S3

Back up and restore data to and from S3-compatible object storage.

Latest v1.1.9 · Oct 19, 2026
Documented 4 releases

v1.1.9

stable

Limits the size of the store configuration read from a bucket and supports creating stores on Garage.

Security

  • Opening a store now rejects a CONFIG object larger than 2 KB. Before, it was read with no size limit, so a malicious or misbehaving server could force unbounded memory use. (#265)

Fixes

  • Creating a store on Garage no longer fails with Unimplemented action. A backend that does not implement Object Lock is now treated as having no Object Lock configured. (#268)

v1.1.8

stable

Adds ambient credentials, protects buckets with Object Lock from store re-creation, and makes `root` a prefix in every addressing mode.

New

  • access_key and secret_access_key are now optional. When they are omitted, the connector uses the credentials of the environment it runs in: an EC2 instance profile, an ECS task role, or EKS IAM Roles for Service Accounts and Pod Identity. (#220)

Improvements

  • Store creation is refused on a bucket with Object Lock enabled when the location still holds versions or delete markers of a previous store’s configuration, since recovery would be ambiguous between the two stores. Use a new bucket or a different prefix instead. (#239)
  • With path-style addressing, root is now read as a prefix inside the bucket named in the location, consistent with virtual-hosted-style addressing. A root that starts with the bucket name keeps its previous meaning as /<bucket>/<prefix>. (#212)

Fixes

  • Source and destination connectors now apply root with virtual-hosted-style addressing. A prefix given both in the location path and in root must match. (#255)

v1.1.7

stable

Increases connection pool size and fixes prefix handling in virtual-host mode.

Fixes

  • Increased the number of idle connections per host to improve throughput under concurrent workloads.
  • Prefixes are no longer ignored when the store is configured in virtual-host mode.

v1.1.6

stable

Adds optional region configuration, retry logic, and fixes silent errors during listing.

New

  • Optional region configuration parameter to fix SignatureDoesNotMatch errors on non-AWS S3-compatible providers.
  • Retry logic for transient request failures.

Fixes

  • Errors during List() are no longer silently swallowed.