Wasabi GovCloud Powered by IBM delivers object storage through IBM Cloud for Government (IC4G), a FedRAMP High authorized environment. All storage activity is performed programmatically using an S3-compatible API. There is no web-based storage console or portal for browsing buckets or objects.
Once your storage instance is provisioned, you will access your storage directly through the S3 API using credentials retrieved from Wasabi GovCloud Manager.
Endpoints
Your storage endpoint is determined by your assigned region. Use the endpoint provided to you at the time of account activation.
Regions:
Dallas (DAL08)
Washington DC
All API calls must use HTTPS with TLS 1.2 or higher. HTTP connections are not supported.
Authentication
All API requests must be authenticated using your S3 HMAC credentials. These are retrieved from Wasabi GovCloud Manager and consist of an Access and Secret keys.
Your credentials are scoped to your specific storage instance. They do not provide access to IBM infrastructure, billing systems, or any other customer's storage.
Your Access and Secret keys are displayed once only at the time of creation. Store them securely immediately. If you lose your Access or Secret keys, you can rotate your credentials at any time through Wasabi GovCloud Manager.
All requests must be signed using AWS Signature Version 4 (SigV4).
Supported S3 API Operations
The following S3 API operations are supported on IC4G.
Bucket Operations
List all buckets
Create a bucket
View bucket headers
Delete a bucket
List objects in a bucket
List active multipart uploads
Set, Get, and Delete bucket CORS configuration
Set and Get bucket ACL
Object Operations
Upload an object
Download an object
View object headers
Delete an object
Delete multiple objects in a single request
Copy an object
Set and Get object ACL
Check CORS configuration for an object (OPTIONS)
Multipart Upload Operations
For large files, multipart uploads allow you to upload a file in parts and assemble them upon completion.
Initiate a multipart upload
Upload a part
Upload a part from an existing object (copy)
Complete a multipart upload
Cancel a multipart upload and discard outstanding parts
List parts associated with an active upload
Presigned URLs
You can generate presigned URLs to provide temporary, time-limited access to objects without requiring the requester to have S3 credentials. Presigned URLs are generated client-side using your credentials.
Unsupported Operations
The following features are not currently available on IBM Cloud for Government.
Bucket Versioning—Not supported. Overwriting or deleting an object is permanent.
Bucket Policy - Not supported. Bucket policies cannot be set, retrieved, or deleted. Fine-grained access control via policies is unavailable; use HMAC credentials for access management.
Bucket Replication—Not supported. Cross-region redundancy must be managed at the application level.
Object Lock and Retention—Not supported. There is no WORM capability available.
Lifecycle Management—Not supported. Object expiration and tiering must be managed externally.
Bucket Logging—Not supported. Request-level access logging is not available.
Tagging—Not supported. Buckets and objects cannot be tagged.
IAM and RBAC—Not supported. Access is controlled through HMAC credentials only.
Auditing and Monitoring—Not supported. No native audit or monitoring service is available.
Getting Started
To begin using your storage instance, you will need:
Your Access and Secret keys from Wasabi GovCloud Manager
Your IC4G storage endpoint for your assigned region (dal08 or wdc03)
An S3-compatible client, SDK, or command line tool
Configure your client with your credentials, endpoint, region, and SigV4 signing. Your client documentation will provide specific setup instructions for your chosen tool.
If you need to rotate your credentials at any time, you can do so through Wasabi GovCloud Manager. Your new Secret and Access keys will be displayed once it is rotated.
Data Isolation
Your storage environment is dedicated to your organization. You are not sharing a COS instance with other customers. All data remains within the IBM Cloud for Government FedRAMP High boundary at all times. Wasabi GovCloud Manager provides daily visibility into your storage utilization, but does not interact with your object data in any way.