ListBuckets
Pagination and LocationConstraint echo.
API Reference
The Triton Cloud REST API is the surface behind the console, the CLI, and the Terraform provider. Everything they do, they do through these routes.
Authentication
Authenticate every request with a bearer API token in the request header.
Instances
- InstancesContent to follow
Packages
- PackagesContent to follow
Networking
- VPCContent to follow
- SubnetsContent to follow
- Reserved IPsContent to follow
- NAT GatewayContent to follow
- FirewallContent to follow
Object Storage
- BucketsContent to follow
Teams & Projects
- TeamsContent to follow
- ProjectsContent to follow
Billing
- InvoicesContent to follow
- UsageContent to follow
API Tokens
- API TokensContent to follow
S3 compatibility, operation by operation.
Core object and Bucket operations work with standard S3 clients and SDKs. This matrix lists the behavior you will actually observe, including configurations accepted but not yet enforced.
- Surface
- Manta S3 gateway
- Signature
- SigV4
- Default region
- us-east-1
- Source
- Gateway implementation, not a spec sheet
41Supported
7Partial
4Accepted, not enforced
6Deliberate reject
10Not implemented
Supported
Implemented and exercised by tests, including the error shapes clients use.
Partial
The common path works; the named exclusion may affect some integrations.
Accepted, not enforced
The configuration round-trips, but the requested behavior does not take effect.
Deliberate reject
Returns an explicit error so clients do not mistake an absent capability for success.
Not implemented
No handler. The request returns 501 NotImplemented.
SHOW
Buckets
19 operationsCreateBucket
Canned ACL on create, idempotent same-owner create, and Object Lock initialization.
HeadBucket
404 when absent and 403 across tenants.
DeleteBucket
Returns BucketNotEmpty while objects remain.
GetBucketLocation
Echoes the configured region.
GetBucketVersioning · PutBucketVersioning
Enabled, Suspended, and null-version handling.
GetBucketCors · PutBucketCors · DeleteBucketCors
Origin matching, preflight OPTIONS, and request-method-aware rules.
GetBucketTagging · PutBucketTagging · DeleteBucketTagging
Round-trips sorted by key; more than 50 tags is rejected.
GetPublicAccessBlock · PutPublicAccessBlock · DeletePublicAccessBlock
All four flags are enforced.
GetBucketPolicy · PutBucketPolicy · DeleteBucketPolicy · GetBucketPolicyStatus
Policy evaluation works; tag-based condition keys are not evaluated.
GetBucketAcl · PutBucketAcl
Canned ACLs round-trip; email-addressed grants are not supported.
GetBucketOwnershipControls
Returns OwnershipControlsNotFoundError; buckets use the earlier ACL model.
PutBucketEncryption
No default encryption configuration.
PutBucketLogging
No server-side request logging into a bucket.
PutBucketReplication
No same-region or cross-region replication.
PutBucketNotificationConfiguration
No object event destinations.
PutBucketWebsite
No static website hosting or redirect rules.
PutBucketInventory
No scheduled CSV manifests.
PutBucketAnalytics · PutBucketIntelligentTieringConfiguration · PutBucketAccelerateConfiguration · PutBucketRequestPayment
AWS-specific analytics, acceleration, tiering, and requester-pays surfaces are absent.
Objects
11 operationsPutObject
SigV4, streaming, Content-MD5, conditional writes, versioning, retention, tags, and ACLs.
GetObject
Ranges, conditionals, versionId, and response-header overrides.
HeadObject
Tag count, retention, legal hold, and part count.
DeleteObject
Version-aware delete markers, Object Lock, and conditional headers.
DeleteObjects
Up to 1,000 keys; retention is applied to every entry.
CopyObject
Metadata directive, copy-source conditionals, and versioned sources.
GetObjectTagging · PutObjectTagging · DeleteObjectTagging
Tags on write and tag count on read.
GetObjectAcl · PutObjectAcl
Canned ACLs round-trip; email- and user-id-addressed grants are absent.
