In order to log on to your IONOS S3 Object Storage by means of a GUI, you can use the Object Storage Management Console, which allows you to manage your objects and buckets.
When you log on to the IONOS S3 Object Storage using the DCD, the DCD manages authentication and authorization so that you can access the object storage with just one click.
Every user is the bucket owner of their own IONOS S3 Object Storage and has full access to its content.
It is not possible to use the Object Storage Management Console to access public buckets or content shared with you by users of other S3 systems. We recommend using suitable S3 clients not only for accessing this type of content but also for uploading very large files, as the size of individual files that can be uploaded to the IONOS S3 Object Storage is limited to 5 GB. The Object Storage Management Console can only be opened using the DCD and is available in English only.
You can access the IONOS S3 Object Storage with just one click on the corresponding item in the Menu Bar of the DCD. This opens the Object Storage Management Console, a graphical user interface with which you can manage your S3 objects.
The bucket overview of the Object Storage Management Console is displayed in a new window so that you can continue to work on your VDC in the DCD.
Contract owners and administrators can use this functionality to access content stored in the IONOS S3 Object Storage accounts of users who are no longer active members of their contracts.
Before you delete a user or all of their Object Storage Keys from your account, ensure that the content in their IONOS S3 Object Storage is accessible so that you can continue to use it or delete it by adjusting the access rights accordingly.
The content set to "private" that has not been removed before the user or all of their Object Storage Keys have been deleted is no longer accessible, but will continue to be charged. In this case, contact the IONOS enterprise support team.
1. Open the User Manager. Go to Menu Bar > Management > Users & Groups.
2. Select the required user.
3. In the Object Storage Keys, click Manage.
You are now logged on as the bucket owner of the selected IONOS S3 Object Storage.
Prerequisites: Make sure you have the corresponding privilege to enable IONOS S3 Object Storage. Only contract owners and administrators can enable access.
1. Go to User Manager. Menu Bar > Management > Users & Groups.
2. Create a new Group or open an existing Group.
3. In the Privileges, activate the Use Object Storage check box.
4. In the Members, add users to the group that you wish to authorize for the use of the object storage.
The Object Storage Keys of each user are activated together with the authorization. All members of the authorized group can now access the IONOS S3 Object Storage using the corresponding button in the Menu Bar of the DCD.
Depending on the selected S3 client, you have various options for sharing buckets, objects, or object versions with users of the IONOS S3 Object Storage Object Storage. In addition to roles and predefined profiles, you can share the content of your buckets with selected users by using their IONOS S3 Object Storage ID (so-called "ACL Sharing" or "S3 Sharing"). There are three separate forms of identification:
Contract-user-ID: The contract-user-ID consists of contract number and user ID (contract number|User UUID). In the Object Storage Management Console, this ID can be used for the sharing of objects with selected users of the entire IONOS S3 Object Storage (not limited to users of your own account).
S3 Canonical-user-ID: The Canonical User ID is the ID assigned to a user by the IONOS S3 Object Storage.
Email address: Some S3 clients only require the e-mail address of a registered S3 user for sharing objects as they are capable of converting the e-mail address to the ID required by the object storage.
S3 clients that support the "Display Name" feature will display the e-mail address instead of the ID of a user for better readability.
In order for another user to share the content of their IONOS S3 Object Storage with you, they need your IONOS S3 Object Storage ID, which you will find in the Object Storage Key Manager.
Prerequisites: Make sure you have the corresponding permission to create the Object Storage. Only contract owners and administrators with the Object-Storage-Key can set up the object storage.
Open Menu Bar > Storage > S3 Key Management
The IONOS S3 Object Storage IDs are displayed. You can now copy the required ID and tell the user who wants to share the content of their object storage with you.
If you want to share the content of your IONOS S3 Object Storage with other users, you need their IONOS S3 Object Storage ID.
Prerequisites: Make sure you have the corresponding permission to create the IONOS S3 Object Storage. Only contract owners and administrators can retrieve the IONOS S3 Object Storage IDs of their IONOS account users in the User Manager.
1. Open the Management > Users & Groups.
2. In the Users tab, select the required user.
3. In the Object Storage Keys tab, open the S3 drop-down menu.
The IONOS S3 Object Storage IDs are displayed. You can now copy the required ID and use it for sharing your objects with this user.
