Cloudflare R2
Cloudflare R2 is the provider that departs most from the AWS model while still speaking S3. There are no regions — storage is globally distributed — and path-style addressing is not a preference but a requirement. S3 Explorer locks the toggle for you.
Connection settings
- Endpoint
- https://{account_id}.r2.cloudflarestorage.com
- Default region
- auto
- Addressing
- Path-style (enforced)
- Temporary credentials
- Not applicable
A filled-in example
Every value below is fabricated — they are shaped like real Cloudflare R2 credentials so you can recognise yours, and they authenticate nothing.
- Endpoint
- https://a1b2c3d4e5f6example0000000000000.r2.cloudflarestorage.com
- Region
- auto
- Access key
- a1b2c3d4e5f6example000000000000
- Secret key
- d2e3f4a5b6c7example00000000000000000000000000000000000000000000
- Addressing
- Path-style (locked)
The long hexadecimal string in the endpoint is your Cloudflare account ID — it is visible in the dashboard URL once you are logged in.
Where each value comes from
Endpoint
Format: https://{account_id}.r2.cloudflarestorage.com — Find your Account ID in the Cloudflare dashboard URL.
Credentials
In Cloudflare Dashboard → R2 → Manage R2 API Tokens, create a new API token with S3 Auth.
Notes
Path-style addressing is mandatory. R2 has no concept of regions (globally distributed). No egress fees.
What usually goes wrong
Region "auto" is the only correct answer
R2 has no regional concept. Tools that insist on a region generally accept auto or us-east-1 and ignore it. Do not try to match a region to where your data physically sits; the question does not apply.
The token must be created with S3 auth
R2 → Manage R2 API Tokens. A token created for the Workers binding will not authenticate an S3 client. Pick the S3-compatible option and you get an access key / secret key pair in the familiar shape.
No egress fees changes how you use it
R2 bills storage and operations but not bandwidth out. Pulling a large bucket down to inspect it locally costs nothing beyond the request count, which is not true on most of the providers here.