/// FIELD NOTES
Notes from the storage ops trenches
Practical guides for S3 management — lifecycle, cost, security, and product updates. No filler.
FEATURED · GCS
GCS public access prevention: bucket IAM and org policy guards
October 2026 · 18 min read
An inventory pass on a GCS estate finds dozens of buckets where 'inherited' public access prevention meant nobody had decided.
Read the post →October 2026 · 8 min readalertingShould Your Storage Fleet Use Threshold Alerts at All?A threshold alert is a decision you pre-commit to, not a monitoring feature: if you can't name the owner and the action, delete it.October 2026 · 12 min readrabataRabata Cloud Storage: What It Is and How It WorksRabata is S3-compatible object storage: an HTTPS endpoint, bucket namespace, and SigV4-signed credentials. Any S3 tool works unchanged.October 2026 · 11 min readmulti-cloudOshareCollect: Should You Use It or Another Share-Collect Tool?The expensive part of a multi-cloud copy job isn't egress, it's the engineer babysitting the progress bar.October 2026 · 17 min reads3S3 File Browser: How to Access an S3 Bucket From Your BrowserAn S3 file browser is a proxy around the fact that browsers can't talk to S3 directly. What matters is where keys live and what the tool refuses to do.October 2026 · 10 min reads3Bucket creation and IAM policy setup for S3-compatible providersS3 compatibility covers the data plane, not the control plane: bucket creation and IAM policy setup differ across AWS, R2, B2, Wasabi, MinIO and OCI.October 2026 · 31 min readociOracle Cloud Infrastructure Storage: S3-Compatible Connection GuideThere is no OCI storage partner to join: OCI's S3-compatible endpoint means any S3-speaking tool connects with a key, namespace and region.October 2026 · 8 min readwasabiWasabi S3 endpoint, region, and credential bootstrap for CLI toolsWasabi's S3-compatible endpoint and region strings must agree, or SigV4 signing fails with confusing region errors.October 2026 · 8 min reads3Enable S3 Versioning and Object Lock on a New BucketVersioning keeps overwrites as recoverable versions; Object Lock refuses deletion until a date. They are separate mechanisms, and only one is reversible.October 2026 · 21 min readboto3Configuring an AWS S3 endpoint and boto3 client for a custom regionboto3 needs four settings to talk to a custom S3 endpoint: endpoint_url, region_name, signature version, and addressing style. Miss one and you get a 403.October 2026 · 27 min reads3S3 Compatible Storage Providers and Intelligent TieringS3 compatibility is a protocol, not a product. The real bill is egress and API calls, and only one of those is on your storage invoice.October 2026 · 23 min reads3Amazon S3 Transfer Acceleration: How It Works and What It CostsS3 Transfer Acceleration is a paid reroute through CloudFront's edge network, and whether it earns its money depends on where your packets were going before.October 2026 · 13 min readobject lockEnforcing S3 Object Lock retention policies: legal hold vs governanceGovernance mode is a speed bump, compliance mode is a one-way door. Here is how to choose, and where legal hold fits.October 2026 · 12 min reads3Scoping AWS IAM credentials for an S3-compatible endpointNarrowing an IAM policy changes the blast radius, not the fact that a durable credential lives in somebody else's database.October 2026 · 15 min readcloudflare-r2R2 S3 API: Endpoint, Region, and Credential Setup for StorafleetR2's S3 compatibility is the wire protocol, not the identity model: endpoint, region, and credential type are where setups quietly break.October 2026 · 8 min readobject storageRabata Cloud Storage: What It Offers and How It FitsDoes your existing stack speak your object storage endpoint's dialect? We answer the S3-compatible question and say where we fit.October 2026 · 31 min readawsEgress Costs AWS: What You Pay to Move Data OutAWS egress is not one rate: the price depends on the service of origin, the destination, and your monthly volume tier.October 2026 · 32 min reads3S3 Intelligent Tiering: How Automatic Cost Optimization WorksS3 Intelligent-Tiering bills per object, per month for monitoring, regardless of bytes stored, here's when that costs more than it saves.October 2026 · 11 min readtempoTempo S3 Storage: How Grafana Tempo Uses Object StorageTempo stores traces in S3-compatible object storage as four distinct prefixes, not one blob, and the layout drives cost and query latency.October 2026 · 21 min readcloudflare-r2Cloudflare R2 Jurisdiction: When Data Residency Isn't EnoughAn R2 jurisdiction flag pins bytes to a legal border, but it does not cover your CDN, logs, backups, or admin access.October 2026 · 9 min reads3Do You Need an S3 File Manager, or Just the AWS Console?An S3 file manager is only worth it when one question spans multiple providers. Use rclone or the CLI unless cross-provider browsing is the actual job.October 2026 · 38 min reads3S3 Compatible Storage Providers and Compliance Requirements"S3 compatible" is a claim about an API surface, not a compliance posture. Pick providers on the dimensions an auditor asks about, not a benchmark.October 2026 · 33 min reads3S3 Compatible Storage Providers: A Guide to Object StorageS3 compatibility is settled; the real decision is what control plane sits above your buckets across three providers.October 2026 · 25 min readegressEgress Costs AWS: What They Are and How to Reduce ThemEgress is bytes leaving a provider's network, and it's the charge that scales with behaviour rather than capacity, which is why it surprises people.October 2026 · 24 min reads3S3 Compatible Storage Providers: What to Compare"S3 compatible" only means the HTTP API answers to S3 verbs and signatures, not that every feature is implemented.October 2026 · 11 min reads3S3 File Browser: How to Access an