Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
S3 Versioning allows you to keep multiple versions of an object in the same bucket, protecting against accidental deletions and enabling easy recovery of previous file versions when needed.
Step 1: Right-click to Bucket, choose “Versions” to enable file versioning for a Bucket, and view all versions of files in that Bucket.
Step 2: previous versions of files, ensuring data recovery and protection from accidental deletions or overwrites.
Refer to this LINK to learn how to activate your account via Email. After successfully activating your account, you can log in to the HI GIO S3 Portal.
Step 1: Access the link https://iam.higiocloud.vn/tenant/ and fill in your tenant (organization) information as we provide
Step 2: Log in to the account provided by email
Step 3: Click on the top-right to access the S3 Portal
Step 4: After logging in to the S3 Portal, you will be asked to create a new PIN to use the S3 service. This PIN Code is used for security authentication when you operate to view the S3 Key (Access key, Secret key) or Delete the Bucket.
The Bucket Management page displays information about your Buckets, including name, size, public and private modes, and operations of that Bucket.
Rules Bucket names must follow domain name constraints.
Bucket names must be unique.
Bucket names cannot be formatted as IP addresses
Bucket names can be 3 to 63 characters long.
Bucket names cannot contain uppercase characters or underscores.
Bucket names must start with a lowercase letter or number.
Bucket names must be a series of one or more labels.
The following example bucket names are valid and follow the recommended naming guidelines for general-purpose buckets:
docexamplebucket1
log-delivery-march-2020
my-hosted-content
The following example bucket names are valid but are not recommended for uses other than static website hosting:
m
The following example bucket names are invalid:
doc_example_bucket (contains an underscore)
DocExampleBucket (contains uppercase letters)
doc-example-bucket- (ends with a hyphen)
This short manual guide is designed to help HI GIO users navigate the features and functionalities of our cloud storage service. Whether you need to store large files, collaborate with team members, or ensure data redundancy, HI GIO Cloud S3 Storage provides a seamless experience tailored to your needs.
HI GIO S3 Storage - An unlimited Backup Storage solution for businesses
A comprehensive solution built on the Object Storage platform flexibly connected via the S3 protocol. Meets security standards with fast data access, cost optimization, and high availability from many environments. This solution suits Data Lake, Cloud-native Application Data, Data Archiving, Backup and Recovery.
Lifecycle rules for files/folders (Objects) must be clearly defined according to usage needs.
For example:
You need to upload a large amount of data and want these files to only exist for 90 days.
Enable versioning for the Bucket, but because the number of file versions is large, it takes up much storage space.
An HI GIO S3 Bucket Policy is a JSON-based resource policy that manages access permissions to S3 buckets. It specifies who can access the bucket, the actions allowed, and the conditions for access.
You can prefer the example S3 bucket policy in “.”
Step 1: Right-click on the Bucket and select 'Bucket Policy.' Customize the Bucket Policy by Amazon S3 standards. For additional examples and further guidance, refer to the official documentation.
Uploading files or folders to S3 is simple. You can drag and drop or select items to upload, organizing them into folders while maintaining scalable, secure storage in the cloud.
Click “New,” then choose “Upload Folder” or “Upload file(s).” You can also drag the File/Folder here.
ACL (Access Control List) is a mechanism that determines who has access to your buckets and objects (files/folders). To set up a Public ACL, right-click on the Bucket and select "Public" or select "Share Link" to set it up.
Step 1: Right-click on the Bucket and choose “Public“
Backing data from NAS to HI GIO S3 Service using NAS ensures secure, scalable cloud storage. Integrating NAS with HI GIO S3 allows you to automate backups, protect files, and enable quick recovery while managing data efficiently through an easy-to-use interface. We support Synology, Qnap, and other NAS brands that can support S3-compatible.
Creating a folder in S3 helps organize your data. Specify a folder name during file upload or manually create a new folder to group and manage related objects efficiently.
Step 1: Double-click on Bucket. Then select "New" -> “New folder”
Step 2: Enter the Folder name and click “Create the Folder.”
HI GIO S3 file versioning allows you to keep multiple versions of an object, protecting against accidental deletions and enabling easy recovery of previous file states.
Step 1: Right-click on the file and choose “Version“ to check the file versioning
Step 2: Choose the “Version
Multipart files are not fully uploaded, and parts of the files are still on the system, leading to a waste of storage space.
Managing Lifecycle rules will help you solve the above problems. In a Bucket, you can create multiple Lifecycle rules to apply only to folders or all files and folders, depending on your needs.
Step 1: Right-click into Bucket and choose Lifecycle rules
Step 2: Click on “New Rule” to create the Rules
Step 3: Set up the rules you want to apply to your bucket and set the days you need to apply. After choosing the Rules, click “Add New Rule”.
Permanently delete file: It will remove all versions of the object from the bucket, including any archived versions, making it unrecoverable once deleted.
Permanently deleting previous versions: It will remove older file versions from the bucket, ensuring they cannot be recovered while the current version remains intact.
Step 4: Click “Save” to apply the Rule to Bucket.
