Posted On: Jun 3, 2021
S3 Inventory and S3 Batch Operations add support to identify and copy objects to use S3 Bucket Keys, reducing the costs of Server-Side Encryption (SSE) with AWS Key Management Service (KMS). S3 Bucket Keys reduce the request costs of SSE-KMS by decreasing the request traffic from S3 to KMS. You can configure your bucket to use an S3 Bucket Key for AWS KMS-based encryption on new objects. With this update, you can use S3 Inventory and S3 Batch Operations to configure S3 Bucket Keys while creating encrypted copies of millions or billions of existing objects, reducing the cost of server-side encryption requests with AWS KMS.
S3 Batch Operations is an S3 feature that lets you perform repetitive or bulk actions across billions of objects with a single request. With this update, you can use Bucket Key Status in S3 Inventory to identify the list of existing objects that need to be configured using S3 Bucket Keys, and then provide this list of objects to S3 Batch Operations to copy them in place, while encrypting using S3 Bucket Keys, in a single request.
Support for S3 Bucket Keys in S3 Batch Operations and S3 Inventory is available in all AWS Regions, including the AWS GovCloud (US) Regions, the AWS China (Beijing) Region, operated by Sinnet, and the AWS China (Ningxia) Region, operated by NWCD. There is no additional charge to S3 Batch Operations for specifying S3 Bucket Keys in copy job, but standard fees for S3 Inventory, S3 Batch Operations and Copy request will apply. For more information on how to configure S3 Bucket Keys for existing objects using S3 Batch Operations and S3 Inventory, see documentation.