Understanding Cloud Storage: S3, Blob, and Buckets
SkillVeris Team
Cloud & Security Team

Object storage stores files as self-contained objects inside buckets, each accessible over HTTP by a unique key.
In this guide, you'll learn:
- Amazon S3, Azure Blob Storage, and Google Cloud Storage are the same concept under different names.
- It is not a file system — objects are flat key-value pairs, not folders, though prefixes simulate directories.
- Object storage is cheap, virtually unlimited, and durable, making it ideal for backups, media, and static assets.
- Storage classes let you trade retrieval speed for cost, moving cold data to cheaper archival tiers.
1What Is Cloud Object Storage?
Cloud object storage is a service that stores files as objects inside containers called buckets, each object retrievable over HTTP using a unique key. Amazon calls it S3, Microsoft calls it Blob Storage, and Google calls it Cloud Storage, but the model is identical: you upload a file, it becomes an object, and you get back a durable, addressable location for it.
Unlike the drive in your laptop, object storage isn't a hierarchy of folders. Each object is a self-contained bundle of the data, a unique key, and metadata. This flat, HTTP-accessible design is what lets it scale to trillions of objects and serve them to anywhere in the world.
2How Object Storage Differs From a File System
Understanding object storage starts with letting go of the folder metaphor. It is a flat key-value store, not a tree of directories, and that changes how you use it.
- Objects are addressed by a full key like photos/2026/beach.jpg — the slashes are part of the name, not real folders.
- You can't edit part of an object in place; you replace the whole object.
- Every object has metadata and can be accessed directly by URL.
- There is no concept of opening a file handle — you GET and PUT whole objects over HTTP.
- Buckets have virtually unlimited capacity, unlike a fixed-size disk.
🔑Key Idea
Object storage looks like folders in the console, but underneath it is completely flat. Those 'folders' are just key prefixes — a naming convention, not a real directory structure.
3When to Use Object Storage
Object storage shines for large, unstructured data that you read and write as whole files. It is not the right tool for everything, so knowing its sweet spot matters.
- Backups and archives that must be durable and cheap.
- Images, video, and other media served to users, often via a CDN.
- Static website assets like HTML, CSS, and JavaScript.
- Data lake storage for analytics and machine learning datasets.
- Logs and any large files an application generates over time.
When Not to Use It
Object storage is poor for data you change constantly in small pieces, or that needs a real file system with locking and random writes — a database or a block/file storage service fits those cases better. Its latency is also higher than a local disk, so it isn't meant for low-latency transactional workloads.
4Storage Classes and Cost
Object storage lets you trade retrieval speed and access frequency for cost through storage classes. Data you rarely touch can live in far cheaper tiers.
- Standard / hot: frequent access, lowest latency, highest storage cost.
- Infrequent access / cool: cheaper storage, small retrieval fee, for data touched occasionally.
- Archive / cold: cheapest storage, retrieval can take minutes to hours, for long-term backups.
- Lifecycle rules: automatically move objects to colder tiers or delete them after a set age.
💡Pro Tip
Set lifecycle rules early. Automatically transitioning logs and backups to archival tiers after 30 or 90 days can cut storage bills dramatically with no manual effort.
5Durability, Versioning, and Access
Object storage is designed to be extremely durable — providers replicate each object across multiple facilities so it survives hardware failures. On top of that, several features protect and control your data.
- Versioning: keep previous versions of an object so an accidental overwrite or delete is recoverable.
- Presigned URLs: grant temporary, time-limited access to a private object without making it public.
- Access via SDK or CLI: aws s3 cp file.txt s3://my-bucket/ uploads a file from the command line.
- Server-side encryption: objects are encrypted at rest, often by default.
- Event notifications: trigger a function when an object is created, enabling automated pipelines.
6The Major Providers Compared
The three leading object storage services share the same model but differ in naming and small details. Knowing the mapping makes moving between clouds painless.
- Amazon S3: objects live in buckets; the reference implementation whose API many tools support.
- Azure Blob Storage: objects are blobs inside containers, grouped under a storage account.
- Google Cloud Storage: objects live in buckets, with a single global namespace for names.
- All three offer versioning, lifecycle rules, encryption at rest, and tiered storage classes.
- S3's API is so widespread that many third-party and self-hosted tools are 'S3-compatible'.
7Common Mistakes to Avoid
Object storage is simple to use but easy to misconfigure. These are the errors that cause data leaks and surprise bills.
- Making a bucket public when only specific files or users should have access — a leading cause of data breaches.
- Storing secrets or sensitive data unencrypted or without access controls.
- Never setting lifecycle rules, so cold data piles up at hot-tier prices.
- Treating object storage like a database and issuing many tiny writes, which is slow and costly.
- Forgetting to enable versioning, leaving no recovery path from accidental deletion.
⚠️Watch Out
Public buckets are behind many of the largest data leaks on record. Keep buckets private by default and use presigned URLs for temporary sharing instead of flipping public access on.
8Key Takeaways
The essentials of cloud object storage come down to a few points.
- Object storage stores files as objects in buckets, accessed over HTTP by key.
- S3, Azure Blob, and Google Cloud Storage are the same concept, differently named.
- It is flat, not a real folder hierarchy — prefixes only simulate directories.
- Use it for backups, media, static assets, and data lakes — not transactional data.
- Keep buckets private, enable versioning and encryption, and use lifecycle rules to control cost.
9Frequently Asked Questions
Q: What is the difference between object storage and a file system? A: Object storage is a flat key-value store where each file is a whole object accessed over HTTP, with no real folders and no partial edits. A file system is a hierarchy of directories that supports random reads and writes and file locking.
Q: Are S3, Azure Blob, and Google Cloud Storage the same thing? A: Yes, conceptually. All three are object storage services where you put files as objects into buckets or containers and retrieve them by key over HTTP. The APIs and names differ, but the model and use cases are the same.
Q: How do I share a private file securely? A: Use a presigned URL, which grants time-limited access to a single object without making the whole bucket public. The link expires after a set period, so it is far safer than turning on public access.
Q: How is cloud storage priced? A: You typically pay for the amount stored, requests made, and data transferred out. Cheaper storage classes lower the per-gigabyte cost for infrequently accessed data in exchange for retrieval fees or slower access, and lifecycle rules automate moving data to save money.
Related Reading
Get The Print Version
Download a PDF of this article for offline reading.
About the Publisher
SkillVeris Team
Cloud & Security Team
Our cloud and security experts break down complex infrastructure topics into practical, beginner-friendly guides.
View all postsRelated Posts
Never miss an update
Get the latest tutorials and guides delivered to your inbox.
No spam. Unsubscribe anytime.