Prerequisites: Make sure you are logged on to the IONOS S3 Object Storage using the Object Storage Management Console. Only bucket owners can create a folder.
1. Create a bucket or open the bucket or folder to which objects should be added.
2. Click Upload File.
3. Click + Add files to select all files to be uploaded.
4. (Optional) Activate the Store encrypted check box to encrypt your files on the server and increase the security of your data. Files are automatically decrypted during download.
5. Upload all - click Start Upload, or individual files - click the Start button of the item.
6. The upload status is displayed:
(Optional) To stop the upload, click Cancel. Otherwise, close the dialog box.
The Upload Files modal will open up:
The files are uploaded and displayed in the bucket to which they were added.
Objects (files) of any format can be uploaded to and stored in the IONOS S3 Object Storage. Objects may not exceed 5 GB in size if uploaded using the Object Storage Management Console. Other applications or the IONOS S3 Object Storage API are not subject to this limit.
It is possible to use the Object Storage Management Console to search for files in their object storage if the prefix or full name is known. For technical reasons, it is not possible to search for objects across buckets or folders.
Prerequisites: Make sure you are logged on to the IONOS S3 Object Storage using the Object Storage Management Console.
1. Open the bucket or folder you wish to search.
2. Click on Search by Prefix.
3. In the dialog box, enter the prefix or file name and click Ok.
Following Search By Prefix modal will open up:
Files matching your search criteria should be displayed.
Prerequisites: Make sure you have access to the required object. You must be logged in to the IONOS S3 Object Storage using the Object Storage Management Console.
1. Open the bucket containing the required object.
2. (Optional) If versioning is active, all available versions of an object can be viewed by clicking on Show Versions in the Objects tab.
3. Click on the item to download, or if an object has been shared through a public URL, open the URL and download the object from there.
If no other version of a file has been selected, the latest version will be downloaded.
When versioning is enabled for a bucket, versions are saved for each of its objects. When the user uploads an object with the same name more than once, to the same bucket or folder, all of its versions - current and previous - are stored.
Versioning is not activated by default. Objects that were already uploaded to the object storage before versioning was activated are identified by ID null. If versioning is deactivated, existing object versions are retained.
Versioning of objects increases object storage volume and will be charged accordingly.
Prerequisites: Make sure you have access to the required object. You must be logged in to the IONOS S3 Object Storage using the Object Storage Management Console.
In the Buckets tab, open Properties.
Open the Versioning tab.
Enable versioning: click Enable.
Disable versioning: click Suspend.
Versioning is activated or deactivated for the selected bucket.
To show the versions of an object, click Show Versions in the Objects tab. Object versions can be deleted and managed like normal objects.
If the user no longer wants to keep objects in the IONOS S3 Object Storage, these objects can be deleted. Deleted objects are not physically removed from the object storage, but receive a so-called "delete marker" and then have a size of 0 KB. These markers are deleted at an interval specified by the user or by the system.
There are two ways to delete objects from the IONOS S3 Object Storage using the Object Storage Management Console: manually and automatically.
Prerequisites: Make sure you are the bucket owner. You must be logged in to the IONOS S3 Object Storage using the Object Storage Management Console.
Open the bucket or folder containing the required objects.
To delete individual versions of an object, click Show Versions.
To delete one object or the object version, click Delete at the end of each entry.
4. To delete several objects or object versions, activate their checkboxes.
5. To delete a folder and its contents, activate its checkbox.
Unlike buckets, folders do not have to be empty to be deleted.
6. Click Delete.
7. In the dialog box, confirm the action by clicking Ok.
The selected objects are deleted. Folders containing other objects are deleted with their entire contents without notice.
It is possible to quickly delete the contents of buckets without having to select individual objects or object versions. This is useful if the user wants to delete files, such as log files, regularly or automate the deletion of the contents of a bucket using the Object Storage Management Console. This requires the definition of rules and schedules.
Objects are deleted within several hours. Short-term deletion is not possible in an automated mode.
Prerequisites: Make sure you are the bucket owner. You must be logged in to the IONOS S3 Object Storage using the Object Storage Management Console.
Open Properties in the Buckets tab.
Open Lifecycle Policy tab.
Click + Add new rule.
4. (Optional) In the Rule Name, enter a name that describes the rule (e. g. “delete all”).
5. In the Object Prefix, enter the complete path to the objects. Folders are separated by /.
Example: 2015/ affects all objects contained in the 2015 folder, including other subfolders.
