View properties and organize objects
An S3 object contains data identified by a key in a bucket. Folders group keys that start with the same prefix. A folder can also be represented by a marker object whose key ends in /. Without this marker, the folder is virtual: it has no object properties or ACL of its own.
Create a folder
Creating a local folder requires permission to write to its parent directory. In S3, creating the folder marker requires s3:PutObject. The bucket’s encryption and retention settings apply to this new object.
- Activate the pane containing the local or S3 destination.
- In tree view, select the parent directory, bucket or folder. In list view, open that destination.
- Use Create folder in the toolbar or context menu.
- Replace New folder in the row being edited with the desired name.
- Press Enter and check that the folder appears after the operation finishes.
In S3, Create folder with an ACL… first opens the Canned ACL selection, if the account’s ACL policy allows that write. Choose a value, click OK and confirm any public ACL. Then name New folder and press Enter as above. This ACL applies only to the marker. See ACLs.
Open properties
Reading normally requires s3:GetObject, or s3:GetObjectVersion for a specific version. ACLs, tags and protections require additional permissions. For an SSE-C object, supply its key through Encryption > Read key…, then use Reload properties; see encryption.
- In the S3 pane, open the bucket or folder containing the object.
- Select one object and choose Properties from its context menu.
- Wait for Object properties to load.
- Read General, then any other relevant tabs.
- Close with Cancel if you do not want to apply changes.
With Show versions off, properties target the current object. With it on, they target the selected version. Metadata and storage class remain editable if this version was the latest at the last listing: saving them rewrites the current object after verification, rather than changing a historical version under its identifier. See metadata, storage class and versions.
In General, Download… downloads the targeted object or version after its properties have been read. The key supplied through Read key… is used for this access. In version view, copying to the current object has separate settings; see versions.
Read the fields
| Field | Meaning |
|---|---|
| Account: | The S3Client account being used. |
| Bucket: | Bucket name. |
| Key: | Full key, including its prefix. |
| ARN: | Resource identifier, when available or when the account’s capabilities allow it to be constructed. |
| Size: | Content size, with the byte count for larger sizes. |
| Last modified: | Date reported by the service. |
| Version ID: | Shown when versioning is supported and an identifier is available. null can identify the null version in a bucket with suspended versioning. |
| Latest version: | Yes for the current object. In version view, Yes (from the last version listing) or No (from the last version listing) indicates whether this version was the latest when the list was last loaded. A new version may have been created since then. |
| ETag: | An opaque value used for some request conditions. It is not always the file’s MD5, particularly for multipart objects or some encryption modes. |
| Owner ID: and Owner name: | The observed owner, when available and not already presented in the ACL tab. A missing name does not imply a missing owner. |
Dates use (UTC) or (local time) according to your preferences. Copy buttons copy the raw value: bucket, key, ARN, version, ETag or owner identifier.
The Storage, Encryption, Metadata, Tags, ACL, Object Lock and Addresses tabs depend on the target, capabilities and available information. A visible tab does not guarantee write permission.
If Enable ACL operations for this account is unchecked, the ACL tab is absent, including for a version or folder marker. Other tabs follow their own rules. Rewrites then use the destination default; they do not guarantee preservation of existing ACLs. See local ACL deactivation.
Prepare an encryption change
Under Encryption, Current encryption shows the values read from the object: Mode:, Algorithm:, KMS key:, Bucket Key: and SSE-C key MD5:. Not reported means a value was not returned; Not applicable means it does not apply to the observed mode. Pending change separately shows No change or the prepared settings. The SSE-C key itself never appears in this summary.
- Click Change encryption….
- Choose New encryption: and complete the available settings. The diagnostic explains whether the change needs a copy or can run without transferring content.
- Click Use settings to prepare this choice in the properties dialog, without a write request.
- Review Pending change, then click OK in properties to start the operation.
Cancel in Change encryption restores the last confirmed choice; Cancel in properties discards pending changes. To clear an encryption change, reopen the editor, choose Do not modify, then Use settings. Read access and Read key… only supply the read key for SSE-C sources, independently of the requested encryption. See encryption modes, keys and consequences.
Edit properties for multiple objects
In the S3 pane, select several objects and choose Properties. The title shows the selection count. General summarizes Selection:, Known size: and the Last modified: range. Group editing requires objects from one account and bucket. A selection containing logical folders or delete markers only provides the General summary. This dialog processes the selected items only; to scan a prefix, use Modify child objects.
