Yandex Object Storage release notes

Written by

Updated at May 28, 2026

Q1 2026

Supported IAM tokens and ephemeral access keys for authentication in Object Storage.
Now you can disable using static keys for access to a bucket.
Added access policy settings to enforce conditional object writes.
Now, when configuring bucket access only from VPC service connections at the service level, you can maintain bucket access from the management console.
Enabled configuring VPC service connections in the management console.
Added new access policy conditions:
- yc:originip: Maps the request origin IP address against the one specified in the policy.
  
  Unlike the aws:sourceip condition, this one does not take into account any reverse proxy server IP addresses, e.g., those provided in the X-Forwarded-For header.
- yc:access-key-id: Maps the static access key ID against the one specified in the policy.
Supported the range query parameter in S3 API methods for working with Get and getObjectMeta objects.
In the yc storage s3 cp Yandex Cloud CLI command:
- Fixed the error with filtering uploaded objects.
- Added a check for the maximum object size.

The TLS protocol versions 1.0 and 1.1 are no longer supported.
Support for conditional writes has been implemented in the S3 API.
Added new resources to the Terraform provider:
- yandex_storage_bucket_iam_binding: Configuration of bucket access permissions via Identity and Access Management.
- yandex_storage_bucket_grant: Configuration of bucket access permissions via the Object Storage ACL.
- yandex_storage_bucket_policy: Bucket policy management.
Added the yc storage s3 presign command to the Yandex Cloud CLI to create pre-signed URLs.
Added the --tags parameter for bucket label management to these Yandex Cloud CLI commands: yc storage bucket create and yc storage bucket update.
Fixed an error where in some cases, when deleting objects based on prefix using the management console, access policy rules were not considered.

In the management console, you can now enable encryption and versioning when creating a bucket.
Added the following commands to the Yandex Cloud CLI:
- yc storage s3api get-bucket-acl: Getting a bucket ACL.
- yc storage s3api put-bucket-acl: Changing a bucket ACL.
- yc storage s3api get-object-acl: Getting the ACL of an object.
- yc storage s3api put-object-acl: Changing the ACL of an object.
- yc storage s3api list-objects: Getting a list of objects.
- yc storage s3 cp: Copying objects.
- yc storage s3 mv: Moving objects.
- yc storage s3 rm: Removing objects.
Added new resources to the Terraform provider:
- yandex_storage_bucket_grant: Managing a bucket ACL using a separate resource.
- yandex_storage_bucket_iam_binding: Assigning users Yandex Identity and Access Management roles for a specific bucket.
You can now make your bucket accessible only from VPC service connections.
Added the ability to view bucket labels for users with the storage.configViewer role.

The Yandex Cloud CLI now supports commands you need to use object labels and multipart uploads of objects.
You can now get authenticated in Object Storage from Terraform via an IAM token. For more information, see this provider guide.
Up-to-date AWS SDK and AWS CLI versions are now supported.

Announced end of support for the TLS protocol versions 1.0 and 1.1 as of July 1, 2025. For more information, see TLS protocol.
In the Yandex Cloud CLI, added the yc storage s3api group of commands to work with objects.

Added support for accessing Object Storage using Security Token Service temporary keys.
Implemented direct access to buckets from cloud networks using Yandex Virtual Private Cloud service connection without internet access. Added the yc:private-endpoint-id special condition to the bucket policy to allow bucket access via VPC internal IP addresses only.

Improved the management console design: bucket settings are now grouped under the Settings and Security tabs.

Improved object lifecycle management in a bucket:
- Added support for new object grouping filters: object labels and the AND operator.
- The new filters can now be used in the management console, CLI, Terraform, and when using tools with S3 API support.
Added support for bucket labels in the management console, CLI, and Terraform.
Yandex Identity Hub user groups can now be added to an access control list (ACL) and bucket policy in the management console, CLI, and Terraform.
Improved the management console interface:
- Added filtering by prefix in the list of bucket objects.
- Added the feature to download objects from a list.