AWS 推出新功能，允许用户将 Amazon S3 Access Points 附加到 Amazon FSx for OpenZFS 文件系统，实现对文件数据的 S3 访问。这一更新简化了数据访问流程，用户无需在 FSx 和 S3 之间复制数据，即可利用广泛的 AWS 服务，如人工智能、机器学习和数据分析。文件数据仍保留在 FSx for OpenZFS 中，用户可以通过 S3 API 操作和 NFS 协议访问数据，从而提升了数据的使用灵活性和效率。

💡 通过将 Amazon S3 Access Points 附加到 FSx for OpenZFS，用户可以直接使用 S3 API 操作（如 GetObject、PutObject 和 ListObjectsV2）来读写文件数据，而无需进行数据迁移。

🔑 这种集成支持使用与 S3 存储桶相同的细粒度权限控制，包括 IAM 访问点策略、Block Public Access 和网络源控制，确保了数据安全。

🚀 用户可以利用 FSx for OpenZFS 中的文件数据，结合 Amazon Bedrock 进行生成式 AI 应用、使用 Amazon SageMaker 训练机器学习模型，以及通过 Amazon Athena 和 AWS Glue 运行分析和商业智能，如同数据存储在 S3 中一样。

🛠️ 该功能允许用户通过 NFS 继续访问数据，并受益于现有的数据管理能力，同时支持 Apache Spark 和 Apache Hive 等开源工具，无需移动或重构数据。

