For the first point, a presigned URL might work as well (although you’ll have to deal with expiry etc.)

My concern isn’t with reading, my concern is with what each token can do.

If my api process only needs to upload and never delete, I’d like that R2 token to be scoped down, to only do that (ie. Least privilege), it doesn’t need to read the bucket directly, thus I don’t think a pre signed URL would apply here

Will R2 support S3 IAM compatible permissions in the near future? I understand that bucket level keys are nice and all but there's just so many more possibilities with IAM scoped keys.

Bucket-scoped permissions are coming pretty soon, but IAM-compatible permissions aren't planned for now

anyone know how to get your bucket to have public access, as even on the r2.dev domain it is not viewable publicly and I have no idea what I am doing wrong

What do you mean? If you navigate to a file, does it show up? Like https://account.r2.dev/hey.html

No, I mean, if you replace account.r2.dev with your R2.Dev domain, and

hey.html

with a file in your bucket

so on my custom domain for it I get this which is the same thing that I get when I had it use the r2.dev url as well, do you want me to remove my custom domain while testing?

What is the path you are using?

@HardAtWork you mean the url?

Yes. I don't need the hostname, just the stuff after the

/

@HardAtWork ah that did it, worked out what you are saying so if I give it the file name after the url, it then starts downloading the file. My assumptions was that I could just go to my custom domain and could view everything like this https://cdimage.kali.org/kali-weekly/ as an example

R2 just serves files, it doesn't do file listings. For that, you want https://github.com/kotx/render

thanks for your help and clearing up my confusion and thanks for that will have a look

A few questions about R2: 1. What is cloudflares uptime guarantee for r2? 2. Are my buckets backed up into multiple regions with failover, or if the location that my bucket is stored in goes down, will my files go down as well?

1. AFAIK, R2 is covered by the CF-standard uptime SLA. 2. Disaster recovery is single-region, multi-datacenter atm

that'd be 100% uptime?

Yes, but you're only entitled to SLA credits on Business and Enterprise plans.

So r2 is already highly available?

using r2 for terraform state

When settings a bucket to public. Does that mean only reads are public or can anyone upload?

Only object reads are public

Everything else (uploading, listing, etc) is still private

ehlo guys, i've uploaded my static website on R2 the bucket is connected on my custom domain and also to r2.dev my index.html is loaded perfectly under r2.dev, but under my domain is wrongly loaded 😦 any hint? edit: I've disabled Rocket Loader (Optimization) and everything is fine. thx @User

What kind of wrong behaviour do you see? Could you share a URL maybe?

Hi folks. Anyone reliably using s3fs to mount R2 as a filesystem? Even though R2 is compatible with S3, using s3fs seems not a good idea for mission critical production env.

Would love to hear your thoughts on that.

Hi guys, really weird random issue, I seem to get this error when using r2 today (with no code change) and any s3 commands hang and never finish

connect ETIMEDOUT 104.18.9.90:443

after a quick google it seems this is a cloudflare ip, also this doesn't happen locally again, no firewall changes or anything