Leave the field empty if to delete all objects in the bucket.
6. Activate the Expire Objects checkbox.
Actions in further input fields
Choose which object versions to delete:
If versioning is activated for a bucket:
Current Version: The last or current version of an object.
Previous Version: All existing versions of an object with the exception of the current version.
If versioning is not activated: Select Current Version.
2. Define when the objects are to be deleted:
Current Version:
Fixed date: In the After Date field, select date and time. Further entries have no influence on this setting. The number of days after creation date: Select Use Creation Date/Time field below. Then define the number of days in the Days After Creation Date field.
The number of days after last access: Select Use Last Access Time field below. Then define the number of days in the Days After Last Access Date/Time field.
If several rules are created for different objects of a bucket, all rules must use the same appointment type (1., 2. or 3.).
Previous Version:
(Optional) To completely remove objects marked as deleted, choose Clean Up Expired Object Delete Markers.
For technical reasons, it is not possible to automatically delete the current version of an object and remove all its deleted previous versions at the same time. Deleted object versions are marked with a "delete marker" and are recognizable by a corresponding icon.
It is not possible to apply this clean-up if a rule has been defined for automatically deleting the current object versions. The checkbox cannot be activated in this case, and the message "You cannot enable clean up expired object delete markers if you enable Expiration" displays.
(Optional) To remove incomplete parts of a multi-part upload, choose Clean Up Incomplete Multipart Uploads.
Confirm entries by clicking Save.
The rule is saved and the selected objects are deleted at the defined time.
When naming and folders, the name must:
be unique throughout the entire IONOS S3 Object Storage
consist of 3 to 63 digits
start with a letter or a number
consist of lower case letters (a-z) and numbers (0-9)
The use of hyphens (-), periods (.), and underscores (_) is conditional. The name must not:
end with a period, hyphen, or underscore.
consist of multiple periods in a row (...)
contain hyphens next to periods.
have the format of an IPv4 address (e. g. 192.168.1.4).
contain underscores if the bucket is to be used for auto-tiering later.
Prerequisites: Make sure you are logged on to the IONOS S3 Object Storage using the Object Storage Management Console.
1. In the Buckets tab, click + ADD NEW BUCKET.
2. In Bucket Name, enter a name that adheres to the naming convention for buckets and objects.
3. Leave the default values set for Region.
4. Click Create.
The bucket is created unless a bucket with the same name already exists in the IONOS S3 Object Storage.
Storage Policy and Region cannot be changed after a bucket has been created.
Prerequisites: Make sure you are logged on to the IONOS S3 Object Storage using the Object Storage Management Console. Only bucket owners can create a folder.
1. Open the bucket to which to add a folder. The Objects tab opens.
2. Click + CREATE FOLDER. A popup window will open.
3. In the Folder Name field, enter a name that adheres to the naming convention.
4. Click OK to save the settings.
The folder is created and displayed in the bucket to which it belongs. Please keep in mind that this folder cannot be renamed. Objects that have already been uploaded cannot be moved to a different folder.
Buckets must be empty before they can be deleted.
Prerequisites: Make sure that the bucket does not contain any objects. You must be logged in to the IONOS S3 Object Storage using the Object Storage Management Console and be the bucket owner.
Open the Buckets tab.
Click Delete next to the selected item.
In the dialog, confirm the action by clicking Ok.
The bucket is deleted and cannot be restored.
Logging on requires a key () as part of the authentication process. This Object Storage Key consists of key and secret.
For each user, an Object Storage Key is generated automatically, which is activated when the user is granted permission to use the IONOS S3 Object Storage.
A maximum of five Object Storage Keys may be created per user.
Generate object storage keys: A bucket owner can have multiple Object Storage Keys, which can be given to other users or automated scripts. Users using such an additional Object Storage Key to access the automatically inherit credentials and access rights of the bucket owner. This can be useful for allowing users automated (scripted) or temporary access to object storage. When the automated or temporary use is over, the additional Object Storage Key can be deactivated.
Activate/deactivate: Deactivating an Object Storage Key will block access to the IONOS S3 Object Storage. A deactivated key can be reactivated and access restored.
Delete: If a key is no longer needed or if it should no longer be possible to gain access to the IONOS S3 Object Storage with this key, it can be deleted. This cannot be undone.