<section class="blog-post-content lb-rtxt"><table id="amazon-polly-audio-table"><tbody><tr><td id="amazon-polly-audio-tab"><p></p></td></tr></tbody></table><p>Starting today, you can attach <a href="https://aws.amazon.com/s3/features/access-points/&quot;&gt;Amazon S3 Access Points</a> to your <a href="https://aws.amazon.com/fsx/openzfs/&quot;&gt;Amazon FSx for OpenZFS</a> file systems to access your file data as if it were in <a href="https://aws.amazon.com/s3/&quot;&gt;Amazon Simple Storage Service (Amazon S3)</a>. With this new capability, your data in FSx for OpenZFS is accessible for use with a broad range of <a href="https://aws.amazon.com/es/products/&quot;&gt;Amazon Web Services</a> (AWS) services and applications for <a href="https://aws.amazon.com/ai/&quot;&gt;artificial intelligence</a>, <a href="https://aws.amazon.com/ai/machine-learning&quot;&gt;machine learning</a> (ML), and <a href="https://aws.amazon.com/big-data/datalakes-and-analytics&quot;&gt;analytics&lt;/a&gt; that work with S3. Your file data continues to reside in your FSx for OpenZFS file system.</p><p>Organizations store hundreds of exabytes of file data on premises and want to move this data to AWS for greater agility, reliability, security, scalability, and reduced costs. Once their file data is in AWS, organizations often want to do even more with it. For example, they want to use their enterprise data to augment <a href="https://aws.amazon.com/ai/generative-ai/&quot;&gt;generative AI</a> applications and build and train machine learning models with the broad spectrum of <a href="https://aws.amazon.com/ai/services/&quot;&gt;AWS generative AI and machine learning services</a>. They also want the flexibility to use their file data with new AWS applications. However, many AWS data analytics services and applications are built to work with data stored in Amazon S3 as data lakes. After migration, they can use tools that work with Amazon S3 as their data source. Previously, this required data pipelines to copy data between Amazon FSx for OpenZFS file systems and Amazon S3 buckets.</p><p>Amazon S3 Access Points attached to FSx for OpenZFS file systems remove data movement and copying requirements by maintaining unified access through both file protocols and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/Type_API_Reference.html&quot;&gt;Amazon S3 API</a> operations. You can read and write file data using S3 object operations including <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html&quot;&gt;GetObject&lt;/a&gt;, <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html&quot;&gt;PutObject&lt;/a&gt;, and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html&quot;&gt;ListObjectsV2&lt;/a&gt;. You can attach hundreds of access points to a file system, with each S3 access point configured with application-specific permissions. These access points support the same granular permissions controls as S3 access points that attach to S3 buckets, including <a href="https://aws.amazon.com/iam/&quot;&gt;AWS Identity and Access Management (IAM)</a> <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-policies.html&quot;&gt;access point policies</a>, <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html&quot;&gt;Block Public Access</a>, and network origin controls such as restricting access to your <a href="https://aws.amazon.com/vpc/&quot;&gt;Virtual Private Cloud (VPC)</a>. Because your data continues to reside in your FSx for OpenZFS file system, you continue to access your data using <a href="https://aws.amazon.com/compare/the-difference-between-nfs-smb/&quot;&gt;Network File System</a> (NFS) and benefit from existing data management capabilities.</p><p>You can use your file data in Amazon FSx for OpenZFS file systems to power generative AI applications with <a href="https://aws.amazon.com/bedrock/&quot;&gt;Amazon Bedrock</a> for <a href="https://aws.amazon.com/what-is/retrieval-augmented-generation/&quot;&gt;Retrieval Augmented Generation (RAG)</a> workflows, train ML models with <a href="https://aws.amazon.com/es/sagemaker/&quot;&gt;Amazon SageMaker</a>, and run analytics or <a href="https://aws.amazon.com/what-is/business-intelligence/&quot;&gt;business intelligence (BI)</a> with <a href="https://aws.amazon.com/athena/&quot;&gt;Amazon Athena</a> and <a href="https://aws.amazon.com/glue/&quot;&gt;AWS Glue</a> as if the data were in S3, using the S3 API. You can also generate insights using open source tools such as <a href="https://spark.apache.org/&quot;&gt;Apache Spark</a> and <a href="https://hive.apache.org/&quot;&gt;Apache Hive</a>, without moving or refactoring your data.</p><p><strong>To get started</strong><br />You can create and attach an S3 Access Point to your Amazon FSx for OpenZFS file system using the <a href="https://console.aws.amazon.com/fsx/&quot;&gt;Amazon FSx console</a>, the <a href="https://aws.amazon.com/cli/&quot;&gt;AWS Command Line Interface (AWS CLI)</a>, or the <a href="https://aws.amazon.com/developer/tools/&quot;&gt;AWS SDK.</a></p><p>To start, you can follow the steps in the <a href="https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/creating-file-systems.html&quot;&gt;Amazon FSx for OpenZFS file system documentation page</a> to create the file system, then, using the Amazon FSx console, go to <strong>Actions</strong> and select <strong>Create S3 access point</strong>. Leave the standard configuration and then create.</p><p><img class="aligncenter wp-image-97367 size-large" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/create_s3_access_point-1024x601.png&quot; alt="" width="1024" height="601" /></p><p>To monitor the creation progress, you can go to the Amazon FSx console.</p><p><img class="aligncenter wp-image-97369 size-large" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-3.46.19%E2%80%AFPM-1024x233.png&quot; alt="" width="1024" height="233" /></p><p>Once available, choose the name of the new S3 access point and review the access point summary. This summary includes an automatically generated alias that works anywhere you would normally use S3 bucket names.</p><p><img class="aligncenter wp-image-97370 size-large" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-3.46.43%E2%80%AFPM-1024x375.png&quot; alt="" width="1024" height="375" /></p><p>Using the bucket-style alias, you can access the FSx data directly through S3 API operations.