Amazon Simple Storage Service (S3) is an object storage service provided AWS platform with in-built capabilities for scalability, availability, security, and performance.
Amazon S3 stores data as objects within buckets. An object consists of a file containing the data and optionally metadata regarding the file. The object can be any kind of file - text, photo, video, etc. You can have multiple buckets, and each bucket can have multiple objects.
You can provide access control to the bucket - specify who can create, view, and delete objects in the bucket; and view access logs for the bucket and its objects.
There are various ways to manage access to Amazon S# buckets.
IAM - Manage access to S3 resources via AWS Identity And Access Management (IAM) Users, Groups, and Roles.
ACL - Manage access to S3 resources and individual objects via Access Control Lists (ACL)
S3 Access Points - Manage access to S3 data sets via S3 Access Points specific to each application.
S3 Bucket Policies - Manage access to S3 resources by configuring access policies and permissions at the bucket level, which apply to all objects within that bucket.
Amazon S3 Replication enables the replication of S3 objects by automatic, asynchronous copying of objects across Amazon S3 buckets. Data can be copied across different AWS accounts, as well as across different AWS Regions.
Amazon S3 Glacier is Amazon's data backup and archival storage service, which costs extremely low compared to the regular S3 storage.
You can store data in Amazon S3 Glacier on an ad-hoc basis depending on your application and functional rules. You can also use lifecycle rules to automatically archive objects from S3 to S3 Glacier based on the age of objects.