Object Storage Dedicated Endpoints

Learn how Object Storage dedicated endpoints provides you new endpoints to access the storage buckets securely.

The tenant isolation will have unique, immutable, system-generated, and namespace-prefixed dedicated endpoints. Using these tenancy-specific endpoints by having a dedicated namespace string in the URLs will ensure full isolation to help meet your organization's security and compliance requirements.

The current Object Storage service API endpoint URLs will continue to function. Use of the new endpoints is optional for tenants writing their own clients to access Object Storage buckets. You can point your custom client requests to any of these new domains for better security posture. We do not mandate you to use a specific domain. However, we encourage you to use dedicated endpoints with namespace prefix on the customer-oci.com domain.

• The dedicated endpoint feature isolates Object Storage customers from each other, preventing a malicious or inadvertent API usage by customer, causing the common URL to be blocked, thus impacting all other customers.
• The new feature helps minimize the broad impact of DNS-based blocking of Object Storage endpoints by security software.
• It also provides protection against malicious cyber-attacks and blocking on a per-tenancy level.

Firewalls, proxy servers, or other devices that your network administrators use to control access to the internet can affect your ability to connect to the new domain. In order to allow access to the new URL, you need to whitelist the new second level domain.

To allow network access to the Console, your network administrator should add *.customer-oci.com to the allowlist of your firewall or proxy server.