Object Storage

Object Storage keeps files as objects in buckets and serves them over the S3 API, the interface that Amazon S3 made standard. The AWS CLI, rclone, s3cmd, the AWS SDKs and most backup tools work with it once you give them our endpoint and an access key. You can also upload, download and delete files in the dashboard.

Use it for backups, media, build artefacts, logs and other data that you read and write as whole files. Every bucket starts private. Each request needs a signature from one of your access keys, or a presigned URL that you created. To let anyone read a bucket without one, serve it publicly.

An Object Storage service gives you:

• Pay as you go pricing: storage by the GB-month, requests by the million and free egress. Ordering costs nothing, and your account uses some storage and requests free each month (How Object Storage is billed).
• A home region, which you choose when you order. The service's first bucket goes there.
• Up to 25 buckets, in the home region or in any other region that offers Object Storage.
• Access keys that sign S3 requests. Each key is read-only or read-write, and works on one bucket or on every bucket on your account.
• Temporary credentials, which are an access key, a secret and a session token that stop working on their own, limited to one bucket, a key prefix and read-only or read-write. The Access keys tab offers them once we have turned the feature on (Create temporary credentials).
• Versioning, which keeps the earlier versions of every object in a bucket, and Object Lock, which stops anyone deleting a version before a date you set (Versioning, Object Lock).
• CORS rules, which let web pages on your sites use a bucket from the browser, and lifecycle rules, which delete objects on a schedule (CORS, Lifecycle rules).
• Encryption: default encryption, which encrypts every object written to a bucket once we have turned it on, and your own key for single objects, which works at any time (Encryption).
• A public URL for any bucket, up to 10 custom domains on it, and a static website mode (Public access, Custom domains, Static websites).
• Event notifications, which send a signed request to your URL when objects in a bucket change (Event notifications).
• Migrations, which copy the objects in a bucket at another S3 provider into one of your buckets (Migrate from another provider).
• Replication, which keeps a copy of a bucket's objects in one of your buckets in another region (Replication).

Every bucket name on your account starts with your account namespace and a hyphen, such as u7-. The namespace comes from your account, so all your services share it. Bucket names gives the rules.

Each region has its own endpoint, https://s3.<region>.coritan.com:7337, where <region> is the region's code. For Frankfurt, the code is fra and the endpoint is https://s3.fra.coritan.com:7337. A bucket answers at the endpoint of the region you created it in. The endpoint ends in :7337 unless the region also answers on port 443. Use the one the dashboard shows (Endpoints, ports and addressing styles).

In the dashboard, go to Object Storage. The list shows every Object Storage service on your account that has not ended, and each service is one card. While a search or filter is on, "N of M" next to the title says how many services match, such as "2 of 5". Create Object Storage at the top opens the order page, as Order Object Storage describes. The name on a card opens the service's panel.

Four tiles sit above the list. Services, Active and Needs attention are also filters: select one to show those services, and select it again to turn the filter off. Stored is a fact and does nothing when you select it. On a phone, a tile shows only its figure.

• Services counts every service. Its footer says how many are pay as you go and how many are on a plan that is no longer sold, such as "2 pay as you go, 1 on a plan no longer sold". Selecting it clears every filter and the search.
• Stored adds up what the buckets of every service hold, from the last hourly measurement. Its footer counts the buckets and keys, such as "4 buckets, 3 keys".
• Active counts the active services. Its footer reads "All running", or says what the other services are doing, such as "Not active: 1 setting up, 1 suspended, 1 ending, 1 failed". Those services are outside its figure.
• Needs attention counts the services with something to fix. It turns red while the count is above zero. Its footer reads "Suspended, unpaid, failed, ending or over the plan", or "Nothing to fix". A budget warning is not in this count (below).

When a service needs attention, a strip under the tiles says "1 service needs attention" or "3 services need attention". It lists up to three services, or one on a phone, each with its name, the reason and a button. When more services are waiting than the strip lists, Show all and the number of services filters the list to all of them. The strip is hidden while any filter or search is on. It lists the worst problems first: suspended and failed services, then services that wait for payment or are ending, then services over their plan. A service needs attention when:

A service that we are still setting up is not a problem. Its card says "We are setting up your storage. This takes under a minute." Pay as you go has no storage limit, so a pay as you go service is never over a plan.