Before you delete a user or all of their Object Storage Keys from your account, please ensure that the content in their IONOS S3 Object Storage is accessible so that you can continue to use it or delete it by adjusting the access rights accordingly.
The content set to "private" that has not been removed before the user or all of their Object Storage Keys have been deleted is no longer accessible, but will continue to be charged. In this case, please contact the
Prerequisites: Make sure you have the corresponding permission to create the Object Storage. Only contract owners and administrators with the Object-Storage-Key can set up the object storage.
Only contract owners and administrators can manage the Object Storage Keys of other users.
1. Go to Menu > Management > Users & Groups
2. Select a User and click the Object Storage Keys tab on the right.
3. Choose + Generate Key
4. Confirm the action by clicking OK.
An active Object Storage Key is generated, which can be used to connect to the IONOS S3 Object Storage of the user.
You can copy Key and Secret from the respective fields to sign in to other object storage applications.
Select the required key.
In the Object Storage Keys, click Delete.
The selected key is deleted and can no longer be used to connect to the IONOS S3 Object Storage. The key cannot be restored.
Select the required Object Storage Key.
Activate: Select the Active check box.
Deactivate: Deactivate the Active check box.
Click Save.
The key and with it access to the IONOS S3 Object Storage is activated or deactivated. If there is no active Object Storage Key, the Object Storage menu item is not displayed in the Menu Bar of the DCD.
Access the DCD Console and enable user access.
Generate Object Storage Keys to login securely.
Retrieving user IDs for sharing purposes.
Learn the basics of IONOS S3 Object Storage Buckets and Folders.
Work with Objects inside of IONOS S3 Object Storage Buckets.
Discover different ways to share Objects publicly.
Record access to buckets and save log files.
You can record all accesses to a bucket in a log file that conforms to IONOS S3 Object Storage bucket logging from the time logging is activated. If the bucket is accessed, this log file is created in a bucket of your choice at an interval specified by the system. Please note that logging is not activated by default.
Note: Logging into a bucket is not activated by default.
You can use the same bucket, but this is not recommended. Because additional logs are created for the logs written to the bucket, this makes it difficult to find the logs you need.
Prerequisites: Make sure you have the appropriate permissions. Only contract owners, administrators, or users with access rights to the data center can log in to the bucket. Other user types have read-only access and can't provision changes.
1. Access individual bucket properties by going to Buckets > Name > Properties.
There are two ways to assign write access. The first method is via Bucket Permissions.
2. From the Bucket Permissions tab, check off the Writable box under Log Delivery Group.
3. Save your preferences.
Alternatively, you may set write access from the Bucket Canned ACL tab.
4. From the Bucket Canned ACL tab, select Log Delivery Write from the SET CANNED ACL dropdown.
5. Save your preferences.
Prerequisites: Write access for Log Delivery needs to be enabled on the target bucket. You have to be the owner of the target bucket.
1. Under a Bucket's properties, open the Logging tab.
2. To activate logging, click the Enable Logging check box.
3. In the Destination Bucket field, enter the name of the buckets in which to save the log files. Source and target bucket may be identical.
Note: The destination bucket for logs can only be in the same region, and you must be the owner of the destination bucket.
Optional: In the Target Prefix field, enter the prefix for log files so that you can sort them more easily later (e. g. log_). If you enter no prefix, the log file name is derived from its time stamp alone.
The prefix can also be used as a folder, such as logs/log_.
Once logging is enabled, you can use the Bucket Lifecycle feature. This feature adjusts the processing of logs as they become outdated.
1. To deactivate logging, clear the Enable Logging check box.
2. Save your settings by clicking Save.
3. Log files are generated and saved to the target bucket in the format (<prefix>)<time stamp>.
4. You can modify or deactivate logging at any time with no effect on existing log files. Log files are handled like any other object in the IONOS S3 Object Storage.
You can use access rights and predefined profiles (Canned ACLs) to control access to and objects in your for different user groups. Users can then use a suitable S3 client to access the objects whose authorization profiles they match.
By default, buckets and objects are private, i.e. only the bucket owner can access them.
The content of a bucket is always accessible (as a list) as soon as the bucket is public, even if the objects it contains are private and can therefore neither be displayed nor downloaded.
Prerequisites: When working with Objects, make sure you are inside of the with full control of the Bucket. You should be able to set the Bucket to ACP Writable.
