AWS Security ChangesHomeSearch

AWS amazonglacier documentation change

Service: amazonglacier · 2025-10-10 · Documentation low

File: amazonglacier/latest/dev/api-multipart-complete-upload.md

Summary

Updated branding from 'Glacier' to 'Amazon Glacier', added deprecation notice for standalone Amazon Glacier service (no new customers after 2025), and emphasized recommendation to use S3 Glacier storage classes instead.

Security assessment

The changes primarily involve service naming consistency, deprecation announcements, and migration recommendations. There is no evidence of addressing a specific security vulnerability or weakness. The SHA256 tree hash verification process (a security feature) is mentioned but not modified beyond service name updates.

Diff

diff --git a/amazonglacier/latest/dev/api-multipart-complete-upload.md b/amazonglacier/latest/dev/api-multipart-complete-upload.md
index 35046c539..1f70fe824 100644
--- a//amazonglacier/latest/dev/api-multipart-complete-upload.md
+++ b//amazonglacier/latest/dev/api-multipart-complete-upload.md
@@ -3 +3 @@
-[Documentation](/index.html)[Amazon S3 Glacier](/glacier/index.html)[Developer Guide](introduction.html)
+[Documentation](/index.html)[Amazon Glacier](/glacier/index.html)[Developer Guide](introduction.html)
@@ -7 +7 @@ DescriptionRequestsResponsesExampleRelated Sections
-**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.**
+**This page is only for existing customers of the Amazon Glacier service using Vaults and the original REST API from 2012.**
@@ -9 +9,3 @@ DescriptionRequestsResponsesExampleRelated Sections
-If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more.
+If you're looking for archival storage solutions, we recommend using the Amazon Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see [Amazon Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/).
+
+Amazon Glacier (original standalone vault-based service) will no longer accept new customers starting December 15, 2025, with no impact to existing customers. Amazon Glacier is a standalone service with its own APIs that stores data in vaults and is distinct from Amazon S3 and the Amazon S3 Glacier storage classes. Your existing data will remain secure and accessible in Amazon Glacier indefinitely. No migration is required. For low-cost, long-term archival storage, AWS recommends the [Amazon S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/), which deliver a superior customer experience with S3 bucket-based APIs, full AWS Region availability, lower costs, and AWS service integration. If you want enhanced capabilities, consider migrating to Amazon S3 Glacier storage classes by using our [AWS Solutions Guidance for transferring data from Amazon Glacier vaults to Amazon S3 Glacier storage classes](https://aws.amazon.com/solutions/guidance/data-transfer-from-amazon-s3-glacier-vaults-to-amazon-s3/).
@@ -15 +17 @@ If you're looking for archival storage solutions we suggest using the Glacier st
-You call this multipart upload operation to inform Amazon Glacier (Glacier) that all the archive parts have been uploaded and Glacier can now assemble the archive from the uploaded parts. 
+You call this multipart upload operation to inform Amazon Glacier (Amazon Glacier) that all the archive parts have been uploaded and Amazon Glacier can now assemble the archive from the uploaded parts. 
@@ -19 +21 @@ For information about multipart upload, see [Uploading Large Archives in Parts (
-After assembling and saving the archive to the vault, Glacier returns the archive ID of the newly created archive resource. After you upload an archive, you should save the archive ID returned to retrieve the archive at a later point. 
+After assembling and saving the archive to the vault, Amazon Glacier returns the archive ID of the newly created archive resource. After you upload an archive, you should save the archive ID returned to retrieve the archive at a later point. 
@@ -21 +23 @@ After assembling and saving the archive to the vault, Glacier returns the archiv
-In the request, you must include the computed SHA256 tree hash of the entire archive you have uploaded. For information about computing a SHA256 tree hash, see [Computing Checksums](./checksum-calculations.html). On the server side, Glacier also constructs the SHA256 tree hash of the assembled archive. If the values match, Glacier saves the archive to the vault; otherwise, it returns an error, and the operation fails. The [List Parts (GET uploadID)](./api-multipart-list-parts.html) operation returns list of parts uploaded for a specific multipart upload. It includes checksum information for each uploaded part that can be used to debug a bad checksum issue.
+In the request, you must include the computed SHA256 tree hash of the entire archive you have uploaded. For information about computing a SHA256 tree hash, see [Computing Checksums](./checksum-calculations.html). On the server side, Amazon Glacier also constructs the SHA256 tree hash of the assembled archive. If the values match, Amazon Glacier saves the archive to the vault; otherwise, it returns an error, and the operation fails. The [List Parts (GET uploadID)](./api-multipart-list-parts.html) operation returns list of parts uploaded for a specific multipart upload. It includes checksum information for each uploaded part that can be used to debug a bad checksum issue.
