there is a way to make unique encryption to each bucket? or its still not implemented?

Buckets are transparently encrypted, if that is what you mean. And, if you want something along the lines of a bucket-scoped token, you could probably run every request through a Worker, and then handle auth yourself?

let me check the Worker thing

I want to use unique encryption for each bucket in assumption that all API tokens can access all buckets but the token will only be able to decrypted associated bucket.

And I also don't wont to be able to "understand" me clients\customers content.

Workers seems a bit overhead to my POC thanks for the suggestion!!!

As it stands, any given token can access every bucket on your account

😦

guys!!! thank you for your support!!! you really helped me!

Bucket-scoped tokens are supposed to be happening by the end of the quarter

So, it could be 2.5 months till they happen

or longer if that isn't hit

and the most important i've learned new things

This is a good news!

Hi Team, Is there any api available through which we can attach custom domain to s3 bucket directly, without any manual intervention.

There is the API used by the Dash, but it may change/disappear entirely without notice.

@kian - found the issue was with my R2 API key which I had added my v4 IP address, as the page indicates to do, to include it in the allow

That's either broken, or miss-leading for sure.

When using the terraform

aws_s3_bucket

resource to create an R2 bucket everything is just fine. However, deleting the created resources fails with:

rror: emptying S3 Bucket (<bucket_name>): listing S3 Bucket (<bucket_name>) object versions: NotImplemented: ListObjectVersions not implemented status code: 501, request id: , host id:

This only happens when there are objects in the bucket. Did anywone else run into this problem? Is there a workaround?

Doesn't look like there's a way to tell it that versioning isn't implemented at a glance -

How do you mean? You should be able to leave that empty if you do not need IP filtering FWIW

The good news is that we might have an R2 resource on the cloudflare provider soon so you should be able to switch

Oh cool! Is there a way to track the progress?

Where can I monitor my R2 bill? 😅

👋 Are public R2 buckets following the Cloudflare rules as for compression? As seen here: https://developers.cloudflare.com/support/speed/optimization-file-size/what-will-cloudflare-compress/

Yes

Although you can also upload your own gzipped files and they will be handled correctly now (a recent fix I think?)

It read to me that I needed to add an IP address to be included, which should work either way. Adding my local IP breaks it.

Thanks for the heads up with the Upload - I got that to work nicely, but as you say, using a presigned URL is the end of the rainbow for this. I can't find any documentation that confirms it - my thought being that the S3Client config endpoint would be the target, while removing the credentials. Have you had any luck with making that work?