1 - Overview

Service Overview

Object Storage is an object storage that allows users to easily store and use the data they want and can be accessed via URL, making data management very convenient. It enables searching and retrieving large-scale data, and you can leverage features such as encryption and version control. Provides public and private URLs, and the public URL can be accessed over the internet.

Features

  • Using S3 API: Through a Restful API, applications can access it easily and quickly, and because it is compatible with Amazon S3, it can be used effortlessly in applications integrated with Amazon S3.
  • Secure Use: Encryption (SSE‑S3), access control, and Public/Private access features are provided, making it suitable for safely storing user data or backup data for service recovery.
  • Cost Efficiency: Users do not predefine the bucket capacity and are provided storage space with an efficient pricing model that charges only for the amount used.
  • Replication: You can perform replication on a bucket in a different location or the same location. * You can configure multiple replication policies, and if the source bucket becomes unavailable due to a failure or disaster, you can provide service through the replica bucket.

Configuration diagram

Diagram
Figure. Object Storage diagram

Provided Features

Object Storage provides the following features.

  • Storage Management: Provides Object Storage creation, folder creation, folder deletion, file upload, file download, and file deletion functions.
  • Version control: When you use version control, all versions of uploaded files are managed. * You can easily download previous files by viewing the version list.
  • Encryption: If you enable encryption, encryption is provided using the SSE‑S3 method.
  • Access Control: Using access control, you can directly enter the public IPs allowed to access Object Storage, or select resources within the same account (Virtual Server, Bare Metal Server, VPC Endpoint, etc.) that are permitted to access it.
  • Replication: You can perform replication to a bucket in a different location or the same location.
    • Multiple replication policies can be configured
  • Permission Management: It is provided with Private permission by default, and offers Public permission and permission management features.
    • Private permission: Allow file access and download only to users who know the authentication key.
    • Public permission: If accessed via the file’s URL, the file is made public and downloadable to anyone worldwide.
  • Monitoring: You can view monitoring information such as total file count, data size (Bytes), and HTTP method request counts through the Cloud Monitoring service.
  • ServiceWatch Service Integration Provision: You can monitor data through the ServiceWatch service.

Component

authentication key

The authentication key is a required element that must be created in advance for using Object Storage.
The purpose of using the authentication key is as follows.

  • In the Samsung Cloud Platform Console, you need an authentication key to create and access the Object Storage service.
  • The API provided by Object Storage is compatible with Amazon S3, and you can use the same tools that leverage Amazon S3. * At this point, entering an authentication key is required, and it is used as a tool to identify whether the user has the appropriate permissions. For detailed instructions on creating and verifying authentication keys, see How-to guides > 인증키 생성하기.

Bucket

A bucket is the top-level folder, and all folders and files exist under the bucket. When you create an Object Storage service in the Samsung Cloud Platform Console, a bucket is created, and you can subsequently upload folders or files.
The bucket name creation rules are as follows.

  • Bucket names must be at least 3 characters and no more than 63 characters.
  • Bucket names can consist only of lowercase English letters, numbers, periods. and hyphens-.
  • Bucket names must start with a lowercase letter or a digit.
  • Bucket names must not contain two consecutive periods.
  • Bucket names cannot end with a period or hyphen.
  • Bucket names cannot have a period and hyphen adjacent to each other.
  • Bucket names do not use the IP address format (e.g., 192.168.x.x).
  • You cannot use admin as a bucket name.
  • The bucket name must be unique within an Account/Region.
  • The bucket name you previously used will be available in 1 hour.
Example of a valid bucket nameExample of an invalid bucket name
The following bucket names can be used
  • cpexamplebucket1
  • scp-example-bucket-01
  • my-scp-object-storage
The following bucket names cannot be used
  • scp_example_bucket(including underscore)
  • DocExampleBucket(including uppercase)
  • -scp-example-bucket(starts with hyphen)

Folder

Folder (Folder) is used to logically group files.
The folder name generation rules are as follows.

  • Folder names can consist of Korean characters, English letters, numbers, and special characters.
  • The special characters that cannot be entered are as follows.
Special characters that cannot be used in folder names
  • percentage sign%
  • ampersand&
  • question mark?
  • exclamation mark!
  • less-than sign<, greater-than sign>
  • slash/
  • equals sign=
  • plus sign+
  • dollar sign$
  • pound sign#
  • apostrophe
  • caret^
  • vertical bar/pipe\

File

A file (File) refers to data stored in Object Storage and is the same as a regular file.
The filename generation rules are as follows.

  • Filenames can consist of Korean characters, English letters, numbers, and special characters.
  • The special characters that cannot be entered are listed below.
Special characters that cannot be used in file names
  • percentage sign%
  • ampersand&
  • question mark?
  • exclamation mark!
  • less-than sign<, greater-than sign>
  • slash/
  • equals sign=
  • plus sign+
  • dollar sign$
  • pound sign#
  • backslash\
  • apostrophe
  • caret^
  • vertical bar/pipe\

Folder names and file names are separated by a slash/. The following are examples of valid folder names and file names.

Example of mixed use of folder and file names
  • 3scp-example
  • my.happy_photo-2024/20240101.jpg
  • video/2024/video01.wmv
Reference
The length of the path, including the folder name, file name, and separator (/), must be within 1,024 Bytes (UTF-8 encoding).

URL

You can access the Object Storage bucket via URL. By providing both public and private URLs, access is possible not only within the same Samsung Cloud Platform environment but also from external internet environments.
The URL structure is organized as follows.

URL without an Account IDURL that uses the Account ID
https://[대표URL]/[bucket명]/[폴더명]/[파일명]https://[대표URL]/[accountId]:[bucket명]/[폴더명]/[파일명]
CategoryExplanationExample
Main URLRepresentative URL can be found at the Object Storage 상세 정보 확인하기 URL
  • Representative URL includes the region name.
-
accountIdaccount ID
  • When accessing a file that allows Public Access without an authentication key (Access Key, Secret Key), entering the account ID is required; otherwise, you can connect without an account ID.
c2ef8be0481d4094af3c6d046e536d25
bucket nameUser-created bucket namebucketname
Folder nameFolder name where the file is locatedfolder/folder01/folder02/
filenameFile nameFilename02
Table. Object Storage URL components

The full URL information for the file can be found in 파일 정보 조회하기.

Constraints

The limitations of Object Storage are as follows.

CategoryExplanation
Number of creatable Object Storage servicesUp to 1,000 per region
File name length (including path)up to 1,024 Bytes
File upload size
  • Console: up to 3GB per uploaded file
  • Upload API: Single upload up to 5GB, multipart up to 5TB
Number of files in the bucket200 million or fewer
Table. Object Storage constraints
Caution
  • It is recommended to store up to 200 million files per bucket. * If the number exceeds 200 million, performance may degrade sharply, so manage the file count.
  • S3 Backend Filesystem solution (ex. * When using s3fs, objectivefs, etc., we recommend not employing version control. * Performance degradation may occur when using version control.
Reference
  • After changing IAM permissions, performing an Amazon S3 API call may take up to 30 seconds.
  • Object Storage cannot be used for file upload and download when the IAM policy uses a temporary authentication type.
Reference
Access between Object Storage and SCP resources is supported only through the access control on the Object Storage detail screen.
Please note that when IP access control is used in IAM policies, access between Object Storage and SCP resources is not possible.
To use the service, you must set the IAM policy to ‘Applied IP: All IPs, Excluded IP: Not used’.
Reference
  • South Korea (kr-south3) region constraints
    • File upload and download functions via the Samsung Cloud Platform Console are restricted.
    • Use of the S3 API/CLI via a public URL is restricted.
    • However, accessing a Private URL via resources (e.g., Virtual Server) created in the Samsung Cloud Platform Console is possible.
  • Korea South 1 (kr-south1), Korea South 2 (kr-south2) region constraints

Preliminary Service

Object Storage has no prerequisite services.

