[Yandex Cloud documentation](../index.md) > [Yandex Object Storage](index.md) > Release notes

# Yandex Object Storage release notes

## Q1 2026 {#q1-2026}

* The [object metadata export (S3 Inventory)](concepts/s3-inventory.md) feature entered the [General Availability](../overview/concepts/launch-stages.md) stage in the [Russia region](../overview/concepts/region.md) and is now charged as per the [pricing policy](pricing.md). [To manage export configurations](operations/buckets/manage-s3-inventory.md), you can use the [Yandex Cloud CLI](cli-ref/bucket/create-inventory-configuration.md) and [API](api-ref/Bucket/createInventoryConfiguration.md).
* The [Yandex Cloud CLI](cli-ref/s3/presign.md) now allows [getting pre-signed URLs for object uploads](operations/objects/link-for-upload.md) to buckets with limited access.

## Q4 2025 {#q4-2025}

* Supported [IAM tokens](../iam/concepts/authorization/iam-token.md) and [ephemeral access keys](operations/buckets/manage-ephemeral-keys.md) for [authentication in Object Storage](api-ref/authentication.md).
* Now you can [disable using static keys for access to a bucket](operations/buckets/disable-statickey-auth.md).
* Added access policy settings [to enforce conditional object writes](concepts/policy.md#conditional-writes-rules).
* Now, when [configuring bucket access only from VPC service connections at the service level](operations/buckets/access-via-vpc.md#enable-service-restriction), you can maintain bucket access from the [management console](https://console.yandex.cloud).
* Enabled configuring VPC service connections in the [management console](https://console.yandex.cloud).
* Added new access policy [conditions](s3/api-ref/policy/conditions.md):
  * `yc:originip`: Maps the request origin IP address against the one specified in the policy. 
  
    Unlike the `aws:sourceip` condition, this one _does not take into account_ any reverse proxy server IP addresses, e.g., those provided in the `X-Forwarded-For` header.
  * `yc:access-key-id`: Maps the [static access key](../iam/concepts/authorization/access-key.md) ID against the one specified in the policy.
* Supported the `range` query parameter in S3 API methods for working with [Get](s3/api-ref/object/get.md) and [getObjectMeta](s3/api-ref/object/getobjectmeta.md) objects.
* In the `yc storage s3 cp` Yandex Cloud CLI command:
  * Fixed the error with filtering uploaded objects.
  * Added a check for the maximum object size.

## Q3 2025 {#q3-2025}

* The TLS protocol versions 1.0 and 1.1 are no longer supported.
* Support for [conditional writes](concepts/object.md#conditional-writes) has been implemented in the S3 API.
* Added new resources to the Terraform provider:
  * [yandex_storage_bucket_iam_binding](../terraform/resources/storage_bucket_iam_binding.md): [Configuration](operations/buckets/iam-access.md) of bucket access permissions via Identity and Access Management.
  * [yandex_storage_bucket_grant](../terraform/resources/storage_bucket_grant.md): [Configuration](operations/buckets/edit-acl.md) of bucket access permissions via the [Object Storage ACL](concepts/acl.md).
  * [yandex_storage_bucket_policy](../terraform/resources/storage_bucket_policy.md): [Bucket policy](concepts/policy.md) [management](operations/buckets/policy.md).
* Added the [yc storage s3 presign](cli-ref/s3/presign.md) command to the [Yandex Cloud CLI](../cli/quickstart.md) to [create pre-signed URLs](concepts/pre-signed-urls.md).
* Added the `--tags` parameter for bucket [label](concepts/tags.md) management to these Yandex Cloud CLI commands: [yc storage bucket create](cli-ref/bucket/create.md) and [yc storage bucket update](cli-ref/bucket/update.md).
* Fixed an error where in some cases, when deleting objects based on prefix using the management console, access policy rules were not considered.

