CreateBucket
Note
This action creates an Amazon S3 bucket. To create an Amazon S3 on Outposts bucket, see CreateBucket
.
Creates a new S3 bucket. To create a bucket, you must set up Amazon S3 and have a valid Amazon Access Key ID to authenticate requests. Anonymous requests are never allowed to create buckets. By creating the bucket, you become the bucket owner.
There are two types of buckets: general purpose buckets and directory buckets. For more information about these bucket types, see Creating, configuring, and working with Amazon S3 buckets in the Amazon S3 User Guide.
Note
-
General purpose buckets - If you send your
CreateBucket
request to thes3.amazonaws.com
global endpoint, the request goes to theus-east-1
Region. So the signature calculations in Signature Version 4 must useus-east-1
as the Region, even if the location constraint in the request specifies another Region where the bucket is to be created. If you create a bucket in a Region other than US East (N. Virginia), your application must be able to handle 307 redirect. For more information, see Virtual hosting of buckets in the Amazon S3 User Guide. -
Directory buckets - For directory buckets, you must make requests for this API operation to the Regional endpoint. These endpoints support path-style requests in the format
https://s3express-control.region-code.amazonaws.com/bucket-name
. Virtual-hosted-style requests aren't supported. For more information about endpoints in Availability Zones, see Regional and Zonal endpoints for directory buckets in Availability Zones in the Amazon S3 User Guide. For more information about endpoints in Local Zones, see Concepts for directory buckets in Local Zones in the Amazon S3 User Guide.
- Permissions
-
-
General purpose bucket permissions - In addition to the
s3:CreateBucket
permission, the following permissions are required in a policy when yourCreateBucket
request includes specific headers:-
Access control lists (ACLs) - In your
CreateBucket
request, if you specify an access control list (ACL) and set it topublic-read
,public-read-write
,authenticated-read
, or if you explicitly specify any other custom ACLs, boths3:CreateBucket
ands3:PutBucketAcl
permissions are required. In yourCreateBucket
request, if you set the ACL toprivate
, or if you don't specify any ACLs, only thes3:CreateBucket
permission is required. -
Object Lock - In your
CreateBucket
request, if you setx-amz-bucket-object-lock-enabled
to true, thes3:PutBucketObjectLockConfiguration
ands3:PutBucketVersioning
permissions are required. -
S3 Object Ownership - If your
CreateBucket
request includes thex-amz-object-ownership
header, then thes3:PutBucketOwnershipControls
permission is required.Important
To set an ACL on a bucket as part of a
CreateBucket
request, you must explicitly set S3 Object Ownership for the bucket to a different value than the default,BucketOwnerEnforced
. Additionally, if your desired bucket ACL grants public access, you must first create the bucket (without the bucket ACL) and then explicitly disable Block Public Access on the bucket before usingPutBucketAcl
to set the ACL. If you try to create a bucket with a public ACL, the request will fail.For the majority of modern use cases in S3, we recommend that you keep all Block Public Access settings enabled and keep ACLs disabled. If you would like to share data with users outside of your account, you can use bucket policies as needed. For more information, see Controlling ownership of objects and disabling ACLs for your bucket and Blocking public access to your Amazon S3 storage in the Amazon S3 User Guide.
-
S3 Block Public Access - If your specific use case requires granting public access to your S3 resources, you can disable Block Public Access. Specifically, you can create a new bucket with Block Public Access enabled, then separately call the
DeletePublicAccessBlock
API. To use this operation, you must have thes3:PutBucketPublicAccessBlock
permission. For more information about S3 Block Public Access, see Blocking public access to your Amazon S3 storage in the Amazon S3 User Guide.
-
-
Directory bucket permissions - You must have the
s3express:CreateBucket
permission in an IAM identity-based policy instead of a bucket policy. Cross-account access to this API operation isn't supported. This operation can only be performed by the Amazon account that owns the resource. For more information about directory bucket policies and permissions, see Amazon Identity and Access Management (IAM) for S3 Express One Zone in the Amazon S3 User Guide.Important
The permissions for ACLs, Object Lock, S3 Object Ownership, and S3 Block Public Access are not supported for directory buckets. For directory buckets, all Block Public Access settings are enabled at the bucket level and S3 Object Ownership is set to Bucket owner enforced (ACLs disabled). These settings can't be modified.
For more information about permissions for creating and working with directory buckets, see Directory buckets in the Amazon S3 User Guide. For more information about supported S3 features for directory buckets, see Features of S3 Express One Zone in the Amazon S3 User Guide.
-
- HTTP Host header syntax
-
Directory buckets - The HTTP Host header syntax is
s3express-control.region-code.amazonaws.com
.