</p><ul><li>List objects using the ListObjectsV2 API</li></ul><p><img class="aligncenter wp-image-97373 size-large" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-3.58.23%E2%80%AFPM-1024x483.png&quot; alt="" width="1024" height="483" /></p><ul><li>Get files using the GetObject API</li></ul><p><img class="aligncenter size-large wp-image-97372" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-3.56.50%E2%80%AFPM-1024x526.png&quot; alt="" width="1024" height="526" /></p><ul><li>Write data using the PutObject API</li></ul><p><img class="aligncenter size-large wp-image-97373" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-3.58.23%E2%80%AFPM-1024x483.png&quot; alt="" width="1024" height="483" /><img class="aligncenter size-large wp-image-97374" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/20/Screenshot-2025-06-20-at-4.02.02%E2%80%AFPM-1024x337.png&quot; alt="" width="1024" height="337" /></p><p>The data continues to be accessible via NFS.</p><p><img class="aligncenter wp-image-97471 size-large" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/24/Screenshot-2025-06-23-at-6.40.53%E2%80%AFPM-1024x146.png&quot; alt="" width="1024" height="146" /></p><p>Beyond accessing your FSx data through the S3 API, you can work with your data using the broad range of AI, ML, and analytics services that work with data in S3. For example, I built an <a href="https://aws.amazon.com/bedrock/knowledge-bases/&quot;&gt;Amazon Bedrock Knowledge Base</a> using <a href="https://github.com/build-on-aws/rag-postgresql-agent-bedrock/tree/main/02-create-bedrock-knowledge-bases/airline-qa-base/PDF&quot;&gt;PDFs containing airline customer service information</a> from my travel support application <a href="https://github.com/build-on-aws/rag-postgresql-agent-bedrock/&quot;&gt;repository, WhatsApp-Powered RAG Travel Support Agent: Elevating Customer Experience with PostgreSQL Knowledge Retrieval</a>, as the data source.</p><p><img class="aligncenter size-large wp-image-97463" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/24/Screenshot-2025-06-23-at-6.14.50%E2%80%AFPM-1024x503.png&quot; alt="" width="1024" height="503" /></p><p>To create the Amazon Bedrock Knowledge Base, I followed the connection steps in <a href="https://docs.aws.amazon.com/bedrock/latest/userguide/s3-data-source-connector.html&quot;&gt;Connect to Amazon S3 for your knowledge base user guide</a>. I chose Amazon S3 as the data source, entered my S3 access point alias as the S3 source, then configured and created the knowledge base.</p><p><img class="aligncenter size-large wp-image-97439" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/23/Screenshot-2025-06-23-at-12.25.16%E2%80%AFPM-1024x528.png&quot; alt="" width="1024" height="528" /></p><p>Once the knowledge base is synchronized, I can see all documents and the <strong>Document source</strong> as S3.</p><p><img class="aligncenter size-large wp-image-97440" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/23/Screenshot-2025-06-23-at-12.33.27%E2%80%AFPM-1024x235.png&quot; alt="" width="1024" height="235" /></p><p>Finally, I ran queries against the knowledge base and verified that it successfully used the file data from my Amazon FSx for OpenZFS file system to provide contextual answers, demonstrating seamless integration without data movement.</p><p><img class="aligncenter size-large wp-image-97443" src="https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2025/06/23/Screenshot-2025-06-23-at-12.50.46%E2%80%AFPM-1024x668.png&quot; alt="" width="1024" height="668" /></p><p><strong>Things to know</strong><br /><strong>Integration and access control</strong> – Amazon S3 Access Points for Amazon FSx for OpenZFS file systems support standard S3 API operations (such as GetObject, ListObjectsV2, PutObject) through the S3 endpoint, with granular access controls through <a href="https://aws.amazon.com/iam/&quot;&gt;AWS Identity and Access Management (IAM</a>) permissions and file system user authentication. Your S3 Access Point includes an automatically generated access point alias for data access using S3 bucket names, and public access is blocked by default for Amazon FSx resources.</p><p><strong>Data management</strong> – Your data stays in your Amazon FSx for OpenZFS file system while becoming accessible as if it were in Amazon S3, eliminating the need for data movement or copies, with file data remaining accessible through NFS file protocols.</p><p><strong>Performance</strong> – Amazon S3 Access Points for Amazon FSx for OpenZFS file systems deliver first-byte latency in the tens of milliseconds range, consistent with S3 bucket access. Performance scales with your Amazon FSx file system’s provisioned throughput, with maximum throughput determined by your underlying FSx file system configuration.</p><p><strong>Pricing</strong> – You’re billed by Amazon S3 for the requests and data transfer costs through your S3 Access Point, in addition to your standard Amazon FSx charges. Learn more on the <a href="https://aws.amazon.com/fsx/openzfs/pricing/&quot;&gt;Amazon FSx for OpenZFS pricing</a> page.</p><p>You can get started today using the Amazon FSx console, AWS CLI, or AWS SDK to attach Amazon S3 Access Points to your Amazon FSx for OpenZFS file systems. The feature is available in the following <a href="https://aws.amazon.com/about-aws/global-infrastructure/regions_az/&quot;&gt;AWS Regions</a>: US East (N. Virginia, Ohio), US West (Oregon), Europe (Frankfurt, Ireland, Stockholm), and Asia Pacific (Hong Kong, Singapore, Sydney, Tokyo).</p><p>— <a href="https://www.linkedin.com/in/lizfue/&quot;&gt;Eli&lt;/a&gt;&lt;/p&gt;&lt;/section&gt;&lt;aside id="Comments" class="blog-comments"><div data-lb-comp="aws-blog:cosmic-comments" data-env="prod" data-content-id="e12f7d2e-6588-4e1a-bac5-b6e33d730815" data-title="Amazon FSx for OpenZFS now supports Amazon S3 access without any data movement" data-url="https://aws.amazon.com/blogs/aws/amazon-fsx-for-openzfs-now-supports-amazon-s3-access-without-any-data-movement/&quot;&gt;&lt;p data-failed-message="Comments cannot be loaded… Please refresh and try again.">Loading comments…</p></div></aside>