Skip to content
DockHiveDockHiveDockHive Docs

S3 compatibility

Hive Buckets speaks the Amazon S3 API, so standard S3 tools and SDKs work with their default settings once you set the endpoint, region auto and path style.

Authentication

Section titled “Authentication”
  • AWS Signature Version 4, in the Authorization header or as a presigned URL (up to 7 days).
  • Streaming uploads: aws-chunked signed and unsigned payloads, with signed or unsigned trailers.
  • Browser POST policy uploads.
  • Signing region auto (also accepted: dockhive, us-east-1).
  • Signature Version 2 isn’t supported.

Supported features

Section titled “Supported features”
Area What’s supported
Buckets Create, list, head, delete (when empty), GetBucketLocation
Objects PutObject, GetObject (including ranges and conditional requests), HeadObject, CopyObject, DeleteObject, DeleteObjects (up to 1,000 keys), ListObjects, ListObjectsV2
Multipart uploads Create, upload part, upload part copy, complete, abort, ListMultipartUploads, ListParts
Checksums Content-MD5, x-amz-content-sha256, and flexible checksums: CRC32, CRC32C, CRC64NVME, SHA-1, SHA-256 (GetObject with ChecksumMode=ENABLED returns the stored checksum)
Object tagging PutObjectTagging, GetObjectTagging, DeleteObjectTagging
Bucket tagging Up to 50 tags per bucket
ACLs Canned private and public-read on buckets and objects. See Public and private buckets
Block Public Access Put/Get/DeletePublicAccessBlock, GetBucketPolicyStatus
Versioning Enable and suspend, ListObjectVersions, version ids on reads, copies, tags, ACLs and deletes. See Versioning
Object lock Default retention, GOVERNANCE and COMPLIANCE retention, legal holds, governance bypass. See Object lock
Bucket policies A subset of the policy language. See Bucket policies
CORS Put/Get/DeleteBucketCors. See CORS
Lifecycle Expiration, noncurrent version expiration, expired delete markers, aborting unfinished multipart uploads. See Lifecycle rules

Not available

Section titled “Not available”
Feature Notes
Virtual-hosted style (<bucket>.s3.dockhive.io) Not available yet. Use path style.
Static website hosting Coming later. PutBucketWebsite returns NotImplemented. HTML and SVG files are served as downloads; see HTML and SVG files.
Storage classes and lifecycle transitions There’s one storage class.
Replication configuration Not needed for durability: your files are encrypted and stored across multiple regions, so a whole region can go down without losing data.
MFA delete Not supported. Use object lock to protect files.
IAM users, roles and ARNs as principals Use Hive Buckets access keys and bucket policies.
ACL grants beyond private and public-read Use bucket policies.

Unsupported operations return the standard S3 error NotImplemented.

Behavior to know about

Section titled “Behavior to know about”
  • GetObjectLegalHold returns OFF for a version that never had a legal hold (Amazon S3 returns an error).
  • Access keys from other DockHive accounts can’t read through public-read ACLs; give them access with a bucket policy.
  • Very high request rates are slowed down with 503 SlowDown. SDKs retry these automatically.