Setting the file. One moment.
Subchapter 43.1
references/data-movement-and-protection-knowledge.mdMarkdown6 KBView on GitHub
This reference captures information addressing common gotchas and frequently asked questions for the AWS data movement and protection services (AWS DataSync, AWS Storage Gateway, AWS Transfer Family, and AWS Backup) to support accurate model responses. It is not a complete specification. The authoritative source for latest specifications, limits, quotas, and API behavior is each service’s User Guide and API Reference:
Retrieve current specifications, limits, and quotas from those pages before citing specifics; cite figures only from those pages.
What it is: AWS DataSync, AWS Storage Gateway, AWS Transfer Family, and AWS Backup are the cross-service storage operations layer: they move data between storage systems, bridge on-premises applications to cloud storage, exchange files with external partners over managed protocols, and centralize backup and retention across AWS services. All four support AWS CloudTrail logging and Amazon CloudWatch metrics and alarms to detect unauthorized transfers or anomalous activity.
Well-suited for: moving, bridging, exchanging, or protecting data rather than choosing a primary storage target.
Note: AWS Snow Family and Amazon FSx File Gateway are not actively supported for new workloads; for supported data transfer and hybrid storage alternatives, see Cloud Data Migration (opens in a new tab).
You MUST retrieve information from the linked documentation in the below table before answering any user question on the related topic.
| Topic | Example service characteristics, features, and actions | Documentation |
|---|---|---|
| What it does | online transfers and migrations; connects all FSx variants; EFS; S3; non-AWS clouds; agent vs agentless; Enhanced vs Basic mode; continuous replication | What is AWS DataSync? (opens in a new tab) |
| Security | scoped IAM roles; TLS in transit | Security in AWS DataSync (opens in a new tab) |
| Pricing | per GB transferred (not exhaustive, review pricing page for the full list of pricing dimensions) | AWS DataSync pricing (opens in a new tab) |
| Topic | Example service characteristics, features, and actions | Documentation |
|---|---|---|
| What it does | on-premises access via local cache; Amazon S3 File Gateway; Volume Gateway (Cached or Stored); Tape Gateway; bucket-to-file-share mapping; file size limit; no symlink or hard-link | What is Amazon S3 File Gateway? (opens in a new tab) |
| Security | SSL in transit; SSE-S3 or SSE-KMS on the S3 backend; VPC endpoints; IAM roles for activation | Security in AWS Storage Gateway (opens in a new tab) |
| Pricing | per GB stored; request charges (not exhaustive, review pricing page for the full list of pricing dimensions) | AWS Storage Gateway pricing (opens in a new tab) |
| Topic | Example service characteristics, features, and actions | Documentation |
|---|---|---|
| What it does | provides managed SFTP; FTPS; FTP; AS2 endpoints on S3 or EFS; public and VPC endpoint types; managed workflows; AS2 MDN; Transfer Family Web Apps | What is AWS Transfer Family? (opens in a new tab) |
| Security | SFTP and FTPS encrypt in transit; FTP is unencrypted and not for production workloads; FTP and FTPS require a VPC endpoint; ACM certificate for FTPS; managed identity providers; Secrets Manager for keys | Security in AWS Transfer Family (opens in a new tab) |
| Pricing | per protocol endpoint provisioned; per GB transferred (not exhaustive, review pricing page for the full list of pricing dimensions) | AWS Transfer Family pricing (opens in a new tab) |
| Topic | Example service characteristics, features, and actions | Documentation |
|---|---|---|
| What it does | policy-based backup across many AWS services; S3 Versioning prerequisite; continuous backup and point-in-time restore; Vault Lock Compliance vs Governance | What is AWS Backup? (opens in a new tab) |
| Security | AWS KMS keys in the vault; Vault Lock WORM immutability | Security in AWS Backup (opens in a new tab) |
| Pricing | backup storage; restore; cross-Region and cross-account copy; service-specific tiering (not exhaustive, review pricing page for the full list of pricing dimensions) | AWS Backup pricing (opens in a new tab) |