The same capabilities and permissions as for individual changes are required. Available tabs include ACL, Storage, Encryption, Metadata, Tags and Object Lock. In version view, the selection targets the chosen version IDs. Metadata and storage class can be edited only when every selected version is current; rewrites verify this before writing.
Opening a tab loads its properties. Reload reads the values again; Stop loading interrupts the read. Check the number of objects read and any failures: Not fully loaded means the displayed values do not cover the whole selection. Present on counts objects among successful reads. Multiple values means values differ; Empty value means an empty value, while Not observed means no value has been observed for that row. An interrupted or incomplete read does not prove that a property is absent.
Observed values and pending changes are separate. Only properties you explicitly change are applied; differences between objects remain for all other properties. Switching tabs or reloading observations keeps your pending changes.
| Tab | Prepare changes |
|---|---|
| Metadata, Tags | Add or Edit sets the key’s value on every selected object, including objects without that key. Remove schedules its removal. The Change column shows Set to: or To remove. Undo change clears that row’s instruction. Other keys remain unchanged. |
| ACL | Rows show observed grantees and permissions. In Permissions, choose Keep unchanged, Allow on all selected objects or Remove from all selected objects for each permission. Remove removes the grantee; Undo change clears the pending change. Untouched permissions are preserved according to the account’s ACL policy. |
| Storage | Current storage classes lists observed classes and object counts; Restore state appears when restoration information is available. New storage class initially uses Keep unchanged. Choosing a class prepares a rewrite for objects whose class must change. |
| Encryption | Current encryption lists observed modes, KMS keys, Bucket Key settings and SSE-C algorithms with object counts. Pending change summarizes the requested change only. Use Change encryption…, then Use settings, as for a single object. The operation determines separately for each object whether an update can run without copying. |
| Object Lock | Under Retention, Keep unchanged preserves retention; Set retention requires Mode and Retain until, while Remove retention requests removal where permitted. Use Governance bypass permission requires the matching capability and permission. Under Legal hold, choose Keep unchanged, Enable or Disable. |
For exact versions, submit encryption and ACL changes in separate operations. Combining them displays Encryption and ACL changes cannot be combined on exact versions. and disables OK. Clear one of the pending changes before confirming.
Before changing Object Lock, read retention and legal hold restrictions. Compliance retention cannot be shortened or removed before it expires. Copies may create new versions; existing versions retain their protection.
For SSE-C sources, click Source SSE-C key…. In SSE-C read key, choose Temporary SSE-C key, enter the key and confirm with OK. This key is used for every selected source; use separate selections for different keys. No SSE-C key clears the pending read key. The source key does not select destination encryption.
Click OK in the properties dialog to start the changes, or Cancel to discard them. Partial success does not roll back changes already applied: inspect operation errors and reopen properties to verify the result. If account settings change, close and reopen the dialog.
Multipart information
Multipart appears when S3Client obtains a valid part count for this completed object. Open File > Accounts…, select the account, click Edit…, then open Capabilities > Transfers. Read uploaded part sizes and count must match the service’s support; enabling it does not grant access to the object.
The list shows Part, Size and Bytes. Additional sizes load as you browse. Loading part sizes… indicates loading; Part list incomplete means some sizes could not be obtained. This tab does not describe an unfinished multipart upload.
Calculate a folder’s size
The calculation lists all content under the prefix without downloading data, regardless of display filters. It requires s3:ListBucket for current objects or s3:ListBucketVersions for versions. With Object versions, history is included unless the bucket is known to have never been versioned. If Read bucket versioning is available, an unknown state is read using s3:GetBucketVersioning; otherwise, S3Client lists versions directly. A large prefix may require many requests.
- Select the S3 folder and open Properties > General.
- Click Get size.
- Wait for Calculation complete. before using the totals.
- Read Total data size:, the file and folder marker counts and, when version listing is available, previous versions and Delete markers:.
Previous versions contribute to total size when listed. Virtual folders are not stored markers. For a bucket, the equivalent button is Calculate, with Details for detailed counts.
Cancel stops the traversal. Calculation cancelled. or Calculation failed: clears the displayed totals. If the calculation fails, fix the cause and click Get size again. These totals are not a billing calculation. Folder contents can change during calculation.