# S3 buckets management

You can manage buckets by either standard S3 API calls or using the WEKA API/CLI.

You determine the bucket permissions by the user's IAM policy for authorized access or by setting bucket policies for anonymous access. 

Buckets and objects created through the S3 protocol have root POSIX permissions by default. When creating a user with an S3 role, you can set specific POSIX permissions for objects created with this user access/secret keys. Objects created using anonymous access (for buckets with IAM policy allowing that) get the anonymous UID/GID.

By default, all buckets are created within the filesystem specified when creating the S3 cluster configuration. You can create a bucket in a different filesystem by calling the WEKA API/CLI.

**Related topics**

[#s3-user-role](https://docs.weka.io/4.1/additional-protocols/s3-users-and-authentication#s3-user-role "mention")

[#naming-limitations](https://docs.weka.io/4.1/additional-protocols/s3-limitations#naming-limitations "mention")

[s3-buckets-management](https://docs.weka.io/4.1/additional-protocols/s3/s3-buckets-management/s3-buckets-management "mention")

[s3-buckets-management-1](https://docs.weka.io/4.1/additional-protocols/s3/s3-buckets-management/s3-buckets-management-1 "mention")