@@ -23 +25 @@ In the request, you must include the computed SHA256 tree hash of the entire arc
-Additionally, Glacier also checks for any missing content ranges. When uploading parts, you specify range values identifying where each part fits in the final assembly of the archive. When assembling the final archive Glacier checks for any missing content ranges and if there are any missing content ranges, Glacier returns an error and the Complete Multipart Upload operation fails. 
+Additionally, Amazon Glacier also checks for any missing content ranges. When uploading parts, you specify range values identifying where each part fits in the final assembly of the archive. When assembling the final archive Amazon Glacier checks for any missing content ranges and if there are any missing content ranges, Amazon Glacier returns an error and the Complete Multipart Upload operation fails. 
@@ -29 +31 @@ Complete Multipart Upload is an idempotent operation. After your first successfu
-To complete a multipart upload, you send an HTTP POST request to the URI of the upload ID that Glacier created in response to your Initiate Multipart Upload request. This is the same URI you used when uploading parts. In addition to the common required headers, you must include the result of the SHA256 tree hash of the entire archive and the total size of the archive in bytes.
+To complete a multipart upload, you send an HTTP POST request to the URI of the upload ID that Amazon Glacier created in response to your Initiate Multipart Upload request. This is the same URI you used when uploading parts. In addition to the common required headers, you must include the result of the SHA256 tree hash of the entire archive and the total size of the archive in bytes.
@@ -57 +59 @@ Name  |  Description  |  Required
-`x-amz-sha256-tree-hash`​  |  The SHA256 tree hash of the entire archive. It is the tree hash of SHA256 tree hash of the individual parts. If the value you specify in the request does not match the SHA256 tree hash of the final assembled archive as computed by Glacier, Glacier returns an error and the request fails. Type: String Default: None Constraints: None |  Yes  
+`x-amz-sha256-tree-hash`​  |  The SHA256 tree hash of the entire archive. It is the tree hash of SHA256 tree hash of the individual parts. If the value you specify in the request does not match the SHA256 tree hash of the final assembled archive as computed by Amazon Glacier, Amazon Glacier returns an error and the request fails. Type: String Default: None Constraints: None |  Yes  
@@ -65 +67 @@ This operation does not use request elements.
-Amazon Glacier (Glacier) creates a SHA256 tree hash of the entire archive. If the value matches the SHA256 tree hash of the entire archive you specified in the request, Glacier adds the archive to the vault. In response it returns the HTTP `Location` header with the URL path of the newly added archive resource. If the archive size or SHA256 that you sent in the request does not match, Glacier will return an error and the upload remains in the incomplete state. It is possible to retry the Complete Multipart Upload operation later with correct values, at which point you can successfully create an archive. If a multipart upload does not complete, then eventually Glacier will reclaim the upload ID.
+Amazon Glacier (Amazon Glacier) creates a SHA256 tree hash of the entire archive. If the value matches the SHA256 tree hash of the entire archive you specified in the request, Amazon Glacier adds the archive to the vault. In response it returns the HTTP `Location` header with the URL path of the newly added archive resource. If the archive size or SHA256 that you sent in the request does not match, Amazon Glacier will return an error and the upload remains in the incomplete state. It is possible to retry the Complete Multipart Upload operation later with correct values, at which point you can successfully create an archive. If a multipart upload does not complete, then eventually Amazon Glacier will reclaim the upload ID.
@@ -82 +84 @@ Name  |  Description
-`Location` |  The relative URI path of the newly created archive. This URL includes the archive ID that is generated by Glacier.  Type: String  
+`Location` |  The relative URI path of the newly created archive. This URL includes the archive ID that is generated by Amazon Glacier.  Type: String  
@@ -106 +108 @@ In this example, an HTTP POST request is sent to the URI that was returned by an
-The following example response shows that Glacier successfully created an archive from the parts you uploaded. The response includes the archive ID with complete path. 
+The following example response shows that Amazon Glacier successfully created an archive from the parts you uploaded. The response includes the archive ID with complete path.