RestoreObject
There is no archive tier to restore from.
GetObjectTorrent
Returns NoSuchKey; AWS deprecated BitTorrent delivery.
GetObjectAttributes
Use HeadObject and ListParts for the same information.
Listing
5 operationsListObjectsV2
Continuation tokens, start-after, prefixes, and delimiters.
ListObjects
The v1 marker and delimiter form, including NextMarker.
ListObjectVersions
Versions and delete markers share one ordered, paged result.
ListMultipartUploads
Paginated and honors max-uploads.
ListParts
Lists in-flight parts; per-part metadata is not retained after completion.
Multipart upload
5 operationsCreateMultipartUpload
Initiates with tags, retention, content type, and user metadata.
UploadPart
5 MiB minimum except the last part, with MD5 verification.
UploadPartCopy
Range header and versioned source.
CompleteMultipartUpload
Up to 10,000 parts with the multipart ETag shape clients expect.
AbortMultipartUpload
Releases parts and their counted usage.
Object Lock
3 operationsGetObjectLockConfiguration · PutObjectLockConfiguration
Bucket default retention round-trips.
GetObjectRetention · PutObjectRetention
GOVERNANCE and COMPLIANCE modes, including governed bypass.
GetObjectLegalHold · PutObjectLegalHold
ON and OFF; a legal hold is never bypassable.
Lifecycle
10 operationsExpiration.Days
Prefix-filtered expiry driven by a background worker.
NoncurrentVersionExpiration.NoncurrentDays
Expires noncurrent versions after N days.
AbortIncompleteMultipartUpload
New buckets receive a default seven-day cleanup rule.
Rule IDs and validation
Invalid status, duplicate or long IDs, and non-positive day counts are rejected.
x-amz-expiration
Emitted on PUT, HEAD, and GET when a rule matches.
NoncurrentVersionExpiration.NewerNoncurrentVersions
Refused because retain-newest-N needs unavailable per-key version counting.
Transition · NoncurrentVersionTransition
Stored and returned, but no objects move between storage classes.
Expiration.Date
Stored and returned; the worker acts on Days, not an absolute date.
Expiration.ExpiredObjectDeleteMarker
Stored and returned; no reaper removes orphaned delete markers.
Filter.Tag · Filter.And · Filter.ObjectSizeGreaterThan · Filter.ObjectSizeLessThan
Stored and returned; enforcement still scopes on prefix only.
Authentication and access
8 operationsSigV4
Header and presigned forms, including aws-chunked signing.
Presigned URLs
GET and PUT with a lifetime from one second to seven days.
Anonymous read
Public reads require both the ACL and public access block to allow them.
Per-bucket rate limiting
Workspace request limits can be overridden per bucket.
IAM users and access keys
Users and scoped keys work; inline user policies are not evaluated.
STS
GetSessionToken works; AssumeRole and GetCallerIdentity have cross-tenant gaps.
SigV2
The legacy signature is explicitly refused.
POST object
Signed browser form uploads are absent; use a presigned PUT.
Encryption
3 operationsSSE conflict detection
Malformed or contradictory headers fail before bytes are written.
SSE-S3 · SSE-KMS · SSE-C
Returns 501 instead of accepting encryption headers while storing plaintext.
Bucket default encryption
PutBucketEncryption is not implemented.
Response headers and errors
4 operationsx-amz-request-id · x-amz-id-2
Present on every response for support correlation.
RequestId in error XML
Present in 4xx and 5xx bodies where boto3 reads it.
x-amz-version-id · x-amz-delete-marker · x-amz-tagging-count
Emitted under the same conditions as S3.
ETag
Correct in the HTTP header and most XML; quoting differs in one response shape.
THE ROW TO READ TWICE
Accepted, not enforced
This state is limited to lifecycle configuration. Transition rules, absolute expiration dates, delete-marker cleanup, and tag or size filters can round-trip without taking effect. We name that here so a successful write is not mistaken for successful enforcement.