Uploading an object

1. If you do not have the AWS CLI yet, install and configure it.

2. To upload a single object, run the command:

   aws --endpoint-url=https://storage.yandexcloud.net/ \
     s3 cp <local_file_path> s3://<bucket_name>/<object_key>
   

   Where:

   • --endpoint-url: Object Storage endpoint.
   • s3 cp: Command to upload an object. To upload an object, in the first part of the command, specify the path to the local file to upload. In the second part, provide the name of your bucket and key you will use to store the object in the bucket.

   To load all objects from the local directory, use the following command:

   aws --endpoint-url=https://storage.yandexcloud.net/ \
     s3 cp --recursive <path_to_local_directory>/ s3://<bucket_name>/<prefix>/
   

   Where:

   • --endpoint-url: Object Storage endpoint.
   • s3 cp --recursive: Command to upload all objects stored in a local directory, including the nested ones. To upload objects, specify the path to the folder to copy the files from in the first part of the command and the name of the bucket to copy the files to and the ID of the folder in storage in the second part.

aws s3 cp is a high-level command with limited functionality. For more information, see the AWS CLI reference. All upload features Object Storage supports can be used when running the aws s3api put-object command (see sample operations with object locks below).

Terraform allows you to quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. Configuration files store the infrastructure description in the HashiCorp Configuration Language (HCL). Terraform and its providers are distributed under the Business Source License.

For more information about the provider resources, see the documentation on the Terraform website or the mirror.

If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.

If you don't have Terraform, install it and configure the Yandex Cloud provider.

Before you start, retrieve the static access keys: a secret key and a key ID used for authentication in Object Storage.

To create an object in an existing bucket:

1. In the configuration file, describe the parameters of resources that you want to create:

   resource "yandex_iam_service_account" "sa" {
     name = "<service_account_name>"
   }
   
   // Assigning a role to a service account
   resource "yandex_resourcemanager_folder_iam_member" "sa-admin" {
     folder_id = "<folder_ID>"
     role      = "storage.admin"
     member    = "serviceAccount:${yandex_iam_service_account.sa.id}"
   }
   
   // Creating a static access key
   resource "yandex_iam_service_account_static_access_key" "sa-static-key" {
     service_account_id = yandex_iam_service_account.sa.id
     description        = "static access key for object storage"
   }
   
   resource "yandex_storage_object" "test-object" {
     access_key = yandex_iam_service_account_static_access_key.sa-static-key.access_key
     secret_key = yandex_iam_service_account_static_access_key.sa-static-key.secret_key
     bucket     = "<bucket_name>"
     key        = "<object_name>"
     source     = "<path_to_file>"
   }
   

   Where:

   • access_key: Static access key ID.

   • secret_key: Secret access key value.

   • bucket: Name of the bucket where to add the object. This is a required parameter.

   • key: Name of the object in the bucket. This is a required parameter. The name format is as follows:

     • The name must be from 3 to 63 characters long.
     • It may contain lowercase Latin letters, numbers, and hyphens.
     • The first character must be a letter and the last character cannot be a hyphen.

   • source: Relative or absolute path to the file you need to upload to the bucket.

   For more information about the resources you can create with Terraform, see the provider documentation.

2. Make sure the configuration files are correct.

   1. In the command line, go to the folder where you created the configuration file.

   2. Run a check using this command:

      terraform plan
      

   If the configuration is described correctly, the terminal will display a list of created resources and their parameters. If the configuration contains any errors, Terraform will point them out.

3. Deploy cloud resources.

   1. If the configuration does not contain any errors, run this command:

      terraform apply
      

   2. Confirm creating the resources: type yes in the terminal and press Enter.

      All the resources you need will then be created in the specified folder. You can check the new resources and their configuration using the management console.

To upload an object, use the upload S3 API method.

1. If you do not have the AWS CLI yet, install and configure it.

2. Run this command:

   aws --endpoint-url=https://storage.yandexcloud.net/ \
     s3api put-object \
     --body <local_file_path> \
     --bucket <bucket_name> \
     --key <object_key> \
     --object-lock-mode <temporary_lock_type> \
     --object-lock-retain-until-date <temporary_lock_period_end_date_and_time> \
     --object-lock-legal-hold-status <indefinite_lock_status>
   

   Where:

   • --endpoint-url: Object Storage endpoint.
   • s3api put-object: Command to upload an object version. To upload object versions with an object lock, specify the following parameters:

     • --body: Path to the file you need to upload to the bucket.

     • --bucket: Name of your bucket.

     • --key: Key to use for storing the object in the bucket.

     • --object-lock-mode: Type of object lock with retention:

       • GOVERNANCE: Temporary managed lock.
       • COMPLIANCE: Temporary strict lock.

     • --object-lock-retain-until-date: Retention end date and time in any format described in the HTTP standard, e.g., Mon, 12 Dec 2022 09:00:00 GMT. You can only specify it together with the --object-lock-mode parameter.

     • --object-lock-legal-hold-status: Legal hold status:

       • ON: Enabled.
       • OFF: Disabled.

   For an object version, you can use only object lock with retention (object-lock-mode and object-lock-retain-until-date parameters), only legal hold (object-lock-legal-hold-status), or both at the same time. For more information about their combined use, see Object lock types.

To upload an object version with a lock, use the upload S3 API method with the X-Amz-Object-Lock-Mode and X-Amz-Object-Lock-Retain-Until-Date headers to apply a retention period and X-Amz-Object-Lock-Legal-Hold to put a legal hold.

To upload an object version with a default retention period, use the upload S3 API method with the Content-MD5 header.