1.1 - Amazon S3 Usage Guide

Object Storage provides functions such as creating services, viewing lists, retrieving folder lists, creating folders, uploading files, and downloading files through the Samsung Cloud Platform Console. These features are also provided via an API compatible with Amazon S3. Therefore, tools that utilize Amazon S3 can be used in the same way.
Using Amazon S3’s utility tools requires generating and verifying an authentication key. For detailed information, please refer to 인증키 생성하기.

Amazon S3 API

The list of Amazon S3 APIs supported by the Samsung Cloud Platform Object Storage service is as follows.

Reference
For detailed information about the Amazon S3 API, see the Amazon S3 API Guide.
CategoryDetailed description
head-bucketView bucket information
list-bucketsView bucket list
get-bucket-versioningBucket version management lookup
put-bucket-versioningBucket version control modification
get-bucket-encryptionView bucket encryption settings
put-bucket-encryptionApply bucket encryption settings
delete-bucket-encryptionDelete bucket encryption settings
copy-objectCopy, move, and rename objects
put-objectObject creation
get-objectObject download
list-objectsObject List Retrieval
head-objectObject Detail Lookup
get-object-aclObject ACL lookup
delete-objectDelete object
  • If versioning is enabled, deleting a file adds a Delete Marker to the file, and the Delete Marker becomes the latest version
  • To permanently delete a file, specify the version ID for deletion
list-object-versionsRetrieve object version list
delete-objectDelete object version
presignIssue a Presigned URL for PUT object
get-bucket-aclCheck bucket public permissions
create-bucketCreate bucket
delete-bucketDelete bucket
get-bucket-corsCheck bucket CORS (Cross OriginResources) configuration
put-bucket-corsCreate bucket CORS (PUT)
delete-bucket-corsDelete bucket CORS
put-bucket-taggingCreate bucket tagging
get-bucket-taggingBucket tagging lookup
delete-bucket-taggingDelete bucket tagging
put-bucket-websiteCreate bucket website
get-bucket-websiteView bucket website
delete-bucket-websiteDelete bucket website
get-bucket-policy-statusCheck bucket policy status
put-bucket-aclCreate bucket ACL
create-multipart-uploadCreate multipart upload
upload-partPerform multipart upload
complete-multipart-uploadMultipart upload completed
list-multipart-uploadsMultipart upload list
abort-multipart-uploadDelete incomplete Multipart upload
put-object-taggingObject tagging creation
get-object-taggingObject tagging lookup
delete-object-taggingDelete object tagging
list-objects-V2Object Lookup (v2)
put-object-aclCreate object ACL
list-partsParts lookup
put-public-access-blockCreate public access block
get-public-access-blockpublic access block lookup
delete-public-access-blockDelete public access block
put-bucket-lifecycleCreate bucket Lifecycle (only Expiration rule can be used)
get-bucket-lifecycleView bucket lifecycle
delete-bucket-lifecycleDelete bucket lifecycle
put-bucket-policyCreate bucket policy
get-bucket-policyView bucket policy
delete-bucket-policyDelete bucket policy
put-bucket-replicationModify bucket replication policy
get-bucket-replicationView bucket replication policy
delete-bucket-replicationDelete bucket replication policy
Table. Amazon S3 Supported API List

Bucket policy creation example

When using put-bucket-policy, refer to the following example to write the JSON file.

Color mode
{
    "Statement": [
        {
            "Action": "s3:*"
            "Condition": {
                "IpAddress": {
                    "scp:SourceIp": []
                },
                "Resource": {
                    "scp:SourceDBaaSId": [],
                    "scp:SourceResourceId": [],
                    "scp:SourceVpcEndpointId": []
                },
                "Service": {
                    "scp:ServiceAiTraining": "true",
                    "scp:ServiceScf": "false"
                }
            },
            "Effect": "Allow"
            "Principal": "*"
            "Resource": [
                srn:e::1234:kr-west1::objectstorage:bucket/bucketname
                srn:e::1234:kr-west1::objectstorage:bucket/bucketname/*
            ]
        }
    ],
    "Version": "2012-10-17"
}
{
    "Statement": [
        {
            "Action": "s3:*"
            "Condition": {
                "IpAddress": {
                    "scp:SourceIp": []
                },
                "Resource": {
                    "scp:SourceDBaaSId": [],
                    "scp:SourceResourceId": [],
                    "scp:SourceVpcEndpointId": []
                },
                "Service": {
                    "scp:ServiceAiTraining": "true",
                    "scp:ServiceScf": "false"
                }
            },
            "Effect": "Allow"
            "Principal": "*"
            "Resource": [
                srn:e::1234:kr-west1::objectstorage:bucket/bucketname
                srn:e::1234:kr-west1::objectstorage:bucket/bucketname/*
            ]
        }
    ],
    "Version": "2012-10-17"
}
Example of writing a JSON file when using put-bucket-policy

  • Action, Effect, Principal cannot be modified.
  • Enter the Object Storage SRN and Object Storage SRN/* in Resource.
  • Condition’s IpAddress, Resource, Service can be modified as follows.
    • IpAddress: Enter a single IP or CIDR format.
    • Resource: Enter each resource ID.
    • Service: Enter false or true.
    • For detailed information about permissible targets, refer to Setting Access Control.

Bucket replication policy creation example

put-bucket-replication, when using it, refer to the following example to create the JSON file.

Color mode
{
    "Role": "srn:e::1234:::iam:user/abc3d3442"
    "Rules": [
        {
            "ID": "replication-policy-1"
            "Status": "Enabled",
            "Priority": 1,
            "DeleteMarkerReplication": {
                "Status": "Enabled"
            },
            "Filter": {
                "Prefix": ""
            },
            "Destination": {
                "Bucket": "srn:e::1234:kr-west1::objectstorage:bucket/bucketname"
            }
        }
    ]
}
{
    "Role": "srn:e::1234:::iam:user/abc3d3442"
    "Rules": [
        {
            "ID": "replication-policy-1"
            "Status": "Enabled",
            "Priority": 1,
            "DeleteMarkerReplication": {
                "Status": "Enabled"
            },
            "Filter": {
                "Prefix": ""
            },
            "Destination": {
                "Bucket": "srn:e::1234:kr-west1::objectstorage:bucket/bucketname"
            }
        }
    ]
}
Example of writing a JSON file when using put-bucket-replication

  • Role: Enter the IAM SRN.
  • Rules > Destination’s Bucket: Please enter the Bucket SRN.
  • If you do not provide the ID of Rule, it will be automatically generated with a random value.
  • If you change the ID of Rule, a new policy is created and the existing policy is deleted.

Amazon S3 CLI

To use Amazon S3 with the AWS CLI, refer to the Amazon S3 CLI Guide.

Amazon S3 SDK for Java

To use the Amazon S3 SDK for Java, refer to the Amazon S3 SDK Guide.

Reference
For SDK guides and Rest API guides for other languages, see the AWS official website.
Reference
  • Use the region parameter required for using the Amazon S3 SDK as referenced below.
    • In case of Korea West (kr-west1): kr-west
    • In the case of South Korea 1,2,3 (kr-south1,2,3): kr-south
  • The region parameter is for reference only, and the actual region is determined based on the URL.
Reference
  • Korea South 3 (kr-south3) region constraints
    • File upload and download functions are limited through the Samsung Cloud Platform Console.
    • Using the S3 API/CLI with a public URL is restricted.
    • However, accessing a Private URL through resources (such as Virtual Server) created in the Samsung Cloud Platform Console is possible.
  • Korea South 1 (kr-south1), Korea South 2 (kr-south2) region constraints

1.2 - Monitoring Metrics

Cloud Monitoring service termination notice

According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be discontinued.
Accordingly, after the September 2026 release, resource monitoring of the Samsung Cloud Platform via Cloud Monitoring will no longer be possible.

With the new alternative service, you can continuously perform resource monitoring by using ServiceWatch, released in October 2025.
ServiceWatch provides more modern and powerful features, replacing Cloud Monitoring to deliver a smooth monitoring environment.

Detailed information about ServiceWatch is available in the ServiceWatch Overview.

Object Storage Monitoring Metrics

The table below shows the monitoring metrics for Object Storage that can be viewed through Cloud Monitoring. For detailed usage of Cloud Monitoring, refer to the Cloud Monitoring guide.

