Storage costs
Keeping each byte in the cheapest tier its access pattern allows, and moving it there automatically. This is Domain 4: Design Cost-Optimized Architectures, 20% of the scored content.
S3 storage classes
Amazon S3 storage classes
Cheaper classes trade storage price for retrieval fees, minimum storage durations and minimum billable sizes. These hidden charges decide most exam answers.
Key points
- Minimum duration: 30 days for Standard-IA and One Zone-IA, 90 days for Glacier Instant Retrieval and Glacier Flexible Retrieval, 180 days for Glacier Deep Archive. Deleting earlier is billed as if kept.
- Minimum billable size: 128 KB for Standard-IA, One Zone-IA and Glacier Instant Retrieval. Glacier Flexible Retrieval and Deep Archive add 40 KB of metadata per object.
- Retrieval fees: per GB for the IA and Glacier classes. Standard and Intelligent-Tiering have none.
- One Zone-IA: one AZ and cheaper than Standard-IA, for data you can re-create, such as replicas or derived files.
- Express One Zone: single-digit millisecond access in one AZ with request costs 50% lower than Standard. A performance class, not an archive.
On the exam
"Millions of 20 KB objects, rarely read" -> keep them in Standard or aggregate them, the 128 KB minimum makes IA cost more. "Re-creatable thumbnails, rarely read" -> One Zone-IA.
S3 classes and their hidden charges
| Class | Minimums and fees |
|---|---|
| Standard | No minimum duration or size, no retrieval fee. 3 or more AZs. |
| Intelligent-Tiering | No minimum duration, no retrieval fee, a monitoring fee per object. |
| Standard-IA | 30 days, 128 KB, per-GB retrieval. 3 or more AZs. |
| One Zone-IA | 30 days, 128 KB, per-GB retrieval. 1 AZ. |
| Glacier Instant Retrieval | 90 days, 128 KB, per-GB retrieval. Milliseconds, for data read about once a quarter. |
| Glacier Flexible Retrieval | 90 days, 40 KB overhead per object, restore in minutes to hours. |
| Glacier Deep Archive | 180 days, 40 KB overhead per object, restore in 12 to 48 hours. |
S3 Lifecycle
Amazon S3 Lifecycle
Lifecycle rules move objects down the storage class waterfall or delete them on a schedule, with no code. The schedule must respect each class minimum.
Key points
- Transition actions: move objects by age, prefix, tag or size, from Standard down to IA, Intelligent-Tiering, Glacier and Deep Archive. Deep Archive is a one-way door.
- Expiration actions: delete current versions, permanently delete noncurrent versions with
NoncurrentVersionExpirationand clean up expired delete markers. - Small objects: by default objects under 128 KB are not transitioned, because the per-object transition request can cost more than it saves. A size filter overrides it.
- Minimum duration: moving out of a class early bills the rest of its minimum. One rule cannot go to Glacier Instant Retrieval at day 4 and Deep Archive at day 20, the second step must wait until day 94.
- Billing date: transitions to Glacier Flexible Retrieval and Deep Archive bill at the new rate from the day the rule is met. Intelligent-Tiering bills after the physical move.
On the exam
"Logs read for 30 days, kept 7 years for audit, lowest cost" -> Lifecycle transitions down to Deep Archive plus an expiration at 7 years. A scheduled Lambda that copies objects is the distractor.
Intelligent-Tiering
Amazon S3 Intelligent-Tiering
The class for unknown or changing access patterns. It moves each object between tiers by its own access history, with no retrieval fees.
Key points
- Automatic tiers: Frequent Access, Infrequent Access after 30 days without access, Archive Instant Access after 90 days. Any access moves the object back to Frequent Access.
- Optional archive tiers: Archive Access from 90 days and Deep Archive Access from 180 days, configurable up to 730 days. Objects there must be restored before reading.
- Costs: a small monthly monitoring and automation fee per object, no retrieval fees and no minimum storage duration.
- Small objects: under 128 KB they are not monitored and always stay in Frequent Access.
- Adoption: set it as the storage class at upload, or move existing objects into it with a Lifecycle rule.
On the exam
"Access pattern unknown or unpredictable, no operational effort" -> Intelligent-Tiering. "Known pattern, hot for 30 days and then cold" -> a Lifecycle rule, which avoids the per-object monitoring fee.
S3 cost visibility
S3 Storage Lens, Storage Class Analysis and Requester Pays
Storage Lens and Storage Class Analysis show where the bytes and the waste are. Requester Pays moves download costs to whoever reads the data.
Key points
- S3 Storage Lens: organization-wide view down to account, Region, storage class, bucket and prefix. Flags buckets without lifecycle rules for incomplete multipart uploads older than 7 days. Free metrics plus a paid advanced tier.
- Storage Class Analysis: observes a bucket, prefix or tag for 30 days or more and tells when to move Standard objects to Standard-IA. It recommends nothing else.
- Requester Pays: the requester pays for requests and data download, the bucket owner still pays storage. Requests must be authenticated and send
x-amz-request-payer, anonymous access is not allowed.
On the exam
"Share a large dataset, the consumers must pay for downloads" -> Requester Pays. "Find the age when objects become cold to tune lifecycle" -> Storage Class Analysis. "Organization-wide view of storage and waste" -> Storage Lens.
