Features

Your S3 files. More ways to work with them.

Browse buckets, preview files, ask documents questions, extract archives, and share rich previews from one workspace.

Try Ultra free for one month Compare plans

Every Ultra feature, free for one month. Cancel before it ends and you pay nothing.

app.bucketdesk.com/workspace/acme-media-prod/campaigns/2026-q3Simulated demo

acme-media-prod/campaigns/2026-q3

ListGrid

DIRassets/318 objects

DIRexports/12 objects

PDFQ3_brand_guidelines.pdf4.2 MB

XLSmedia_plan_v7.xlsx880 KB

MOVreel-04_master.mov84 GB · Deep Archive

ZIPpress_kit_final.zip312 MB

s3://acme-media-prod/campaigns/2026-q3/Q3_brand_guidelines.pdf

Q3_brand_guidelines.pdf

ShareAsk

Size 4.2 MBClass StandardModified Sep 12, 2026ETag 9f3c…a1

Built on the AWS primitives you already run. Nothing new to operate.

Amazon S3
IAM roles
STS AssumeRole
CloudFormation
S3 Glacier
Multipart upload

01Browse & find

Find the object without knowing the key.

Walk prefixes with breadcrumbs or the tree, find files by the start of their name inside the current folder, and switch between list and grid without losing your place. Size, storage class and last-modified are always in view.

Browse a bucket free

Plan: MinimumStandardUltra
Availability: Available
Limits: Search matches the start of a file name in the current folder and is case sensitive; it does not search file contents. Minimum: 1 bucket, 1 operator, 1 viewer. Standard: unlimited buckets and viewers, 5 operators included, then $15 a month each. Ultra: 10 operators included, then $25 a month each.

app.bucketdesk.com/workspace/acme-media-prod/campaigns/2026-q3?q=brandSimulated demo

Prefixes

acme-media-prod

campaigns

2026-q3

assets

exports

2026-q2

finance

acme-media-prod/campaigns/2026-q3

⌕brandin this prefix

NameSizeClassModified

PDFbrand_guidelines_q3.pdf4.2 MBStandardSep 12, 2026

PDFbrand_voice_2026.pdf1.1 MBStandardAug 30, 2026

XLSbrand_media_plan_v7.xlsx880 KBStandard-IASep 2, 2026

PNGbrand_lockup_dark.png2.4 MBStandardJul 18, 2026

MOVbrand_reel_master.mov84 GBDeep ArchiveJun 4, 2026

ZIPbrand_press_kit.zip312 MBStandardSep 9, 2026

app.bucketdesk.com/dashboardProduct capture

Workspace showing a client’s Contracts, Invoices and Audit folders with two PDFs

02Preview files

Open it in the browser. Don’t download it.

PDF, images (including HEIC), text, HTML and Markdown render on every plan. Word, Excel and PowerPoint documents and streamed audio and video need Standard. Files are read by range straight from your bucket.

Preview your files

Plan: Minimum (partial)StandardUltra
Availability: Available
Limits: Minimum: PDF, image, text, HTML, Markdown. Standard adds Word, Excel and PowerPoint previews in BucketDesk’s own viewer and media streaming.

app.bucketdesk.com/preview/…Simulated demo

Q3_brand_guidelines.pdf

Engine Native PDF

Size 4.2 MB

Plan Minimum

Streamed by range read. Object never leaves your bucket.

03Document AI

Ask the document. Get the answer and the page it came from.

Open a document, ask in plain language, and get an answer with a citation that highlights the supporting passage. Answers stay scoped to the file you have open.

Ask a document

Plan: Minimum (not included)Standard (not included)Ultra
Availability: Available
Limits: Ultra only. One document per conversation. Provider usage is billed to your account where practical; no file content is retained after the session.

app.bucketdesk.com/preview/Campaign_Brief.pdf#askSimulated demo

p. 4 / 12

Ask this document

What are we contractually required to deliver, and by when?

Three social cutdowns (15s, 30s, 60s) and one hero film, delivered by October 3, 2026. Late delivery triggers the 5% fee in §7.2. [1]

[1]Campaign_Brief.pdf · p. 4 · §3 Deliverables

“…the Agency shall deliver three (3) social cutdowns and one (1) hero film no later than 3 October 2026…”

Ask a follow-up

04Archive operations

Look inside a 300 MB zip before you extract a single byte.