## Q2 2025 {#q2-2025}

* In the [management console](https://console.yandex.cloud), you can now enable [encryption](concepts/encryption.md) and [versioning](concepts/versioning.md) when creating a [bucket](concepts/bucket.md).
* Added the following commands to the [Yandex Cloud CLI](../cli/quickstart.md):
  * [yc storage s3api get-bucket-acl](cli-ref/s3api/get-bucket-acl.md): Getting a bucket [ACL](security/acl.md).
  * [yc storage s3api put-bucket-acl](cli-ref/s3api/put-bucket-acl.md): Changing a bucket ACL.
  * [yc storage s3api get-object-acl](cli-ref/s3api/get-object-acl.md): Getting the ACL of an [object](concepts/object.md).
  * [yc storage s3api put-object-acl](cli-ref/s3api/put-object-acl.md): Changing the ACL of an object.
  * [yc storage s3api list-objects](cli-ref/s3api/list-objects.md): Getting a list of objects.
  * [yc storage s3 cp](cli-ref/s3/cp.md): Copying objects.
  * [yc storage s3 mv](cli-ref/s3/mv.md): Moving objects.
  * [yc storage s3 rm](cli-ref/s3/rm.md): Removing objects.
* Added new resources to the [Terraform](../tutorials/infrastructure-management/terraform-quickstart.md) provider:
  * [yandex_storage_bucket_grant](../terraform/resources/storage_bucket_grant.md): [Managing](operations/buckets/edit-acl.md) a bucket [ACL](security/acl.md) using a separate resource.
  * [yandex_storage_bucket_iam_binding](../terraform/resources/storage_bucket_iam_binding.md): [Assigning](operations/buckets/iam-access.md) users Yandex Identity and Access Management [roles](security/index.md) for a specific bucket.
* You can now make your bucket accessible only from [VPC](../vpc/concepts/private-endpoint.md) service connections.
* Added the ability to view bucket [labels](concepts/tags.md) for users with the `storage.configViewer` [role](security/index.md#storage-config-viewer).

## Q1 2025 {#q1-2025}

* The [Yandex Cloud CLI](../cli/quickstart.md) now supports commands you need to use [object labels](concepts/tags.md#object-tags) and [multipart uploads of objects](concepts/multipart.md).
* You can now get authenticated in Object Storage from Terraform via an [IAM token](../iam/concepts/authorization/iam-token.md). For more information, see [this provider guide](../terraform/resources/storage_bucket.md).
* Up-to-date [AWS SDK](tools/sdk/index.md) and [AWS CLI](tools/aws-cli.md) versions are now supported.

## Q4 2024 {#q4-2024}

* Announced end of support for the TLS protocol versions 1.0 and 1.1 as of July 1, 2025. For more information, see [TLS protocol](concepts/tls.md).
* In the [Yandex Cloud CLI](../cli/quickstart.md), added the [yc storage s3api](../cli/cli-ref/storage/cli-ref/s3api/index.md) group of commands to work with [objects](concepts/object.md).

## Q3 2024 {#q3-2024}

* Added support for accessing Object Storage using [Security Token Service temporary keys](operations/buckets/create-sts-key.md).
* Implemented direct access to buckets from cloud networks using [Yandex Virtual Private Cloud service connection](operations/buckets/access-via-vpc.md) without internet access. Added the `yc:private-endpoint-id` special condition to the [bucket policy](security/policy.md) to allow bucket access via VPC internal IP addresses only.

## Q2 2024 {#q2-2024}

Improved the management console design: bucket settings are now grouped under the ![image](../_assets/console-icons/wrench.svg) **Settings** and ![image](../_assets/console-icons/persons-lock.svg) **Security** tabs.

## Q1 2024 {#q1-2024}

* Improved object [lifecycle](concepts/lifecycles.md) management in a bucket:
  * Added support for new object grouping filters: [object labels](concepts/tags.md#object-tags) and the `AND` operator.
  * The new filters can now be used in the management console, CLI, Terraform, and when using [tools](tools/index.md) with S3 API support.
* Added support for [bucket labels](concepts/tags.md#bucket-tags) in the management console, CLI, and Terraform.
* Yandex Identity Hub [user groups](../organization/concepts/groups.md) can now be added to an [access control list (ACL)](security/acl.md) and [bucket policy](security/policy.md) in the management console, CLI, and Terraform.
* Improved the management console interface:
  * Added filtering by prefix in the list of bucket objects.
  * Added the feature to download objects from a list.