Working with Object Storage

  Last updated 2025-02-25

When working with Fastly Object Storage, you can use the Fastly control panel to create, view, and delete access keys. An access key is used when sending requests to the S3-compatible API from your Fastly services as a way to provide authentication to your bucket interactions. Access keys define which S3 buckets can be accessed and the scope of access, either read or read and write.

Before you begin

Make sure to review all prerequisites, limitations, and considerations for using Fastly Object Storage.

Getting started

To get started with Fastly Object Storage, create an access key. The first key you create must have full access to buckets in the account and the ability to read and write to the buckets.

Once you have a key created meeting these properties, use the S3-compatible API to create a bucket, using the key details to provide authentication in the API. Then, use the same key to interact with buckets using other compatible bucket operations or create additional keys and buckets.

Although an account-level key (full bucket access and read and write scope) is required to create buckets, other bucket operations can be performed by keys with more limited access. Once you have buckets created, you may choose to provide certain people or tools with keys that have limited access to only specific buckets or read-only access.

Working with access keys

Access keys are used to authenticate requests to buckets using the S3-compatible API to perform various bucket operations. The level of access you have to work with these operations depends on the combination of access key properties you select.

IMPORTANT

The first access key you create must have Full access and Read and write scope as this is the only way you can create buckets. Only after this first key is created and used to create a bucket with the S3-compatible API can you create access keys with limited access or scope.

Access key propertiesAccess grantedConsiderations
Full access + Read and write scopeAccess to all current and future buckets in the account and the ability to read and modify those bucketsOnly key type that enables creating buckets
Full access + Read scopeAccess to all current and future buckets in the account and the ability to read those buckets
Limited access + Read and write scopeAccess to specific buckets and the ability to read and modify the contents of those bucketsBuckets must already be created
Limited access + Read scopeAccess to specific buckets and the ability to read the contents of those buckets.Buckets must already be created

Creating an Object Storage access key

To create an Object Storage access key:

  1. Log in to the Fastly control panel.

  2. Go to Resources > Object Storage.

  3. Click Create key.

  4. In the Description field, enter a description of the key.

  5. In the Bucket access field, select whether to give the key Full access to current and future buckets or Limited access to certain buckets.

    • Full access: grants access to all current and future buckets.
    • Limited access: grants access to select buckets. If you choose this option, use the menu to select specific buckets the key has access to.

  6. In the Scope field, select the level of access you want available to the key. The first key you create must have read and write access.

    • Read: access to read existing and future buckets.
    • Read and write: access to read and write to existing and future buckets.

  7. Click Create.

  8. Note the access key and secret key details. Record the secret key in a secure location because you won't be able to see it again.

Viewing Object Storage keys

Once at least one Object Storage access key is created, you can view details on all Object Storage access keys created on your account from Resources > Object Storage. The Object Storage page displays the following details:

  • Access Key ID: the access key ID returned from the S3-compatible API.
  • Description: a description of the access key.
  • Scope: the level of access available to the access key.
  • Buckets: the buckets the key grants access to.
  • Created on: the date on which the access key was created.

Deleting Object Storage access keys

You can delete an Object Storage access key at any time. If the access key is being used by an active application, deleting it can cause unexpected behavior.

  1. Log in to the Fastly control panel.
  2. Go to Resources > Object Storage.
  3. Click the trash Trash icon to the right of the access key you want to delete.
  4. Click Confirm and delete.

Working with the S3-compatible API

Use the S3-compatible API to create and interact with buckets that store your data. The access key is used to provide authentication.

IMPORTANT

In order to work with S3-compatible API, you must use an access key with full access to all buckets and read and write scope.

Send requests to one of the following regional Object Storage endpoints, including the matching region in the credential Scope portion of the SigV4 signature:

  • us-east.object.fastlystorage.app

  • us-west.object.fastlystorage.app

  • eu-central.object.fastlystorage.app

    NOTE

    The regional Object Storage endpoints are different from AWS regions. Make sure you set all region options, like LocationConstraint, to the correct Object Storage region name.

Interact with your buckets by including the bucket name as part of the request path. For example, to access a bucket named my-bucket in the us-east region, you'd use the request path https://us-east.object.fastlystorage.app/my-bucket.

NOTE

Object Storage doesn't support using bucket names in the hostname (i.e., https://my-bucket.us-east.object.fastlystorage.app).

Compatible bucket operations

Object Storage supports the following processing operations for the S3-compatible API. These operations are categorized into two groups, each with differing prices. Refer to the Object Storage product description for more information on how operations are billed.

Class A operations

Class B operations

Was this guide helpful?

Do not use this form to send sensitive information. If you need assistance, contact support. This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Fastly
© Fastly 2025