AWS S3 Glacier

AWS S3 Glacier: The Deep Freezer For Your Cloud Data

A complete, beginner-friendly guide to Amazon's ultra-low-cost cold storage service — what it is, how it works, and when to trust it with your most important, rarely-touched data.

Picture your kitchen. The refrigerator holds food you’ll eat today or tomorrow — instantly accessible, but it costs money to keep running at that convenient temperature every single day. Now picture a deep freezer in the garage, storing meat you bought on sale six months ago. It’s far cheaper to run, but you have to plan ahead: pull something out, wait for it to thaw, and only then can you use it. Amazon’s cloud storage works the same way. AWS S3 (Simple Storage Service) is the fridge — instantly available at a slightly higher price. AWS S3 Glacier is the deep freezer — remarkably cheap, built for data you rarely need, but designed around the idea that you’re willing to wait a little for it.

1What Is AWS S3 Glacier?

Let’s start with one clear, simple sentence before adding any complexity.

The One-Line Definition

AWS S3 Glacier is Amazon’s family of storage classes built specifically for archiving data that is accessed rarely, or almost never, at a fraction of the cost of regular cloud storage. “Archiving” means keeping a copy of something safe for the long term, not because you need it every day, but because you might need it someday — a tax record, an old video backup, a hospital’s decade-old medical scan, or a bank’s seven-year transaction history required by law.

Simple Analogy

Think of a self-storage unit you rent across town for boxes of old photo albums and childhood keepsakes. You don’t need them today, so you happily accept a slower trip to fetch them in exchange for paying far less rent than keeping those same boxes in your living room. Glacier is that storage unit for your digital files — a small trade of speed for a large saving in cost.

i
Why This Matters

Storing data forever, “just in case,” is expensive if every byte sits in fast, expensive storage. Glacier exists so businesses and individuals can keep everything safely, without keeping every byte in the most expensive place.

It’s worth noticing that Glacier isn’t storing “less important” data than regular S3 — often quite the opposite. A seven-year-old signed contract, a decade-old patient scan, or the only surviving master copy of a film can be some of the most valuable data an organization owns, precisely because it can never be recreated. What separates it from everyday data isn’t its importance, but how often anyone actually needs to open it. Glacier lets that distinction, importance versus frequency of access, finally be reflected honestly in the price you pay.

2Why Amazon Built Glacier

Every AWS service was created to solve a specific, real pain point — Glacier is no exception.

Before services like Glacier existed, companies that needed to keep years of records — for legal compliance, disaster recovery, or historical archives — faced a difficult choice. They could pay for expensive on-site tape libraries and physical storage rooms, hire staff to manage aging hardware, and risk losing data if a tape degraded or a building flooded. Or they could pay premium cloud storage prices to keep everything instantly accessible, even though 99 percent of that data would never be touched again. Amazon built Glacier to offer a third option: durable, essentially unlimited, extremely cheap storage in the cloud, built on the honest trade-off that retrieving the data back takes minutes to hours instead of milliseconds.

Problem 1

Expensive Long-Term Storage

Keeping rarely-used data in standard, fast storage classes wastes money that could be saved with almost no downside.

Problem 2

Fragile Physical Archives

Tapes and hard drives degrade, get lost, or become unreadable as old hardware and formats disappear over the years.

Problem 3

Compliance Pressure

Many industries are legally required to retain records for 7, 10, or more years, creating a growing pile of data that must be kept somewhere safe.

Problem 4

Manual Data Center Overhead

Running your own archive storage means buying hardware, managing capacity, and replacing failing drives — an entire job by itself.

3Core Concepts And Terminology

A handful of terms unlock almost everything about how Glacier is organized and used.

Term 1

Archive

A single object or file stored in Glacier — this could be one document, or one large compressed file bundling thousands of smaller files together.

Term 2

Storage Class

A category of storage with its own balance of cost, durability, and retrieval speed — Glacier is actually a family of several such classes.

Term 3

Retrieval

The process of requesting an archived file back so it becomes readable again, which for Glacier takes time rather than being instant.

Term 4

Lifecycle Policy

An automated rule that moves files from expensive, fast storage into cheaper Glacier storage after a set number of days, without manual effort.