Performance Item NameExplanationunit
ObjectsNumber of objects stored in the bucketcnt
Bucket UsedAmount of data stored in the bucket (bytes)bytes
Requests [Upload Avg]Upload usage per bucketbytes
Requests [Download Avg]Download usage per bucketbytes
Requests [Total]Total number of HTTP requests executed in the bucketcnt
Requests [Get]Number of HTTP GET requests executed on objects in the bucketcnt
Requests [Head]Number of HTTP HEAD requests executed for objects in the bucketcnt
Requests [List]Number of LIST requests executed for objects in the bucketcnt
Requests [Post]Number of HTTP POST requests executed on objects in the bucketcnt
Requests [Put]Number of HTTP PUT requests executed on objects in the bucketcnt
Requests [Delete]Number of HTTP DELETE requests executed on objects within the bucketcnt
Table. Object Storage Monitoring Metrics

1.3 - ServiceWatch metric

Object Storage sends metrics to ServiceWatch. The metrics provided by basic monitoring are data collected at 5‑minute intervals. In Object Storage, you can view replication metrics for each replication policy in ServiceWatch by enabling replication metrics per bucket.

Refer to How-to guides > Object Storage 복제 지표 활성화하기 for how to enable ServiceWatch replication metrics.

Reference
For how to view metrics in ServiceWatch, refer to the ServiceWatch guide.

Basic Metrics

The following are basic metrics for the Object Storage namespace.

The indicators whose names are displayed in bold below are the indicators selected as key among the basic metrics provided by Object Storage. The key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values displayed in bold are the primary statistics. In the service dashboard, you can view key metrics through primary statistical values.

Performance itemsDetailed descriptionunitmeaningful statistics
object_countNumber of objects stored in the bucketCount
  • average
object_byteAmount of data stored in the bucketBytes
  • average
upload_bytesUpload usage per bucketbytes
  • Total
download_bytesDownload usage per bucketbytes
  • Total
all_requestsTotal number of HTTP requests executed in the bucketcnt
  • Total
get_requestsNumber of HTTP GET requests executed for objects in the bucketcnt
  • Total
head_requestsNumber of HTTP HEAD requests made for objects in the bucketcnt
  • Total
list_requestsNumber of LIST requests executed for objects in the bucketcnt
  • Total
post_requestsNumber of HTTP POST requests executed on objects in the bucketcnt
  • Total
put_requestsNumber of HTTP PUT requests executed on objects in the bucketcnt
  • Total
delete_requestsNumber of HTTP DELETE requests executed on objects within the bucketcnt
  • Total
Table. Object Storage Basic Metrics

Replication metric

The following are replication metrics. Replication metrics are collected per replication policy. Replication metrics are collected only when ServiceWatch replication metrics are enabled for each bucket. The replication metrics are as follows.

Performance itemsDetailed descriptionunitmeaningful statistics
replication_total_countTotal number of objects to be transferredCount
  • maximum
replication_transferred_countNumber of objects transmittedCount
  • total
replication_progress_countNumber of objects being transferredCount
  • maximum
replication_queued_countNumber of objects pending transmissionCount
  • maximum
replication_pending_countNumber of objects with transmission delayCount
  • maximum
replication_failure_countNumber of failed transmission objectsCount
  • Total
replication_total_bytesTotal transmission target sizeBytes
  • maximum
replication_transferred_bytesTransferred data sizeBytes
  • Total
replication_max_processing_timeMaximum processing timeSeconds
  • maximum
replication_avg_processing_timeAverage processing timeSeconds
  • average
Table. Object Storage Replication Metrics

2 - How-to guides

Users can create the service by entering the required Object Storage information and selecting detailed options through the Samsung Cloud Platform Console.

Create authentication key

To create and use the Object Storage service in the Samsung Cloud Platform Console, you need to generate an authentication key in advance.

Generating an authentication key is My menu > My Info. > Authentication Key Management > Authentication Key Creation can be created from . For more details, please refer to IAM > 인증키 생성하기.

Reference
  • The authentication key (Access Key, Secret Key) is used when authenticating Amazon S3 utility tools.
  • The authentication key is used not only for Object Storage but also for authentication in OpenAPI and CLI.
  • Authentication keys can be generated up to a maximum of two.
Caution
  • If the authentication key expires, access to the Object Storage service will be restricted. * Check the authentication key’s expiration period in advance to ensure smooth service usage.
  • If you deactivate the authentication key, access permissions to the Object Storage service will be restricted.

Create Object Storage

You can create and use the Object Storage service from the Samsung Cloud Platform Console.

To create an Object Storage, follow the steps below.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Create Object Storage button. 2. Go to the Create Object Storage page.
  3. Object Storage Creation page, enter the information required to create the service.
    Category
    Required status
    Detailed description
    Bucket nameRequiredBucket name created by the user
    • must start with a lowercase letter or digit and be entered using lowercase letters, digits, hyphen-, period., with a length of 3 to 63 characters
    • A period. cannot appear consecutively two or more times.
    • A period. and hyphen- cannot be adjacent.
    • A period. or hyphen- cannot be at the end.
    • IP address format is not allowed
    • admin name is not allowed
    Table. Object Storage required information input fields
Caution
When creating with the bucket name that is currently used as an Archiving target in the Archive Storage service, the configured Archiving policy will be applied, so be careful.
  1. Summary Verify the detailed information and estimated charges generated in the panel, then click the Create button.
    • When creation is complete, check the created resources on the Object Storage List page.

View Object Storage detailed information

You can view and edit the full list of resources and detailed information for the Object Storage service.
The Object Storage Details page consists of the Details, Folder List, Replication, Original File Copy, and Tags tabs.

Reference
Object Storage resources do not support operation history.
If you need to check the operation history, please use the Logging&Audit service. For more details, see Logging&Auddit > How-to Guides.

To view detailed information about the Object Storage service, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Click the resource to view detailed information on the Object Storage list page. 3. Navigate to the Object Storage Details page.
    • The Object Storage Details page displays status information and additional feature information, and consists of Details, Folder List, Replication, Original File Copy, Tags tabs.
      CategoryDetailed description
      Bucket statusBucket status
      • Active: Available
      Service cancellationButton to cancel the service
      Table. Status information and additional functions

Detailed Information

Object Storage list page allows you to view detailed information of the selected resource and, if needed, modify the information.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • In the Object Storage service, it refers to the bucket SRN
Resource nameResource name
  • In the Object Storage service, it refers to a bucket name
Resource IDUnique resource ID in the service
Bucket nameUser-created bucket name
UsageTotal data usage of the bucket
EncryptionEncryption usage information
  • When encryption is used, the SSE‑S3 encryption key method and the AES256 encryption algorithm are applied
  • Encryption settings can be configured on the Object Storage Details page after creating Object Storage
Version controlVersion Management Usage Information
  • If settings for version management are required, click the Edit button
  • For detailed information about version management, refer to 버전 관리
URLProvide Public and Private URLs for accessing Object Storage via URL
  • Public: Provided for access from external networks
  • Private: Provides an address accessible from resources created within the same account in the Samsung Cloud Platform Console
Access controlAccess control usage status and allowed resource information
  • When access control is enabled, you can restrict access so that only permitted resources can access the bucket
  • Edit button to set whether access control is enabled
  • When access control is used, you need to add resources that are allowed to access
  • Allow Public IP: Edit button to add a single IP/CIDR
  • Allow Service Resources: Edit button to select service resources created in the same Account/Region
  • Cloud Functions Service: Edit button to set service allowance
    • If allowed, all Cloud Functions resources created within the same Account/Region can be used
  • Simple AI Training Service: Edit button to set service allowance
    • If allowed, all Simple AI Training resources created within the same Account/Region can be used
Table. Object Storage detailed information tab items

Folder list

You can view the list of folders and files stored in the bucket through the Folder List tab.

