> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ryzeapi.cloud/llms.txt
> Use this file to discover all available pages before exploring further.

# Actualizar S3

> Define credenciales y bucket S3 para almacenar la media de la instancia

**Auth:** `TokenAccount` o `TokenInstance` • **Rate-limit:** `Global` (100/min) • **Idempotente:** sí

## Descripción

Configura el almacenamiento S3 de la instancia. La `secretKey` es **cifrada at-rest** y nunca devuelta. Para almacenamiento S3-compatible (MinIO, Backblaze, DO Spaces), rellena `endpoint` con la URL.

## Ejemplos

### AWS S3

Apunta el almacenamiento al AWS S3 oficial: bucket `ryzeapi-media` en `us-east-1`, con `endpoint` vacío para usar el dominio default de AWS y prefijo `media/myinstance/` para aislar los archivos.

<CodeGroup>
  ```bash cURL theme={null}
  curl -X POST "https://ryzeapi.cloud/api/instance/s3/my-instance" \
    -H "token: $Token_Instance" \
    -H "Content-Type: application/json" \
    -d '{
      "enabled": true,
      "region": "us-east-1",
      "bucket": "ryzeapi-media",
      "accessKey": "AKIA...",
      "secretKey": "secret-redacted",
      "endpoint": "",
      "pathPrefix": "media/myinstance/"
    }'
  ```

  ```javascript JavaScript theme={null}
  await fetch("https://ryzeapi.cloud/api/instance/s3/my-instance", {
    method: "POST",
    headers: {
      "token":        process.env.Token_Instance,
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      enabled:    true,
      region:     "us-east-1",
      bucket:     "ryzeapi-media",
      accessKey:  "AKIA...",
      secretKey:  "secret-redacted",
      endpoint:   "",
      pathPrefix: "media/myinstance/"
    })
  });
  ```

  ```python Python theme={null}
  import os, requests

  requests.post(
      "https://ryzeapi.cloud/api/instance/s3/my-instance",
      headers={
          "token":        os.environ["Token_Instance"],
          "Content-Type": "application/json"
      },
      json={
          "enabled":    True,
          "region":     "us-east-1",
          "bucket":     "ryzeapi-media",
          "accessKey":  "AKIA...",
          "secretKey":  "secret-redacted",
          "endpoint":   "",
          "pathPrefix": "media/myinstance/"
      }
  )
  ```

  ```go Go theme={null}
  package main

  import (
      "net/http"
      "os"
      "strings"
  )

  func main() {
      body := strings.NewReader(`{
          "enabled":    true,
          "region":     "us-east-1",
          "bucket":     "ryzeapi-media",
          "accessKey":  "AKIA...",
          "secretKey":  "secret-redacted",
          "endpoint":   "",
          "pathPrefix": "media/myinstance/"
      }`)
      req, _ := http.NewRequest("POST", "https://ryzeapi.cloud/api/instance/s3/my-instance", body)
      req.Header.Set("token", os.Getenv("Token_Instance"))
      req.Header.Set("Content-Type", "application/json")
      http.DefaultClient.Do(req)
  }
  ```
</CodeGroup>

### MinIO self-hosted

Mismo formato que AWS, pero con `endpoint` apuntando a un MinIO interno (`https://minio.internal.company.com`). El mismo patrón funciona para DigitalOcean Spaces, Backblaze B2 y otros almacenamientos S3-compatibles.

