OtterTrash
OtterStorage's bucket recycle bin. When you delete a bucket it doesn't vanish instantly: it goes to OtterTrash, where you can recover it during a grace period. A safety net against accidental deletions.
OtterTrash is OtterStorage's recycle bin for buckets. Deleting a bucket by mistake can be catastrophic, so instead of destroying it immediately we move it to the trash: it leaves your view and your usage, but stays recoverable during a grace period before permanent deletion. Once that window passes, it's purged automatically.
How it works
A deleted bucket's lifecycle has three phases:
- You delete the bucket → it moves to OtterTrash ("trashed" state).
- Grace period (by default, 7 days): the bucket is recoverable at any time.
- Permanent deletion: when the window expires, an automatic process purges it. From then on it can't be recovered.
What happens when a bucket goes to the trash
- The bucket stops appearing in your active bucket list and can no longer be used via the S3 API.
- Its original name is freed immediately: you can create a new bucket with that same name without waiting.
- The access keys tied to that bucket are removed. If you restore it later, you'll need to create new keys.
- Your data stays there, intact, until permanent deletion: the trash doesn't touch your content.
Restoring a bucket
While the bucket is within the grace period, you can restore it from the console and it returns to your account with all its content. Two things to keep in mind:
- If the original name is already taken by another active bucket, the restore uses a
-restoredsuffix to avoid a clash. - You'll need to create new access keys, since the previous ones were removed when it went to the trash.
If permanent deletion has already started, restoring is no longer possible: it's a point of no return.
Immutable buckets (Object Lock)
If a bucket has Object Lock enabled, OtterTrash never auto-purges it while it holds objects under retention: immutability wins. These buckets stay in the trash (recoverable) and their WORM data remains intact, in line with their compliance guarantee. It's a deliberate safeguard: no automatic process can bypass a COMPLIANCE or GOVERNANCE retention.
OtterTrash protects buckets; versioning protects objects
It's worth not confusing two levels of protection:
- OtterTrash is your safety net against the accidental deletion of a whole bucket.
- Versioning is your safety net against the deletion or overwrite of individual objects: it keeps previous versions and a deleted object can be recovered while its version exists.
- For an immutability guarantee against ransomware or for compliance, combine versioning with Object Lock.
Since OtterStorage doesn't charge for requests or deletes, keeping versioning and a roomy trash window doesn't penalize your bill with per-operation costs: you only pay for the storage the data occupies while it exists.
Frequently asked questions
How long does a bucket stay in the trash? +
Can I reuse a deleted bucket's name right away? +
Do I get my access keys back when I restore? +
Is a bucket with Object Lock deleted automatically? +
Protect your data by design
Trash, versioning and immutability: layers of safety with no per-operation cost.
