AWS amazonglacier documentation change
Summary
Updated service name references from 'Glacier' to 'Amazon Glacier', added deprecation notice for standalone Amazon Glacier service (no new customers after Dec 15, 2025), and emphasized migration guidance to S3 Glacier storage classes
Security assessment
Changes primarily involve branding updates and service deprecation announcements. While the deprecation notice mentions data security and migration guidance, there is no evidence of addressing a specific security vulnerability or weakness. The updates reinforce existing security practices but do not introduce new security features or directly mitigate risks.
Diff
diff --git a/amazonglacier/latest/dev/security_iam_service-with-iam.md b/amazonglacier/latest/dev/security_iam_service-with-iam.md index 080000376..7989bdd93 100644 --- a//amazonglacier/latest/dev/security_iam_service-with-iam.md +++ b//amazonglacier/latest/dev/security_iam_service-with-iam.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon S3 Glacier](/glacier/index.html)[Developer Guide](introduction.html) +[Documentation](/index.html)[Amazon Glacier](/glacier/index.html)[Developer Guide](introduction.html) @@ -7 +7 @@ Identity-based policiesResource-based policiesPolicy actionsPolicy resourcesPoli -**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.** +**This page is only for existing customers of the Amazon Glacier service using Vaults and the original REST API from 2012.** @@ -9 +9,3 @@ Identity-based policiesResource-based policiesPolicy actionsPolicy resourcesPoli -If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. +If you're looking for archival storage solutions, we recommend using the Amazon Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see [Amazon Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/). + +Amazon Glacier (original standalone vault-based service) will no longer accept new customers starting December 15, 2025, with no impact to existing customers. Amazon Glacier is a standalone service with its own APIs that stores data in vaults and is distinct from Amazon S3 and the Amazon S3 Glacier storage classes. Your existing data will remain secure and accessible in Amazon Glacier indefinitely. No migration is required. For low-cost, long-term archival storage, AWS recommends the [Amazon S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/), which deliver a superior customer experience with S3 bucket-based APIs, full AWS Region availability, lower costs, and AWS service integration. If you want enhanced capabilities, consider migrating to Amazon S3 Glacier storage classes by using our [AWS Solutions Guidance for transferring data from Amazon Glacier vaults to Amazon S3 Glacier storage classes](https://aws.amazon.com/solutions/guidance/data-transfer-from-amazon-s3-glacier-vaults-to-amazon-s3/). @@ -13 +15 @@ If you're looking for archival storage solutions we suggest using the Glacier st -Before you use IAM to manage access to Glacier, learn what IAM features are available to use with Glacier. +Before you use IAM to manage access to Amazon Glacier, learn what IAM features are available to use with Amazon Glacier. @@ -15 +17 @@ Before you use IAM to manage access to Glacier, learn what IAM features are avai -IAM features you can use with Amazon Glacier IAM feature | Glacier support +IAM features you can use with Amazon Glacier IAM feature | Amazon Glacier support @@ -29 +31 @@ Service-linked roles | No -To get a high-level view of how Glacier and other AWS services work with most IAM features, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. +To get a high-level view of how Amazon Glacier and other AWS services work with most IAM features, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. @@ -31 +33 @@ To get a high-level view of how Glacier and other AWS services work with most IA -## Identity-based policies for Glacier +## Identity-based policies for Amazon Glacier @@ -39 +41 @@ With IAM identity-based policies, you can specify allowed or denied actions and -### Identity-based policy examples for Glacier +### Identity-based policy examples for Amazon Glacier @@ -41 +43 @@ With IAM identity-based policies, you can specify allowed or denied actions and -To view examples of Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). +To view examples of Amazon Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). @@ -43 +45 @@ To view examples of Glacier identity-based policies, see [Identity-based policy -## Resource-based policies within Glacier +## Resource-based policies within Amazon Glacier @@ -51 +53 @@ To enable cross-account access, you can specify an entire account or IAM entitie -The Glacier service supports only one type of resource-based policy called a _vault policy_ , which is attached to a vault. This policy defines which principals can perform actions on the vault. +The Amazon Glacier service supports only one type of resource-based policy called a _vault policy_ , which is attached to a vault. This policy defines which principals can perform actions on the vault. @@ -53 +55 @@ The Glacier service supports only one type of resource-based policy called a _va -Glacier vault policies manage permissions in the following ways: +Amazon Glacier vault policies manage permissions in the following ways: @@ -62 +64 @@ Glacier vault policies manage permissions in the following ways: -### Resource-based policy examples within Glacier +### Resource-based policy examples within Amazon Glacier @@ -64 +66 @@ Glacier vault policies manage permissions in the following ways: -To view examples of Glacier resource-based policies, see [Resource-based policy examples for Amazon Glacier](./security_iam_resource-based-policy-examples.html). +To view examples of Amazon Glacier resource-based policies, see [Resource-based policy examples for Amazon Glacier](./security_iam_resource-based-policy-examples.html). @@ -66 +68 @@ To view examples of Glacier resource-based policies, see [Resource-based policy -## Policy actions for Glacier +## Policy actions for Amazon Glacier @@ -76 +78 @@ Include actions in a policy to grant permissions to perform the associated opera -To see a list of Glacier actions, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions) in the _Service Authorization Reference_. +To see a list of Amazon Glacier actions, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions) in