Term 5

Vault Lock

A feature that permanently enforces a compliance rule (like “cannot be deleted for 7 years”) in a way that not even an administrator can override.

Term 6

Minimum Storage Duration

The minimum number of days Amazon expects a Glacier archive to remain stored before deleting it early triggers a small extra fee.

!
Common Mix-Up

“Glacier” today is not one single storage type — it’s a family of storage classes inside Amazon S3, each with its own price and retrieval speed, covered fully in Chapter 5.

It also helps to know that these terms map onto ideas you likely already understand from everyday computing. An “archive” is just a file, the way any document on your computer is a file. A “storage class” is simply a plan, the way a phone carrier offers different data plans for different needs. None of these ideas are unique or unusually technical — Amazon has simply given precise names to concepts that already make intuitive sense once explained plainly.

4How Glacier Works Under The Hood

Understanding the journey a file takes explains why Glacier is both so cheap and so durable.

When a file is stored in Glacier, Amazon doesn’t just save one copy on one hard drive. It automatically spreads multiple copies of your data across several physically separate facilities within a region, so that even the failure of an entire data center would not cause data loss. This is why Amazon is comfortable promising extremely high durability figures for Glacier data — often quoted as 99.999999999 percent (eleven nines) durability, meaning the odds of losing a file are astronomically small.

flowchart LR
    A[You Upload A File] --> B[S3 / Glacier API]
    B --> C[Data Split And Replicated]
    C --> D[Facility 1]
    C --> E[Facility 2]
    C --> F[Facility 3]
    D --> G[Archive Safely Stored]
    E --> G
    F --> G
        
FIG 1 — How a single archive is protected across multiple facilities
Simple Analogy

It’s similar to a family photocopying an important document and mailing copies to relatives in three different cities. Even if a fire destroys one house, the document still survives safely somewhere else.

This replication happens automatically and invisibly — you never choose which facility your data lives in, or manage the copies yourself. Amazon also continuously runs internal checks in the background, comparing copies against each other to catch and repair any tiny corruption long before it could ever become a real problem. The result is a storage system that behaves, from your perspective, like a single simple archive, while quietly running the same rigorous redundancy checks you would expect from a professional data vault.

5The Three Glacier Storage Classes

Modern Glacier gives you a choice, based on exactly how “cold” your data really is.

Storage ClassRetrieval TimeBest For
Glacier Instant RetrievalMillisecondsArchives accessed once a quarter but needed instantly
Glacier Flexible RetrievalMinutes to hoursBackups and disaster recovery data accessed a few times a year
Glacier Deep ArchiveWithin 12 hoursLong-term compliance records rarely, if ever, accessed
Class 1

Instant Retrieval

Feels almost identical to regular S3 for reading data back, but priced far lower, ideal for quarterly reports or medical images.

Class 2

Flexible Retrieval

The classic “wait a bit” Glacier experience, with multiple speed tiers depending on how urgently you need the data back.

Class 3

Deep Archive

Amazon’s absolute cheapest storage option, designed for data you hope to never actually need to open again.

6Uploading And Storing Your First Archive

Here’s what actually happens, step by step, the first time someone stores a file in Glacier.

1

Choose Or Create A Bucket

Glacier storage classes live inside an S3 bucket, the same container concept used for all Amazon S3 storage.

2

Upload Your File

You upload a file exactly as you would to regular S3, then choose which Glacier storage class it should use.

3

Amazon Stores It Durably

Behind the scenes, your file is split, replicated, and stored across multiple facilities automatically, with no extra steps from you.

4

The File Becomes An Archive

From this point on, it is billed at the low Glacier storage rate, and simply waits until it’s needed again.

i
Beginner Tip

You rarely upload files directly into Glacier by hand. Most beginners let an automated lifecycle policy move files there over time, which is covered in Chapter 9.

That said, understanding the manual path first is still valuable, because it makes the automated version easier to trust later. Once you’ve watched a single file move from upload, to storage, to a successful retrieval, the idea of letting a lifecycle policy repeat that exact same journey automatically for thousands of files stops feeling like a mysterious black box and starts feeling like simply removing a repetitive chore you already understand.

