How to use the API

Before you start

To use the API:

  1. Create a service account.
  2. Assign a role to a service account.
  3. Create a static access key.

Static key authorization is required to access the HTTP API directly and is supported by the tools listed in the section Supported tools.

For a list of supported Amazon S3 HTTP API methods, see the API reference.

General format of an API request

Content-Length: length
Date: date
Authorization: authorization string (AWS Signature Version 4)


Read more about headers in the section Common request headers. The set of headers depends on a particular request.

If you use the API directly (without the SDK or apps), you will need to generate the Authorization header yourself for authenticating requests. Find out how to do this in the Amazon S3 documentation: Authenticating Requests (AWS Signature Version 4).

CORS requests

Cross-domain requests are available for all API methods used for object management.

To check permissions, CORS sends the options preflight request to a resource. Object Storage allows you to skip the preflight request when sending cross-domain requests to resources. In this case, your request's headers must be the same as those of the preflight request.