A private bucket plus an S3 user scoped to it by an access policy. Reuses client and folder_id from the Getting started example:

As a single transaction

The bucket, policy and user created atomically:

Backups bucket — object lock + retention

For backups, create a delete-protected, versioned bucket with object lock in compliance mode, a retention window and automatic expiry. These settings are immutable after creation — even an S3 user with admin permissions cannot change the lock, retention or expiry:

---

Related pages

Resource docs

• S3 Bucket resource docs
• S3 User resource docs
• S3 Access Policy resource docs
• Transaction resource docs

More in this section

• Networking
• VMs
• VPN
• Load Balancing
• Examples

Reference

• Interactive API reference (Swagger)