Skip to playerSkip to main content
  • 4 days ago
Transcript
00:00hello and welcome in this demo let us look at oci object storage service we are going to create a
00:10bucket and upload an object to the to that particular bucket so let's get started as you
00:17can see here i am logged on to the oci console so to access object storage service let me click on
00:23the navigation menu and click on storage and you can see all the storage services listed here block
00:28storage file storage object storage so i'll click on object storage and it will give me the
00:36interface to create buckets and upload objects so it you can see here it says create bucket i click
00:41on it and it picks up a bucket name default name i'm okay with that name and then it asks me to
00:47choose a storage tier whether it's standard or archive and remember there is also a tier in
00:52between called infrequent access and you can enable auto tiering which basically moves infrequently
00:58accessed objects from the standard tier to the less expensive infrequent access tier so you could
01:04do that and be careful what storage tier you choose because you can only specify this during creation
01:10you cannot once set you cannot change the storage tier in which a bucket resides and then there are
01:16some advanced functionality around versioning creation creating automation based on object state
01:24changes etc and right below here you can see encryption data is encrypted by by default using oracle managed
01:32keys but if i have a vault and i have access to that vault and and i have a key i can actually
01:38encrypt my objects using that particular key that's the customer managed keys so i'll go with the default
01:43option click create here and now my bucket is created so as simple as that and now i can go ahead
01:48and upload an object so let me quickly do that i'll click upload and i'll choose a file from my local
01:55machine and i'll upload this file and you can see here that the file is now uploaded uh you can see
02:05it's 119 kb in size and if i click on this ellipsis i can view object details i get a public url remember
02:12the service has public endpoints so i get this url and i can see all some some the other uh things
02:19listed here and if i uh click on here and i uh paste this url you will see that it says that the
02:28bucket named uh the bucket we just created does not exist or we don't have authorization to access
02:34it definitely we created the bucket so let me just close it here and uh the reason it's not showing up
02:40is because we need to change the visibility so right now it's private meaning that uh
02:46people who have uh an anonymous uh access unauthenticated access they cannot access this
02:54particular uh of bucket and objects in that bucket so let me go ahead and make it public and it gives
02:59me a warning saying that you should rather use pre-authenticated request we'll look into what these
03:04are i'll click save changes here and now if i go back to the to the url you can see
03:09that the object is visible here right but because it gave me a warning so let us actually go ahead
03:15and change the visibility to private i'll click save changes here and now if i go back and access my
03:21object you can see that i get the same error message because it doesn't allow anonymous and another
03:28unauthenticated access because it's a private bucket but how can we can we enable uh people to to access
03:36that object while keeping the bucket uh private so there's an option which is called pre-authenticated
03:41request and to use it i'll just click on this ellipsis and click on create pre-authenticated request
03:48and what it does it gives a security token which you can use with the url and only people who have
03:54access to that url can access the object other other people cannot uh access that object and you can
04:01create this on a bucket level or an object level i'll choose object and then you can decide what
04:06kind of access and you have to be careful on expiration date once set this cannot be changed
04:12so i'm okay with these options i'll click create pre-authenticated request and it says that you know
04:17copy this url because it will not be shown again so i'll click this url i'll go back to my browser
04:24and i'll paste the url and now you can see i can access the object so what is the difference between this
04:29and the previous url the difference is if you notice that in this url i have this extra token
04:35security token with kind of p slash uh denoted by that it this security token is what pre-authenticated
04:43request creates and using that even people who are anonymous are and unauthenticated they can still
04:51access this object but other people who are anonymous and unauthenticated and they don't have access to
04:58that url they cannot access the object so um this was a quick demo on how to leverage some of the
05:05capabilities of object storage service i hope you found this demo useful thanks for watching
Be the first to comment
Add your comment

Recommended