Bucket-Scoped Keys Work With Object Lock, and Versioned Buckets Delete Cleanly
Scoped access keys now do everything a backup tool expects, and bucket deletion finishes the job.
What's changed
- Bucket-scoped keys can use Object Lock: a scoped key can place a lock but never remove or bypass one
- Scoped keys can read their own bucket ACL, policy, CORS and lifecycle configuration, which backup tools probe during setup and used to report as invalid credentials
- SFTP users are bound to a key that actually grants their bucket, so a per-bucket key setup no longer produces a login that authenticates and then fails on every path
- Deleting a versioned bucket now removes every object version and delete marker first, so deletion completes instead of sitting in an error state