Step 2: You can modify the Bucket Policy as needed in this popup. Once you have made the necessary changes, click "Update Policy" to apply the updates.
You must enable versioning for the file Bucket to save file versions.
As well as using pre-configured storage classes, you can set up your own S3 Buckets from scratch, configuring access policies, versioning, and lifecycle rules to suit your specific storage needs.
Step 1: Click on “Create Bucket”
Step 2: Fill in name of “Bucket”. Refer the rule for define the Name for Bucket in this “Link”
Step3: Enable Object Lock (If needed)
Object Lock is a feature that allows you to store objects using the write-once, read-many (WORM) model. ObjectLock can help prevent objects from being deleted or overwritten for a fixed period or indefinitely.
The Object Lock feature is only used when creating a new Bucket. After selecting “Enable object lock” for a Bucket, all files/folders created/uploaded in that Bucket will be automatically set to the mode you selected in the next step.
Step 4: Choose "Governance mode" or "Compliance mode" or “NONE“
Governance mode: Use Governance mode if you want to protect objects from deletion by most users for a pre-set retention period but also want some users with special permissions to have the flexibility to change retention settings or delete objects. Users with the s3:BypassGovernance Retention permission can override or delete retention settings in governance mode.
Mounting a bucket to a local drive enables the creation of a virtual drive directly on the computer, allowing users to manage their cloud storage data seamlessly without needing additional tools or portal access.
Step 1: Download the RClone tool at this “Link” and extract the file after download
Step 2: Run the RClone tool by Windows PowerShell
Example: the path of the folder which stores RClone tool “.\Downloads\rclone\”
Open Window PowerShell and run this command “ .\Downloads\rclone\rclone.exe help “ to check RClone tool is working on your Server/PC
Step 3: Configuration HI GIO S3 storage connect with RClone
Create the connection configuration file with this command
** Note: “ .\Downloads\rclone\rclone.exe" is the folder path store the RClone tool. Security Key get it in
Step 4: Mount a bucket as a local drive on your computer to enable direct access and management of cloud storage data.
To mount a bucket as a drive on your computer, ensure that WinFsp is installed.
Setup WinFSP → Click Next until Finish
Step 5: Set up the configuration to automatically mount the bucket on system reboot.
Open “Run,” then type “shell:startup”
Create the new file withthe name “mounts3.cmd” and copy this code below to that file
To download files from HI GIO S3, generate a pre-signed URL. This link provides temporary access, allowing users to download files securely without HI GIO S3 credentials.
Step 1: Right-click on the File you need to get a link and choose “Public Sharing.”
Step 2: In HI GIO S3, you can set the sharing mode of your objects to either Private or Public.
Private Mode: All HI GIO S3 buckets and objects are private by default. Only the bucket owner has access, ensuring data security.
Get link download option: This URL grants temporary access to the private file, enabling users to download it without needing HI GIO S3 credentials in 60 minutes.
Public Mode: If you want to share objects publicly, you can configure the bucket or object permissions to allow public access. This enables anyone with the link to view or download the files. Using this mode cautiously is essential to prevent unauthorized access to sensitive data.
Backing data from Synology NAS to HI GIO S3 using CloudSync ensures secure, automated synchronization between your local NAS and S3 cloud storage. It enables continuous data protection, easy file recovery, and efficient storage management.
Step1: Connect to your NAS via Web Browser and install CloudSync
Step 2: Access the “Package Center” and then install “CloudSync”
Step 3: Setup and configure Cloud Sync connect to HI GIO S3 Storage
Step 4: Fill in the information from HI GIO S3 Portal
S3 Server: Choose Custom Server URL
Server Address, Access Key, Secret Key get it in “”
Step 5: Setup Backup type
We have 3 ways to take Backup to HI GIO S3 Storage
2-way sync (Upload/Download): Bidirectional
1-way sync (Upload only): Upload local Change only
Depending on the business backup plan, you can choose 2-way synchronization or 1-way synchronization (Upload Only) or 1-way synchronization (Download Only)
To expand the storage space for the NAS device, we recommend you use the synchronization type (Upload Only). When deleting data on the NAS, the data on the Cloud will remain.
After xx days you set, S3 will delete all files created 60 days ago. It does not take into account the frequency of usage for these files.
NONE mode: Use Veeam Backup mode to protect the backup file “immutable mode of Veeam”.
After choosing 1 of 2 modes to lock the object, you have to choose the desired number of days in the "Retention period" section. Retention period: 90 days means that the Bucket and the objects in that Bucket are locked in the mode you choose for 90 days from the date the Bucket was created.
Retention period: Specify a fixed period of time during which the object is locked. During this period, your object is protected by WORM and cannot be overwritten or deleted. You can apply a retention period in days with a minimum of 1 day and no maximum.
Verify the connection to HI GIO S3 Storage by performing operations such as listing buckets and listing objects.
"Listing the bucket information"
"Listing objects inside the bucket"
After installing WinFSP app, run the command below to mount Bucket
Verify if the mount was successful.
Save the file, then reboot the Server to test.
