Document

# Use an Object Storage Bucket as Origin import DocButton from '~/components/webkit/DocButton.vue'; import Tabs from '~/components/tabs/Tabs' import Code from '~/components/Code/Code.astro' import Apiv4Rollout from '~/includes/snippets/apiv4Rollout/en/snippet.mdx' This guide walks you through setting a bucket as origin of an applications using the [Azion API](https://api.azion.com/), [Azion CLI](/en/documentation/products/azion-cli/overview/), and [Azion Runtime](/en/documentation/runtime/api-reference/storage/). There are separate instructions for API v3 using [legacy Origin](/en/documentation/products/build/applications/domains/) settings and API v4 using the new [Connector](/en/documentation/products/secure/connectors) product. :::tip In this guide, there are separate instructions for API v3 and API v4. If you're not sure which steps apply to your account, see [the Verify Your Account Migration guide](/en/documentation/products/guides/verify-account-migration/) to determine if your account has already been migrated. ::: --- ## Create a bucket and upload files This section describes how you can upload objects to a bucket and maintain project structure using the [Azion API](https://api.azion.com). In this scenario, you'll create a static application using two files, distributed into folders as follows:


1. Create the following `index.html` file inside of a local `src` directory:





    
    
    Document
    


    Hello world!
    I am an object from a bucket.


`} />

2. Now create the `style.css` file, which is referenced in the HTML, under the `styles` folder in the same directory:



3. Run the following `POST` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/) and writing the desired bucket name in `name` to create a read-only bucket:



4. You should receive the following response:



5. Run the following `POST` requests in your terminal for each file, replacing `` with the name of the bucket you just created:

    - For the `index.html` file, run the following command using `src/index.html` as the object key, and adding the object path as data:

/objects/src/index.html' \
--header 'Accept: application/json;' \
--header 'Content-Type: text/html' \
--header 'Authorization: Token [TOKEN VALUE]' \
--data '@./src/index.html'
`} />

    - For the `styles.css` file, run the following command using `src/styles/style.css` as the object key, and adding the object path as data:

/objects/src/styles/style.css' \
--header 'Accept: application/json;' \
--header 'Content-Type: text/css' \
--header 'Authorization: Token [TOKEN VALUE]' \
--data '@./src/styles/style.css'
`} />

6. You should receive the following responses for the files:





:::caution[Warning]
When a bucket is configured with **read-write permissions**, any user can access and modify its content (for example, by sending a PUT request to overwrite files). If the bucket is used as an origin for an applications, this configuration may expose the content to unauthorized modifications. However, suppose the bucket is accessed through an function. In that case, the risk is managed by the logic implemented in the function code, allowing developers to enforce stricter controls over who can access or modify the data. To mitigate risks, always verify the required permissions for each use case and implement proper access controls. Read more on [Authentication and permissions](/en/documentation/products/store/object-storage/#authentication-and-permissions).
:::

---

## Create an applications and set origin type to Object Storage

Now that your bucket is populated with files, you can create a new applications and a domain to set the bucket as the origin of the content and serve these objects.


    Console - Connectors
    Console - Origins
    API v4
    API v3
    CLI 



To facilitate this process, use the [Applications Proxy](/en/documentation/products/guides/edge-application-proxy-template/) template:

1. Access [Azion Console](https://console.azion.com).
    - If you don't have an account yet, create a new one [by visiting the sign-up page](https://console.azion.com/signup).
2. On the homepage, select the **+ Create** option.
3. Find the **Applications Proxy** card in the templates section and select it.
4. Give your application an easy-to-remember name.
5. In **Route to bypass**, type `/` to specify the root path of the application.
6. Wait for the deployment process to finish.
7. Copy the domain of the application, in the format `http://xxxxxxxxxx.map.azionedge.net/`.

:::note
The link to the applications allows you to see it on the browser. However, it takes a certain time to propagate and configure the application in Azion’s edge locations. It may be necessary to wait a few minutes for the URL to be activated and for the application page to be effectively displayed in the browser.
:::

Now you need to configure a new **Connector** to link your application to your Object Storage bucket. To do so:

1. [Access Azion Console](/en/documentation/products/guides/how-to-access-azion-console/) > **Connectors**.
2. Click the **+ Connector** button.
3. In the **General** section, give your connector a unique and descriptive name (e.g., `My Object Storage Connector`).
4. In the **Connector Type** section, select **Object Storage**.
5. In the **Connection Options** section:
    - For **Bucket**, select the name of the bucket you created in the previous steps. The bucket selector lists your existing buckets and provides a search field.
    - For **Prefix**, enter `/src` (or the prefix you used when uploading your objects).
6. Set the **Status** to **Active**.
7. Click the **Save** button.