7Retrieval Options And Speed Tiers

Getting your data back is the one step that genuinely differs from normal cloud storage — here’s exactly how it works.

Because Glacier Flexible Retrieval and Deep Archive intentionally trade speed for savings, Amazon offers multiple retrieval speed tiers so you can choose how much urgency you’re willing to pay extra for. A faster retrieval tier costs more per request; a slower one costs less but takes longer to complete.

TierTypical Wait TimeRelative Cost
Expedited1 to 5 minutesHighest
Standard3 to 5 hoursModerate
Bulk5 to 12 hoursLowest
!
Plan Ahead

Expedited retrieval is not guaranteed to be available for Deep Archive data, so time-sensitive recovery plans should account for waiting several hours in a genuine emergency.

Choosing a retrieval tier is genuinely a business decision, not just a technical one. A company recovering from an active security incident might gladly pay the premium for expedited retrieval, because every hour of downtime costs far more than the fee difference. A team simply pulling an old file for a routine annual audit, on the other hand, has no reason to pay for speed it doesn’t need, and the bulk tier quietly saves money with zero practical downside for that use case.

8What Happens When You Request A Retrieval

A retrieval is not a single instant action — it’s a short process with a clear beginning and end.

sequenceDiagram
    participant You as You
    participant Glacier as Glacier Storage
    participant Copy as Temporary S3 Copy
    You->>Glacier: Request retrieval of an archive
    Glacier-->>You: Confirms request accepted
    Glacier->>Copy: Restores a readable copy over time
    Copy-->>You: Notification that copy is ready
    You->>Copy: Downloads the file normally
        
FIG 2 — The lifecycle of a single Glacier retrieval request

Once you initiate a retrieval, Amazon temporarily restores a readable copy of your archive into standard storage, usually for a set number of days that you choose. During that window, you can download the file as many times as needed, just like any other file in S3. After the window closes, the temporary copy disappears automatically, and only the original low-cost Glacier archive remains.

This two-step process — request, then wait for a temporary copy — is the one habit that trips up almost every newcomer coming from regular cloud storage, where a file is simply there the moment you click it. Building the right mental model early avoids frustration later: think of a retrieval request less like opening a file, and more like placing an order that gets fulfilled a little while afterward.

9Automating Storage With Lifecycle Policies

The smartest way to use Glacier is often to never touch it manually at all.

A lifecycle policy is a rule attached to an S3 bucket that automatically moves files between storage classes as they age, based purely on how many days have passed since upload. A common real-world pattern keeps fresh files in fast, standard storage for the first 30 days when they’re most likely to be needed, then automatically shifts them to Glacier Flexible Retrieval after that, and finally to Deep Archive after a year, all without a person lifting a finger.

flowchart LR
    A[Day 0: S3 Standard] -->|After 30 Days| B[Glacier Instant Retrieval]
    B -->|After 90 Days| C[Glacier Flexible Retrieval]
    C -->|After 365 Days| D[Glacier Deep Archive]
        
FIG 3 — A typical automatic aging path from fresh data to deep archive

Real Example: Log File Archiving

A company keeps application log files in fast storage for a month for active troubleshooting, then lets a lifecycle policy push them into Deep Archive automatically, satisfying a five-year retention requirement at minimal ongoing cost.

Lifecycle policies can also be scoped narrowly, applying only to files matching a certain folder path or a certain label, called a tag. This means a single bucket can safely hold a mix of active files that should never age out, alongside older files that should, without any risk of the wrong data accidentally being archived or deleted. Getting these rules right once, early in a project, tends to save enormous manual cleanup effort years down the line.

10Security And Encryption

Cheap, long-term storage is worthless if it isn’t also safe and private.

All data stored in Glacier is encrypted automatically while stored, using strong industry-standard encryption, without requiring any extra configuration from you. Access to archives is controlled through the same permission system used across all of AWS, called IAM (Identity and Access Management), which lets you precisely define who is allowed to upload, view, or delete archives.

i
Good Default

Grant the smallest possible set of permissions needed for each person or application, rather than giving broad, all-access permissions out of convenience.

