What a key may do
Each access key has rules. A rule picks a bucket (or every bucket), a folder (empty means the whole bucket) and the actions allowed there: Read, List, Write and Delete. The key can do nothing its rules do not allow.
- Manage buckets also lets the key create and delete buckets and change public access through the API.
- Expires: the key stops working at the end of the day you pick. Leave it empty for a key that does not expire.
- Click Edit permissions to change a key’s rules at any time; changes apply within seconds.
Make files public
Open a bucket’s Public access and choose Private, Whole bucket public or Some folders public (such as images/). Public files open without a key at https://objects.thailandhosting.com/<region>/<bucket>/<file>. Tick Allow listing files only if visitors should see the list of files.
Anyone can open public files, and the downloads and reads are billed to your project. Keep personal data out of public folders.
Share one file with a link that expires
To let someone download (or upload) a single file without a key, create a link with the API or an SDK. A link works for up to 7 days and only for the one file it names.
If something goes wrong
An app gets “forbidden” or “AccessDenied”
The key’s rules do not allow that action on that bucket or folder. Check the bucket, the folder (it must match the start of the file’s path, such as images/) and the ticked actions.
A public file still asks for a key
Check that the file is inside a public folder (folder names end with /) and that you saved the setting. Changes take a few seconds to reach every server.
A share link says it has expired or is not valid
Links end at the time they were made for, at most 7 days. Revoking the key that made the link also stops it. Create a new link.