--- title: "Setting Up Access to Portal Content Using the S3 API: CTERA Fusion" slug: "setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1" tags: ["8.2", "Portal"] updated: 2025-06-18T06:18:15Z published: 2025-06-18T06:18:15Z canonical: "kb.ctera.com/setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.ctera.com/llms.txt > Use this file to discover all available pages before exploring further. # Setting Up Access to Portal Content Using the S3 API: CTERA Fusion CTERA Fusion enables the content of cloud folders to be accessed using the S3 API, either using supported S3 operations in programs or using an S3 browser application like FileZilla, WinSCP, Cyberduck, CloudBerry, and S3 Browser. **Note** CTERA Fusion supports S3 browsers that use multipart uploads. The capabilities of CTERA Fusion include: **In-place Read/Write** – Enables reading and writing directly to a global file system using the S3 protocol eliminating expensive and time-consuming processes of copying data to external S3 buckets. **Single namespace across file and object** – Interact with data generated at the edge using standard object storage S3 protocols, or access cloud-generated data from the edge using NAS protocols. Data is available where you need it, when you need it. **Support for multipart uploads** – Benefit from multipart uploads, making ingestion and sharing of large files even more efficient. **Robust security** – All data is secured in transit via TLS and encrypted at rest, providing an added layer of protection. **NT-ACL support** – File ACLs are preserved. **TCP 443 support** – TCP 443 is supported. **Self-signed certificate support** – Self-signed certificates can be used. [Embedded content](https://ctera.wistia.com/embed/iframe/vd8khpox6a) To set up access to a cloud folder using the S3 API, you need to do the following: - [Set up the CTERA Portal server](/v1/docs/setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1#setting-up-the-ctera-portal-server) - [Create an S3 Bucket](/v1/docs/setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1#creating-an-s3-bucket) for the cloud folder - [Create an Access Key ID and Secret Access Key](/v1/docs/setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1#creating-access-key-ids-and-secret-access-keys) After these steps, you can access the cloud folder content using the S3 API by providing the following: - The endpoint for the bucket, defined when you create the bucket - The Access Key ID - The Secret Access Key For details, see [Accessing Portal Content Using the S3 API](/v1/docs/setting-up-access-to-portal-content-using-the-s3-api-ctera-fusion-1#access-via-code-using-the-s3-protocol). ## Setting Up the CTERA Portal Server The global administrator must specify at least one portal server as an S3 endpoint. For details, see the description of the **S3 Endpoint** field in [Editing Server Settings:General Settings](/v1/docs/editing-server-settings-5#general-settings). **Note** Checking the **S3 Endpoint** is required on only one server. For high availability, the global administrator can set the **S3 Endpoint** on more than one server. ## Creating an S3 Bucket To access content you must set up the required cloud folders as buckets, one bucket for each cloud folder. **To create an S3 bucket:** 1. Select **Folders > Buckets** in the navigation pane. The **Buckets** page opens, displaying all cloud folders linked as S3 buckets. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-HKH4KT9H.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) 2. Click **New Bucket**. The **New Bucket** window is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-V8BAT4SQ.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) 3. Complete the fields: **Name** – A name for the bucket. The name **cannot** include uppercase letters. CTERA recommends a name between 3 and 63 characters. Valid characters are lowercase letters, numbers, and special characters. **Description (Optional)** – A description for the bucket. **Cloud Folder Owner** – The user who owns the bucket. The owner controls access to the bucket using the Access Key ID and Secret Access Key pair created for that user. **Linked Cloud Folder** – A folder from the list of folders associated with the folder owner. **Bucket Address** – The address for the bucket, generated by CTERA Fusion, and used for the bucket endpoint, as described below in the procedure **To get the bucket endpoint**. 4. Click **Save**. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-HSFVKDB4.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) To access the bucket content using the S3 API, you need the endpoint. **To get the bucket endpoint:** 1. Select **Folders > Buckets** in the navigation pane. The **Buckets** page opens, displaying all cloud folders linked as S3 buckets. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-HSFVKDB4.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) 2. Click the bucket. The bucket window is displayed with the name of the bucket as the window title. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-NIKY9Y7V.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) 3. Copy the **Bucket Address** to use as the endpoint. **Note** The endpoint includes the DNS name and not the IP address. You cannot access the bucket using an endpoint with an IP address. 4. Optionally, edit the **Description (Optional)** field. 5. Click **Save** or **Cancel**. You can delete a bucket by selecting the bucket row and clicking **Delete** and then **DELETE** in the confirmation window. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-7N1KQXST.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) ## Creating Access Key IDs and Secret Access Keys A single Access Key ID and Secret Access Key pair can be used to access all the buckets assigned for a specific user. Each user can have more than one pair of Access Key IDs and Secret Access Keys, up to a maximum of 100. Both the administrator can create the Access Key ID and Secret Access Key pair for a user as described in [Setting Up API Keys to Access S3 Buckets](/v1/docs/setting-up-api-keys-to-access-s3-buckets-2), or the end user can create the Access Key ID and Secret Access Key pair in the end user portal, as described in [Using an S3 Browser](/v1/docs/using-an-s3-browser-to-access-your-data). ## Accessing Portal Content Using the S3 API Access to portal content using the S3 API can be done using an S3 browser or in code. ### Access via an S3 Browser You require the following information: - The endpoint for the bucket - The Access Key ID - The Secret Access Key You enter this information in the S3 browser to access the content, for example using S3 Browser: ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-PTQSHEZS.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A19%3A03Z&se=2026-11-11T05%3A19%3A03Z&sr=c&sp=r&sig=I0lFTYUm4GgqiG2s3Q6j7%2BylNSpfjzeLTwp5%2FKJc5yM%3D) ### Access via Code Using the S3 Protocol The following S3 operations are supported: - GetObject - HeadObject - DeleteObject - S3 PutObject - S3 ListObject - Copy - Get Byte Range - CreateMultipartUpload - ListMultipartUploads - UploadPart - ListParts - AbortMultipartUpload - CompleteMultipartUpload **Note** The following operations are **not** supported: - Create a bucket - Versioning - SignedURLs