How do I request access to use storage endpoints in a browser or SDK?

Using Our Storage Endpoints From SDKs or Browsers

We support customers who want to connect directly to our S3-compatible storage endpoints from their own applications or SDKs. Because this involves CORS and security considerations, we don’t allow all external domains by default.

How to request access

If you need your application or SDK to call our storage endpoints directly (for example, from a browser or mobile app):

Open a support ticket with the following details:

The domain(s) or subdomain(s) your application will use (e.g., https://app.example.com). Whether you require read-only access (GET/HEAD) or read/write access (PUT/POST/DELETE). Any specific headers your SDK or app sends in requests (if different from standard AWS SDK headers).

Our team will review your request and configure the necessary CORS rules and access controls for your tenant.

Security notes

We do not recommend embedding long-lived access keys in browser or mobile apps. Please use temporary credentials or presigned URLs whenever possible.

CORS rules will only be opened for the exact origins you request (wildcards such as * are not permitted without review).

Each customer must use their own isolated credentials/policies — shared keys are not supported.

Last updated