BucketAccess

Access permissions for a bucket. The role assigned to the access key defines the permissions (read, write, admin) for the associated bucket.

bucket_namestringrequired

Name of the bucket

rolestringrequired

The role defines the permissions for the associated bucket:

• ReadOnly: Read operations such as GetObject, HeadObject and ListObjects, plus creating bucket snapshots and forks.

• ReadWrite: Everything in ReadOnly, plus object writes: PutObject, DeleteObject, CopyObject, object tagging and multipart uploads. Cannot change bucket configuration.

• Editor: Everything in ReadWrite, plus full bucket administration: CORS, lifecycle, tagging, ownership controls, inventory, bucket ACLs (including making the bucket public), custom domains, delete protection, shadow bucket, origin, object notifications, storage tier, and DeleteBucket. Cannot manage bucket shares or create bucket IAM policies.

• Admin: Full access to all buckets in the org, bypasses all permission checks. When used with bucket_name: "*", the access key is treated as a full org admin. The value of bucket_name should always be * when using this role.

  Example:

  { "bucket_name": "*", "role": "Admin" }

Possible values: [ReadOnly, ReadWrite, Editor, Admin]

BucketAccess

{
  "bucket_name": "string",
  "role": "ReadOnly"
}