8 of 8 cards free · no sign-in needed
Standard, Intelligent-Tiering (auto-tiers), Standard-IA / One Zone-IA (infrequent), and Glacier Instant/Flexible/Deep Archive (archival, lowest cost).
Automatically moves objects between access tiers based on usage, optimising cost with no retrieval fees — best for unknown or changing access patterns.
Rules that automatically transition objects to cheaper classes or expire them as they age (e.g. Standard → IA → Glacier after N days).
Keeps multiple versions of an object so you can recover from accidental overwrites or deletes. Combine with MFA Delete for extra protection.
Layered: IAM policies, bucket policies (resource-based), ACLs (legacy), Block Public Access (account/bucket guardrail), and Access Points for shared datasets.
An account- and bucket-level safety setting that overrides permissive policies/ACLs to prevent accidental public exposure of objects.
S3 encrypts objects at rest: SSE-S3 (S3-managed keys), SSE-KMS (AWS KMS keys, audited), or SSE-C (customer-provided keys).
Sign in (free) to flip every card, mark what you know, and pick up exactly where you left off.
After sign-in: Space flip · ←→ navigate · K knew it · S skip