Glacier Vault

📦 Overview

This Terraform module provisions an Amazon S3 Glacier Vault for long-term, low-cost archival storage.

It’s ideal for backup archives, compliance storage, and datasets that do not require frequent access but must remain durably stored over time.

---

✅ Key Features

• Creates a secure S3 Glacier Vault for cold data storage
• Supports tagging by environment, name, and purpose
• Compliant with backup and archival retention policies
• Optimized for durability and rare-access workloads

---

💼 Use Cases

• Regulatory compliance data retention (HIPAA, SEC, IRS, etc.)
• Archived application or database backups
• Long-term media storage, legal hold, or audit logs
• Secure, cost-effective offloading of cold datasets

---

📥 Input Variables

Name	Type	Description
region	string	AWS region to create the Glacier vault
vault_name	string	Name to assign to the Glacier vault
environment	string	Tag to specify the deployment environment (e.g., dev, staging, prod)

---

📤 Outputs

Name	Description
vault_name	The name of the Glacier vault
vault_arn	The ARN of the created Glacier vault
region	The AWS region where the vault was created

---

🚀 Deployment Readiness

• ✅ Compatible with Terraform 1.0+
• ✅ Tested with AWS provider 5.x
• 🧪 Requires IAM permissions for Glacier and tagging APIs

---

🛠️ Example Usage

module "glacier_vault" {
  source      = "git::ssh://git@github.com/archiphire/aws-level-1-modules.git//storage/glacier-vault?ref=v1.0.0"

  region      = "us-east-1"
  vault_name  = "archiphire-archive"
  environment = "prod"
}

terraform init
terraform plan
terraform apply

or

tofu init
tofu plan
tofu apply

🧹 Cleanup Options

Terraform Destroy (for test environments):

terraform destroy

or

tofu destroy

Manual Deletion (CLI):

aws glacier delete-vault --account-id - --vault-name archiphire-archive

⚠️ Glacier vaults must be empty before deletion. Use the AWS CLI or SDK to remove archives if needed.

🛡️ Notes

This Level 1 module is best suited for standalone cold storage use. For lifecycle automation or retrieval orchestration, compose it with:

s3-lifecycle-to-glacier glacier-job-retrieval (Level 2 concept)

🔒 Deployment Package Notice

This module is part of the Level 1 AWS License Tier. To access the full deployment package and source code, subscribe to Archiphire.