The following operations are related to CreateBucket
:
Request Syntax
PUT / HTTP/1.1
Host: Bucket
.s3.amazonaws.com
x-amz-acl: ACL
x-amz-grant-full-control: GrantFullControl
x-amz-grant-read: GrantRead
x-amz-grant-read-acp: GrantReadACP
x-amz-grant-write: GrantWrite
x-amz-grant-write-acp: GrantWriteACP
x-amz-bucket-object-lock-enabled: ObjectLockEnabledForBucket
x-amz-object-ownership: ObjectOwnership
<?xml version="1.0" encoding="UTF-8"?>
<CreateBucketConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
<LocationConstraint>string
</LocationConstraint>
<Location>
<Name>string
</Name>
<Type>string
</Type>
</Location>
<Bucket>
<DataRedundancy>string
</DataRedundancy>
<Type>string
</Type>
</Bucket>
</CreateBucketConfiguration>
URI Request Parameters
The request uses the following URI parameters.
- Bucket
-
The name of the bucket to create.
General purpose buckets - For information about bucket naming restrictions, see Bucket naming rules in the Amazon S3 User Guide.
Directory buckets - When you use this operation with a directory bucket, you must use path-style requests in the format
https://s3express-control.region-code.amazonaws.com/bucket-name
. Virtual-hosted-style requests aren't supported. Directory bucket names must be unique in the chosen Zone (Availability Zone or Local Zone). Bucket names must also follow the formatbucket-base-name--zone-id--x-s3
(for example,DOC-EXAMPLE-BUCKET--usw2-az1--x-s3
). For information about bucket naming restrictions, see Directory bucket naming rules in the Amazon S3 User GuideRequired: Yes
- x-amz-acl
-
The canned ACL to apply to the bucket.
Note
This functionality is not supported for directory buckets.
Valid Values:
private | public-read | public-read-write | authenticated-read
- x-amz-bucket-object-lock-enabled
-
Specifies whether you want S3 Object Lock to be enabled for the new bucket.
Note
This functionality is not supported for directory buckets.
- x-amz-grant-full-control
-
Allows grantee the read, write, read ACP, and write ACP permissions on the bucket.
Note
This functionality is not supported for directory buckets.
- x-amz-grant-read
-
Allows grantee to list the objects in the bucket.
Note
This functionality is not supported for directory buckets.
- x-amz-grant-read-acp
-
Allows grantee to read the bucket ACL.
Note
This functionality is not supported for directory buckets.
- x-amz-grant-write
-
Allows grantee to create new objects in the bucket.
For the bucket and object owners of existing objects, also allows deletions and overwrites of those objects.
Note
This functionality is not supported for directory buckets.
- x-amz-grant-write-acp
-
Allows grantee to write the ACL for the applicable bucket.
Note
This functionality is not supported for directory buckets.
- x-amz-object-ownership
-
The container element for object ownership for a bucket's ownership controls.
BucketOwnerPreferred
- Objects uploaded to the bucket change ownership to the bucket owner if the objects are uploaded with thebucket-owner-full-control
canned ACL.ObjectWriter
- The uploading account will own the object if the object is uploaded with thebucket-owner-full-control
canned ACL.BucketOwnerEnforced
- Access control lists (ACLs) are disabled and no longer affect permissions. The bucket owner automatically owns and has full control over every object in the bucket. The bucket only accepts PUT requests that don't specify an ACL or specify bucket owner full control ACLs (such as the predefinedbucket-owner-full-control
canned ACL or a custom ACL in XML format that grants the same permissions).By default,
ObjectOwnership
is set toBucketOwnerEnforced
and ACLs are disabled. We recommend keeping ACLs disabled, except in uncommon use cases where you must control access for each object individually. For more information about S3 Object Ownership, see Controlling ownership of objects and disabling ACLs for your bucket in the Amazon S3 User Guide.Note
This functionality is not supported for directory buckets. Directory buckets use the bucket owner enforced setting for S3 Object Ownership.
Valid Values:
BucketOwnerPreferred | ObjectWriter | BucketOwnerEnforced
Request Body
The request accepts the following data in XML format.
- CreateBucketConfiguration
-
Root level tag for the CreateBucketConfiguration parameters.
Required: Yes
- Bucket
-
Specifies the information about the bucket that will be created.
Note
This functionality is only supported by directory buckets.
Type: BucketInfo data type
Required: No
- Location
-
Specifies the location where the bucket will be created.
Directory buckets - The location type is Availability Zone or Local Zone. To use the Local Zone location type, your account must be enabled for Dedicated Local Zones. Otherwise, you get an HTTP
403 Forbidden
error with the error codeAccessDenied
. To learn more, see Enable accounts for Dedicated Local Zones in the Amazon S3 User Guide.Note
This functionality is only supported by directory buckets.
Type: LocationInfo data type
Required: No
- LocationConstraint
-
Specifies the Region where the bucket will be created. You might choose a Region to optimize latency, minimize costs, or address regulatory requirements. For example, if you reside in Europe, you will probably find it advantageous to create buckets in the Europe (Ireland) Region.
If you don't specify a Region, the bucket is created in the US East (N. Virginia) Region (us-east-1) by default.
For a list of the valid values for all of the Amazon Regions, see Regions and Endpoints.
Note
This functionality is not supported for directory buckets.
