AWS amazonglacier documentation change
Summary
Updated branding from 'Glacier' to 'Amazon Glacier', added deprecation notice for standalone Glacier service (no new customers after 2025), and emphasized migration guidance to S3 Glacier storage classes
Security assessment
Changes focus on service naming consistency, deprecation announcements, and migration recommendations. No explicit security vulnerabilities, patches, or new security controls are introduced. The CloudTrail audit logging functionality remains unchanged (already a security feature), and the deprecation notice does not cite security risks as the reason for migration.
Diff
diff --git a/amazonglacier/latest/dev/audit-logging.md b/amazonglacier/latest/dev/audit-logging.md index 469040a08..eac3c7161 100644 --- a//amazonglacier/latest/dev/audit-logging.md +++ b//amazonglacier/latest/dev/audit-logging.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon S3 Glacier](/glacier/index.html)[Developer Guide](introduction.html) +[Documentation](/index.html)[Amazon Glacier](/glacier/index.html)[Developer Guide](introduction.html) @@ -7 +7 @@ Amazon Glacier Information in CloudTrailUnderstanding Amazon Glacier Log File En -**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.** +**This page is only for existing customers of the Amazon Glacier service using Vaults and the original REST API from 2012.** @@ -9 +9,3 @@ Amazon Glacier Information in CloudTrailUnderstanding Amazon Glacier Log File En -If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. +If you're looking for archival storage solutions, we recommend using the Amazon Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see [Amazon Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/). + +Amazon Glacier (original standalone vault-based service) will no longer accept new customers starting December 15, 2025, with no impact to existing customers. Amazon Glacier is a standalone service with its own APIs that stores data in vaults and is distinct from Amazon S3 and the Amazon S3 Glacier storage classes. Your existing data will remain secure and accessible in Amazon Glacier indefinitely. No migration is required. For low-cost, long-term archival storage, AWS recommends the [Amazon S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/), which deliver a superior customer experience with S3 bucket-based APIs, full AWS Region availability, lower costs, and AWS service integration. If you want enhanced capabilities, consider migrating to Amazon S3 Glacier storage classes by using our [AWS Solutions Guidance for transferring data from Amazon Glacier vaults to Amazon S3 Glacier storage classes](https://aws.amazon.com/solutions/guidance/data-transfer-from-amazon-s3-glacier-vaults-to-amazon-s3/). @@ -13 +15 @@ If you're looking for archival storage solutions we suggest using the Glacier st -Amazon Glacier (Glacier) is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Glacier. CloudTrail captures all API calls for Glacier as events, including calls from the Glacier console and from code calls to the Glacier APIs. If you create a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for Glacier. If you don't configure a trail, you can still view the most recent events in the CloudTrail console in **Event history**. Using the information collected by CloudTrail, you can determine the request that was made to Glacier, the IP address from which the request was made, who made the request, when it was made, and additional details. +Amazon Glacier (Amazon Glacier) is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Amazon Glacier. CloudTrail captures all API calls for Amazon Glacier as events, including calls from the Amazon Glacier console and from code calls to the Amazon Glacier APIs. If you create a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for Amazon Glacier. If you don't configure a trail, you can still view the most recent events in the CloudTrail console in **Event history**. Using the information collected by CloudTrail, you can determine the request that was made to Amazon Glacier, the IP address from which the request was made, who made the request, when it was made, and additional details. @@ -19 +21 @@ To learn more about CloudTrail, see the [AWS CloudTrail User Guide](https://docs -CloudTrail is enabled on your AWS account when you create the account. When activity occurs in Glacier, that activity is recorded in a CloudTrail event along with other AWS service events in **Event history**. You can view, search, and download recent events in your AWS account. For more information, see [Viewing Events with CloudTrail Event History](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html). +CloudTrail is enabled on your AWS account when you create the account. When activity occurs in Amazon Glacier, that activity is recorded in a CloudTrail event along with other AWS service events in **Event history**. You can view, search, and download recent events in your AWS account. For more information, see [Viewing Events with CloudTrail Event History](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html). @@ -21 +23 @@ CloudTrail is enabled on your AWS account when you create the account. When acti -For an ongoing record of events in your AWS account, including events for Glacier, create a trail. A trail enables CloudTrail to deliver log files to an Amazon S3 bucket. By default, when you create a trail in the console, the trail applies to all AWS Regions. The trail logs events from all AWS Regions in the AWS partition and delivers the log files to the Amazon S3 bucket that you specify. Additionally, you can configure other AWS services to further analyze and act upon the event data collected in CloudTrail logs. For more information, see: +For an ongoing record of events in your AWS account, including events for Amazon Glacier, create a trail. A trail enables CloudTrail to deliver log files to an Amazon S3 bucket. By default, when you create a trail in the console, the trail applies to all AWS Regions. The trail logs events from all AWS Regions in the AWS partition and delivers the log files to the Amazon S3 bucket that you specify. Additionally, you can configure other AWS services to further analyze and act upon the event data collected in CloudTrail logs. For more information, see: @@ -34 +36 @@ For an ongoing record of events in your AWS account, including events for Glacie -All Glacier actions are logged by CloudTrail and are documented in the [API Reference for Amazon Glacier](./amazon-glacier-api.html). For example, calls to the [Create Vault (PUT vault)](./api-vault-put.html), [Delete Vault (DELETE vault)](./api-vault-delete.html), and [List Vaults (GET vaults)](./api-vaults-get.html) actions generate entries in the CloudTrail log files. +All Amazon Glacier actions are logged by CloudTrail and are documented in the [API Reference for Amazon Glacier](./amazon-glacier-api.html). For example, calls to the [Create Vault (PUT vault)](./api-vault-put.html), [Delete Vault (DELETE vault)](./api-vault-delete.html), and [List Vaults (GET vaults)](./api-vaults-get.html) actions generate entries in the CloudTrail log files.