To activate the Connector in your applications:

1. Access the **Rules Engine** tab.
2. Edit the default rule or add a new request rule.
3. In the **Criteria** section, to apply the Connector for your whole application, set the **criteria** to `If ${uri} starts with /`.
4. In the **Behavior** section, select the Set Connector behavior.
5. Select the Connector you want to apply.
6. Click the **Save** button.
7. Wait some time for the changes to propagate to the edge.

Once the changes have been made, access `http://xxxxxxxxxx.map.azionedge.net/index.html` to see the HTML file you uploaded with the applied CSS style.




:::caution
Using Object Storage as an origin directly in **Applications > Origins** is a legacy flow. For migrated accounts, the official and recommended configuration is via **Connectors** and the **Set Connector** behavior.
:::
To facilitate this process, use the [Applications Proxy](/en/documentation/products/guides/edge-application-proxy-template/) template:

1. Access [Azion Console](https://console.azion.com).
    - If you don't have an account yet, create a new one [by visiting the sign-up page](https://console.azion.com/signup).
2. On the homepage, select the **+ Create** option.
3. Find the **Applications Proxy** card in the templates section and select it.
4. Give your application an easy-to-remember name.
5. In **Origin Address**, type `httpbin.org`. 
    - This is a temporary origin that will later be replaced with an Object Storage origin.
6. In **Route to bypass**, type `/` to specify the root path of the application.
7. Wait for the deployment process to finish.
8. Copy the domain of the application, in the format `http://xxxxxxxxxx.map.azionedge.net/`.

:::note
The link to the applications allows you to see it on the browser. However, it takes a certain time to propagate and configure the application in Azion’s edge locations. It may be necessary to wait a few minutes for the URL to be activated and for the application page to be effectively displayed in the browser.
:::

Now you need to configure a new **Object Storage** origin and determine that your application should retrieve content from the bucket and prefix you created. To do so:

1. [Access Azion Console](/en/documentation/products/guides/how-to-access-azion-console/) > **Applications**.
2. Click the proxy application you created in the previous steps.
3. Navigate to the **Origins** tab.
4. Click the **+ Origin** button.
5. Give your origin an easy-to-remember name.
6. In **Origin Type**, select **Object Storage**.
7. In **Bucket Name**, add the name of the bucket you created in the previous steps.
8. In **Prefix**, add `/src`, which is the prefix you added to the object keys uploaded previously.
9. Click the **Save** button.

To activate the origin in your applications:

10. Navigate to the **Rules Engine** tab.
11. Select the **Default Rule**.
12. Under **Behaviors**, in the **Set Origin** behavior, replace the **Default Origin** with the origin you created for your bucket.
13. Click the **Save** button.
14. Wait some time for the changes to propagate to the edge.

Once the changes have been made, access `http://xxxxxxxxxx.map.azionedge.net/index.html` to see the HTML file you uploaded with the applied CSS style.



1. Run the following `POST` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/):






2. You should receive a response similar to:



3. Copy the value from the `edge_application_id` field and paste it in a text editing app to save it for later requests.

4. Run the following `POST` request in your terminal to create an Connector, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/)



5. Copy the value from the `` field and paste it in a text editing app to save it for later requests.

6. You should receive a response similar to:

",
  "name": "object storage connector",
  "last_editor": "your-email@example.com",
  "last_modified": "2025-07-22T14:34:31.009649Z",
  "active": true,
  "product_version": "1.0",
  "type": "edge_storage",
  "attributes": {
    "bucket": "app-origin",
    "prefix": "/"
  }
}`} />

7. Run the following `POST` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/)



8. You should receive a response similar to:



9. Copy the URL in the `workload_domain` value and paste it in a text editing app to access later. 

10. Run the following `POST` request to bind the Workload to your Applications, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/), `` with the ID of the applications and `` with the id of the Workload.

