Using the S3 Web Console, you can search for objects in buckets if the prefix or full name is known. For technical reasons, it is not possible to search for objects across buckets or folders.
To search for an object in the web console, follow these steps:
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. From the Buckets list, choose the bucket in which you want to search for objects.
3. In the Search by Prefix dialog box, enter the prefix or file name to search for.
Result: The objects matching your search criteria are displayed.
If you have enabled versioning for your S3 bucket, you have the flexibility to download non-current versions of objects. Versioning is not enabled by default. Objects that were already uploaded to the object storage before versioning was activated are identified by ID null. If versioning is deactivated, existing object versions are retained. For more information, see Versioning.
If you no longer want to keep the objects in the IONOS S3 Object Storage, these objects can be deleted. Deleted objects are not physically removed from the Object Storage, but receive a 'delete marker' and then have a size of 0 KB. These markers are deleted at an interval specified by the user or by the system.
There are two ways to delete objects from the IONOS S3 Object Storage using the S3 Web Console - manually and automatically.
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. From the Buckets list, choose the bucket or folder from which you want to delete an object.
3. Choose the object to delete and click on the respective object's action menu (three dots).
4. Click Delete.
5. Confirm the deletion of the object by choosing Delete.
Result: The object is successfully deleted from the bucket.
You can also permanently delete non-current versions of objects, delete objects with expired delete markers, and delete incomplete multipart uploads.
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. From the Buckets list, choose the bucket from which you want to delete a folder.
3. Choose the folder to delete and click on the respective folder's action menu (three dots).
4. Click Delete.
5. Confirm the deletion of the folder by choosing Delete.
Result: The folder is successfully deleted from the bucket.
You can delete multiple objects and folders in a bucket at a time by following these steps:
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. From the Buckets list, choose the bucket from which you want to delete objects and folders.
3. Select the checkboxes against the names of the objects and folders to be deleted.
4. (Optional) To delete all objects and folders, select the checkbox against the title NAME which lists all the objects and folder names.
5. Click Delete selected objects.
6. Confirm the deletion of selected objects and folders by choosing Delete.
Result: The objects and folders selected for deletion are successfully deleted from the bucket.
To manage your buckets, objects, and keys in your Object Storage, refer to the following How-Tos that guide you with step-by-step instructions to complete the tasks.
By default, objects in the IONOS S3 Object Storage are private and only the bucket owner has permission to access them. Only the bucket owner can generate a pre-signed URL for objects and grant time-bound permission to other users to access these objects. It is a secure and user-friendly way to share private objects stored in your Object Storage with other users.
This way, the objects are made publically available for users with the object's pre-signed URL; however, you could limit the period of access to the object.
Pre-signed URLs are ideal for providing temporary access to a specific object without needing to change the object's permissions or share your credentials with other users.
Allows other users to upload objects directly to your S3 bucket without needing to provide them with access and secret keys.
You can generate a pre-signed URL to share objects through one of the following methods:
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. From the Buckets list, choose the bucket from which you want to share the objects. The list of objects in the bucket is listed.
3. Select the object to share and click Generate Pre-Signed URL.
4. Enter the expiration time for the URL and choose whether the specified time refers to seconds, minutes, hours, or days.
5. Click Generate.
6. Copy the generated pre-signed URL and share it with users that require this object access.
Result: The pre-signed URL for the selected object is generated successfully and copied to the clipboard. The URL is valid for the period defined during URL generation.
Prerequisites:
Set up the AWS CLI by following the installation instructions.
Make sure to consider the supported Endpoints.
Generate a pre-signed URL for my-object.txt`` in the my-bucket` bucket which will expire in 3600 seconds:
The creation of pre-signed URLs does not involve a dedicated API by design. These URLs are generated locally via a signing algorithm using your credentials without relying on the S3 API. To create these URLs, use the appropriate SDK for your programming language.
IONOS S3 Object Storage is S3-compatible, allowing seamless integration with any SDK supporting the S3 protocol for tasks like generating pre-signed URLs. For generating pre-signed URLs using SDKs, see the following AWS methods:
Python, Go, Java 2.x., JavaScript 2.x., JavaScript v3, and PHP Version 3.
Use the search, versioning, prefixes, and dleete options to manage objects and folders effectively. |
Generate Object Storage keys to login securely, and activate or deactivate to keys to manage access to buckets and objects. |
Retrieve Canonical user-ID for sharing buckets, objects, and object versions with other S3 users. |
Generate pre-signed URL to time-bound object share access with other S3 users. |
Depending on the selected S3 client, you have various options for sharing buckets, objects, or object versions with users of the Object Storage. In addition to roles and predefined profiles, you can share the content of your buckets with selected users by using their IONOS S3 Object Storage ID known as Canonical user ID using the Access Control List and Bucket Policies.
