Object Storage – How to share an object or file externally

Database di conoscenze

KB0074198

Object Storage – How to share an object or file externally


Icons/System/eye-open Created with Sketch. 14 viste 19.12.2025 Object Storage

Objective

This guide explains how to securely share files or objects stored in OVHcloud Object Storage with external users, covering temporary access, public-read objects, and bucket policies, while highlighting URL types and best practices.

Use case scenarios

Usual use case scenarios for sharing objects in OVHcloud Object Storage include:

  • You want to provide a temporary download link to a partner or client without giving full bucket access.
  • You need to make specific objects public, such as images or product documents, while keeping the rest of the bucket private.
  • You want to grant controlled access to certain files for collaborators or external users.

Comparison of URL Types

When sharing objects in OVHcloud Object Storage, understanding the difference between path-style and virtual-hosted-style URLs is important.

FeaturePath-style URLVirtual-hosted-style URL
Formathttps://s3.<region>.io.cloud.ovh.net/<bucket>/<object-key>/<generated-code>https://<bucket>.s3.<region>.io.cloud.ovh.net/<object-key>
Typical usePresigned URLs generated via APIURLs from the Control Panel or public objects
Bucket Name LocationIn the URL pathIn the subdomain
Best ForTemporary or programmatic accessPublic sharing or stable links
Access ControlLimited by presigned URL expirationControlled by ACLs or bucket policies

Key Takeaways:

  • Use path-style URLs for temporary, API-generated access.
  • Use virtual-hosted-style URLs for public or long-term sharing, as they are more standard and easier to manage.

Requirements

  • A bucket
  • A user with the required access rights on the bucket

See our Getting started with Object Storage guide.

Instructions

OVHcloud Object Storage offers three main ways to share objects externally. Choose the method depending on whether you need temporary access, public access, or controlled sharing.

  • Via Presigned URLs
  • Via Public Objects

Presigned URLs provide temporary access to a private object without changing bucket permissions.

Steps:

  • Generate a presigned URL using the OVHcloud API or an S3-compatible SDK.
  • Set an expiration time.
  • Share the URL with the external user.

Example (AWS CLI compatible):

aws s3 presign s3://my-bucket/reports/data.csv --expires-in 3600 \
 --endpoint-url https://s3.gra.io.cloud.ovh.net

This command returns a temporary link valid for 1 hour.

After expiration, access is automatically blocked and the object remains private.

Specific objects can be publicly accessible by applying a public-read ACL. Only those objects become public; the bucket and its listing stay private.

Steps:

  • Select the object via API.
  • Apply the public-read ACL.
  • Share the object's URL.

Example (AWS CLI compatible):

aws s3api put-object-acl \
 --bucket my-bucket \
 --key docs/manual.pdf \
 --acl public-read \
 --endpoint-url https://s3.gra.io.cloud.ovh.net

The object becomes accessible at: https://my-bucket.s3.gra.io.cloud.ovh.net/docs/manual.pdf

Go further

If you need training or technical assistance to implement our solutions, contact your sales representative or click on this link to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.

Join our community of users.

Articoli correlati