AWS Storage Gateway
Hybrid storage appliance that gives on-premises apps file, block, or tape access to AWS storage, with a local cache for speed.
Verified against AWS documentation · 2026-09-09
Key facts
- 01Runs on-prem as a VM (VMware / Hyper-V / KVM) or an AWS hardware appliance, or in AWS as an EC2 AMI — apps keep speaking NFS, SMB, or iSCSI and never know they're hitting the cloud
- 02Four types: S3 File Gateway (NFS/SMB → S3 objects, 1:1), FSx File Gateway (SMB → FSx for Windows), Volume Gateway (iSCSI block → S3, backed up as EBS snapshots), Tape Gateway (virtual tape library → S3 Glacier)
- 03Local cache holds hot data, AWS holds the durable copy — Volume Gateway cached mode keeps the primary dataset in AWS with a hot subset local; stored mode keeps everything local and backs up asynchronously
- 04Reality check: FSx File Gateway has been closed to new customers since October 2024, though exam material still lists all four types
Exam triggers
Phrases and scenarios that point here.
- "On-premises", "existing applications", "without modifying", "hybrid" + AWS storage → Storage Gateway
- Retire a physical tape library but keep the existing backup software → Tape Gateway
- On-prem app needs low-latency access to recent data while the bulk sits in the cloud → the local cache is the giveaway
- Protocol names the type: NFS/SMB → File Gateway, iSCSI volumes → Volume Gateway, iSCSI VTL → Tape Gateway
Not this service
- One-time bulk move of huge data, or no usable network → AWS Snow Family
- Ongoing scheduled transfers between storage systems, no local cache or protocol translation → AWS DataSync
- Shared file system for workloads already in AWS, nothing on-prem → EFS (Linux) or FSx (Windows)
Use cases
- 01A hospital's imaging system keeps writing scans to the same SMB share — except the share is an S3 File Gateway, so every scan lands in S3 for archival and analytics while radiologists still open them at LAN speed
- 02Retiring the tape robot in the basement: the backup software still sees tapes and drives, but the tapes are virtual and age into Glacier Deep Archive — no courier, no offsite vault contract
- 03A factory with a 20 TB CAD file server where engineers actually touch about 2 TB — Volume Gateway cached mode keeps that working set on-site and pushes the rest to S3, so the next hardware refresh can be a smaller box
- 04Dropping daily video rushes onto an NFS mount that is really S3, so a Lambda fires on the object write and transcoding happens in the cloud without anyone building an upload pipeline
- 05DR on a budget: Volume Gateway stored mode keeps production data local at full speed and snapshots it to AWS — if the site is lost, restore the snapshot as an EBS volume and boot on EC2
How it's charged
- 01The gateway software itself is free — you pay for the AWS storage it fills (S3, EBS snapshots, Glacier) at those services' normal rates
- 02$0.01 per GB written to AWS by the gateway, capped at $125 per gateway per month, first 100 GB per account per month free — the cap is the one number worth memorizing
- 03Uploads to AWS are free; pulling data back down to the gateway is billed as data transfer out, so a cold cache after a rebuild costs real money
- 04Tape Gateway: archived tapes are cheap to store in Glacier or Deep Archive, but retrieval is charged per GB and early deletion (before 90 / 180 days) triggers a prorated fee
- 05Running the gateway on EC2 adds normal EC2 and EBS charges on top; running it on your own on-prem hardware adds nothing