Object

In BOS, the basic unit of data for user operations is object. Each object contains Key, Meta and Data. Key is the name of object. Meta is the user's description of the object and consists of a series of Name-Value pairs. Data is the data of the object.

Bucket

Bucket is a container for data storage, and can be used as a bucket. It has an area attribute that can only be located in one area. As the name and area of the bucket cannot be changed after the creation of bucket name, so it is recommended to store it nearby according to the conditions of business to facilitate uploading and downloading to improve the access speed. The bucket name is globally unique. Each object must be contained in a certain bucket. A user can create up to 100 buckets. However, there is no limit on the total number and size of objects stored in each bucket, so users do not need to consider the extensibility of data.

Referer Whitelist

The Referer whitelist is an access control list, which is a hotlinking prevention method based on HTTP header referer field, with the purpose of preventing the data stored by the user on BOS from being hotlinked by other people. The user can set the whitelist of Referer field by BOS console. After the whitelist is set, only the users in the whitelist of Referer field can access the data stored in bucket, and those request outside the whitelist will be refused. However, if the user's Referer is null, it is accessible by default, and is not restricted by whitelist.

Region

Region represents an independent region. Except few services like account service are globally effective, most of the services in Baidu AI Cloud are regionally isolated. The service of each region is independently deployed, and will not affect each other. The shared data among services need completing by explicit copy.

Currently, Baidu AI Cloud has opened multi-region support. Please refer to Region Selection Description.

A reference region in API must use the service domain name for its corresponding region.

When the user accesses the BOS services, the user can specify which Region the request falls to through URL, for example: http(s)://bj.bcebos.com will locate the request to Beijing.

Access Key ID / Secret Access Key

After the user opens the BOS service, the system will allocate a pair of Access Key ID (AK)/Secret Access Key (SK) automatically, and such pair of key will be used for signature verification when the user makes a request to BOS. Access Key ID is used to identify the user, and Secret Access Key is used by the user to encrypt the signature string, and the BOS service is the key that is used to verify the signature string. Please refer to Get AK/SK.

In addition to the key allocated by the system, the user can apply for multiple pairs of AK/SK, with the maximum of 20 pairs.

Privilege Control

BOS provides a privilege control mode that combines the user signature verification, access control list ACL and time-limited access of object, so as to provide the user with safe and reliable data protection. Among them, the AK/SK asymmetric encryption that is used by the user to verify the signature is to verify the user's identity by signing the URL; after ACL verifies the identity of the user, it requests the information on access right of bucket, and responds to the request according to corresponding information on access right; the object time-limited access allows the users to provide the users with a valid URL within the customized time for application scenarios, such as download.

CDN Acceleration

CDN can not only accelerate the loading of static web pages including maps, pictures and documents, but also provide accelerated service for audio, download, games and other services, so that the website can be accessed at a high speed, thus improving the user experience of the website effectively.