Details
Who passes
What your application’s requests may do. Studio administrators can always manage objects, whatever is set here.
Each is a rule picker: built-ins, role/permission shorthands, a named rule, or a custom condition. Rules can read
$object.key and $object.segments; see Rules on storage.
Uploads
Delivery
Files have an
ETag that changes when a file is replaced, so browsers always revalidate correctly. A longer cache is faster for files that never change (put a version in the key, avatar-2.png).
Image transformations
Resize, crop and convert images on request, without changing the stored original. Variants are served only to callers who may read the original.
Each number has a platform ceiling a bucket can lower but not raise. See Images.
What changes immediately
Rule and limit changes affect new requests within seconds. Existing files aren’t touched: tightening Accepted types doesn’t remove files already stored.Who can do what
Design keys around rules.
Images
Transformations in use.