This principle, often called least privilege, matters even more for archived data than for everyday files, precisely because archives are opened so rarely that a mistaken deletion or unauthorized access might not be noticed for months. A narrowly scoped permission that only allows uploading new archives, without allowing deletion, is a simple, low-effort safeguard that quietly protects years of irreplaceable records from a single careless mistake.

11Vault Lock And Compliance

Some industries don’t just need data stored safely — they need a legal guarantee that it cannot be tampered with.

COMPLIANCE-PATTERN-01 Recommended
Problem

A financial or healthcare organization must prove to regulators that certain records cannot be altered or deleted early, even by its own employees.

Why It Matters

Without an enforceable guarantee, a regulator or auditor may not accept that archived records are trustworthy evidence of past activity.

Correct Approach

Apply a Vault Lock policy stating the exact retention rule once, and lock it permanently — after locking, not even an account administrator can shorten or remove the rule.

!
Think Before Locking

A locked Vault Lock policy cannot be undone. Always test the policy in an unlocked state first and review it carefully before making it permanent.

12Monitoring Your Archives

Even data you rarely touch deserves a way to check it’s still healthy and where it stands.

SIZE
Total Bytes Stored Per Storage Class
REQUESTS
Retrieval Requests Made Over Time
JOBS
Status Of In-Progress Retrieval Jobs

Amazon’s monitoring tools let you track exactly how much data lives in each storage class, how often it’s being retrieved, and whether any retrieval jobs are still in progress. This is particularly useful for businesses that need to prove, for an audit, precisely how their archived data has been accessed over time.

13Pricing And The Cost Model

Glacier’s entire reason for existing is cost — so let’s look closely at how the savings actually add up.

Storage cost is charged per gigabyte per month, and it drops dramatically as you move from Instant Retrieval, to Flexible Retrieval, to Deep Archive. On top of storage, there are small charges for retrieval requests and for the data you actually pull back out, which is why Glacier rewards genuinely infrequent access and can become costly if used incorrectly for data you need often.

Storage ClassRelative Storage CostRetrieval Cost
Glacier Instant RetrievalLowLow, charged per retrieval
Glacier Flexible RetrievalVery LowModerate, depends on speed tier chosen
Glacier Deep ArchiveLowest AvailableHigher, reflects the slow, bulk nature of access
“We cut our long-term storage bill by more than 80 percent simply by letting old backups age into Deep Archive automatically.”
!
Note On Pricing

Exact per-gigabyte and per-request prices vary by AWS region and change periodically, so always check the current official S3 pricing page before estimating a real budget.

The savings compound in a way that’s easy to underestimate at first glance. A company holding 100 terabytes of old backups in standard storage might pay a substantial monthly fee indefinitely. Move that same data into Deep Archive, and the monthly bill can shrink to a small fraction of the original cost, year after year, for as long as the data sits there. Multiplied across years of retained records, that difference is often the single largest cost optimization a growing company can make to its cloud storage bill, without changing a single line of application code.

14Glacier Versus Other S3 Storage Classes

Choosing the right storage class is really about honestly answering one question: how soon might you need this file back?

Choose S3 Standard When

  • Files are accessed frequently, such as website images or active application data
  • You need instant access with no retrieval delay whatsoever
  • The convenience of instant access outweighs a higher storage price

Choose A Glacier Class When

  • Files are accessed rarely, sometimes only once a year or less
  • Long-term retention cost matters more than instant access
  • Compliance rules require years of retained, unaltered records
FactorS3 StandardGlacier Family
Access SpeedInstant, alwaysMilliseconds to hours, depending on class
Storage CostHigherDramatically lower
Ideal UseActive, everyday dataBackups, archives, compliance records

15Real-World Use Cases

Glacier quietly powers the long-term memory of a huge number of everyday organizations.

Media And Entertainment Archives

Film studios store raw, uncompressed footage from finished productions in Deep Archive for decades, in case a remaster or re-release is needed far in the future.

Healthcare Record Retention

Hospitals are often legally required to keep patient imaging and records for many years, making Glacier Instant Retrieval a natural fit for occasional but important lookups.

Financial Compliance Records

Banks and trading firms store years of transaction logs in Deep Archive with a Vault Lock policy, satisfying regulators who require tamper-proof retention.