EBS volumes and snapshots
Amazon EBS
Block storage is billed for what you provision, not what you use. Pick the cheapest type that meets IOPS and throughput, and archive old snapshots.
Key points
- gp2 to gp3: gp3 costs 20% less per GiB, includes 3,000 IOPS and 125 MiB/s at any size, and scales IOPS and throughput apart from size. Change it in place with Elastic Volumes, no downtime.
- gp2 trap: IOPS grow at 3 per GiB, so teams buy capacity just to get IOPS. gp3 removes that.
- HDD types:
st1for frequent, large sequential throughput (EMR, ETL, logs),sc1the lowest cost for cold sequential data. Neither can be a boot volume. - Snapshots Archive: up to 75% lower snapshot storage cost for snapshots kept 90 days or more. Stored as full snapshots, 90-day minimum, restore takes up to 72 hours.
- Clean up: unattached volumes and old snapshots keep billing. Compute Optimizer and Trusted Advisor flag underutilized volumes.
On the exam
"Lower EBS cost, same performance, no downtime" -> modify gp2 to gp3. "Keep yearly snapshots for compliance, rarely restored" -> EBS Snapshots Archive.
EFS and FSx
Amazon EFS and Amazon FSx
File storage gets much cheaper when cold files leave the primary tier. EFS does it with lifecycle policies, FSx with storage type and data reduction choices.
Key points
- EFS classes: Standard (sub-millisecond), Infrequent Access (up to 95% cheaper) and Archive (up to 50% cheaper than IA, 90-day minimum). IA and Archive bill at least 128 KiB per file.
- EFS lifecycle management: by default moves files not accessed for 30 days to IA and for 90 days to Archive. It can move a file back to Standard on first access.
- EFS One Zone: data in a single AZ, for data that does not need multi-AZ resilience. Access from another AZ pays $0.01 per GB cross-AZ transfer. Archive needs a Regional file system with Elastic Throughput.
- FSx for Windows File Server: HDD for home directories and shares, SSD for latency-sensitive work. Data Deduplication typically saves 50 to 60% on general file shares.
- FSx for Lustre: scratch file systems for short, temporary processing with no replication, persistent ones for long-term data. The Intelligent-Tiering storage class moves cold data to cheaper tiers.
On the exam
"Shared Linux files, most untouched after a month" -> EFS lifecycle management to IA or Archive. "Temporary HPC working space at the lowest cost" -> FSx for Lustre scratch, not persistent.
Archive retrieval
S3 Glacier storage classes
The cheaper the archive, the slower and costlier the way back. Choose the class by how fast a restore must finish, not only by price per GB.
Key points
- Glacier Instant Retrieval: millisecond reads with no restore step, for archives read about once a quarter.
- Bulk is free: Bulk retrievals cost nothing from Glacier Flexible Retrieval and Intelligent-Tiering. Expedited is a premium option.
- Provisioned capacity: guarantees Expedited retrievals from Glacier Flexible Retrieval when demand is high.
- Restored copy: a temporary copy is billed at the Standard rate while the archived object keeps billing at its own rate.
- Large restores: up to 1 to 2 PB per day per account, and S3 Batch Operations to restore many objects with one request.
On the exam
"Archive, occasionally needed within minutes" -> Glacier Flexible Retrieval with Expedited. "Kept 10 years, 48 hours is fine, lowest cost" -> Glacier Deep Archive. "Rarely read but must open in milliseconds" -> Glacier Instant Retrieval.
Restore times
| Class or tier | Retrieval options |
|---|---|
| Glacier Instant Retrieval | Milliseconds, no restore needed. |
| Glacier Flexible Retrieval | Expedited 1 to 5 minutes. Standard 3 to 5 hours. Bulk 5 to 12 hours. |
| Glacier Deep Archive | No Expedited. Standard within 12 hours. Bulk within 48 hours. |
| Intelligent-Tiering Archive Access | Same as Glacier Flexible Retrieval. |
| Intelligent-Tiering Deep Archive Access | Same as Glacier Deep Archive. |
Moving data in
AWS DataSync and AWS Transfer Family
Data transfer from the internet into AWS is free, so the cost is in the tool, the link and the time. Pick by data size, bandwidth and deadline.
Key points
- AWS DataSync: managed online transfer from NFS, SMB, HDFS, object storage and other clouds to S3, EFS and FSx, or straight to Glacier classes. Incremental, compressed, validated and encrypted, and one task can fill 10 Gbps.
- Slow links: for a large migration, run DataSync over a hosted Direct Connect connection bought only for the project.
- Snowball Edge: no longer available to new customers. AWS points them to DataSync, to AWS Data Transfer Terminal for physical uploads and to Outposts for edge compute.
- AWS Transfer Family: managed SFTP, FTPS, FTP, AS2 and browser-based transfers into S3 or EFS, so partners keep their clients and you run no servers.
- Batch uploads: fewer, larger objects cut per-request charges and lifecycle transition costs.
On the exam
"Partners upload over SFTP, retire the self-managed server" -> Transfer Family. "Migrate hundreds of TB from NFS with ongoing sync and integrity checks" -> DataSync. Older questions may still offer Snowball Edge as the offline option for huge datasets on thin links.