Bucket & Object Storage Commands

The am CLI provides native storage administration commands to manage S3 buckets, enforce WORM regulatory retention, inspect distributed object chunks, and perform irreversible cryptographic shredding.

1. am bucket — S3 Bucket & Compliance Configuration

# List all active storage buckets across all tenants
am bucket list

# Create a new bucket with strict residency pinning
am bucket create financial-ledger-2026 \
    --tenant "tenant-enterprise-bank" \
    --region "sa-central-1" \
    --quota 50TB

# Enable S3 Object Lock (WORM Compliance Mode)
am bucket set-lock financial-ledger-2026 \
    --mode COMPLIANCE \
    --retention-days 2555 \
    --legal-hold enabled

# Inspect bucket configuration, lifecycle policies, and used capacity
am bucket inspect financial-ledger-2026

2. am object — Chunk Inspection & Cryptographic Shredding

The am object suite interacts directly with physical chunks stored across Kdouja nodes:

# Upload a file directly into the cluster
am object put financial-ledger-2026 /data/q3-audit.enc --key "audit/2026-q3.enc"

# Inspect the exact physical chunk placement across storage nodes
am object locate financial-ledger-2026 "audit/2026-q3.enc"

# Verify chunk cryptographic checksums (SHA-256 / CRC32C)
am object verify financial-ledger-2026 "audit/2026-q3.enc"

# Cryptographic Shredding (Irreversible DEK destruction)
# Permanently destroys encryption keys per GDPR Art 17 / SDAIA PDPL Art 4
am object shred financial-ledger-2026 "audit/2026-q3.enc" --reason "Retention Expired" --yes

3. am tenant — Multi-Tenancy & Namespaces

Manage tenant isolation and cryptographic namespace partitioning:

# Create a new enterprise tenant namespace
am tenant create "saudi-telecom-corp" --contact "dpo@stc.com.sa" --max-buckets 100

# Issue S3 SigV4 Access Key and Secret Key for a tenant
am tenant key-create "saudi-telecom-corp" --description "Backup Pipeline Agent"

# Enforce capacity and bandwidth quota limits on a tenant
am quota set --tenant "saudi-telecom-corp" --max-capacity 500TB --max-bandwidth-mbps 10000