/deployments \
  --header 'Accept: application/json' \
  --header 'Authorization: Token [TOKEN VALUE]' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "Object Storage App",
  "current": true,
  "active": true,
  "strategy": {
    "type": "default",
    "attributes": {
      "edge_application": ""
    }
  }
}'`} />


11. Run the following `POST` request in your terminal to create a **Rules Engine** rule, replacing `` variable with the Applications ID and ``with the Connector ID you copied previously:

/request_rules \
  --header 'Accept: application/json' \
  --header 'Authorization: Token [TOKEN VALUE]' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "string",
  "active": true,
  "criteria":
    [
      {
        "conditional": "if",
        "variable": "\${uri}",
        "operator": "starts_with",
        "argument": "/"
      }
    ]
  ],
  "behaviors": [
    {
      "type": "set_edge_connector",
      "attributes": {
        "value": ""
      }
    }
  ]
}'
`} />

12. You should receive a response similar to:

",
    "name": "string",
    "active": true,
    "criteria": [
      [
        {
          "conditional": "if",
          "variable": "\${uri}",
          "operator": "starts_with",
          "argument": "/"
        }
      ]
    ],
    "behaviors": [
      {
        "type": "set_edge_connector",
        "attributes": {
          "value": ""
        }
      }
    ],
    "description": "",
    "order": 1,
    "last_editor": "your-email@example.com",
    "last_modified": "2025-07-25T19:29:30.684210Z"
  }
}`} />



13. Wait some time for the changes to propagate.

Once the changes have been made, access the domain you created, in the format `http://xxxxxxxxxx.map.azionedge.net/index.html`, to see the HTML file you uploaded with the applied CSS style.




1. Run the following `POST` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/):



2. You should receive a response similar to:

",
        "name": "object storage app",
        "delivery_protocol": "http"
        ...
    },
    "schema_version": 3
}`} />

3. Copy the value from the `edge_application_id` field and paste it in a text editing app to save it for later requests.
4. Run the following `POST` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/) and `` with the ID of the applications you created:

"
}'`} />

5. You should receive a response similar to:

",
        "name": "object storage domain",
        ...
        "edge_application_id": "",
        "is_active": true,
        "domain_name": "xxxxxxxxxx.map.azionedge.net",
        ...
    },
    "schema_version": 3
}`} />

6. Copy the URL in the `domain_name` value and paste it in a text editing app to access later. 
7. Run the following `POST` request to create an object storage origin for the application, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/), `` with the ID of the applications, and the value of `bucket` with the name of the bucket you created:

/origins' \
--header 'Accept: application/json;' \
--header 'Authorization: Token [TOKEN VALUE]' \
--header 'Content-Type: application/json' \
--data '{
    "name": "object storage origin",
    "origin_type": "object_storage",
    "bucket": "app-origin",
    "prefix": "/src"
}'`} />

8. You should receive a response similar to:

",
    "origin_key": "bdcd7003-ba53-4ed8-8ca0-05b1357cdafd",
    "name": "New Object Storage origin",
    "origin_type": "object_storage",
    ...
    "bucket": "new-bucket-rw",
    "prefix": "/"
  },
  "schema_version": 3
}`} />

9. Copy the value from the `origin_id` field and paste it in a text editing app to save it for later requests.
10. Run the following `GET` request in your terminal to retrieve the ID of the default rule of your applications's **Rules Engine**, replacing `` variable with the applications ID you copied previously:

/rules_engine/request/rules' \
--header 'Accept: application/json;' \
--header 'Authorization: Token [TOKEN VALUE]'
`} />

11. You should receive a response similar to:

",
            "name": "Default Rule",
            "phase": "default",
            "behaviors": [
                {
                    "name": "set_origin",
                    "target": ""
                },
                {
                    "name": "set_cache_policy",
                    "target": ""
                }
            ],
            ...
            "description": ""
        }
    ]
}`} />

12. Copy the value from the `rule_id` field and paste it in a text editing app to save it for later requests.
13. Run the following `PATCH` request to modify the default rule, replacing `` with the ID of the rule you retrieved in the previous step, leaving the `set_cache_policy` object the same as received in the response:

/rules_engine/request/rules/' \
--header 'Accept: application/json;' \
--header 'Content-Type: application/json' \
--header 'Authorization: Token [TOKEN VALUE]' \
--data '{
    "behaviors": [
        {
            "name": "set_origin",
            "target": ""
        },
        {
            "name": "set_cache_policy",
            "target": ""
        }
    ]
}'`} />

14. Wait some time for the changes to propagate.

Once the changes have been made, access the domain you created, in the format `http://xxxxxxxxxx.map.azionedge.net/index.html`, to see the HTML file you uploaded with the applied CSS style.




## Requirements 

- [Azion CLI installed](/en/documentation/products/azion-cli/overview/#installing-azion-cli). 
- [A personal token configured](/en/documentation/devtools/cli/globals/#token).

To create an applications with the necessary configurations to use a bucket as origin: 








:::tip
After creating your application with an Object Storage bucket as the origin, you can manage and configure settings, such as [cache settings](/en/documentation/products/guides/cache-settings/).
:::