the _Service Authorization Reference_. @@ -78 +80 @@ To see a list of Glacier actions, see [Actions defined by Amazon Glacier](https: -Policy actions in Glacier use the following prefix before the action: +Policy actions in Amazon Glacier use the following prefix before the action: @@ -97 +99 @@ You can specify multiple actions using wildcards (*). For example, to specify al -To view examples of Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). +To view examples of Amazon Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). @@ -99 +101 @@ To view examples of Glacier identity-based policies, see [Identity-based policy -## Policy resources for Glacier +## Policy resources for Amazon Glacier @@ -112 +114 @@ For actions that don't support resource-level permissions, such as listing opera -To see a list of Glacier resource types and their ARNs, see [Resources defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-resources-for-iam-policies) in the _Service Authorization Reference_. To learn which actions you can specify the ARN of each resource, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). +To see a list of Amazon Glacier resource types and their ARNs, see [Resources defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-resources-for-iam-policies) in the _Service Authorization Reference_. To learn which actions you can specify the ARN of each resource, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). @@ -114 +116 @@ To see a list of Glacier resource types and their ARNs, see [Resources defined b -In Glacier, the primary resource is a _vault_. Glacier supports policies only at the vault level. That is, in an IAM policy, the `Resource` value that you specify can be a specific vault or a set of vaults in a specific AWS Region. Glacier doesn't support archive-level permissions. +In Amazon Glacier, the primary resource is a _vault_. Amazon Glacier supports policies only at the vault level. That is, in an IAM policy, the `Resource` value that you specify can be a specific vault or a set of vaults in a specific AWS Region. Amazon Glacier doesn't support archive-level permissions. @@ -116 +118 @@ In Glacier, the primary resource is a _vault_. Glacier supports policies only at -For all Glacier actions, `Resource` specifies the vault on which you want to grant the permissions. These resources have unique Amazon Resource Names (ARNs) associated with them as shown in the following table, and you can use a wildcard character (*) in the ARN to match vault names that start with the same prefix. +For all Amazon Glacier actions, `Resource` specifies the vault on which you want to grant the permissions. These resources have unique Amazon Resource Names (ARNs) associated with them as shown in the following table, and you can use a wildcard character (*) in the ARN to match vault names that start with the same prefix. @@ -123 +125 @@ Vaults with names starting with "example" | `arn:aws:glacier:`region`:`account-i -Glacier provides a set of operations to work with the Glacier resources. For information on the available operations, see [API Reference for Amazon Glacier](./amazon-glacier-api.html). +Amazon Glacier provides a set of operations to work with the Amazon Glacier resources. For information on the available operations, see [API Reference for Amazon Glacier](./amazon-glacier-api.html). @@ -125 +127 @@ Glacier provides a set of operations to work with the Glacier resources. For inf -Some Glacier API actions support multiple resources. For example, `glacier:AddTagsToVault` accesses examplevault1 and examplevault2, so a principal must have permissions to access both resources. To specify multiple resources in a single statement, separate the ARNs with commas. +Some Amazon Glacier API actions support multiple resources. For example, `glacier:AddTagsToVault` accesses examplevault1 and examplevault2, so a principal must have permissions to access both resources. To specify multiple resources in a single statement, separate the ARNs with commas. @@ -134 +136 @@ Some Glacier API actions support multiple resources. For example, `glacier:AddTa -## Policy condition keys for Glacier +## Policy condition keys for Amazon Glacier @@ -148 +150 @@ AWS supports global condition keys and service-specific condition keys. To see a -To see a list of Glacier condition keys, see [Condition keys for Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-policy-keys) in the _Service Authorization Reference_. To learn with which actions and resources you can use a condition key, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). +To see a list of Amazon Glacier condition keys, see [Condition keys for Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-policy-keys) in the _Service Authorization Reference_. To learn with which actions and resources you can use a condition key, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). @@ -152 +154 @@ For examples of using the glacier–specific condition keys, see [Vault Lock Pol -## ACLs in Glacier +## ACLs in Amazon Glacier @@ -158 +160 @@ Access control lists (ACLs) control which principals (account members, users, or -## ABAC with Glacier +## ABAC with Amazon Glacier @@ -172 +174 @@ For more information about ABAC, see [Define permissions with ABAC authorization -## Using temporary credentials with Glacier +## Using temporary credentials with Amazon Glacier @@ -182 +184 @@ You can manually create temporary credentials using the AWS CLI or AWS API. You -## Cross-service principal permissions for Glacier +## Cross-service principal permissions for Amazon Glacier @@ -188 +190 @@ When you use an IAM user or role to perform actions in AWS, you are considered a -## Service roles for Glacier +## Service roles for Amazon Glacier @@ -196 +198 @@ A service role is an [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide -Changing the permissions for a service role might break Glacier functionality. Edit service roles only when Glacier provides guidance to do so. +Changing the permissions for a service role might break Amazon Glacier functionality. Edit service roles only when Amazon Glacier provides guidance to do so. @@ -198 +200 @@ Changing the permissions for a service role might break Glacier functionality. E -## Service-linked roles for Glacier +## Service-linked roles for Amazon Glacier