1. Click the Properties tab of the object you wish to share.
2. To grant access in the Object Canned ACL tab, select one of the ACL profiles.
Example: Public Read means the item is available to everyone but cannot be modified.
3. Confirm your entries by clicking on Save.
The item is available according to your settings.
If you want to share your buckets and their content with users of the IONOS S3 Object Storage outside your own contract, you can use ACL sharing. All you need is the user’s contract user id in the format contract number|User UUID.
1. Open the properties of the bucket that you would like to share by clicking on Properties in the respective tab.
2. In the Bucket Permissions tab, click + ADD NEW.
3. In the Grantee column, enter the contract user id of the user.
If you want to share the bucket or object with all users of a particular contract, you only have to enter the contract number as follows: contract number| ( e. g. 1701441|).
Please note: IDs entered this way are not validated. An invalid ID has no effect.
4. Set the permission for the user by selecting the appropriate check box.
5. Confirm your entries by clicking on Save.
The item is shared according to your settings. If you ever wish to remove access, return to this view and click Delete.
URLs can only be generated for objects owned by the bucket owner.
If you want to share content with users who do not have access to an S3 client application, you can share an object by making it publicly available through a URL. This URL can be generated by the Object Storage Management Console and can optionally be provided as an SSL-encrypted URL (using HTTPS).
Objects shared this way are always visible to everyone as they are public - regardless of their access permissions. You can, however, limit the number of downloads and the period of availability.
1. Open the Properties tab of the object that you would like to share.
2. Open the Public URL Access tab.
3. Check the Enable Public URL Access box. Further input fields are opened:
Maximum Downloads: specifies the maximum number of downloads for this URL. Enter -1 for unlimited access.
Current Downloads: shows the current number of downloads. To update this field, please reload the dialog in the Object Storage Management Console by means of a so-called "hard refresh".
Secure URL: (Optional) Activate the check box to generate an SSL-encrypted URL and increase the security of the file.
Expiration Date: (Required) Change the time at which the URL stops being valid. After expiration or change of the validity or the number of downloads, a new URL is generated and the link is no longer accessible. An error message will appear instead.
4. To generate the URL, click Apply.
The URL is generated and displayed. You can now copy the URL and share it with others or send it by email using the MAIL TO button. For the email to be sent out, your browser needs to be configured so that it can open your default web-based email program.
The file can be accessed using a browser. No S3 application is required.
If you want to share content with users who do not have access to an S3 client application, you can configure a bucket as a website, which can be accessed using a standard web browser (instead of an S3 web client). This website needs to be static; it cannot deliver personalised content or run server-side scripts. This feature is useful for sharing a collection of objects.
Shared objects contained in this bucket are available as follows: http://<Bucketname>.<S3WebsiteEndpoint>/<Objectname>. <Objectname> may also contain folders.
A website configured with this feature can be accessed via HTTP and HTTPS (SSL).
The bucket mywebsite is used as a container for your website. “Static Website Hosting” has been enabled in its properties. It contains the start page (index.htm) and a page that is displayed on error (404.htm).
The bucket contains the img folder in which images are stored. Among others, it contains the file test0.png:
Files can be linked with each other through relative paths. If you want to link from index.htm at the bucket (root) level to test0.png, which is located in the img folder of the mywebsite bucket, you can refer to it with href=”img/test0.png”.
1. Create a bucket. Please mind the naming rules that apply! The bucket name is part of the URL of the static website.
2. Upload the website content to the bucket, which also includes the start page (usually index.htm) and an error page (usually 404.htm).
3. In the Properties of the bucket, open the Static Website Hosting tab.
4. Activate the Enable Website Hosting check box.
5. In the dialog box that appears, confirm that you want all objects to be public by clicking OK.
If you upload other objects to the bucket, please make sure that they are set to Public Read, otherwise, they are not accessible to others.
Index Document: Enter the start page that you uploaded (e.g. index.htm).
Error Document (Optional): Enter the error page that you uploaded (e. g. 404.htm).
6. Save your entries by clicking Save.
A bucket-hosted website can be accessed as follows: ''http://<Bucketname>.<S3WebsiteEndpoint>/<IndexDocument>'' (e. g. ).
The file is available at:
The website is now available at http://<Bucketname>.<S3WebsiteEndpoint>/<IndexDocument> (e.g. )