A budget warning is not a problem either. When a pay as you go service's charges this month reach 80% of its budget, its card shows a line such as "This month's charges are 85% of the $25.00 budget." with Open billing. The line appears once the service's bill loads, so it can arrive a moment after the card. It does not change the tiles, the Needs attention count, the strip or Show, and a service with only a budget warning is not in the strip (Set a budget).

The toolbar narrows and orders the list:

• The search box, "Search by name, plan or region", finds a service by its name, plan, region or number.
• The Show menu holds All services, Active, Pending, Suspended and Needs attention, each with a count. Pending holds the services that wait for payment or that we are setting up.
• The Sort by menu holds Newest first (the default), Name, A to Z, Most stored first, Highest cost first and Problems first. Problems first uses the same order as the strip. Highest cost first orders by what each service has cost this month, and puts a service whose bill has not loaded last. In the table, selecting a column heading sorts by it, and the menu then names that column.
• Clear filters appears while Show or the search is on, and turns them off.
• Cards and Table switch how the list looks, and Refresh reads the list again. Your choice of cards or table stays in your browser. A phone always shows cards and has neither control.

The search, Show, the sort and the page stay in the address, so a reload or a shared link brings them back. The address words are q, status (active, pending, suspended or attention), sort (label, -used_bytes, -month_to_date or attention, and none for the default) and page.

The list shows 24 services a page. When there are more, page buttons appear below it. A search or filter that matches nothing says "No matches", with a button that resets them. When Refresh fails and the list is on screen, a warning reads Could not refresh your Object Storage, with Try again. The list stays as it was. When the first load fails, the page says Could not load your Object Storage.

Costs on this page follow the account's team roles (Roles). A member with the Admin, Billing or Read only role sees them. A member with the Technical role does not: the cards have no Plan price, This month or Charged above the plan figure, the table has no This month column, Sort by has no Highest cost first, no budget line appears, and no sentence on the page names an amount. For that role, a service that waits for payment sends them to Contact support in place of Open invoices, and a suspended service says to ask an Admin or Billing member to pay the overdue invoice, with Contact support. Only the Admin and Billing roles are told to pay the invoice themselves. A Read only member reads the same ask, and keeps Open invoices. Only the Admin and Technical roles can switch a plan, so a member with another role sees Open billing in place of Switch to pay as you go.

A card shows the service's name, a status badge such as Active, Suspended or Ending, and the line under the name, which gives the plan and the home region, such as "Object Storage · Frankfurt". Under them, a red or amber line says each problem from the table above, up to two. A service that is being set up shows its note in place of a problem. Facts follow:

A service that stores nothing yet, because we are setting it up, it waits for payment or setup failed, shows only Since. An active service with no buckets shows "No buckets yet. Create one to start storing files." An active service with no access keys shows "No access keys yet. Create one so your tools can connect."

The footer of a card holds these controls:

• A button for each problem, two at most, such as Open invoices, Contact support, Open billing or Switch to pay as you go.
• For an active service, Create bucket when it has no buckets, which opens the Create a bucket page, and Open buckets otherwise.
• The ... menu, named "More actions for" and the service's name. It opens the service's tabs: Overview, Buckets, Access keys and Billing. For an active service it also has Create bucket and Create access key, which open the Create a bucket or Create an access key page (Create a bucket, Create a key). Copy bucket prefix copies the prefix every bucket name starts with, such as u7-. Copy endpoint copies the endpoint of the service's region (Endpoints, ports and addressing styles). A service on a plan that is no longer sold also has Switch to pay as you go, for a role that can switch plans.

Table shows one row for each service, with the same figures:

Select a row to open the service. Select a column heading to sort by it.

An account with no Object Storage sees No Object Storage yet, with the line "Object Storage keeps files of any size in buckets that any S3 tool can use." and a card, Create Object Storage, that opens the order page: "Choose a region, then make buckets and access keys that reach one bucket or all of them."

Select a service's name, or its card or row (a middle click or Ctrl-click opens it in a new tab), to open it. The header shows its name, status, plan, home region and service number, with All Object Storage above it to go back to the list. Create bucket… opens the Create a bucket page, and the menu beside it has Create Object Storage, which opens the order page for one more service. The tabs are Overview, Buckets, Access keys and Billing. Importing from another provider is under the bucket list, on the Buckets tab.

