AWS amazonglacier documentation change
Summary
Updated service branding from 'Glacier' to 'Amazon Glacier', added deprecation notice for original standalone service, and clarified migration guidance to S3 Glacier storage classes
Security assessment
Changes primarily involve service naming consistency and deprecation announcements. While the MFA section mentions security controls, this is existing documentation. The deprecation notice emphasizes continued data security but does not address a specific vulnerability.
Diff
diff --git a/amazonglacier/latest/dev/vault-access-policy.md b/amazonglacier/latest/dev/vault-access-policy.md index 0ccbee3d5..7d1a5c9b0 100644 --- a//amazonglacier/latest/dev/vault-access-policy.md +++ b//amazonglacier/latest/dev/vault-access-policy.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon S3 Glacier](/glacier/index.html)[Developer Guide](introduction.html) +[Documentation](/index.html)[Amazon Glacier](/glacier/index.html)[Developer Guide](introduction.html) @@ -7 +7 @@ Example 1: Grant Cross-Account Permissions for Specific Amazon Glacier ActionsEx -**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.** +**This page is only for existing customers of the Amazon Glacier service using Vaults and the original REST API from 2012.** @@ -9 +9,3 @@ Example 1: Grant Cross-Account Permissions for Specific Amazon Glacier ActionsEx -If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. +If you're looking for archival storage solutions, we recommend using the Amazon Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see [Amazon Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/). + +Amazon Glacier (original standalone vault-based service) will no longer accept new customers starting December 15, 2025, with no impact to existing customers. Amazon Glacier is a standalone service with its own APIs that stores data in vaults and is distinct from Amazon S3 and the Amazon S3 Glacier storage classes. Your existing data will remain secure and accessible in Amazon Glacier indefinitely. No migration is required. For low-cost, long-term archival storage, AWS recommends the [Amazon S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/), which deliver a superior customer experience with S3 bucket-based APIs, full AWS Region availability, lower costs, and AWS service integration. If you want enhanced capabilities, consider migrating to Amazon S3 Glacier storage classes by using our [AWS Solutions Guidance for transferring data from Amazon Glacier vaults to Amazon S3 Glacier storage classes](https://aws.amazon.com/solutions/guidance/data-transfer-from-amazon-s3-glacier-vaults-to-amazon-s3/). @@ -15 +17 @@ An Amazon Glacier vault access policy is a resource-based policy that you can us -You can create one vault access policy for each vault to manage _permissions_. You can modify permissions in a vault access policy at any time. Glacier also supports a Vault Lock policy on each vault that, after you lock it, cannot be altered. For more information about working with Vault Lock policies, see [Vault Lock Policies](./vault-lock-policy.html). +You can create one vault access policy for each vault to manage _permissions_. You can modify permissions in a vault access policy at any time. Amazon Glacier also supports a Vault Lock policy on each vault that, after you lock it, cannot be altered. For more information about working with Vault Lock policies, see [Vault Lock Policies](./vault-lock-policy.html). @@ -28 +30 @@ You can create one vault access policy for each vault to manage _permissions_. Y -The following example policy grants cross-account permissions to two AWS accounts for a set of Glacier operations on a vault named `examplevault`. +The following example policy grants cross-account permissions to two AWS accounts for a set of Amazon Glacier operations on a vault named `examplevault`. @@ -36 +38 @@ The account that owns the vault is billed for all costs associated with the vaul -You can use multi-factor authentication (MFA) to protect your Glacier resources. To provide an extra level of security, MFA requires users to prove physical possession of an MFA device by providing a valid MFA code. For more information about configuring MFA access, see [Configuring MFA-Protected API Access](https://docs.aws.amazon.com/IAM/latest/UserGuide/MFAProtectedAPI.html) in the _IAM User Guide_. +You can use multi-factor authentication (MFA) to protect your Amazon Glacier resources. To provide an extra level of security, MFA requires users to prove physical possession of an MFA device by providing a valid MFA code. For more information about configuring MFA access, see [Configuring MFA-Protected API Access](https://docs.aws.amazon.com/IAM/latest/UserGuide/MFAProtectedAPI.html) in the _IAM User Guide_.