Skip to content

Supported Operations on Buckets and Objects

The S3 API supports Signature version 2 and Signature version 4 for authenticating S3 API requests.

Authenticated requests must be signed using your access key ID and secret access key.

The Object Storage supports two authentication methods: the HTTP Authorization header and using query parameters.

The HTTP Authorization header is used by all S3 API operations except Anonymous requests where permitted by the bucket policy. The Authorization header contains all of the required signing information to authenticate a request.

You can use query parameters to add authentication information to a URL. This is known as presigning the URL, which can be used to grant temporary access to specific resources. Users with the presigned URL do not need to know the secret access key in order to access the resource, which enables you to provide third-party restricted access to a resource. A presigned URL can only be used for GET Operations. Currently it is not supported to PUT an object to a presigned URL. For this case please use Bucket Policies to allow public write access.