IBM Cloud Docs
About IBM CephaaS Object Storage

About IBM CephaaS Object Storage

IBM® Storage Ceph® as a Service Object Storage is a highly available, durable, and secure platform for storing unstructured data. Unstructured data that are sometimes called binary or "blob" data, refers to data that is not highly structured in the database. Object storage is the most efficient way to store PDFs, media files, database backups, disk images, or even large structured datasets.

The files that are uploaded into IBM CephaaS Object Storage are called objects. Objects can be anywhere from very small (a few bytes) to very large. They are organized into buckets that serve as containers for objects, and which can be configured independently from one another. Objects themselves have their own metadata in the form of user-defined tags or legal holds. Within a bucket, the hierarchy of objects is effectively "flat", although it is possible to add prefixes to object names to provide some organization and to provide flexibility in listing and other operations. For guidance on creating and managing your buckets and objects, see Using AWS CLI.

All data stored in IBM CephaaS Object Storage is encrypted, erasure-coded, and dispersed across storage nodes.

All requests and responses are made over HTTPS. All GET and HEAD requests made to objects return an Etag value with the MD5 hash of the object to ensure integrity on the client side.

Developers use APIs to interact with their object storage. IBM CephaaS Object Storage supports a subset of the S3 API for reading and writing data, as well as for bucket configuration. Software development kits (SDKs) are available for GO framework.

Known limitations

This section includes the known limitations that might impact your experience.

  • Only one object user is supported

  • S3 features align with IBM Storage Ceph version 7.1

  • Virtual hosted buckets not supported

  • Static Web Hosting not supported

HMAC credentials

HMAC credentials consist of an Access Key and Secret Key pair for use with S3-compatible tools and libraries that require authentication.

The IBM CephaaS S3 API is a REST-based API for reading and writing objects. It uses HMAC Access Keys for authentication and supports a subset of the S3 API for easy migration of applications to IBM Cloud.

You can create a set of HMAC credentials using the console, CLI, and API. For instructions, see Create HMAC credentials.

Next Steps

After creating the credentials and uploading the S3 SSL certificate, you can proceed with creating buckets and objects by using the AWS CLI. For guidance on creating and managing your buckets and objects, see Using AWS CLI.

Also, see guidance on how to create S3 HMAC Credentials and upload the associated S3 SSL Certificate.