.\Downloads\rclone\rclone.exe config create Higio s3 env_auth false access_key_id xxxxxxxxxxxxxx secret_access_key xxxxxxxxxxxxxxxxxxx region default endpoint https://xxx.xxx.xx"C:\Users\Administrator".\Downloads\rclone\rclone.exe mount Higio:examblebucket1 S:\ --vfs-cache-mode full
.\Downloads\rclone\rclone.exe lsf Higio:.\Downloads\rclone\rclone.exe lsf Higio:examplebucket1.\Downloads\rclone\rclone.exe mount Higio:examplebucket1 S:\ --vfs-cache-mode full1-way sync (Download only): Download Remote change only
Integrating S3 with Veeam Backup allows seamless data backup and recovery in S3 buckets, ensuring data protection, compliance, and efficient cloud storage management.
Step 1: Log in to HI GIO S3 Portal & Choose the “Security” tab and get the S3 Key
Step 2: Enter “Pin code” you created from beginning ““ to get the S3 Key
Step 3: Save the Key information to add the HI GIO S3 to Veeam
Step 4: Open the Veeam Backup & Replication Console on your Server
Then choose Backup Infrastructure, then choose Backup Repositories, Right Click and choose Add Backup Repository
Step 5: Choose Object Storage
Step 6: Choose S3 Compatible
Step 7: Fill in the “Name” for the Repository
Step 8: Fill in the “Service Point” information you got on at Step 3, then Click “Add” to add the Credential.
Step 9: Click “Browse” to choose the Bucket
Step 10: Click “Browse” at “Folder” to choose the “Folder.” in Bucket
Step 11: Click “Next” and “Apply” until completed
Step 12: Create a new Job Backup and choose Backup Repository is HI GIO S3 Storage
If you want to achieve immutable with S3 Repositories, please enable Object Lock and Versioning on the S3 portal to secure your data.
Using S3 repositories still has some limitations. Please refer to this .
With the increasing security threats and stricter legal requirements, it is essential to consistently implement strong measures to secure data transit. This includes data not only in transit but also at rest.
Protecting data stored on physical devices or in the cloud is crucial to any organization's IT security strategy. In this context, there are two main approaches to encrypting this data: client-side encryption (CSE) and server-side encryption (SSE).
Using server-side encryption (SSE) with customer-provided encryption keys (SSE-C - Server-Side Encryption with Customer Keys) allows you to specify your encryption keys.
When you download an object, HI GIO S3 Storage uses the encryption key provided by the customer to apply AES-256 encryption to the data.
While checking an Object, the client must provide the same encryption key as part of its request. Firstly, HI GIO S3 will check that the client’s encryption key matches, then decrypt the Object before returning the data to you.
When using SSE-C, you must provide encryption key information using the following request headers:
Backing data from NAS to S3 with Hyper Backup provides secure, scheduled backups, versioning, and data compression. It ensures efficient storage use, easy restoration, and long-term data protection in the cloud.
Step 1: Install Hyper Backup on NAS via Package Center
Step 2: After Install and Open, Create the “DATA Backup Task” on Hyper Backup
Step 3: Choose “S3 Storage”
Step 4: Fill in the information from HI GIO S3 Portal
S3 Server: Choose Custom Server URL
Server Address, Access Key, Secret Key get it in
Step 5: Choose Folder that needs to be backup then click Next
Step 6: Choose the application on NAS needs to Backup
Step 7: Pick the time for Run Backup Task
Client-side encryption (CSE)
Allows customers to encrypt their data on their devices before sending it to the Fstorage server for storage. This ensures that the data remains encrypted throughout its entire lifecycle, providing a high level of security because the customer manages the encryption keys, which are never shared with Fstorage or any third parties. This approach requires customers to manage their keys carefully, but it is an ideal solution for those needing complete data security control.
Server-side encryption (SSE)
Provides an alternative solution where data is encrypted when it reaches the Fstorage server. This is Fstorage’s responsibility, significantly reducing the security management burden on customers. There are two methods of server-side encryption:
SSE-C - Server-Side Encryption with Customer Keys: Customers can provide and manage their own encryption keys, giving them full control over data security. This option is particularly suitable for organizations with specific compliance and data security needs, as it allows exclusive management of encryption keys.
SSE-S3 - Server-Side Encryption with HI GIO S3 Cloud-Managed Keys (in development): This simplifies the encryption process by using keys managed by Fstorage. This method is ideal for customers who want a robust encryption solution without the complexities of key management. It integrates the use of KMS (Key Management Service).
HI GIO S3 Storage does not store your keys. If the key is lost, all data will be lost, and there is no way to recover it.
--sse​-customer-algorithm
Use this header to specify the encryption algorithm. The header value must be AES256.
--sse-customer-key
Use this header to provide a 256-bit, base64-encoded encryption key for HI GIO S3 to encrypt and decrypt data
--sse​-customer-key-md5
(Optional)
Use this header to provide a base64-encoded 128-bit MD5 digest of the encryption key per RFC 1321. S3 uses this header to check the integrity of the message to ensure that the encryption key was transmitted without error.
