---
title: "S3 Access to Replicated Data"
slug: "s3-access-to-replicated-data-tg"
updated: 2026-10-27T17:23:14Z
published: 2026-10-27T17:23:14Z
canonical: "docs.vastdata.com/s3-access-to-replicated-data-tg"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# S3 Access to Replicated Data

The following features enable S3 access to data at replicated protected paths:

- [Replication of S3 Access Key Pairs and Identity Policies](/docs-5-3/docs/en/s3-access-to-replicated-data-tg#replication-of-s3-access-key-pairs-and-identity-policies)
- [Bucket Replication](/docs-5-3/docs/en/s3-access-to-replicated-data-tg#bucket-replication)

## Replication of S3 Access Key Pairs and Identity Policies

S3 access key pairs and identity policies are replicated between replication peers along with protected path data as follows:

- Access key pairs and identity policies associated with any users on external authorization providers that are configured on the source and the destination peer clusters are replicated from source peer to destination peer and vice versa. Access keys and identity policies are not replicated for users on the cluster's local provider.
- Each cluster stores access key pairs and identity policies as either local or remote. Access keys and identity policies that are received by replication from remote peers are stored as remote. They cannot be modified or deleted, although they can be enabled and disabled. Remote identity policies are disabled by default.

No configuration is required to enable this feature.

## Bucket Replication

*Bucket replication* is a feature that you can choose to enable on the cluster. This feature recreates buckets for you on replicated paths, with the properties of source buckets on the replication source peer. It must be enabled on the source peer cluster. It prevents the need to manually create buckets in order to enable S3 access to data at replicated paths.

> [!NOTE]
> Note
> 
> Bucket replication cannot be disabled.

If bucket replication is enabled, any S3 buckets on or under replicated protected paths are automatically recreated at the replication target path, provided the bucket views are configured on the source peer with the *S3 default* view policy.

If a bucket was created manually on the target with the same name as the equivalent bucket at the source path, the source bucket's properties are applied to the manually created bucket.

The following properties of the source bucket are applied to the target bucket:

- Object versioning status
- s3 lock enablement status
- object ownership rule
- *allow anonymous access* status
- *has db* status
- The bucket policy

Buckets that are created by the bucket replication feature are created as bucket-enabled views with the S3 default view policy of the remote tenant.