Disaster Recovery Backups

Companies back up entire databases and systems into Glacier Flexible Retrieval, trusting that if disaster strikes, the data can still be recovered within hours.

Scientific And Research Data

Research institutions archive raw datasets from completed studies, preserving them cheaply in case future researchers need to revisit the original data.

Government And Public Records

Government agencies preserve decades of public records, court filings, and historical documents in Deep Archive, balancing permanent retention requirements against tight public budgets.

16Common Mistakes Beginners Make

Most Glacier regrets come from a small handful of avoidable misunderstandings.

Deleting Archives Too Early

Because Glacier is priced for long-term storage, deleting an archive before its minimum storage duration can trigger a small early-deletion fee that catches beginners off guard.

Choosing The Wrong Storage Class

Placing frequently-accessed files into Deep Archive by mistake can quickly rack up retrieval charges that erase the storage savings entirely.

Forgetting About Retrieval Wait Times

Assuming a retrieval will feel instant, then discovering a real emergency requires waiting hours, is one of the most common and avoidable planning mistakes.

Treating All Archived Data The Same Way

Dumping everything into a single storage class regardless of how it’s actually used ignores the entire point of having three different classes, and often ends up costing more than a thoughtfully mixed approach would.

i
Habit Worth Building

Before archiving anything, honestly estimate how often it might realistically need to be retrieved, and choose the storage class that matches that pattern rather than the cheapest option by default.

17Frequently Asked Questions

Direct answers to the questions beginners ask most often about Glacier.

Q1Is Glacier a completely separate service from regular S3?

No, Glacier storage classes live inside regular S3 buckets today, rather than being a fully separate product with its own console, as it was in Amazon’s earliest versions of the service.

Q2Can I browse Glacier files like a normal folder?

You can see archive names and details in the S3 console at any time, but opening or downloading the actual file content requires completing a retrieval request first.

Q3What happens if I need a file back urgently from Deep Archive?

Standard retrieval typically completes within about 12 hours, so genuinely urgent needs are better served by choosing a faster storage class like Instant Retrieval for that data ahead of time.

Q4Does Glacier data ever expire automatically?

Only if you configure a lifecycle rule to delete it after a certain age; otherwise, an archive remains stored indefinitely until someone explicitly deletes it.

Q5Is Glacier suitable for a personal photo backup?

Yes, many individuals use Glacier Instant Retrieval or Flexible Retrieval for personal backups they rarely need, since the storage cost is extremely low for large photo or video libraries.

Q6Can a lifecycle policy move data back out of Glacier automatically?

Lifecycle policies are designed to move data toward cheaper, colder storage over time; moving data back to a faster class typically requires a manual retrieval and re-upload instead.

Q7Does Glacier work the same way in every AWS region?

The core concepts and storage classes are consistent globally, though exact pricing and available retrieval speed tiers can vary slightly from one AWS region to another.

18Summary and Key Takeaways

AWS S3 Glacier exists for one honest, simple purpose: to store the data you rarely touch as cheaply and safely as possible, in exchange for accepting that getting it back takes a little planning instead of happening instantly. Understood correctly, it isn’t a downgrade from regular storage — it’s the right-sized tool for a huge category of real data, from legally-required financial records to decades-old film footage, that genuinely benefits from being priced for patience rather than speed. Used through automated lifecycle policies rather than manual effort, Glacier quietly becomes one of the highest-value, lowest-maintenance parts of an entire cloud storage strategy.

Key Takeaways

  • Glacier Trades Speed For Savings — a deliberate, honest trade-off, not a limitation to work around.
  • Three Classes Fit Three Patterns — Instant, Flexible, and Deep Archive match how urgently you might need data back.
  • Retrieval Takes Planning — expedited, standard, and bulk tiers let you balance urgency against cost.
  • Lifecycle Policies Automate Everything — let files age into cheaper storage automatically instead of managing it by hand.
  • Vault Lock Enables Compliance — a permanent, tamper-proof guarantee trusted by regulators and auditors.
  • Durability Is Extremely High — data is replicated across multiple facilities automatically, by default.
  • Match The Class To The Need — the biggest beginner mistake is choosing storage class by price alone, without considering real access patterns.