CategoryDetailed description
nameFile name or folder name
SizeFile size
Modification date and timeThe file’s most recent modification timestamp
Additional features > MoreFile and folder management buttons
  • File information: View additional information about the file
    • Permission edit: Set the file’s Public Access permission
    • Version list: View the version list when versioning is enabled
    • Presigned URL generation: Allows file download using a Presigned URL for the configured duration
      • Enter the required usage time (1~720 minutes), then click the Create button to generate
    • Delete: Delete the selected file or folder
      • For folders, only deletion is possible
New folderAdd new folder
File uploadUpload a new file or a file you are working on
DeleteDelete file or folder
  • Enable the Delete button when multiple files are selected
  • Deletion possible when selecting a single or multiple folders
  • Deletion possible when selecting a single or multiple files
  • Deletion possible when selecting multiple files and folders
DownloadFile download
  • Download is possible only when a single file is selected
  • Button disabled when a folder is selected
  • Button disabled when multiple files are selected
  • Button disabled when multiple files and folders are selected
Table. Folder List Tab Item
Reference
  • South Korea Region 3 (kr-south3) constraints
    • File upload and download functions are restricted through the Samsung Cloud Platform Console.
    • Using the S3 API/CLI with a public URL is restricted.
    • However, accessing a Private URL through resources (such as Virtual Server) created in the Samsung Cloud Platform Console is possible.
  • Korea South 1 (kr-south1), Korea South 2 (kr-south2) region constraints
    • To access the public URL, you must allow a separate firewall configuration.
    • The public URL address can be found on the Details tab of the Object Storage detail page. * Please refer to the Detailed Information.
  • If the delete marker is the latest version, it cannot be seen in the folder list.
  • The delete marker version cannot be viewed in the version list.

Replication

Object Storage List page allows you to view and manage the replication information of the selected resource.

CategoryDetailed description
Policy NameEnter the replication policy name
  • , including English letters, numbers, and special characters (-,.), within 255 characters
Clone targetReplication target bucket name
Clone locationReplication location (region)
Target fileList of files to be cloned
PriorityPriority by policy
statusReplication policy status
  • Active: Enabled
  • Inactive: Disabled
AddAdd new replication policy
MorePolicy management possible
  • Disable: Disable the policy (when disabled, it is displayed as enabled)
  • Edit: Allows modification of the replication target, target files, and options of the replication policy
Service Watch replication metricBy enabling the replication metric, you can view monitoring data for Object Storage replication in Service Watch
  • Permission for BucketReplicationMetric in Object Storage is required
  • Additional charges apply when using the replication metric
  • Click the Edit button to change the replication metric usage
Table. Object Storage replication information tab items

Copy original file

On the Object Storage List page, you can view and manage the list of original file copy tasks and information for the selected resources.

CategoryDetailed description
Task nameCopy job name
  • Click to view the status and detailed information of the job
Target bucket nameCopy target bucket name
Target bucket locationDestination bucket location (region)
Start date and timeCopy start date and time
Completion timeCopy completion time
statusTask progress status
  • Pending: Task pending
  • In Progress: Task in progress
  • Completed: Task completed
  • Cancelled: Task cancelled
  • Failed: Task failed due to an error during execution
Cancel operationCancel the selected task
  • Only tasks that are Pending or In Progress can be canceled
  • After canceling the task, you can view the results in the Original File Copy tab
Add taskAdd a new copy task
  • When the button is clicked, you can add by setting Task Name, Target Bucket Location, Target Bucket Name
  • Cannot add if there is an ongoing task
Table. Object Storage original file copy tab item

Tag

On the Object Storage List page, you can view the tag information of the selected resource, and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key and Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, search the existing list of created Keys and Values and select
Table. Object Storage Tag Tab Items

Object Storage Encryption Configuration

You can configure it to encrypt the data stored in the bucket. After configuring bucket encryption, the encryption settings are applied to data uploaded thereafter. When encryption is used, the SSE‑S3 encryption key method and the AES256 encryption algorithm are applied.

Reference
Object Storage bucket encryption can provide two options (SSE-S3/SSE-KMS). SSE‑S3 is server‑side encryption (SSE‑S3) that uses Amazon S3 managed keys. SSE-KMS is server-side encryption (SSE-KMS) that uses Key Management Service (KMS) keys.
In this service, server-side encryption (SSE-S3) using Amazon S3 managed keys is offered as the default method, and server-side encryption (SSE-KMS) using Key Management Service (KMS) keys will be provided later according to the service roadmap.

Information

If there is data saved before bucket encryption was configured, the encryption settings will not be applied.

  • If you re-upload the file, the encryption will be applied.
  • To set encryption for existing data, you need to re‑upload it.

Object Storage To use bucket encryption, follow the steps below.

  1. All Services > Storage > Object Storage menu, click it. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, click the resource (bucket) to use encryption. 3. Go to the Object Storage Details page.
  4. On the Object Storage Details page, verify that Encryption is Not Used.
  5. If Encryption is Unused, click the Edit button. The Encryption Edit Popup opens.
  6. After checking Enable for Encryption, click the Confirm button.

Terminate Object Storage

You can cancel unused Object Storage to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may arise from the service interruption.

Caution
  • Service termination is possible for buckets with no stored data.
  • If a file is being uploaded, the upload will be canceled.
  • Please be careful, as data cannot be recovered after deletion.

To cancel Object Storage, follow the steps below.

  1. All Services > Storage > Object Storage menu, click it. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, select the resource (bucket) to terminate, and click the Terminate Service button.
  4. Please enter the bucket name to confirm cancellation.
  5. If you entered the bucket name correctly, the Confirm button will be enabled. 5. Click the Confirm button.
  6. After termination is complete, check the Object Storage list page to see if the resource has been terminated.

2.1 - Access control

When you configure a bucket with access control enabled, only resources that are granted permission can access the bucket. Enter a public IP, or configure settings to allow access to resources created in the Samsung Cloud Platform Console.

Setting Access Control

You can set the bucket’s access control to enabled.

Object Storage Follow these steps to configure access control settings.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage list page, click the resource (bucket) for which you want to configure access control. 3. Go to the Object Storage Details page.
  4. On the Object Storage Details page, verify that Access Control is Not Used.
  5. If Access control is unused, click the Edit button. 5. Edit Access Control The popup window opens.
  6. After checking the use of access control, click the Confirm button. 6. On the Object Storage Details page, Access Control will be changed to enabled.
    • If you change access control to Enabled, you can set access control for Public IP, service resources, Cloud Functions, Simple AI Training services.
  7. Click the Edit button of the resource or service you want to allow access to, to add resources or set whether to allow them.
    CategoryDetailed description
    Allow public IPRegistered Public IP or CIDR list
    • Example: 192.168.x.x, 192.168.x.x/24
    Allow service resourcesList of service resources created in the same Account/Region
    • Service examples: Virutal Server, GPU Server, Bare Metal Server, Multi-node GPU Cluster, VPC Endpoint, PostgreSQL, MariaDB, MySQL, EPAS, Microsoft SQL Server
    Cloud Functions serviceSet whether to allow Object Storage access for modifying Java Runtime code in the Cloud Functions service
    • Allow when set, the Cloud Fuctions service can load Java Runtime executable files stored in Object Storage
    Simple AI Training ServiceSet whether to allow Object Storage access for retrieving the Training Script in the Simple AI Training service
    • Allow when set, the Simple AI Training service can retrieve the Training Script stored in Object Storage
    Table. Access control items
Reference
  • When access control is set to unused, it is applied as full allow.
  • If you modify the access permission, it may take up to 30 seconds for the changes to be applied.
Reference
Access between Object Storage and Samsung Cloud Platform resources is supported only through the access control on the Object Storage detail screen.
When using IP access control in an IAM policy, note that access between Object Storage and SCP resources is not possible.
To use the service, you must set the IAM policy to Applied IP: All IPs, Excluded IP: Not used.
information

South Korea (kr-south) region constraints

  • The South Korea (kr-south) region does not provide Cloud Funtions service, so the Allow Cloud Functions service feature cannot be used.

Allow public IP access

If the bucket’s access control is set to enabled, you can add a Public IP allowance. To enable Public IP access from Object Storage, follow these steps.

  1. All Services > Storage > Object Storage Click the menu. 1. Navigate to the Service Home page.

  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.

  3. On the Object Storage List page, click the resource (bucket) you want to set access control for. 3. Go to the Object Storage Details page.

  4. Object Storage Details On the page, verify that access control is enabled.

    • If Access Control is Unused, click the Edit button, then in the Access Control popup, change Access Control to Enabled.
    • Access control can control access to IP access allowed, service resource allowed, Cloud Functions service, Simple AI Training service only when enabled.
  5. Click the Edit button in Public IP Allow. 5. Public IP Allow Edit A popup window opens.

  6. Enter the Public IP to allow access, and click the Add button. 6. The entered IP appears in the IP to add list.

    columnRequiredDetailed description
    Allow public IPEssentialEnter a single IP or CIDR format
    • 192.168.x.x (IP format)
    • 192.168.x.x/24 (CIDR format)
    • Up to 150 entries can be entered
    Table. Public IP Allowance Edit Popup Input Items

  7. After checking the IP to add list, press the Confirm button.

  8. On the Object Storage Details page, check the added Public IP in the Access Control > Allow Public IP list.

Reference
  • If you modify the Public IP allowance, it may take up to 30 seconds for the changes to be applied.
  • Up to 150 public IPs are allowed.

Allow access to service resources

If access control on the bucket is set to enabled, you can add a service resource in the allowed service resources. Follow the steps below to allow access to service resources from Object Storage.

  1. All Services > Storage > Object Storage menu, click it. 1. Service Home Go to the page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) for which you want to configure access control. 3. Go to the Object Storage Details page.
  4. Verify that Access Control is enabled on the Object Storage Details page.
    • If Access Control is Unused, click the Edit button, then in the Access Control popup, change Access Control to Enabled.
    • Access control can regulate access to IP access allowed, service resource allowed, Cloud Functions service, and Simple AI Training service only when it is enabled.
  5. Click the Edit button in Service Resource Allowance. 5. Select Service Resources The popup window opens.
  6. Select Service Resources In the popup window, select the service to grant access to, then select the resources to allow.
Information
  • The allowed criteria for each service are as follows.

    • Virtual Server/GPU Server/Bare Metal Server/Multi-node GPU Cluster: Allowed per server
    • VPC Endpoint: Allow per VPC Endpoint
    • PostgreSQL, MariaDB, MySQL, EPAS, Microsoft SQL Server: Allowed per cluster
  • To access Object Storage from the server, you must first perform the following steps.

    1. Check the Object Storage IP on the server using the nslookup command.
    2. After registering a rule through the Security Group or Firewall service, apply it to the server.
      • Target address: Object Storage IP confirmed in step 1
      • Direction: Outbound
      • Service: TCP 80, 443 (port 80 for http / port 443 for https)
Caution

When each service is in the following states, access to service resources can be granted or revoked. If it is not in the following state, the previously authorized service resources may also be affected.

  • Virtual Server/GPU Server: Build, Building, Networking, Scheduling, Block_Device_Mapping, Spawning, Deleting, Error and other states
  • Bare Metal Server/Multi-node GPU Cluster: Running, Starting, Stopping, Stopped
  • VPC Endpoint: Active
  • PostgreSQL/MariaDB/MySQL/EPAS/Microsoft SQL Server: Running
  1. After you finish selecting the resources to allow access, press the Confirm button.
  2. Check the resources you added in the Access Control > Service Resource Allow list on the Object Storage Details page.
Reference
  • If you modify service resource allowances, it may take up to 30 seconds for the changes to be applied.
  • A maximum of 150 service resources is allowed.

Allow access to Cloud Functions service

If access control on the bucket is set to enabled, you can allow the Cloud Functions service to access Object Storage.

To allow access to the Cloud Functions service from Object Storage, follow these steps.

  1. All Services > Storage > Object Storage Click the menu. 1. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) you want to configure access control for. 3. Go to the Object Storage Details page.
  4. Object Storage Details On the page, check that access control is enabled.
    • If Access Control is Unused, click the Edit button, then in the Access Control popup window, change Access Control to Enabled.
    • Access can be controlled for IP access allowed, service resource allowed, Cloud Functions service, and Simple AI Training service only when access control is enabled.
  5. Click the Edit button of the Cloud Functions service. 5. Cloud Functions Service Edit A popup window opens.
  6. After checking Allow, click the Confirm button.
Reference
  • Once the access permission settings for the Cloud Functions service are completed, the Cloud Functions service can retrieve the Java Runtime executable stored in Object Storage.
  • In the Cloud Fuctions service, refer to Java Runtime 코드 변경하기 for how to load the Java Runtime executable.
Reference

South Korea (kr-south) region constraints

  • The South Korea (kr-south) region does not provide the Cloud Functions service, so the Allow Cloud Functions service feature cannot be used.

Simple AI Training Allow Service Access

If access control for the bucket is set to enabled, you can allow the Simple AI Training service to access Object Storage.

If you want to permit access to the Simple AI Training service from Object Storage, follow the steps below.

  1. Click the All Services > Storage > Object Storage menu. 1. Go to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) for which you want to configure access control. 3. Object Storage Details Navigate to the page.
  4. Object Storage Details Verify that access control is enabled on the page.
    • If Access Control is Unused, click the Edit button, then in the Access Control popup, change Access Control to Enabled.
    • When access control is enabled, you can control access to IP access allowed, service resource allowed, Cloud Functions service, and Simple AI Training service.
  5. Click the Edit button of Simple AI Training Service. 5. Simple AI Training Service Edit A popup window opens.
  6. After checking Allow, click the Confirm button.
Reference
  • Once the access permission settings for the Simple AI Training service are completed, you can retrieve the Training Script stored in Object Storage from the Simple AI Training service.
  • In the Simple AI Training service, see Training Job 생성하기 for how to load a Training Script stored in Object Storage.

2.2 - File and Folder Management

If you need to manage the created Object Storage, such as saving files to it or downloading stored files, you can perform tasks on the Object Storage Details and Folder List pages.

Create new folder

A new folder may need to be created to store new data in the bucket.

To create a new folder in Object Storage, follow the steps below.

  1. All Services > Storage > Object Storage Please click the menu. 1. Go to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage list page, click the resource (bucket) where you want to create a new folder. 3. Navigate to the Object Storage Details page.
  4. Folder List Click the tab. 4. Navigate to the Folder List page.
  5. Click the New Folder button. 5. New Folder The popup window opens.
  6. Enter the folder name to use, and click the Confirm button. 6. A popup window notifying the creation of a new folder opens.
Caution
  • Folder names must not contain prohibited special characters. * For more details, refer to 폴더명 생성 규칙.
  • The total path length, including folder name, file name, and delimiter (/), must be within 1,024 Bytes (UTF-8 encoding).
  1. After clicking the Confirm button, check the created folder in the Folder List.

Upload File

Reference
  • Korea South 3 (kr-south3) region constraints
    • File upload and download functions via the Samsung Cloud Platform Console are restricted.
    • Using the S3 API/CLI with a public URL is restricted.
    • However, accessing a Private URL through resources (such as Virtual Server) created in the Samsung Cloud Platform Console is possible.
  • South Korea South 1 (kr-south1), South Korea South 2 (kr-south2) region constraints

You can upload a new file or a file in progress to the bucket. Object Storage Follow the steps below to upload files.

  1. All Services > Storage > Object Storage menu, please click. 1. Go to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, click the resource (bucket) to upload files. 3. Object Storage Details Navigate to the page.
  4. Click the Folder List tab. 4. Navigate to the Folder List page.
  5. Click the File Upload button. 5. File Upload popup window opens.
  6. After clicking the Attach File button, select the file to upload or drag and drop the file to attach into the popup window.
    • Connection test button can be clicked to verify the connection.
Caution
  • You can upload up to three files, each up to 3 GB.
  • The attachment filename must not contain prohibited special characters. * For more details, refer to 파일명 생성 규칙.
  • The attachment filename must not contain two or more consecutive periods.
  • The total path length, including the folder name, file name, and separator (/), must be within 1,024 bytes (based on UTF-8 encoding).
  • If duplicate files exist, you cannot upload.
  1. If you have selected all files, click the Upload button.
  2. If the upload was successful, check the file in the folder list.
Information
  • If the Connection test or file upload fails, check the firewall connection and access control settings. * Access may be restricted in proxy environments.
  • If you do not use the version control feature, you can overwrite a file when an identical file exists in the same location. * We recommend using version control for secure file management. * For detailed information about version management, please refer to 버전 관리 설정하기.

Download File

Reference
  • South Korea Region 3 (kr-south3) constraints
    • File upload and download functions are restricted through the Samsung Cloud Platform Console.
    • Using the S3 API/CLI with a public URL is restricted.
    • However, accessing a Private URL through resources (such as Virtual Server) created in the Samsung Cloud Platform Console is possible.
  • Korea South 1 (kr-south1), Korea South 2 (kr-south2) region constraints

You can download files stored in the bucket. Object Storage Follow the steps below to download the file.

  1. All Services > Storage > Object Storage menu, click it. 1. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) you want to download. 3. Object Storage Details Go to the page.
  4. Click the Folder List tab. 4. Go to the Folder List page.
  5. Click the More > Download button located at the far right of the file to be downloaded. 5. The file download is starting.
  6. Check whether the file download has completed in the browser.

Query File Information

You can retrieve information about files stored in the bucket. Object Storage Follow the steps below to query file information.

  1. All Services > Storage > Object Storage menu, please click. 1. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, click the resource (bucket) that contains the file you want to view information for. 3. Navigate to the Object Storage Details page.
  4. Click the Folder List tab. 4. Go to the Folder List page.
  5. Click the More > File Info button located at the far right of the file you want to view information for. 5. File Information The popup window opens.
  6. File Information View detailed file information in the popup window.
    CategoryDetailed description
    FilenameFile name
    Content typeObject type
    Total sizeFile size
    Modification date and timeThe file’s most recent modification timestamp
    PermissionAllow Public Access
    URLProvide Public and Private addresses to access the file path via URL
    • Public: Provided to be accessible from external internet network
    • Private: Provides an address accessible from resources created in the same Account and region of the Samsung Cloud Platform Console
    Table. File information items

Copy file

You can copy a file stored in a bucket to the same location. To copy a file, follow these steps.

  1. Click the Storage > Object Storage menu. 1. Go to the Object Storage List page.
  2. On the Object Storage List page, click the resource (bucket) to copy the file. 2. Go to the Object Storage Details page.
  3. Click the Folder List tab. 3. Navigate to the Folder List page.
  4. Click the More > Copy File button at the far right of the file to be copied. 4. File Copy a popup window opens.
  5. Enter the File name, then click the Confirm button. 5. A popup window indicating file copy opens.
Caution
  • Only files whose full path—including bucket name, folder name, file name, and delimiter (/)—is 1,024 bytes or less (based on URL encoding) can be copied.
  • In the Samsung Cloud Platform Console, you can only copy files if the file size is 5 GB or less. * If the file size exceeds 5 GB, you can copy it using the S3 API.
  • You can copy within the same bucket and folder.
  • If the bucket does not use versioning, a file with the same name in the folder will be overwritten.
  1. After clicking the Confirm button, check the copied file in the folder list.

Delete files and folders

You can delete files and folders stored in the bucket. Object Storage Follow the steps below to delete files and folders.

Caution
  • When a folder is deleted, all subfolders and files inside it are also deleted.
  • All versions are deleted at once when the file is deleted.
  • Files with object lock (WORM) enabled cannot be deleted.
  1. All Services > Storage > Object Storage menu, click it. 1. Go to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) that contains the file or folder you want to delete. 3. Object Storage Details Go to the page.
  4. Click the Folder List tab. 4. Go to the Folder List page.
  5. Click the More > Delete button located at the far right of the file or folder you want to delete. 5. Delete popup window opens.
    • After selecting multiple files or folders in the left checkbox, you can delete multiple files or folders at once by clicking the Delete button at the top.
  6. In the delete popup, click the Confirm button to complete the deletion.
  7. Folder List Check that files or folders have been deleted from the list.
Reference
Deleting multiple files and folders simultaneously may take a long time.

2.3 - Version Management

By enabling versioning on a bucket, you can track the history of file modifications when uploading files with the same name. You can also view the file’s version list and download previous versions of the file from the list.

Information
With the version control feature, if you accidentally upload a file and overwrite an existing one, you can locate the previous version using the version list.

Setting up version control

You can enable versioning on the bucket.

Caution
When using S3 FileSystem Backend solutions (e.g., s3fs, objectivefs, etc.), it is recommended not to enable versioning. Enabling versioning may cause performance degradation.

Object Storage To set up versioning, follow the steps below.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. On the Object Storage List page, click the resource (bucket) for which you want to configure versioning. You will be taken to the Object Storage Details page.
  4. On the Object Storage Details page, verify whether Versioning is unused.
  5. If Version control is unused, click the Edit button. The Edit version control popup window opens.
  6. After checking version management as Enabled, click the Confirm button. On the Object Storage Details page, Version Management will be changed to Enabled.
reference
  • When you configure version control for the first time, it may take some time for changes to be applied.
  • The time required may vary depending on the size of the bucket. Work performed before the configuration is completed may not have the version applied.

Check version list

From the moment version control is configured, you can view and manage versions of file uploads and modifications.

Information
  • Version control for file uploads and edits is available from the moment version control is configured.
  • All files have a version ID. However, before version control is configured, the version ID is null(-), and files uploaded after version control is set up are assigned a generated version ID.
    • For example, if you upload a file with the same name to the same location, the file name remains the same, but a new version file with a different version ID appears in the version list.

Object Storage To check the version list of a file, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) that contains the file whose version list you want to view. You will be taken to the Object Storage Details page.
  4. Click the Folder List tab. The folder and file list will be displayed.
  5. In the folder and file list, click the More > Version List button located at the far right of the file whose version list you want to view. The Version List popup will open.
    CategoryDetailed description
    filenameFile name
    Modification dateFile modification date and time
    Version IDVersion ID assigned to each individual file
    • Before version control is enabled, the version ID of saved files is displayed as null(-)
    • Files saved after version control is enabled are assigned a unique version ID
    • If a file with the same name is uploaded to the same location, a version ID is generated, a versioned file is added, and it can be viewed in the version list
    EtagObject that identifies files, specific version
    SizeVersion file size
    MoreProvides version file download and delete functions as additional features
    • File Download: Download the file of the selected version
      • To restore a file to a previous version, download the previous version and re‑upload it
      • Delete: Delete the file of the selected version
        • If all version files are deleted, the original file will also be deleted
        • To retain the original file, at least one version must be kept
    DeleteDelete file
    • Enable the button when selecting the checkbox of the version file to delete from the list
    Table. Version list popup items

Download version file

Reference
  • South Korea Region 3 (kr-south3) constraints
    • File upload and download capabilities are limited through the Samsung Cloud Platform Console.
    • Use of the S3 API/CLI via a public URL is restricted.
    • However, private URL access is possible through resources (such as Virtual Server) created in the Samsung Cloud Platform Console.
  • South Korea South 1 (kr-south1), South Korea South 2 (kr-south2) region restrictions
    • To access the public URL, you must allow a separate firewall configuration.
    • You can view the public URL address on the Object Storage details page. Refer to Check Object Storage Details.

You can download the version file. To download the version file of a Object Storage file, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. On the Object Storage List page, click the resource (bucket) that contains the version file to download. You will be taken to the Object Storage Details page.
  4. Click the Folder List tab. The folder and file list will be displayed.
  5. In the folder and file list, click the More > Version List button located at the far right of the file for which you want to download the version file. The Version List popup window will open.
  6. Click the More > File Download button located at the far right of the version file. File download will start.
  7. Verify that the file download has completed in the browser.
Reference
When you download a version file from the version list, the filename includes the version ID.

Delete version file

You can delete a file’s version list.

Caution
  • If you delete all version files, the original file will also be deleted. To avoid deleting the original file, you must keep at least one version.
  • Version files with object lock (WORM) enabled cannot be deleted.

Object Storage To delete a file’s version list, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. Object Storage List: Click the resource (bucket) that contains the versioned file you want to delete. You will be taken to the Object Storage Details page.
  4. Click the Folder List tab. The folder and file list will be displayed.
  5. In the folder and file list, click the More > Version List button located at the far right of the file whose version list you want to delete. The Version List popup window will open.
  6. Click the More > Delete button at the far right of the version file you want to download. Deletion will be completed.

2.4 - Permission Management

Each file is provided with Private permission by default, and each file can be changed to Public permission through permission settings. Private permission allows file access and download only to users who know the Access Key and Secret Key, whereas Public permission allows anyone worldwide to access and download the file via its Public URL, so caution is required.

Check permission management

You can check the file’s permission settings.

Object Storage Follow the steps below to verify file permissions.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. Object Storage List page, click the resource (bucket) that contains the file whose permissions you want to check. You will be taken to the Object Storage Details page.
  4. Click the Folder List tab. Navigate to the Folder List page.
  5. Click the More > File Info button located at the far right of the file you want to view file information for. The File Info popup window will open.
  6. Check the Permissions in the File Information popup window.
    CategoryDetailed description
    PermissionPublic Access allowed or Public Access not allowed
    Table. Permission information description

Allow Public Access

You can set the file’s Public Access permission to Allow. To set the file permissions of Object Storage to allow Public Access, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. Navigate to the Service Home page.
  2. On the Service Home page, click the Object Storage menu. You will be taken to the Object Storage List page.
  3. Object Storage List page: click the resource (bucket) that contains files to allow Public Access. You will be taken to the Object Storage Details page.
  4. Click the Folder List tab. Navigate to the Folder List page.
  5. Click the More > File Info button located at the far right of the file you want to view information for. The File Info popup window will open.
  6. Check that Permission is in Public Access not allowed state, then click the Confirm button.
  7. Click the More > Permission Management button located at the right end of the file. The Edit Permission Management popup window opens.
  8. Edit Permission Management popup window, check Permission Management’s Allow Public Access, and click the Confirm button. You will be taken to the Folder List page.
  9. Click the More > File Info button at the far right of the file. The File Info popup opens.
  10. Check that Permission is Public Access allowed.
guide
When Public Access is enabled, accessing the file’s Public URL makes the file publicly available and downloadable to anyone worldwide.
Please enable file sharing only when it is absolutely necessary.

2.5 - Replication Policy Management

Replication can be performed on buckets in a different location or the same location.
You can configure multiple replication policies, and if the source bucket becomes unavailable due to a failure or disaster, you can provide service through the replica bucket.

information
  • The replication feature operates in a 1:N structure, allowing replication within a region or between regions. * Data transfer charges are added when performing cross-region replication.
  • The replication feature applies only to files uploaded after the replication policy is set.
  • Deleting the versioned file in the source does not delete the files in the replica bucket.
    • Example: When set from Bucket A → Bucket B, even if the version file in Bucket A is deleted, it remains in Bucket B.
  • Bidirectional replication can be configured.
    • Example: When set to Bucket A ↔ Bucket B, files uploaded to Bucket A are replicated to Bucket B, and files uploaded to Bucket B are replicated to Bucket A.
  • The duplicated file will not be duplicated.
    • Example: When configured as Bucket A → Bucket B → Bucket C, files replicated from Bucket A to Bucket B are not replicated from Bucket B to Bucket C.
  • If there are no files in the original folder, that folder will not be duplicated as a copy.
Reference
The kr-south region does not provide inter-region Object Storage replication functionality.

Add replication policy

guide
  • You can configure replication on the created bucket.
  • To add a replication policy, you must set the versioning feature to enabled.
  • For how to set up the version management feature, refer to 버전 관리 설정하기.

To add a replication policy, follow the steps below.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.

  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.

  3. On the Object Storage List page, click the resource to which you want to add a replication policy. 3. Object Storage Details Navigate to the page.

  4. Click the Clone tab.

  5. Click the Add button. 5. Add Replication Policy The popup window opens.

  6. After entering the policy information, click the Confirm button. 6. A popup window notifying the creation of a backup policy opens.

    CategoryRequired statusDetailed description
    Policy nameEssentialEnter the replication policy name
    • using English letters, numbers, and special characters (-._) within 255 characters
    Clone locationRequiredSelect the replication location (region)
    • Other locations can be selected
    Replication bucket nameRequiredSelect the name of the replica bucket
    • If it is the same as the source bucket name or is being used as a replica bucket for another source, adding a replication policy is not allowed
    Target fileEssentialSelect files to replicate
    • All: Replicate all files
    • Prefix: Replicate files that start with the value entered as a prefix
      • Enter within 1,024 bytes based on UTF-8 encoding (same as file length restriction)
      • Special characters(%<>#\`^)
    PriorityRequiredWhen multiple replication policies are set, you can specify the priority
    • cannot be set redundantly with another replication policy that uses the same replication bucket
    Delete marker duplicationSelectionWhether to use delete marker replication
    Table. Add replication policy popup items

  7. Click the Confirm button. 7. A replication policy will be added.

Caution

If an invalid policy exists, a replication policy cannot be added.

  • Example: If a replication bucket has a deleted policy remaining, you cannot add a replication policy.

Modify replication policy

You can modify the replication location, replication bucket name, and target file of the replication policy.

Notice
  • To modify the replication policy, you must set the versioning feature to enabled.
  • For instructions on configuring the version management feature, see 버전 관리 설정하기.

Follow these steps to modify the replication policy.

  1. All Services > Storage > Object Storage Click the menu. 1. Navigate to the Service Home page of Object Storage.

  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.

  3. On the Object Storage List page, click the resource to edit the replication policy. 3. Object Storage Details Go to the page.

  4. Click the Clone tab.

  5. Click the More > Edit button for the policy you want to modify in the replication policy list. 5. Edit Replication Policy The popup window opens.

  6. After modifying the replication policy information, click the Confirm button. 6. A popup window informing you of the replication policy modification opens.

    CategoryWhether requiredDetailed description
    Clone locationRequiredSelect replication location (region)
    • Other locations can be selected
    Replication bucket nameRequiredSelect the name of the replicated bucket
    • If the source or replica bucket does not have versioning enabled, selection is not allowed
    • If it is the same as the source bucket name or is being used as a replica bucket for another source, selection is not allowed
    Target fileRequiredSelect files to replicate
    • All: Replicate all files
    • Prefix: Replicate files that start with the value entered as a prefix
      • Enter within 1,024 bytes based on UTF-8 encoding (same as file length restriction)
      • Special characters(%<>#\`^)
    PriorityRequiredSpecify priority when multiple replication policies are set
    • Cannot be configured redundantly with another replication policy that uses the same replication bucket
    Delete marker duplicationSelectionWhether to use delete marker replication
    Table. Replication policy edit popup items

  7. Click the Confirm button. 7. The replication policy modification is complete.

Caution

If an invalid policy exists, a replication policy cannot be added.

  • Example: If a replication bucket has a deleted policy remaining, you cannot add a replication policy.

Change Replication Policy Status

You can enable or disable the replication policy to change whether it is executed.

To change the replication policy status, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage list page, click the resource to change the replication policy status. 3. Object Storage Details Navigate to the page.
  4. Click the Clone tab.
  5. From the replication policy list, click the More > Enable or More > Disable button of the policy whose status you want to change. 5. A popup window opens to notify of a replication policy status change.
    • Enabled: Performs replication according to the replication policy.
    • Disable: Stop performing replication.
  6. Click the Confirm button. 6. The status of the replication policy changes.

Delete replication policy

You can delete unused replication policies.

