/// GUIDES / PUBLIC ACCESS & POLICY
Public access & policy
Control who can reach your objects. storafleet exposes the right control for each provider — AWS's Public Access Block where it exists, and a managed public-READ toggle where buckets rely on policies instead.
AWS: Public Access Block
On AWS, the Public Access Block (PAB) is a set of 4 flags that, when enabled, block all public access to the bucket regardless of any policy or ACL. storafleet lets you view and manage these flags directly.
Make public / private toggle
Some providers use bucket policies but lack PAB — MinIO, Wasabi, DigitalOcean, and custom S3-compatible endpoints. For these, storafleet offers a make bucket public / privatetoggle that adds or removes a managed, merge-safe public-READ policy statement.
- It is read-only — no listing and no anonymous write.
- It is merge-safe: your existing policy statements are preserved. Turning the toggle off removes only the statement storafleet added.
s3:GetObject only. Visitors who know an object's key can read it, but they can't list the bucket's contents or upload.Bucket-policy viewer
A read-only bucket-policy viewer shows the bucket's current policy and flags statements that grant public or cross-account access, so you can spot unintended exposure without editing anything.