# S3 bucket overlap

**URL:** <https://community.vastdata.com/t/s3-bucket-overlap/1369>\
**Category:** Product Feedback\
**Tags:** use-case\
**Created:** [May 22, 2025, 1:26pm UTC](https://community.vastdata.com/t/s3-bucket-overlap/1369 "2025-05-22T13:26:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![carlilek](https://sea2.discourse-cdn.com/flex022/user_avatar/community.vastdata.com/carlilek/32/285_2.png) [@carlilek](https://community.vastdata.com/u/carlilek)\
**Post date:** [May 22, 2025, 1:26pm UTC](https://community.vastdata.com/t/s3-bucket-overlap/1369/1 "2025-05-22T13:26:45Z")

</div>

Currently, views providing S3 buckets with different Security policies cannot overlap. For example if /share is presented as s3://vast.example.org/share-bucket from a View that has the NFS permissions model, I cannot then create a separate bucket underneath /share at /share/identity-policy-bucket that uses identity policies as the permissions model. This causes issues when we create an anonymous bucket over the entire extant share (as requested), but then we need to carve off a bucket somewhere under there that has more stringent requirements.

---

<div class="post-metadata">

**Author:** ![jonasrosland](https://sea2.discourse-cdn.com/flex022/user_avatar/community.vastdata.com/jonasrosland/32/1_2.png) [@jonasrosland](https://community.vastdata.com/u/jonasrosland)\
**Post date:** [May 22, 2025, 2:15pm UTC](https://community.vastdata.com/t/s3-bucket-overlap/1369/2 "2025-05-22T14:15:49Z")

</div>

Great feedback @carlilek !  
I’ve pinged the product team to get them to chime in.

---

<div class="post-metadata">

**Author:** ![eyal.traitel](https://sea2.discourse-cdn.com/flex022/user_avatar/community.vastdata.com/eyal.traitel/32/1216_2.png) [@eyal.traitel](https://community.vastdata.com/u/eyal.traitel)\
**Post date:** [May 28, 2025, 8:18am UTC](https://community.vastdata.com/t/s3-bucket-overlap/1369/3 "2025-05-28T08:18:48Z")

</div>

Hi @carlilek, thanks for this feedback. Sounds like an interesting case of nested Views. If I generalize your use case, it’s about a setup where a top-level View has one security flavor, and underneath there is a lower-level View that has another security flavor.  
Correct understanding?

---

<div class="post-metadata">

**Author:** ![carlilek](https://sea2.discourse-cdn.com/flex022/user_avatar/community.vastdata.com/carlilek/32/285_2.png) [@carlilek](https://community.vastdata.com/u/carlilek)\
**Post date:** [May 28, 2025, 2:28pm UTC](https://community.vastdata.com/t/s3-bucket-overlap/1369/4 "2025-05-28T14:28:39Z")

</div>

Yup, that’s correct! While we offer anonymous read-only access to internal buckets (which can be placed over the entire share), we require that buckets that are presented via a proxy server in our DMZ use access keys for the same read-only access.

It would be helpful to have that nested bucket available internally as anonymous if someone were to enter through the higher level bucket URL, but as I think about that, it seems kind of impossible. 🙂