Kvindo™ Cloud Docs
An S3 Bucket is an S3-compatible object storage container for files, backups, media, and static assets. It is reached over the standard S3 API, so any Amazon-S3 SDK or tool works against it. Grant access with S3 Users and Access Policies.
• Public vs private — spec.isPublic makes objects readable without credentials; keep it false unless the content is genuinely public
• Quota — spec.quotaGiB caps total stored size in GiB; a separate organization-wide quota also caps total S3 storage across all buckets
• Versioning — spec.isVersioned keeps previous object revisions on overwrite or delete
• Object lock & retention — spec.isLockEnabled with spec.complianceRetentionDays makes objects immutable for a period; spec.objectExpirationDays auto-expires them. The lock flag is fixed at creation and cannot be changed later; the retention and expiration periods can be updated. spec.complianceRetentionDays requires spec.isLockEnabled to be true; when both are set, spec.objectExpirationDays must be greater than or equal to spec.complianceRetentionDays
• Delete protection — set metadata.deleteProtection to block accidental bucket deletion
| UI Name | API / kc name | Terraform name | Optional | Format | Default | Is read only | Description |
|---|---|---|---|---|---|---|---|
| Tier | spec.tier |
spec.tier |
No | string | standard |
No | Reserved for future use — only standard is accepted today |
| Region | spec.region |
spec.region |
No | string — region code | — | No | e.g. ru-msk-1; cannot be changed after creation. Like the region, the bucket's name is also immutable — renaming is not supported, and a rename attempt is not rejected at submit time but instead fails asynchronously once the reconciler processes it |
| Public | spec.isPublic |
spec.is_public |
Yes | boolean | false |
No | Allow unauthenticated read access |
| Quota | spec.quotaGiB |
spec.quota_gib |
No | integer — GiB | — | No | Maximum total stored size for this bucket; a separate organization-wide S3BucketGib quota also caps total S3 storage across all of the organization's buckets |
| Versioned | spec.isVersioned |
spec.is_versioned |
Yes | boolean | false |
No | Retain previous object revisions |
| Object lock | spec.isLockEnabled |
spec.is_lock_enabled |
Yes | boolean | false |
No | Enable object lock; set at creation only |
| Compliance retention | spec.complianceRetentionDays |
spec.compliance_retention_days |
Yes | integer — days | — | No | Objects immutable for this many days; requires spec.isLockEnabled to be true |
| Object expiration | spec.objectExpirationDays |
spec.object_expiration_days |
Yes | integer — days | — | No | Auto-delete objects after this many days; when spec.complianceRetentionDays is also set, this value must be greater than or equal to it |
| Endpoint URL | status.endpointUrl |
status.endpoint_url |
— | string | — | Yes | S3 endpoint to address the bucket |
A private bucket with a 10 GiB quota.
Terraform
Python SDK
kc CLI
Resource docs
Examples