How Object Storage works: keys, folders and links

Files are private from the start. There are 3 ways in: an access key, a public folder, or a share link that expires on its own.

App · SDK · AWS CLIUses an access keyKey rulesBucket · folderRead, list, write, deleteExpiry date (if set)Checks each request1Endpointobjects.thailandhosting.com2Bucket (per region)backups/Private: key neededuploads/Private: key neededimages/Public: no key neededAnyoneIn a browser3Share linkExpires within 7 days4
The folder names in the picture are examples; you choose your own. Folders that aren’t public need a key whose rules allow it, or a share link.

Step by step, following the numbers

  1. Your app or tool signs every request with its own access key. The secret is never sent with the request.
  2. The endpoint checks the key’s rules to see whether it may do that to that bucket and folder. If not, it answers forbidden or AccessDenied.
  3. Anyone can open files in a public folder at https://objects.thailandhosting.com/<region>/<bucket>/<file>. Good for images on a website.
  4. Share a single file from a private folder with a link made through the API or an SDK. The link works only for that file and expires on its own within 7 days.

Example bucket layouts

JobHow to set it up
Product images on a websiteAn images/ folder set to public · the app’s key can write only to this folder
Files customers uploadA private folder · show them to customers with share links
Backups from a serverA separate bucket · the backup machine’s key can write but not delete

You pay for the storage you use, the number of requests and the data sent out. See current prices on the pricing page.

Still stuck? Let our team help

Open a ticket from the Console. Tell us the site or service, what you did and the message on screen. Our reply comes back in the same ticket, so everything stays in one place.

Open a ticket All guides