Struct S3Storage 

pub struct S3Storage { /* private fields */ }

Available on crate features storage-azure or storage-gcs or storage-local or storage-s3 only.

S3-compatible object storage (AWS S3, Cloudflare R2, MinIO, …).

Signs every request with AWS Signature Version 4 using the outbound HTTP client (crate::http_client::Client) — no AWS SDK dependency. Uses path-style addressing ({endpoint}/{bucket}/{key}), which every S3-compatible provider supports; virtual-hosted-style ({bucket}.{host}) is not used since custom endpoints for R2/MinIO don’t reliably support it.

Credentials come from config.access_key/config.secret_key when both are non-empty; otherwise they’re auto-detected from EKS IRSA, ECS task role, or EC2 IMDSv2 (in that order), cached, and refreshed shortly before expiry. See crate::storage::aws_credentials.

Implementations

impl S3Storage

pub fn new(config: S3Config) -> S3Storage

pub fn with_ca_file(self, path: &str) -> Result<S3Storage, StorageError>

Trust the CA certificates in the PEM file at path for an https:// endpoint signed by a private CA, instead of the public roots.

pub fn from_env() -> Result<S3Storage, StorageError>

S3Storage::new(S3Config::from_env()?), with with_ca_file when RWS_S3_CA_FILE is set.

Trait Implementations

impl Storage for S3Storage

fn put_stream( &self, key: &str, reader: &mut dyn Read, content_type: &str, ) -> Result<String, StorageError>

S3 multipart upload: parts of [S3_PART_SIZE] read and sent one at a time, so memory stays at one part however large the object. An object that fits in one part is a plain PUT. Any failure aborts the upload, so S3 keeps no orphaned parts.

fn put( &self, key: &str, data: &[u8], content_type: &str, ) -> Result<String, StorageError>

Store data under key, overwriting any existing object at that key. Returns the key that was stored (backends that normalize or namespace keys may return a different string than the one passed in).

fn get(&self, key: &str) -> Result<Vec<u8>, StorageError>

Retrieve the bytes stored under key.

fn delete(&self, key: &str) -> Result<(), StorageError>

Delete the object stored under key. Backends generally treat deleting a missing key as a no-op success, matching S3’s semantics.

fn url(&self, key: &str) -> String

A URL for retrieving key. For LocalStorage this is only meaningful if a base URL was configured (e.g. because the directory is also served as static files); for S3Storage it’s the object’s HTTPS URL. This performs no I/O and never fails.