Type: String
Valid Values:
af-south-1 | ap-east-1 | ap-northeast-1 | ap-northeast-2 | ap-northeast-3 | ap-south-1 | ap-south-2 | ap-southeast-1 | ap-southeast-2 | ap-southeast-3 | ca-central-1 | cn-north-1 | cn-northwest-1 | EU | eu-central-1 | eu-north-1 | eu-south-1 | eu-south-2 | eu-west-1 | eu-west-2 | eu-west-3 | me-south-1 | sa-east-1 | us-east-2 | us-gov-east-1 | us-gov-west-1 | us-west-1 | us-west-2
Required: No
Response Syntax
HTTP/1.1 200
Location: Location
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The response returns the following HTTP headers.
- Location
-
A forward slash followed by the name of the bucket.
Errors
- BucketAlreadyExists
-
The requested bucket name is not available. The bucket namespace is shared by all users of the system. Select a different name and try again.
HTTP Status Code: 409
- BucketAlreadyOwnedByYou
-
The bucket you tried to create already exists, and you own it. Amazon S3 returns this error in all Amazon Regions except in the North Virginia Region. For legacy compatibility, if you re-create an existing bucket that you already own in the North Virginia Region, Amazon S3 returns 200 OK and resets the bucket access control lists (ACLs).
HTTP Status Code: 409
Examples
Sample Request for general purpose buckets
This request creates a bucket named colorpictures
.
PUT / HTTP/1.1 Host: colorpictures.s3.<Region>.amazonaws.com Content-Length: 0 Date: Wed, 01 Mar 2006 12:00:00 GMT Authorization: authorization string
Sample Response for general purpose buckets
This example illustrates one usage of CreateBucket.
HTTP/1.1 200 OK x-amz-id-2: YgIPIfBiKa2bj0KMg95r/0zo3emzU4dzsD4rcKCHQUAdQkf3ShJTOOpXUueF6QKo x-amz-request-id: 236A8905248E5A01 Date: Wed, 01 Mar 2006 12:00:00 GMT Location: /colorpictures Content-Length: 0 Connection: close Server: AmazonS3
Sample Request for general purpose buckets: Setting the Region of a bucket
The following request sets the Region for the bucket to Europe.
PUT / HTTP/1.1 Host: bucketName.s3.amazonaws.com Date: Wed, 12 Oct 2009 17:50:00 GMT Authorization: authorization string Content-Type: text/plain Content-Length: 124 <CreateBucketConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <LocationConstraint>EU</LocationConstraint> </CreateBucketConfiguration >
Sample Request for general purpose buckets: Creating a bucket and applying the ObjectWriter setting for S3 Object Ownership.
This request creates a bucket and applies the ObjectWriter
setting
for Object Ownership.
PUT / HTTP/1.1 Host: amzn-s3-demo-bucket.s3.<Region>.amazonaws.com Content-Length: 0 x-amz-object-ownership: ObjectWriter Date: Tue, 30 Nov 2021 12:00:00 GMT Authorization: authorization string
Sample Response for general purpose buckets
This example illustrates one usage of CreateBucket.
HTTP/1.1 200 OK x-amz-id-2: YgIPIfBiKa2bj0KMg95r/0zo3emzU4dzsD4rcKCHQUAdQkf3ShJTOOpXUueF6QKo x-amz-request-id: 236A8905248E5A01 Date: Tue, 30 Nov 2021 12:00:00 GMT Location: /amzn-s3-demo-bucket Content-Length: 0 Connection: close Server: AmazonS3
Sample Request for general purpose buckets: Creating a bucket and configuring access permissions explicitly
This request creates a bucket named colorpictures
and grants WRITE
permission to the Amazon Web Services account identified by an email address.
PUT HTTP/1.1 Host: colorpictures.s3.<Region>.amazonaws.com x-amz-date: Sat, 07 Apr 2012 00:54:40 GMT Authorization: authorization string x-amz-grant-write: emailAddress="xyz@amazon.com", emailAddress="abc@amazon.com"
Sample Response for general purpose buckets
This example illustrates one usage of CreateBucket.
HTTP/1.1 200 OK
Sample Request for general purpose buckets: Creating a bucket and configuring access permission using a canned ACL
This request creates a bucket named colorpictures
and sets the ACL to
private.
PUT / HTTP/1.1 Host: colorpictures.s3.<Region>.amazonaws.com Content-Length: 0 x-amz-acl: private Date: Wed, 01 Mar 2006 12:00:00 GMT Authorization: authorization string
Sample Response for general purpose buckets
This example illustrates one usage of CreateBucket.
HTTP/1.1 200 OK x-amz-id-2: YgIPIfBiKa2bj0KMg95r/0zo3emzU4dzsD4rcKCHQUAdQkf3ShJTOOpXUueF6QKo x-amz-request-id: 236A8905248E5A01 Date: Wed, 01 Mar 2006 12:00:00 GMT Location: /colorpictures Content-Length: 0 Connection: close Server: AmazonS3
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: