The page has been translated by Gen AI.

Amazon S3 Usage Guide

Object Storage provides functions such as creating services, viewing lists, retrieving folder lists, creating folders, uploading files, and downloading files through the Samsung Cloud Platform Console. These functions are also available via an API compatible with Amazon S3. Therefore, tools that use Amazon S3 can be used in the same way.
To use Amazon S3’s utility tools, you need to generate and verify an authentication key. For detailed information, see Create Authentication Key.

Amazon S3 API

The list of Amazon S3 APIs supported by the Samsung Cloud Platform Object Storage service is as follows.

Reference
For detailed information about the Amazon S3 API, see the Amazon S3 API Guide.
CategoryDetailed description
head-bucketRetrieve bucket information
list-bucketsList buckets
get-bucket-versioningBucket version management query
put-bucket-versioningBucket version control modification
get-bucket-encryptionRetrieve bucket encryption settings
put-bucket-encryptionApply bucket encryption settings
delete-bucket-encryptionDelete bucket encryption configuration
copy-objectCopy, move, rename objects
put-objectObject creation
get-objectObject download
list-objectsRetrieve object list
head-objectObject detail view
get-object-aclRetrieve Object ACL
delete-objectObject deletion
  • When versioning is enabled, deleting a file adds a Delete Marker to the file, and the Delete Marker becomes the latest version
  • To permanently delete a file, specify the version ID for deletion
list-object-versionsView object version list
delete-objectDelete object version
presignIssue a Presigned URL for PUT object
get-bucket-aclCheck bucket public permissions
create-bucketCreate bucket
delete-bucketDelete bucket
get-bucket-corsCheck bucket CORS (Cross OriginResources) configuration
put-bucket-corsCreate bucket CORS (PUT)
delete-bucket-corsDelete bucket CORS
put-bucket-taggingCreate bucket tagging
get-bucket-taggingBucket tagging query
delete-bucket-taggingDelete bucket tagging
put-bucket-websiteCreate bucket website
get-bucket-websiteView bucket website
delete-bucket-websiteDelete bucket website
get-bucket-policy-statusCheck bucket policy status
put-bucket-aclCreate bucket ACL
create-multipart-uploadCreate multipart upload
upload-partPerform multipart upload
complete-multipart-uploadMultipart upload completed
list-multipart-uploadsMultipart upload list
abort-multipart-uploadDelete incomplete Multipart upload
put-object-taggingObject tagging creation
get-object-taggingObject tagging query
delete-object-taggingDelete object tagging
list-objects-V2Object Lookup (v2)
put-object-aclCreate object ACL
list-partsParts lookup
put-public-access-blockCreate public access block
get-public-access-blockpublic access block lookup
delete-public-access-blockDelete public access block
put-bucket-lifecycleCreate bucket Lifecycle (only Expiration rule can be used)
get-bucket-lifecycleView Bucket Lifecycle
delete-bucket-lifecycleDelete bucket lifecycle
put-bucket-policyCreate bucket policy(* reference)
get-bucket-policyView bucket policy
delete-bucket-policyDelete bucket policy
put-bucket-replicationEdit bucket replication policy
  • When using replication-configuration, verify the following
    • Role: IAM SRN required
    • Rules > Destination Bucket: Bucket SRN required
    • If the Rule ID is not provided, it is automatically generated with a random value
    • Rule priority is not applied, so any value entered has no effect (you can set all to 1)
    • Changing the Rule ID creates a new policy (the existing policy is deleted)
get-bucket-replicationRetrieve bucket replication policy
delete-bucket-replicationDelete bucket replication policy
Table. List of Amazon S3 supported APIs
Example of creating a bucket policy

put-bucket-policy when used, refer to the following example.

{
  "Statement": [
    {
      "Action": "s3:*",
      "Condition": {
        "IpAddress": {
          "scp:SourceIp": []
        },

    "Resource": {
      "scp:SourceDBaaSId": [],
      "scp:SourceResourceId": [],
      "scp:SourceVpcEndpointId": []
    },

"Service": {
  "scp:ServiceScf": "false"
}

},
"Effect": "Allow",
"Principal": "*",
"Resource": [
"Object Storage SRN",
"Object Storage SRN/*"
]
}
],
"Version": "2012-10-17"
}

  • Action, Effect, Principal, Resource cannot be modified.
    • Enter the Object Storage SRN and Object Storage SRN/* in Resource.
  • Condition in IpAddress, Resource, Service can be modified as follows.
    • IpAddress: Enter a single IP or CIDR format.
    • Resource: Enter each resource ID.
    • Service: false or true
    • For detailed information about permissible targets, refer to Setting Access Control.

Amazon S3 CLI

To use Amazon S3 with the AWS CLI, refer to the Amazon S3 CLI Guide.

Amazon S3 SDK for Java

To use the Amazon S3 SDK for Java, please refer to Amazon S3 SDK Guide.

Reference
For SDK guides and Rest API guides for other languages, see the AWS official website.
Reference
  • Refer to the following for the region parameter required to use the Amazon S3 SDK.
    • For Korea West (kr-west1): kr-west
    • When South Korea 1,2,3 (kr-south1,2,3): kr-south
  • The region parameter is for reference only, and the actual region is determined based on the URL.
Reference
  • South Korea Region 3 (kr-south3) constraints
    • File upload and download capabilities are limited through the Samsung Cloud Platform Console.
    • Use of the S3 API/CLI via a public URL is restricted.
    • However, private URL access is possible through resources (such as Virtual Server) created in the Samsung Cloud Platform Console.
  • South Korea South 1 (kr-south1), South Korea South 2 (kr-south2) region restrictions
    • To access the public URL, you must allow a separate firewall configuration.
    • You can view the public URL address on the Object Storage details page. Refer to Check Object Storage Details.
Overview
Monitoring Metrics