Compliance & Security
How AWS S3 fits into major compliance standards. Browse all 41 frameworks →
S3 configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults.
NIST 800-53S3 access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.
PCI DSS 4.0S3 encryption, access control, and logging support PCI DSS for cardholder data environments.
SOC 2S3 security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.
ISO 27001S3 configuration and monitoring controls map to ISO 27001 Annex A information security management.
Frequently Asked Questions About S3
What is AWS S3?
Amazon Simple Storage Service (S3) is an object storage service with industry-leading scalability, data availability, security, and performance.
What is S3 used for?
S3 is commonly used for: Data lakes & analytics; Backup & disaster recovery; Static website hosting; Content distribution origin; Archive & compliance storage. It's a core service in the storage category of AWS.
Is S3 free?
Free Tier: 5GB Standard storage, 20,000 GET requests, 2,000 PUT requests (12 months). After that, ~$0.023/GB/month.
What are the key features of S3?
S3's most important capabilities include: 11 9s durability (99.999999999%). Storage classes: Standard, IA, Glacier, Glacier Deep Archive. S3 Intelligent-Tiering for automatic cost optimization. S3 Object Lock for WORM compliance. S3 Access Points for shared datasets with per-access policies. Each of these is designed to help teams data lakes & analytics.
How does S3 compare to alternatives?
S3 competes with both AWS-native alternatives (CloudFront, Glacier, Athena) and third-party equivalents. The right choice depends on your specific requirements for scalability, cost, and operational overhead. See the comparisons section below for detailed guidance.
Which compliance frameworks apply to S3?
CIS AWS v3.0: S3 configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults. NIST 800-53: S3 access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families. PCI DSS 4.0: S3 encryption, access control, and logging support PCI DSS for cardholder data environments. SOC 2: S3 security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria. ISO 27001: S3 configuration and monitoring controls map to ISO 27001 Annex A information security management.
People also search for
Was this page helpful?
Ready to secure your S3 configuration?
Pavora continuously monitors your AWS S3 for misconfigurations, compliance violations, and security risks.