CyberGuard dictionary / Cloud Security

Object Storage Bucket

THE DEFINITION

An object storage bucket is a named cloud container for files or other objects, with settings that govern access, retention, and related controls.

In simple terms

Applications often keep images, backups, exports, and logs in buckets. The bucket name and storage location alone do not make the contents private.

Technical explanation

Access may be governed by identity policies, bucket policies, public access controls, and object-level settings. Encryption and lifecycle settings address different risks from authorization.

Buckets hold objects under provider-specific access and encryption controls. Public access, cross-account grants, lifecycle rules, and logging should match the data's intended use.

Examples in practice

A company stores invoice PDFs in a private bucket and grants its billing service read access only to the invoices it needs.

A team uploads customer exports to a bucket intended for internal jobs. It blocks public access, restricts the service account, enables relevant access logs, and sets a retention rule.

Why it matters

Buckets commonly hold sensitive material, so public access and service permissions deserve explicit review.

VERIFY & LEARN MORE

Sources and further reading

Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.

← Browse all definitions