Cross Region Replication (CRR) in Amazon S3 is a feature designed to automatically replicate data across different AWS Regions, providing enhanced data durability, disaster recovery, and low-latency access for users. Here's a detailed overview of CRR and its key aspects:
Key Features and Benefits
Automatic Replication: CRR enables automatic, asynchronous replication of objects uploaded to a source S3 bucket to a destination bucket located in a different AWS Region of your choice.
Configuration Flexibility: You can configure CRR at the bucket level using the AWS Management Console, REST API, AWS CLI, or SDKs. Versioning must be enabled for both the source and destination buckets.
Support for Encryption: CRR supports replication of KMS-encrypted objects by specifying a destination KMS key in the replication configuration, ensuring data security during transit.
Granular Control: You can define replication rules to specify whether to replicate all objects or only a subset with specific key name prefixes. Additionally, separate S3 Lifecycle rules can be configured on the source and destination buckets.
Cross-Account Replication: CRR can be set up across different AWS accounts, allowing you to store replicated data in a different account in the target region while maintaining ownership and access control.
Low Latency Access: Replicating objects to buckets closer to users improves data access latency, enhancing overall user experience.
Triggers and Replication Scope: Replication is triggered by uploading objects to the source bucket, deleting objects in the source bucket, or making changes to object metadata or ACLs. It applies to new objects created after enabling replication and changes to existing objects.
Deletion Behavior: CRR handles object deletions by adding delete markers for DELETE requests without specifying an object version ID. However, objects replicated from another region are not replicated upon deletion.
Charges: Charges for CRR include requests for upload, inter-region transfer, and S3 storage in both regions.
Same Region Replication (SRR)
Overview: SRR, introduced in September 2018, replicates objects within the same AWS Region, providing similar benefits as CRR but with replication occurring within a single region.
Automatic and Asynchronous: SRR replicates new objects uploaded to an S3 bucket automatically and asynchronously, without manual intervention.
Configuration: Replication settings can be configured at the bucket, prefix, or object tag levels, allowing for fine-grained control over replication behavior.
Ownership and Access Control: Replicated objects can be owned by the same AWS account as the original copy or by different accounts, providing protection against accidental deletion.
Storage Class Options: Replicated objects can be stored in any S3 storage class, including Glacier and Glacier Deep Archive, facilitating backups and long-term archives.
Metadata and ACL Replication: SRR replicates object metadata, Access Control Lists (ACLs), and object tags associated with the replicated objects, ensuring consistency across copies.