Amazon S3 Introduces Account Regional Namespace for General Purpose Buckets

Amazon S3 has unveiled a new feature that lets you create general purpose buckets within your own account regional namespace. By appending a unique suffix from your account to the bucket name, you can more predictably secure the name you want across multiple AWS Regions.

For example, if you create a name like mybucket-123456789012-us-east-1-an, mybucket is the prefix you chose, and the trailing -123456789012-us-east-1-an is the account/region suffix. If another account tries to use the same suffix, the request is automatically denied, and organization-wide enforcement is also possible using the s3:x-amz-bucket-namespace condition key in AWS IAM policies and SCPs in AWS Organizations.

There are several ways to create these buckets.

• Create via the S3 Console by selecting Account regional namespace
• Specify --bucket-namespace account-regional in the AWS CLI
• Create via the CreateBucket API in Boto3
• Use AWS::AccountId, AWS::Region, or BucketNamePrefix in CloudFormation

However, existing global namespace buckets cannot be renamed to this format, and this feature applies only to general purpose buckets. S3 table buckets and vector buckets already use account-level namespaces, while directory buckets use a zonal namespace. This feature is currently available at no additional cost in 37 AWS Regions, including China and AWS GovCloud (US) regions.