You can also share buckets and objects with other users by using their user IDs. User identification is possible through the Canonical user ID, and Email address. For more information, see S3 Credentials.
Retrieving the Canonical user ID includes the following:
For another user to share the content of their IONOS S3 Object Storage with you, they need your IONOS S3 Object Storage ID, which you will find in the Object Storage Key Manager.
Prerequisite: Make sure you have the corresponding permission to create the Object Storage. Only contract owners and administrators with the Object-Storage-Key can set up the object storage.
1. In the DCD, go to Menu > Storage and click the IONOS S3 Object Storage.
2. Select the Key management tab.
3. In the S3 Credentials, click Copy against the Canonical User ID. You can also copy the required user IDs and use them to get access to other buckets and objects.
Result: Your Canonical user ID is successfully copied to the clipboard.
The grantee is the user under the same contract at IONOS, but it also could be the user under another contract. You need the user's Canonical user ID to share access to the bucket or object using ACL. For more information, see Grant access.
To retrieve the Canonical user ID of a grantee, follow these steps:
Prerequisites:
Make sure the grantee Object Storage account already exists. If not, then, begin with creating the grantee by following the steps in Retrieve the Canonical User ID of a new user.
Make sure you have the corresponding permission to create the IONOS S3 Object Storage. Only contract owners and administrators can retrieve the IONOS S3 Object Storage IDs of their IONOS account users.
1. In the DCD, go to Menu > Management > Users & Groups.
2. Select the user from the Users list and click the Object Storage Keys tab.
3. Click the S3 link and copy the user's S3 Canonical User ID. This ID is used to share access to this user. You can also copy the required other user IDs and use them for sharing your objects with this user.
Result: The Canonical user ID for the grantee is successfully retrieved.
If the grantee’s user account does not already exist or if you want to assign a different set of permissions, then, the root user of the contract needs to create the user account and then retrieve the Canonical user ID to grant access to buckets and objects.
1. In the DCD, go to Menu > Management > Users & Groups.
2. In the Users tab, click + Create.
3. Enter the user details such as First Name, Last Name, Email, Password, and click Create.
Info: The new user is created and shown in the Users list and their S3 access keys are automatically created but are disabled. When the user is added to a group with Use Object Storage privilege enabled, the access key is set to active.
4. In the Users list, select the user and click the Object Storage Keys tab.
5. Select the checkbox Active to activate the Key.
6. Click the S3 link and copy the user's S3 Canonical User ID. This ID is used to share access to this user. You can also copy the required other user IDs and use them for sharing your objects with this user.
Result: The new user is successfully created and the Canonical user ID is retrieved. You can now share access to the bucket with the new user using Share access.
For each user, an Object Storage Key is generated automatically, which is activated when the user is granted permission to use the IONOS S3 Object Storage.
You can manage the keys via the Web console or IONOS Cloud API.
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. In the Key management tab, go to the Access keys section that lists all keys present in your account.
3. Select the key and toggle on or off the Key active option to activate or deactivate the key.
Result: The access key status is set as active when toggled on and deactivated when toggled off.
Warning: When you have only one access key, disabling this key will lose your access to all existing buckets. However, the objects remain and usage costs continue to apply. To avoid losing access to your S3 buckets, you need to have at least one active access key.
Prerequisite: Only contract owners and administrators can set up the object storage and manage keys for other users. Make sure you have the corresponding permission.
1. In the DCD, go to Menu > Management > Users & Groups.
2. Select the user from the Users list and click the Object Storage Keys tab.
3. Select the checkbox Active against the Key you want to set as active. Uncheck the checkbox if you want to deactivate the key.
Result: The access key status is successfully updated.
1. In the DCD, go to Menu > Storage > IONOS S3 Object Storage.
2. In the Key management tab, go to the Access keys section that lists all keys present in your account.
3. Select the key to be deleted and click Delete.
Warning: Any access associated with this key will be revoked and cannot be restored.
4. To confirm the deletion of the key, click Delete.
Result: The access key is successfully deleted.
Important: When you have only one access key with existing buckets, you cannot delete this key. You can either choose to Deactivate a key or create a new access key before deleting the selected key. You can also delete existing buckets and continue with deleting the last access key.
Prerequisite: Only contract owners and administrators can delete keys for other users. Make sure you have the corresponding permission.
1. In the DCD, go to Menu > Management > Users & Groups.
2. Select the user from the Users list and click the Object Storage Keys tab.
3. Select the key to be deleted from the list of keys and click Delete.
Warning: Any access associated with this key will be revoked and cannot be restored.
4. To confirm the deletion of the key, click OK.
Result: The access key is successfully deleted.
Using the User S3 keys set of API calls, you can list, create, retrieve, modify, and delete keys.
