Using the MinIO Client (S3)

With the MinIO client (mc) you can easily interact with your Object Storage. Here you will find practical examples of how to use the client for your bucket at storage.netways.cloud.

Prerequisites

• You have a User with an S3 key (Access Key and Secret Key).
• The MinIO client is installed on your system. If not, download it from min.io.

Configuring the MinIO Client

1. Create an alias

Create an alias for your NWS storage so you don't have to enter credentials each time:

mc alias set nws https://storage.netways.cloud ACCESS_KEY SECRET_KEY

Replace ACCESS_KEY and SECRET_KEY with your S3 credentials.

Basic Examples

1. List buckets

Show all buckets in your project:

mc ls nws

2. Upload a file

Upload a local file to your bucket:

mc cp ~/my-file.txt nws/my-bucket

3. Show bucket contents

Show all files in a bucket:

mc ls nws/my-bucket

4. Synchronize a directory

Synchronize a local directory with your bucket:

mc mirror --overwrite ~/my-directory nws/my-bucket/backup

5. Download a file

Download a file from the bucket:

mc cp nws/my-bucket/my-file.txt ~/Downloads/

6. Delete files

Delete a file from the bucket:

mc rm nws/my-bucket/my-file.txt

7. Show file statistics

Show details of a file:

mc stat nws/my-bucket/my-file.txt

8. Create a public link

Create a temporary download link (valid for 24 hours):

mc share download --expire 24h nws/my-bucket/my-file.txt

9. Create a bucket

mc mb nws/my-bucket2

Basic commands for bucket policies

For managing public access (anonymous access) you must use the mc anonymous commands:

1. Show current policy

mc anonymous get nws/my-bucket

2. Set policy

mc anonymous set <POLICY> nws/my-bucket[/prefix]

Examples for common policy scenarios

1. Allow public read access

mc anonymous set download nws/my-bucket

2. Allow public write access

mc anonymous set upload nws/my-bucket

3. Allow full public access

mc anonymous set public nws/my-bucket

4. Remove all public access

mc anonymous set private nws/my-bucket

mc: <ERROR> Unable to set anonymous `private` for `nws/my-bucket`. 200 OK.

5. Set policy for a specific prefix

mc anonymous set download nws/my-bucket/public/

JSON‑based policy management

1. Read JSON policy from bucket

mc anonymous get-json nws/my-bucket > policy.json

2. Apply JSON policy to bucket

mc anonymous set-json policy.json nws/my-bucket

Examples for JSON policies

Example 1: Read access for specific IP ranges

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": "*",
      "Action": ["s3:GetObject"],
      "Resource": ["arn:aws:s3:::my-bucket/*"],
      "Condition": {
        "IpAddress": {"aws:SourceIp": ["192.0.2.0/24"]}
      }
    }
  ]
}

Example 2: Time‑limited access

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": "*",
      "Action": ["s3:GetObject"],
      "Resource": ["arn:aws:s3:::my-bucket/public/*"],
      "Condition": {
        "DateLessThan": {"aws:CurrentTime": "2023-12-31T23:59:59Z"}
      }
    }
  ]
}

Tips & Hints

mc anonymous get-json nws/my-bucket > current.json
# Edit the file
mc anonymous set-json current.json nws/my-bucket

Bucket Versioning

Enabling versioning

Versioning allows storing multiple versions of an object:

# Enable versioning
mc version enable nws/my-bucket

# Check status
mc version info nws/my-bucket

Working with versions

# List all versions of an object
mc ls --versions nws/my-bucket/path/file.txt

# Download a specific version
mc cp nws/my-bucket/path/file.txt --version-id VERSION_ID ~/target/

# Delete a version
mc rm nws/my-bucket/path/file.txt --version-id VERSION_ID

Disabling versioning

mc version suspend nws/my-bucket

Object Lifecycle Management

Create lifecycle rules

Configure automatic deletion of objects:

1. Create a JSON configuration file (lifecycle.json):

{
  "Rules": [
    {
      "ID": "AutoDeleteTempFiles",
      "Status": "Enabled",
      "Filter": {
        "Prefix": "temp/"
      },
      "Expiration": {
        "Days": 7
      }
    },
    {
      "ID": "DeleteOldLogs",
      "Status": "Enabled",
      "Filter": {
        "Prefix": "logs/"
      },
      "Expiration": {
        "Days": 30
      }
    }
  ]
}

2. Apply the rule:

mc ilm rule import nws/my-bucket < lifecycle.json

Manage lifecycle rules

# List existing rules
mc ilm rule list nws/my-bucket

# Remove a rule
mc ilm rule remove nws/my-bucket --id "AutoDeleteTempFiles"

Alternative: Delete unversioned objects

{
  "Rules": [
    {
      "ID": "ExpireNonCurrentVersions",
      "Status": "Enabled",
      "NoncurrentVersionExpiration": {
        "NoncurrentDays": 90
      }
    }
  ]
}

Advanced expiration options

{
  "Rules": [
    {
      "ID": "ExpireAtSpecificDate",
      "Status": "Enabled",
      "Filter": {
        "Prefix": "project-archive/"
      },
      "Expiration": {
        "Date": "2024-12-31T00:00:00Z"
      }
    }
  ]
}

Object Locking

Here you can learn more about Object Locking, Retention and Legal Hold.

Create bucket with Object Lock

mc mb --with-lock nws/locked-bucket

Retention settings

# Set retention for an object
mc retention set governance 30d nws/locked-bucket/path/file.txt

# Query retention info
mc retention info nws/locked-bucket/path/file.txt

Legal Hold

# Enable legal hold
mc legalhold set nws/locked-bucket/path/file.txt

# Check status
mc legalhold info nws/locked-bucket/path/file.txt

Notes