TCN Storage documentation
TCN Storage exposes two APIs: the S3-compatible data API for objects, and a REST management API for workspaces, keys, edge settings and usage.
Concepts
- Workspace — the billing and access boundary. Members, SSO settings and access keys belong to a workspace.
- Bucket — a container for objects with a home region. Names are globally unique, 3–63 characters, lowercase letters, digits and hyphens.
- Object — a key, its data and metadata. Keys are up to 1024 bytes of UTF-8.
- Access key — an id and secret used for S3 Signature V4, scoped to buckets, prefixes and actions.
- Edge hostname — the public delivery address of a bucket,
<bucket>.cdn.tcnstorage.store, or your own CNAME.
Endpoints
Send S3 requests to the endpoint of the bucket's home region. Requests to another region's endpoint return 301 PermanentRedirect with the correct endpoint.
| Region | City | S3 endpoint |
|---|---|---|
| fra1 | Frankfurt | https://fra1.s3.tcnstorage.store |
| ams1 | Amsterdam | https://ams1.s3.tcnstorage.store |
| waw1 | Warsaw | https://waw1.s3.tcnstorage.store |
| sto1 | Stockholm | https://sto1.s3.tcnstorage.store |
| ist1 | Istanbul | https://ist1.s3.tcnstorage.store |
| evn1 | Yerevan | https://evn1.s3.tcnstorage.store |
| ala1 | Almaty | https://ala1.s3.tcnstorage.store |
| dxb1 | Dubai | https://dxb1.s3.tcnstorage.store |
| sin1 | Singapore | https://sin1.s3.tcnstorage.store |
| tyo1 | Tokyo | https://tyo1.s3.tcnstorage.store |
The management API is global: https://api.tcnstorage.store/v1.
Authentication
The S3 API uses AWS Signature Version 4 with the region code as the signing region and s3 as the service. Unsigned requests are accepted only for public buckets.
The management API uses bearer tokens created in the console under Settings → API tokens. Tokens are shown once and can be limited to read-only scopes.
Keep secrets out of code. Load keys from environment variables or your secret manager, and rotate them at least every 90 days.