How-to guides for S3.

Amazon S3 has no rename API — keys are immutable. Here's the standard copy + delete pattern, with metadata and tags preserved.

How large uploads work in S3 Viewer and from the CLI — streaming, retries, and the 5 GB single-PUT cap.

Never ship AWS keys to the browser. How S3 Viewer uploads through its server with nothing to configure on the bucket, and how presigned URLs fit in.

Browser, AWS CLI, or presigned URL — three ways, with the object's own filename and zero key exposure.

S3 has no search API. Filter by prefix in the current folder, or reach for S3 Inventory + Athena.

Versioning, delete markers, MFA Delete — and how to actually purge instead of soft-deleting.

DeleteObjects API explained — up to 1,000 keys per request, and how versioning changes the answer.

S3 has no folders — only key prefixes. How the console, the CLI and S3 Viewer create one, and why an empty folder can vanish.

There's no UpdateObject call — changing a header means copying the object onto itself with MetadataDirective REPLACE.

S3 has no edit API either — here's the read, change, conditional-write pattern for small text files, in the console, the CLI, and S3 Viewer.

S3 has no folder download endpoint. The CLI syncs a directory tree; S3 Viewer streams a zip built object by object, with size and count limits.

Find/replace, prefixes, suffixes and extensions across a whole selection — previewed before anything is copied or deleted.

A failed or abandoned upload leaves parts behind that ListObjects can't see and storage still bills for — here's how to find and abort them.

Copy link for a 15-minute presigned URL, or an email invite for ongoing access — when each is the right call.

Skip per-person IAM users for human collaboration. Email invite, per-bucket role, one-click revoke.

One credential per provider, one sidebar, and one click to switch between them.

S3 Viewer's Copy to another bucket… now streams a file or folder across servers in-app; rclone still wins for bulk migrations.

Switch servers and buckets from the sidebar, plus AWS CLI named profiles for scripts.

The IAM s3:prefix Condition that everyone misses, plus when workspace roles are simpler than IAM.

A nine-point checklist: IAM actions and ARNs, bucket policy denies, Block Public Access, KMS keys, object ownership, and the 403-that-is-really-a-404.

The exact least-privilege policy JSON, the console and CLI steps, and how to connect the keys without s3:ListAllMyBuckets.