Skip to main content
DELETE
Delete object
Primary IAM action: storage:DeleteObject. Deleting an object requires storage:DeleteObject. A ?tagging request instead requires storage:PutObject. Bypassing a GOVERNANCE retention lock additionally requires storage:BypassGovernanceRetention. See STORAGE permissions for policy examples.

Authorizations

Authorization
string
header
required

An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. This is the recommended way to authenticate.

Get one by exchanging a service account's access key pair at POST /v1/oauth/token with grant_type=client_credentials. It is the standard client-credentials grant, so any OAuth-aware library will obtain and refresh it for you.

Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.

Path Parameters

bucket
string
required
Example:

"my-app-assets"

key
string
required

Object key. Forward slashes inside the key MUST be URL-encoded by the client.

Example:

"images/logo.png"

Response

Deleted. Also returned when the object does not exist.