leaseweb knowledge base logo - white color on the orange background
leaseweb knowledge base logo - white color on the orange background

Object Storage Tech Demo

< Back

Object Storage Tech Demo

In this demo, we walk you through the key steps of using Leaseweb Object Storage.

Learn how to create buckets, generate access keys, configure a local client using s3cmd, and upload various file types with encryption. We will also show you how to manage security policies for controlling access to your data and demonstrate how to access files via the browser securely.

Watch the full video to see how easy it is to manage and protect your data using Leaseweb Object Storage! 

Expand this to see and follow the steps as described in the video:
  1. Sign in to the StorageGrid Tenant Manager
  2. Navigate to the “Buckets” creation section and create a bucket name
  3. Select your region and create the bucket
  4. Now navigate to “My access keys” and click, “Create key”
  5. Then click “Create Access key”
    • Here you can copy your “access key ID” and your “Secret Access key”
    • See more here
  6. Configure the local client to connect to the bucket using the access keys created
    • For this example, we will use a client called ‘s3cmd’
  7. Open the terminal, and if ‘s3cmd’ is not installed, install it
  8. Run the command s3cmd --configure s3://tijmen-gives-a-demo
  9. Enter the Access Key, Secret Key, Region, Endpoint, and Bucket name template
  10. Set an encryption password for client-side encryption
  11. Next, upload 3 types of files: unencrypted, client-side encrypted, and server-side encrypted
  12. First, upload an unencrypted file: 
    • s3cmd put file.txt s3://tijmen-gives-a-demo 
  13. Next, upload a client-side encrypted file: 
    • s3cmd put client_side_encrypted_file.txt s3://tijmen-gives-a-demo -e
  14. Finally, upload a server-side encrypted file: 
    • s3cmd put server_side_encrypted_file.txt s3://tijmen-gives-a-demo --server-side-encryption
  15. You can list all the files uploaded to the bucket using the below command: 
    • s3cmd ls s3://tijmen-gives-a-demo
  16. Access the object storage through a browser
    • Navigate to https://tijmen-gives-a-demo.nl.object-storage.io to see the list of files
      • Notice that unencrypted and server-side encrypted files can be viewed, while the client-side encrypted file is unreadable
  17. Set a security policy to prevent unauthorized access
  18. Upload private_access.json using the command: 
    • s3cmd setpolicy private_access.json s3://tijmen-gives-a-demo
      • After setting the security policy, the files are no longer accessible
      • Refresh the browser to see an “Access denied” message 
  19. Upload now a policy that allows public access
  20. Upload `public_access.json` using the command: 
    • s3cmd setpolicy public_access.json s3://tijmen-gives-a-demo
      • The browser can now list and download files again
      • Refresh the browser to see if the files are accessible
  21. You can also download files using the client
    • s3cmd get s3://tijmen-gives-a-demo/client_side_encrypted_file.txt download.txt
      • You can see the downloaded and decrypted files using the configured encryption password
  22. Set a policy for partial access
    • Upload `partial_access.json` using:
      • vim partial_access.json
    • Here you can now see the statement of your partial access policy
      • Make sure you verify that your partial access restrictions are in place. 
    • If we download `server_side_encrypted_file.txt`, you can see it is denied but the `file.txt` is allowed. Now, list the bucket contents. 
  23. Next, remove a file from the bucket
  • object storage, tech demo