Object storage

S3-compatible buckets with scoped keys, an object browser, and presigned URLs.

Object storage gives you S3-compatible buckets with per-tenant access keys and quotas. It runs on SeaweedFS and works with any S3 client.

Create a bucket#

  1. 1

    New bucket

    On the Object storage page, click “New bucket” and give it a name.

  2. 2

    Reveal access keys

    Click “Reveal access keys” (audited) to get the endpoint, bucket, access key ID, secret access key, and region. Copy them now — treat the secret like a password.

Endpoint           https://…
Bucket             my-bucket
Access key ID      …
Secret access key  …
Region             us-east-1
The values from the reveal dialog — plug them into any S3 client (aws-sdk, boto3, minio, s3cmd…). No AWS account needed.

Public or private#

Buckets are private by default. Toggle “Public access” to let anyone read objects over HTTP; Gheima then shows the public base URL. Rotate keys any time with “Rotate keys”.

Object browser#

Open a bucket to browse its objects. You can upload files, create folders (key prefixes), open or download objects, rename, and delete — all from the dashboard.

Presigned URLs#

Click “Presigned URL” to generate a temporary link that downloads (GET) or uploads (PUT) a specific object without credentials. Choose an expiry of 15 minutes, 1 hour, or 24 hours.

Good to know#

  • Presigned URLs default to 1 hour and can last up to 7 days.
  • Folders are just key prefixes — deleting the last object removes the “folder”.
  • A public bucket serves objects at its public base URL over HTTP.
  • Stored bytes count against your plan’s storage quota.

✦ Your app reads and writes files over the standard S3 API, and can hand out short-lived URLs to clients.