A banner above the tabs appears while the service cannot be used in full:

Waiting for payment

The first invoice is unpaid. We set the service up as soon as you pay it. Open invoices lists your invoices.

Setting up

We are creating the service. This takes under a minute. Reload the page to see the result.

Suspended

The service is suspended, usually because an invoice is overdue, such as the renewal invoice that carries its use. Its access keys stop working within a couple of minutes, its objects stay where they are, and we bill nothing while it is suspended. You can change buckets and keys again once the service is active. Failed payments and suspended services explains how to lift a suspension.

About a minute after a service is suspended, the public URLs and custom domains of its buckets answer 404. They serve again about a minute after it is active (Public access).

The Overview tab opens first.

This month

A row for Storage, Class A operations, Class B operations and Egress, each against what is free each month, with what the service used past it. Under them, Estimated so far is what this month's use has cost up to the last rated hour, and Projected for the month is what the whole month comes to at this pace. Measured every hour. The last few hours are added once they are rated. When the free amounts are shared with other services on your account, the card says so. On a plan that is no longer sold, the card shows the included storage and the rate above it instead, with Switch to pay as you go (The month so far).

Requests

A bar chart of the Class A and Class B operations of each day over the last 7, 30 or 90 days. No requests yet means the service made none in that window (Which requests count).

Storage, Objects, Buckets and Access keys

What the service's buckets hold, how many objects they hold, how many buckets the service has out of its limit, and how many keys you created on it. We measure storage and objects every hour, so these figures trail recent uploads and deletions.

Endpoints

One row for each region the service uses, with the endpoint to copy: the home region first, then each other region that holds one of its buckets. Bucket prefix is the prefix every bucket name on your account starts with. Signature says that clients sign requests with AWS Signature Version 4 and that any region string works.

Connect a client

Setup commands for the AWS CLI, rclone and s3cmd, filled in with your endpoint. Replace the placeholders with a key from the Access keys tab. Connect an S3 client explains each setting. Where a region offers bucket-name addresses, an Addressing choice switches the commands between Path style and Virtual-hosted (Endpoints, ports and addressing styles).

Stored over time

A bar chart of what the service stored over the last 7d, 30d or 90d, from the hourly measurements. The chart shows at most 120 bars, so in a longer window each bar stands for several hours and shows the highest measurement among them. On a plan that is no longer sold, a dashed line marks the included storage. No measurements yet means the chart has nothing to show for that window.

Service

The Plan, the Billing cycle, the date it Renews, the Home region, the Namespace, the Bucket limit, what happens After cancellation, and the date it started (Since). On a plan that is no longer sold, it also shows the storage Included and the rate Above the plan. Open Billing opens the Billing tab.

Tags

Labels to find the service by, as Tag your services describes.

Set up storage:

• Order Object Storage, and set a budget or cancel on the Billing tab
• Create and delete buckets, the Buckets tab
• Create and revoke access keys, the Access keys tab
• Create temporary credentials, from the Access keys tab

Use it:

• Connect an S3 client with the endpoint and a key
• Find your endpoint, ports and addressing styles
• Upload, download and delete objects in the dashboard's object browser, or share a file with a presigned URL
• Check which S3 requests work, and what each kind of key can do

Keep and clean up data:

• Keep earlier versions of objects, on a bucket's Settings tab
• Protect objects with Object Lock, which you turn on when you create a bucket
• Let websites use a bucket with CORS rules, on a bucket's Settings tab
• Delete objects on a schedule with lifecycle rules, on a bucket's Lifecycle tab
• Encrypt the objects in a bucket, on a bucket's Settings tab

Share a bucket:

• Serve a bucket publicly, on a bucket's Public access tab
• Serve a bucket on your own domain
• Host a static website in a bucket

React to changes:

• Get notified when objects change, on a bucket's Notifications tab

Move and copy data:

• Migrate objects from another provider, the Import from another provider card on the Buckets tab
• Replicate a bucket to another region, on a bucket's Replication tab

Pay for it and fix problems:

• How Object Storage is billed
• Object Storage limits
• Troubleshoot Object Storage

The public Object Storage page describes the product, with its rates from the catalogue and what each account plan includes free each month. The order page in the dashboard lists the regions you can actually order in.

Object Storage is pay as you go. You pay for storage by the GB-month and for Class A and Class B operations by the million, and egress is free. Your account plan sets the storage your account uses free each month, and every plan includes 1 million Class A and 10 million Class B operations. We bill the use above those amounts once a month, on the service's renewal invoice.