S3 Bucket From Your BrowserPick an S3 browser by where you need to stand: a provider console for one cloud, a multi-cloud browser for several, rclone for mounts and scripts.October 2026 · 14 min readovhOVH Object Storage: When It Fits and When It Doesn'tOVH Object Storage is cheap S3 with a European accent, but the endpoint is the least interesting variable in your setup.September 2026 · 7 min readiamServerless Deploy IAM Role: What It Is and Why It MattersA serverless deploy IAM role is the identity your pipeline assumes, not the identity your function runs as.September 2026 · 26 min reads3S3 Compatible Storage: What It Is and How to ChooseS3 compatible storage means the provider answers the S3 REST API without you rewriting your client, a contract about wire behaviour, not a badge.September 2026 · 19 min reads3S3-Compatible Storage Providers: What to Compare"S3 compatible" is not a specification. Every provider implements a different subset of the API, and the checkbox won't tell you which half.September 2026 · 24 min readobject lockObject Lock and WORM Storage: How Immutability WorksObject lock is a bucket setting you cannot enable after creation. Here is how WORM retention, governance and compliance modes actually work.September 2026 · 18 min readawsUnderstanding Data Egress Cost When You Migrate Off AWSData egress cost is not one fee, it is a billing decision made per byte three times over.September 2026 · 9 min readawsUnderstanding AWS Egress Cost When You Migrate Off AWSA 40TB exit from us-east-1 is a one-time line item on the final invoice, and most teams see it for the first time after the migration has already finished.September 2026 · 9 min readovhcloudOVHcloud Object Storage: Notes for Storafleet's Providers PageOVHcloud Object Storage is S3-compatible object storage: region-scoped endpoints, standard bucket rules, access key auth, no special connector needed.September 2026 · 16 min reads3Bucket Explorer: Browse S3 Storage in the File BrowserA bucket explorer exists because the S3 ListObjectsV2 API is a paginated scan with no index, making cross-provider object lookup painful.September 2026 · 26 min readobject-lockObject Lock: WORM Storage and Immutability Across Cloud ProvidersObject lock is a write-once flag with a retention date, and the destination bucket must be locked before the first byte arrives.September 2026 · 8 min reads3S3 Compatible Storage Providers: How to Compare OptionsFeature matrices tell you nothing. Egress pricing, exit difficulty, and versioning semantics decide which S3-compatible provider you actually buy.September 2026 · 12 min readdigitaloceanDigitalOcean CDN: How It Works and When to Use OneDigitalOcean CDN is an edge cache in front of one Spaces bucket, not an origin-pull CDN for servers or dynamic content.September 2026 · 32 min reads3Download an S3 Folder as a Zip with StorafleetDownloading an S3 prefix as a zip is three jobs stacked up, listing the keys, assembling the archive, paying for the transfer, and where each one runs decides the cost.September 2026 · 8 min readawsAWS S3 Intelligent Tiering: How Automatic Cost Optimization WorksIntelligent-Tiering is a per-object monitoring fee, not a discount. Inventory access per prefix before you enable it.September 2026 · 10 min readwormWORM Compliant Cloud Storage: What It Means for Your DataWORM compliant cloud storage means objects cannot be overwritten or deleted until a set date, enforced by the storage provider's API, not by policy documents.September 2026 · 11 min readawsAmazon S3 Transfer Acceleration: How It WorksS3 Transfer Acceleration is a per-bucket switch that routes traffic through AWS edge locations and bills you per gigabyte in both directions.September 2026 · 6 min readociOracle Cloud Infrastructure Storage: Connecting StorafleetStorafleet connects to your OCI Object Storage bucket using an S3-compatible endpoint and a Customer Secret Key, which we store encrypted with AES-256-GCM.September 2026 · 9 min readcloud storage security credentialsWhat we can see, and what we cannotA plain explanation of what a storage control plane can access, how credentials are encrypted, why IAM-role connect means no keys leave your AWS account, and what we do not have.September 2026 · 7 min readmultcloud alternativeWhat migration tools charge to move your own dataA side-by-side of what each storage migration tool charges to move 1 TB, 10 TB and 50 TB. Per-gigabyte pricing adds up faster than most people expect.September 2026 · 9 min readobject storage migrationWhat nobody tells you about storage migrationsMoving object storage between clouds fails in the same nine ways every time. Multipart ETags, archived objects, request limits, and the verification step everyone skips.September 2026 · 7 min readbackblaze b2 vs wasabiBackblaze B2 vs Wasabi: the gotchas decide itB2 and Wasabi look nearly identical on price. The difference is in minimum storage duration, egress policy, and access patterns. Here is which one your workload actually wants.September 2026 · 8 min readrclone guirclone, honestly: what it does better than usrclone is free and excellent. Here is exactly what it does better than a hosted storage console, where it costs you time instead of money, and how to decide which you need.September 2026 · 7 min readcloud storage wasteCloud waste went up this year, and storage is where it hidesFlexera's 2026 survey found wasted cloud spend rose to 29%, the first increase in five years. Here is why storage is where most of it sits, and the five checks that find it.September 2026 · 9 min readmigrate s3 to r2Moving off S3 to Cloudflare R2: the honest guideA step-by-step S3 to R2 migration guide, including the gotchas nobody warns you about: multipart ETags, storage classes, the exit fee, and how to verify the move actually worked.