S3 Storage Lens provides enterprise-wide visibility into object storage usage, activity trends, and provides actionable recommendations to improve cost efficiency and implement data protection best practices. S3 Storage Lens is the first cloud storage analytics solution that can provide a single view of object storage usage and activity across hundreds or even thousands of accounts in an organization, with drill-down to provide insights at the account, bucket, or even prefix level. S3 Storage Lens analyzes metrics across the entire organization to provide contextual recommendations to find ways to reduce storage costs and implement data protection best practices.

After enabling S3 Storage Lens in the S3 console, you’ll receive an interactive dashboard containing pre-configured views to visualize storage usage and activity trends, with contextual recommendations that make it easy to take action. You can also export metrics to an S3 bucket in CSV or Parquet format. You can use the Summary view, Cost-optimized view, or Data Protection view to see metrics relevant to your use case. In addition to the dashboard in the S3 console, you can export metrics in CSV or Parquet format to your desired S3 bucket for further use.

Objects uploaded or moved to S3 Intelligent-Tiering are automatically stored in the frequent access tier. S3 Intelligent-Tiering works by monitoring access patterns and then moving objects that have not been accessed for 30 consecutive days to the infrequent access tier. When you enable one or both of the archive access levels, S3 Intelligent-Tiering moves objects that have not been accessed for 90 consecutive days to the Archive Access level, and then to the Deep Archive Access tier after 180 consecutive days of inaccessibility. If you access the objects later, S3 Intelligent-Tiering moves the objects back to the Frequent Access level.

Amazon S3 Access Points, an S3 feature, manages data access at scale for applications using shared datasets in S3 Access points are unique hostnames that customers create to apply distinct permissions and network controls to any requests made through the access point.

Customers with shared data sets, including data lakes, media archives, and user-generated content, can easily scale access to hundreds of applications by creating unique access points with custom names and permissions for each application. Each access point can be restricted to a Virtual Private Cloud (VPC) to access S3 firewall data within customers’ private networks, and AWS Service Control policies can be used to ensure VPC restrictions are applied to all access points.

S3 Batch Operations is an Amazon S3 data management feature that lets you manage billions of objects at scale with just a few clicks in the Amazon S3 Management Console or an API request.

To perform work in S3 Batch Operations, you create a job. This job contains a list of objects, an action to perform, and a set of parameters that you specify for that type of operation. You can create and run multiple jobs in S3 Batch Operations at the same time, or use job priorities as needed to prioritize each job and ensure that the most important work happens first. S3 Batch Operations also handles retries, tracks progress, sends completion notifications, generates reports, and delivers events to AWS CloudTrail for all changes made and tasks performed.

S3 Block Public Access provides controls at the AWS account-wide or individual S3 bucket level to ensure that objects are never, now or in the future, publicly accessible.

Public access to buckets and objects is granted through access control lists (ACLs), bucket policies, or both. To ensure that public access is blocked to all of your S3 buckets and objects, block public access at the account level. This setting applies to all current and future buckets across the entire account. S3 Overrides Public Access Settings S3 permissions that allow public access make it easy for an account administrator to create a centralized control to prevent changes to the security configuration regardless of how an object is added or the bucket is created.