How Object Storage is billed gives the rates and explains how we measure storage, which requests count, and how budgets and usage downloads work. Billing covers invoices, credit and payment.

• A service holds up to 25 buckets. There is no fixed limit on access keys.
• A bucket stays in the region you create it in, and you cannot rename it. It answers only at that region's endpoint.
• Clients connect over HTTPS on port 7337, or on port 443 where the dashboard shows an endpoint with no port, and address buckets in the path, as in https://s3.fra.coritan.com:7337/u7-assets/photo.jpg. Bucket names as hostnames, such as u7-assets.s3.fra.coritan.com, work only where the dashboard offers virtual-hosted addresses (Endpoints, ports and addressing styles).
• Once versioning is on, you can suspend it, and the bucket keeps the versions it holds. You can turn on Object Lock only when you create a bucket.
• Access keys cannot change a bucket's settings. Change them in the dashboard or through the Object Storage API.
• A bucket is private until you serve it at its public URL, on up to 10 custom domains, or as a static website.
• The free amounts each month are your account's, and all its pay as you go services share them.
• A budget sends alerts at 50%, 80% and 100% of the amount you set, and never stops a service.
• The fixed plans and the Extra Object Storage 250 GB add-on are no longer sold. Services and add-ons you already have keep working (Plans that are no longer sold).

Object Storage limits lists every limit.

GET /api/v1/client/object-storage/services lists the Object Storage services on your account that have not ended, newest first, as items with a total.

curl https://api.coritan.com/api/v1/client/object-storage/services \
  -H "Authorization: Bearer $CORITAN_TOKEN"

{
  "items": [
    {
      "id": 1207,
      "service_id": 1207,
      "label": "Object Storage",
      "hostname": null,
      "status": "active",
      "product_name": "Object Storage",
      "billing_cycle": "monthly",
      "region": "fra",
      "location_id": 1,
      "namespace": "u7",
      "bucket_prefix": "u7-",
      "billing_model": "payg",
      "rates": {"storage_gb_month": "0.0135", "class_a_million": "4.00", "class_b_million": "0.32", "egress_gb": "0"},
      "quota_bytes": null,
      "used_bytes": 48318382080,
      "object_count": 1284,
      "bucket_count": 2,
      "key_count": 3,
      "overage_per_gb_month": null,
      "created_at": "2026-10-01T10:00:00",
      "next_due_date": "2026-11-01T00:00:00"
    }
  ],
  "total": 1
}

id and service_id hold the same number: the service ID that every other Object Storage request takes. label is the name the dashboard shows, which is the service's hostname when it has one and the plan name otherwise.

region is the home region's code and location_id its location. region is null until setup finishes. bucket_prefix is the namespace with its hyphen.

billing_model

payg for pay as you go, or fixed for a plan that is no longer sold (Plans that are no longer sold).

rates

The rates the service is billed at, in US dollars: storage_gb_month per GB-month, class_a_million and class_b_million per million operations, and egress_gb per GB sent out. On a fixed plan, storage_gb_month is the rate above the included storage, and the others are "0".

quota_bytes and overage_per_gb_month

null on pay as you go. On a fixed plan, the included storage in bytes, where a GB is 1024³ bytes, and the rate in US dollars for each GB-month above it.

used_bytes and object_count add up the service's buckets at the last hourly measurement. key_count counts every key on the service, including keys that are turned off. This month's use and charges come from the month so far.

GET /api/v1/client/object-storage/{service_id} returns one service with the same fields and these as well:

endpoints

A list with a region, an endpoint and virtual_hosted for each region: the home region first, then each other region that holds one of the service's buckets. The endpoint has no port in a region that also answers on port 443. virtual_hosted is true when the region also answers a bucket at its own hostname (Endpoints, ports and addressing styles).

overage_gb

0 on pay as you go. On a fixed plan, how many GB the buckets hold above the included storage, at the last measurement.

grace_days, max_buckets and presign_max_seconds

How many days we keep objects after the service ends, the most buckets the service may hold, and the longest a presigned URL from the API lasts, in seconds. They are 7, 25 and 3600.

A service ID that is not an Object Storage service on your account answers 404 with Object storage service not found.

The Object Storage API reference lists every field.