Table of Contents
hide
AWS S3 Data Durability
- Amazon S3 provides a highly durable storage infrastructure designed for mission-critical and primary data storage.
- S3 is designed to provide 99.999999999% (11 nines) durability of objects over a given year.
- S3 Standard, S3 Intelligent-Tiering, S3 Standard-IA, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive redundantly store objects on multiple devices across a minimum of three Availability Zones in an AWS Region.
- S3 One Zone-IA stores data redundantly across multiple devices within a single Availability Zone. It still offers 11 nines of durability but may be susceptible to data loss in the unlikely case of the loss or damage to all or part of an AWS Availability Zone.
- S3 Express One Zone stores data within a single Availability Zone for high-performance, single-digit millisecond latency access. It is designed for 99.95% availability.
- To help ensure data durability, Amazon S3 PUT and PUT Object copy operations synchronously store data across multiple facilities before returning SUCCESS.
- Once the objects are stored, Amazon S3 maintains their durability by quickly detecting and repairing any lost redundancy.
- Amazon S3 regularly verifies the integrity of data stored using checksums and provides auto-healing capability.
- S3 is designed to sustain data in the event of the loss of an entire Availability Zone.
S3 Data Integrity Protections
- As of December 2024, Amazon S3 provides default data integrity protections for all new object uploads.
- AWS SDKs automatically calculate CRC-based checksums (CRC64NVME by default) for uploads as data is transmitted over the network.
- S3 independently verifies these checksums and accepts objects only after confirming data integrity was maintained in transit.
- If no checksum is provided on upload, S3 automatically calculates and applies a CRC64NVME checksum as default integrity protection.
- S3 continually monitors data durability over time with periodic integrity checks of data at rest.
S3 Storage Classes – Durability & Availability Comparison
| Storage Class | Durability | Availability | AZs |
|---|---|---|---|
| S3 Standard | 99.999999999% (11 nines) | 99.99% | ≥ 3 |
| S3 Intelligent-Tiering | 99.999999999% (11 nines) | 99.9% | ≥ 3 |
| S3 Express One Zone | 99.999999999% (11 nines) | 99.95% | 1 |
| S3 Standard-IA | 99.999999999% (11 nines) | 99.9% | ≥ 3 |
| S3 One Zone-IA | 99.999999999% (11 nines) | 99.5% | 1 |
| S3 Glacier Instant Retrieval | 99.999999999% (11 nines) | 99.9% | ≥ 3 |
| S3 Glacier Flexible Retrieval | 99.999999999% (11 nines) | 99.99% | ≥ 3 |
| S3 Glacier Deep Archive | 99.999999999% (11 nines) | 99.99% | ≥ 3 |
Additional Data Protection Features
- S3 Versioning – Preserves, retrieves, and restores every version of every object stored in a bucket, allowing easy recovery from unintended user actions and application failures.
- S3 Object Lock – Provides Write Once Read Many (WORM) capability, preventing object deletion or overwriting for a specified retention period.
- S3 Replication – Enables automatic, asynchronous copying of objects across S3 buckets in same or different AWS Regions for additional redundancy and compliance.
- S3 Multi-Region Access Points – Provides a global endpoint to route requests to the nearest replicated bucket, improving availability across regions.
Key Points for Certification Exams
- All S3 storage classes are designed for 99.999999999% (11 nines) durability.
- S3 Standard stores data across a minimum of 3 AZs – NOT across regions, NOT in a single facility.
- S3 One Zone-IA and S3 Express One Zone store data in a single AZ but still provide 11 nines durability.
- One Zone classes may lose data if the entire AZ is lost (fire, flood, etc.) – use for re-creatable data only.
- S3 provides both durability (data not lost) and availability (data accessible) – these are different metrics.
- S3 automatically detects and repairs lost redundancy (auto-healing).
AWS Certification Exam Practice Questions
Question 1:
A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content for a web-based property. The customer is storing objects using the Standard Storage class. Where are the customer’s objects replicated?
- Single facility in eu-west-1 and a single facility in eu-central-1
- Single facility in eu-west-1 and a single facility in us-east-1
- Multiple facilities across a minimum of 3 Availability Zones in eu-west-1
- A single facility in eu-west-1
Show Answer
Answer: 3
S3 Standard stores objects redundantly across a minimum of three Availability Zones within the same AWS Region. Objects are NOT replicated across regions by default.
Question 2:
A company wants to store infrequently accessed backup data at the lowest possible cost. The data can be re-created if lost. Which S3 storage class should they use?
- S3 Standard
- S3 Standard-IA
- S3 One Zone-IA
- S3 Glacier Deep Archive
Show Answer
Answer: 3
S3 One Zone-IA is the best choice for infrequently accessed, re-creatable data as it costs 20% less than S3 Standard-IA. While it stores data in a single AZ (susceptible to AZ-level disasters), it still provides 11 nines durability and the data can be re-created if lost.
Question 3:
What is the designed durability of Amazon S3?
- 99.99%
- 99.999%
- 99.9999999%
- 99.999999999%
Show Answer
Answer: 4
Amazon S3 is designed for 99.999999999% (11 nines) durability. This applies to all S3 storage classes. Note that durability (data not lost) is different from availability (data accessible when requested).
Question 4:
Which of the following statements about S3 data integrity are correct? (Choose 2)
- S3 automatically calculates and verifies checksums for uploaded objects
- S3 encrypts data at rest by default using customer-managed keys
- S3 regularly performs integrity checks on stored data and automatically repairs any lost redundancy
- S3 replicates data across multiple AWS Regions by default
Answer: 1, 3
S3 provides default data integrity protections with automatic CRC-based checksums on upload (since Dec 2024) and performs periodic integrity checks of data at rest with auto-healing. S3 encrypts at rest with SSE-S3 (AWS-managed keys) by default, not customer-managed keys. Cross-region replication must be explicitly configured.
📖 Related: AWS S3 vs EBS vs EFS – Complete Storage Comparison Guide
📖 Related: AWS EBS Volume Types – gp3, io2, st1, sc1 Comparison