Inspection reads the archive index by range, so nothing is downloaded. Extraction shows destination, object count, expansion ratio, collisions and estimated cost before it writes — then runs as a job you can watch.

Extract an archive

Plan: Minimum (not included)StandardUltra
Availability: Available
Limits: Standard and Ultra. Expansion-ratio, object-count and key-collision checks gate every extraction. Extracted objects are written to your bucket under the operator’s role.

app.bucketdesk.com/jobs/archive/…Illustrative workflow

ZIPpress_kit_final.zip312 MB · 41 objects · expands to 1.1 GB

press_kit/logos/lockup_dark.svg18 KBImage

press_kit/logos/lockup_light.svg18 KBImage

press_kit/photos/founders_01.heic6.2 MBImage

press_kit/video/sizzle_30s.mp4288 MBVideo

press_kit/boilerplate.docx44 KBDocument

press_kit/fact_sheet.pdf1.9 MBDocument

Inspected by range read — the archive was not downloaded or copied.

app.bucketdesk.com/jobsProduct capture

Jobs page showing a completed archive extraction

06Storage operations

Put files in. Pull them back from cold storage.

Ultra operators upload directly to a prefix, delete with confirmation, and request restores from Glacier and Deep Archive one object at a time — choosing the retrieval tier and how long the copy stays readable.

Upload & restore

Plan: Minimum (not included)Standard (not included)Ultra
Availability: Available
Limits: Ultra only. Restore is manual and per object; AWS bills retrieval to your account. Delete requires the Owner or Operator role and is recorded in Activity.

app.bucketdesk.com/workspace/acme-media-prodIllustrative workflow

Drop files to upload to campaigns/2026-q3/

Q3_brand_guidelines_v2.pdf

Done

reel-05_master.mov

62%

talent_releases.zip

Queued

Multipart upload straight to S3 under the operator’s role. Delete is a separate Ultra permission with confirmation.

07Access & activity

Everyone signs in. Nobody holds a key.

A connection is a scoped IAM role you deploy with CloudFormation — BucketDesk assumes it for temporary credentials, so no AWS access keys or secrets are shared or stored. People still authenticate to BucketDesk, act within a role, and every action lands in Activity.

Connect a bucket

Plan: Minimum (partial)StandardUltra
Availability: Available
Limits: Connections and Activity on every plan. Viewer / Operator / Owner roles and audit export from Standard. SSO and SCIM are Enterprise options.

app.bucketdesk.com/connections · /activityProduct capture · activity

Connection

acme-media-prod · us-east-2

Scoped IAM role deployed by CloudFormation with an external ID. BucketDesk assumes it for temporary credentials. No AWS access keys or secrets are shared or stored.

sts:AssumeRole1 bucket · 1 prefix3600 s session

Roles & permitted actions

ViewerOperatorOwnerBrowse & preview●●●Search & metadata●●●Share externally●●●Extract archives●●●Upload / restore●●●Delete · manage members●●●

08Planned

Automation is arriving in stages.

Nothing below is included in a plan until it ships. Planned items wait on the customer-funded execution model and production controls.

Automations
Controlled workflows with explicit triggers, permitted locations, limits and run history.
PlannedUltra
Document agents
Multi-step agents over a prefix, with approvals before any write.
PlannedUltra
Email workflows
Ingest attachments from a mailbox into a prefix you choose.
PlannedUltra
Approvals & spend policies
Require sign-off and cap cost for restores, extractions and AI usage.
PlannedUltra
Customer-controlled cache
Keep converted previews in a bucket you own.
PlannedUltra

Keep going

Compare plans

Minimum is free for one bucket. Standard unlocks sharing and archives; Ultra adds Document AI and storage operations.

See pricing →

Try Ultra free for one month.

Deploy a scoped role with CloudFormation, sign in, and use every Ultra feature on your own files — without handing anyone an access key. Cancel before the trial ends and you pay nothing.

Start free trial Or start free on Minimum →Compare plans →