Amazon Storage Gateway Documentation

Amazon Storage Gateway is a hybrid cloud storage service that is designed to give you on-premises access to virtually unlimited cloud storage. Customers use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases. These include moving backups to the cloud, using on-premises file shares backed by cloud storage, and providing low latency access to data in Amazon Web Services Cloud for on-premises applications.

Standard Storage Protocols: Storage Gateway is designed to connect to your local production or backup applications with NFS, SMB, iSCSI, or iSCSI-VTL, so you can adopt Amazon Web Services Cloud storage without needing to modify your applications. Its protocol conversion and device emulation are designed so you can access block data on volumes managed by Storage Gateway on top of Amazon S3, store files as native Amazon S3 objects or in fully managed cloud file shares with Amazon FSx for Windows File Server, and keep virtual tape backups online in a virtual tape library backed by Amazon S3. You can also move backups to a tape archive tier on Amazon S3 Glacier or Amazon S3 Glacier Deep Archive.

Amazon S3 File Gateway presents a file interface that enables you to store files as objects in Amazon S3 using the industry-standard NFS and SMB file protocols, and access those files via NFS and SMB from your data center or Amazon EC2, or access those files as objects directly in Amazon S3. POSIX-style metadata, including ownership, permissions, and timestamps, are durably stored in Amazon S3 in the user-metadata of the object associated with the file. Once objects are transferred to S3, they can be managed as native S3 objects and bucket policies such as lifecycle management and Cross-Region Replication (CRR), and can be applied directly to objects stored in your bucket. Amazon S3 File Gateway also publishes audit logs for SMB file share user operations to Amazon CloudWatch.

Amazon FSx File Gateway provides fast, low-latency on-premises access to fully managed, highly reliable, and scalable file shares in the cloud using the industry-standard SMB protocol. Customers can store and access file data in Amazon FSx with Windows-native compatibility including full NTFS support, shadow copies, and Access Control Lists (ACLs). Use Amazon FSx File Gateway for your on-premises file-based business applications and workloads such as user or group file shares, web content management, and media workflows.

Tape Gateway presents a virtual tape library (VTL) consisting of virtual tape drives and a virtual media changer to your backup application using storage industry standard iSCSI protocol. You can continue to use your existing backup applications and workflows while writing to virtual tapes. Each virtual tape is stored in Amazon S3. When you no longer require immediate or frequent access to data contained on a virtual tape, you can have your backup application move it from the Storage Gateway Virtual Tape Library into an archive tier that sits on top of Amazon S3 Glacier or Amazon S3 Glacier Deep Archive cloud storage, further reducing storage costs. Tape Gateway stores your virtual tapes in service-managed S3 buckets, and can create new virtual tapes, simplifying management and making your transition to the cloud for storage easy.

Volume Gateway presents your application’s block storage volumes using the iSCSI protocol. Data written to these volumes can be asynchronously backed up as point-in-time snapshots of your volumes, and stored in the cloud as Amazon EBS snapshots. You can back up your on-premises Volume Gateway volumes using the service’s native snapshot scheduler or by using the Amazon Backup service. In both cases, volume backups are stored as Amazon EBS snapshots in Amazon Web Services Cloud. These snapshots are incremental backups that capture only changed blocks. All snapshot storage is also compressed to minimize your storage charges.

As a hybrid cloud service, Amazon Storage Gateway consists of in-cloud as well as on-premises components, which can be deployed in several methods based on your on-premises infrastructure needs: as a virtual machine, as a hardware appliance on-premises, as a VM in VMware Cloud on Amazon Web Services, or as an AMI in Amazon EC2.

For additional information about service controls, security features and functionalities, including, as applicable, information about storing, retrieving, modifying, restricting, and deleting data, please see https://docs.amazonaws.cn/en_us/. This additional information does not form part of the Documentation for purposes of the Sinnet Customer Agreement for Amazon Web Services (Beijing Region), Western Cloud Data Customer Agreement for Amazon Web Services (Ningxia Region) or other agreement between you and Sinnet or NWCD governing your use of services of Amazon Web Services China Regions.