Follow these steps to modify the replication policy.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, click the resource to delete the replication policy. 3. Object Storage Details Navigate to the page.
  4. Click the Copy tab.
  5. Click the More > Delete button for the policy you want to edit in the replication policy list. 5. A popup window opens to notify the deletion of the replication policy.
  6. Click the Confirm button. 6. The replication policy is being deleted.
Caution
  • If you change the versioning setting for the source and replica buckets, replication will not operate correctly.
    • If versioning on the source bucket is set to disabled, replication will not be performed. * If you set it to use again, it will replicate uploaded files from the point it was set.
    • If you set versioning of the replica bucket to disabled, replication will occur but versioning is not possible. * If you reset it to Use, version control will be applied from the point you set it.
  • If you delete the source bucket, the configured replication policy will also be deleted.
  • If you delete the replica bucket, the replication policy set on the source bucket remains.
    • If you recreate a replication bucket with the same name as a deleted replication bucket, replication will be performed to that bucket.

Activating ServiceWatch replication metrics

By default, Object Storage is integrated with ServiceWatch and basic monitoring. To link Object Storage replication metrics to ServiceWatch, you must enable ServiceWatch replication metrics. For detailed information about ServiceWatch, see the ServiceWatch 개요.

Caution
  • Basic monitoring is provided at no cost, but enabling replication metrics as a detailed monitoring item incurs additional fees.
  • The ServiceWatch replication metric, once set for a bucket, applies to all replication policies of that bucket.

To enable the ServiceWatch replication metric for Object Storage, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource to enable ServiceWatch replication metrics. 3. Object Storage Details Navigate to the page.
  4. On the Object Storage Details page, click the Replication tab. 4. Go to the Clone tab.
  5. Click the Edit button for ServiceWatch replication metrics. 5. ServiceWatch Replication Metric Edit Navigate to the popup window.
  6. ServiceWatch Replication Metric Modification In the popup window, after selecting Enable, check the guidance text and click the Confirm button.
  7. Check the ServiceWatch replication metric items in the Replication tab.

Disable ServiceWatch replication metrics

Caution
Disabling the replication metric is necessary for cost efficiency. Keep the replication metric enabled only when absolutely necessary, and disable the replication metric otherwise.

To disable the ServiceWatch replication metric for Object Storage, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage list page, click the resource to disable ServiceWatch detailed monitoring. 3. Navigate to the Object Storage Details page.
  4. On the Object Storage Details page, click the Replication tab. 4. Go to the Clone tab.
  5. Click the Edit button for the ServiceWatch replication metric. 5. ServiceWatch Replication Metric Edit Navigate to the popup window.
  6. ServiceWatch replication metric edit In the popup window, after deselecting Enable, review the guidance text and click the Confirm button.
  7. In the Replication tab, check the ServiceWatch replication metric items.

2.6 - Copy original file

Using the original file copy feature, you can copy the original file to the target bucket as is, regardless of replication policy settings.

information
  • The entire file of the original is copied.
  • If the original file copy operation fails, you need to re-execute it by adding a task, and the entire original file will be copied again during re-execution.
  • If there are no files in the source folder, that folder will not be copied to the destination bucket.
  • Copying the original file can only be performed in the Console and cannot be done via a separate API.

Add copy operation

Guide
If a copy operation is already in progress, you cannot add another copy operation.

To copy the original file in Object Storage, follow these steps.

  1. Click the All Services > Storage > Object Storage menu. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. On the Object Storage List page, click the resource to copy the original file. 3. Go to the Object Storage Details page.
  4. In the Copy Original File tab, click the Add Task button. 4. Add original file copy task A popup window opens.
  5. Add Task In the popup window, set the copy task information, then click the Confirm button.
    CategoryRequired statusDetailed description
    Task nameRequiredEnter the name of the copy job
    • Enter using English letters, numbers, and special characters (-,_) within 255 characters
    Target bucket locationSelect the location of the target bucket
    Target bucket nameSelect the name of the target bucket
    Table. Copy task items
    Reference
    • The file operates according to the versioning/encryption status of the replica bucket.
    • Delete Marker is excluded from the copy target.
    • Copying between the same bucket is not allowed.
    1. When a popup notifying the copy opens, click the Confirm button. 6. The original file copy operation is added.

Copy operation and view history

On the Object Storage Details page’s Original File Copy tab, you can view and manage the list of original file copy jobs and their information.

To view the list of source file copy jobs and job history, follow these steps.

  1. All Services > Storage > Object Storage Click the menu. 1. Navigate to the Service Home page of Object Storage.
  2. Service Home 페이지에서 Object Storage 메뉴를 클릭하세요. 2. Go to the Object Storage List page.
  3. Object Storage list On the Object Storage list page, click the resource to view the copy job information. 3. Object Storage Details Navigate to the page.
  4. Click the Original File Copy tab on the Object Storage Details page.
    CategoryDetailed description
    Task nameCopy job name
    • Click to view the status and detailed information of the job
    Target bucket nameCopy target bucket name
    Target bucket locationDestination bucket location (region)
    Start date and timeCopy start date and time
    Completion timeCopy completion time
    statusTask progress status
    • Pending: Task pending
    • In progress: Task in progress
    • Completed: Task completed
    • Cancelled: Task cancelled
    • Failed: Task failed due to an error during execution
    CancelCancel the selected task
    • Pending or In progress tasks can only be canceled
    Add taskNew copy task can be added
    • If there is an ongoing copy task, adding a copy task is not allowed
    Table. Object Storage original file copy tab item

Cancel copy operation

information
Only copy jobs with a status of Pending or In Progress can be canceled.

To cancel the original file copy operation, follow these steps.

  1. All Services > Storage > Object Storage menu, click it. 1. Navigate to the Service Home page of Object Storage.
  2. On the Service Home page, click the Object Storage menu. 2. Go to the Object Storage List page.
  3. Object Storage List page, click the resource for which you want to cancel the copy operation. 3. Object Storage Details Navigate to the page.
  4. Original File Copy tab, click the Cancel Operation button for the copy job you want to cancel.
  5. When a popup indicating that the copy operation has been canceled opens, click the Confirm button.
  6. Original File Copy tab’s original file copy task list, verify whether the job was canceled.

3 - Release Note

Object Storage

2026.07.16
FEATURE Copy original file and integrate Simple AI Training service
  • The replication feature of Object Storage has been improved.
    • You can apply multiple replication policies by setting their priority.
  • The original file copy feature has been added.
    • You can copy the original file to the target bucket as is, regardless of the replication policy settings.
  • The Simple AI Training service has been added to access control.
    • You can load a Training Script stored in Object Storage from the Simple AI Training service.
2026.03.19
FEATURE ServiceWatch service integration provision
  • ServiceWatch service integration offering
    • You can monitor data using the ServiceWatch service.
2025.10.23
FEATURE Cloning, file copy feature added and Cloud Functions service integration
  • The replication feature of Object Storage has been added.
    • You can perform replication to buckets in a different location or the same location, and you can configure multiple replication policies.
  • File copy feature has been added.
    • You can copy the desired file within the same bucket and folder.
  • The Cloud Functions service has been added to access control.
    • You can upload Java Runtime executable files in Cloud Functions.
2025.07.01
FEATURE Add access to server resources and Presigned URL functionality
  • A server resource target product has been added to Object Storage access control.
    • Multi-node GPU Cluster, PostgreSQL, MariaDB, MySQL, EPAS, Microsoft SQL Server
  • Presigned URL functionality has been added.
    • You can download the file using a Presigned URL for the configured duration.
  • You can perform Copyobject on encrypted files.
2025.04.28
FEATURE Add Amazon S3 version
  • Additional versions of the Amazon S3 SDK and Amazon S3 CLI are now available.
2025.02.27
FEATURE Add VPC Endpoint connection feature
  • Object Storage feature change
    • Object Storage can be used from external networks via a VPC Endpoint connection.
  • Samsung Cloud Platform Common Feature Changes
    • Account, IAM, Service Home, tags, and other common CX changes have been reflected.
2024.10.01
NEW Object Storage service official version release
  • We have launched an object storage service that facilitates data storage and retrieval.
2024.07.02
NEW Beta version release
  • We have launched Object Storage, a service that offers space (bucket) for cost-effective storage of large amounts of data.