# S3 buckets management

You can manage buckets by either standard S3 API calls or using the WEKA API/CLI.

You determine the bucket permissions by the user's IAM policy for authorized access or by setting bucket policies for anonymous access. 

Buckets and objects created through the S3 protocol have root POSIX permissions by default. When creating a user with an S3 role, you can set specific POSIX permissions for objects created with this user access/secret keys. Objects created using anonymous access (for buckets with IAM policy allowing that) get the anonymous UID/GID.

By default, all buckets are created within the filesystem specified when creating the S3 cluster configuration. You can create a bucket in a different filesystem by calling the WEKA API/CLI.

**Related topics**

[S3 users and authentication](/4.1/additional-protocols/s3/s3-users-and-authentication.md#s3-user-role)

[S3 supported APIs and limitations](/4.1/additional-protocols/s3/s3-limitations.md#naming-limitations)

[Manage S3 buckets using the GUI](/4.1/additional-protocols/s3/s3-buckets-management/s3-buckets-management.md)

[Manage S3 buckets using the CLI](/4.1/additional-protocols/s3/s3-buckets-management/s3-buckets-management-1.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.weka.io/4.1/additional-protocols/s3/s3-buckets-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.