<CodeGroup>
  ```bash cURL theme={null}
  curl -X POST "https://ryzeapi.cloud/api/instance/s3/my-instance" \
    -H "token: $Token_Instance" \
    -H "Content-Type: application/json" \
    -d '{
      "enabled": true,
      "region": "us-east-1",
      "bucket": "whatsapp",
      "endpoint": "https://minio.internal.company.com",
      "accessKey": "minioadmin",
      "secretKey": "minioadmin",
      "pathPrefix": "ryzeapi/"
    }'
  ```

  ```javascript JavaScript theme={null}
  await fetch("https://ryzeapi.cloud/api/instance/s3/my-instance", {
    method: "POST",
    headers: {
      "token":        process.env.Token_Instance,
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      enabled:    true,
      region:     "us-east-1",
      bucket:     "whatsapp",
      endpoint:   "https://minio.internal.company.com",
      accessKey:  "minioadmin",
      secretKey:  "minioadmin",
      pathPrefix: "ryzeapi/"
    })
  });
  ```

  ```python Python theme={null}
  import os, requests

  requests.post(
      "https://ryzeapi.cloud/api/instance/s3/my-instance",
      headers={
          "token":        os.environ["Token_Instance"],
          "Content-Type": "application/json"
      },
      json={
          "enabled":    True,
          "region":     "us-east-1",
          "bucket":     "whatsapp",
          "endpoint":   "https://minio.internal.company.com",
          "accessKey":  "minioadmin",
          "secretKey":  "minioadmin",
          "pathPrefix": "ryzeapi/"
      }
  )
  ```

  ```go Go theme={null}
  package main

  import (
      "net/http"
      "os"
      "strings"
  )

  func main() {
      body := strings.NewReader(`{
          "enabled":    true,
          "region":     "us-east-1",
          "bucket":     "whatsapp",
          "endpoint":   "https://minio.internal.company.com",
          "accessKey":  "minioadmin",
          "secretKey":  "minioadmin",
          "pathPrefix": "ryzeapi/"
      }`)
      req, _ := http.NewRequest("POST", "https://ryzeapi.cloud/api/instance/s3/my-instance", body)
      req.Header.Set("token", os.Getenv("Token_Instance"))
      req.Header.Set("Content-Type", "application/json")
      http.DefaultClient.Do(req)
  }
  ```
</CodeGroup>

### Deshabilitar

Envía solo `enabled: false` para deshabilitar el almacenamiento y **eliminar** las credenciales de la base de datos. Para volver a habilitar más tarde, todos los campos deben enviarse de nuevo.

<CodeGroup>
  ```bash cURL theme={null}
  curl -X POST "https://ryzeapi.cloud/api/instance/s3/my-instance" \
    -H "token: $Token_Instance" \
    -H "Content-Type: application/json" \
    -d '{"enabled":false}'
  ```

  ```javascript JavaScript theme={null}
  await fetch("https://ryzeapi.cloud/api/instance/s3/my-instance", {
    method: "POST",
    headers: {
      "token":        process.env.Token_Instance,
      "Content-Type": "application/json"
    },
    body: JSON.stringify({ enabled: false })
  });
  ```

  ```python Python theme={null}
  import os, requests

  requests.post(
      "https://ryzeapi.cloud/api/instance/s3/my-instance",
      headers={
          "token":        os.environ["Token_Instance"],
          "Content-Type": "application/json"
      },
      json={"enabled": False}
  )
  ```

  ```go Go theme={null}
  package main

  import (
      "net/http"
      "os"
      "strings"
  )

  func main() {
      body := strings.NewReader(`{"enabled":false}`)
      req, _ := http.NewRequest("POST", "https://ryzeapi.cloud/api/instance/s3/my-instance", body)
      req.Header.Set("token", os.Getenv("Token_Instance"))
      req.Header.Set("Content-Type", "application/json")
      http.DefaultClient.Do(req)
  }
  ```
</CodeGroup>

## Respuesta exitosa

```json 200 OK theme={null}
{
  "success": true,
  "message": "S3 configuration updated",
  "s3": {
    "enabled": true,
    "region": "us-east-1",
    "bucket": "ryzeapi-media",
    "accessKey": "AKIA...",
    "endpoint": "",
    "pathPrefix": "media/myinstance/"
  }
}
```

<Note>
  `secretKey` **no** aparece en la respuesta, el servidor nunca devuelve la clave en texto plano.
</Note>

## Parámetros de ruta

<ParamField path="instance" type="string" required>
  Nombre de la instancia.
</ParamField>

## Cabeceras

<ParamField header="token" type="string" required>
  TokenAccount o TokenInstance.
</ParamField>

<ParamField header="Content-Type" type="string" required>
  `application/json`.
</ParamField>

## Cuerpo de la solicitud

<ParamField body="enabled" type="boolean" required>
  Habilita/deshabilita el S3 de la instancia. `false` limpia todos los campos.
</ParamField>

<ParamField body="region" type="string">
  Región (p. ej., `us-east-1`).
</ParamField>

<ParamField body="bucket" type="string">
  Nombre del bucket (debe existir; no se realiza creación).
</ParamField>

<ParamField body="accessKey" type="string">
  Access Key ID.
</ParamField>

<ParamField body="secretKey" type="string">
  Secret Access Key. Cifrada at-rest.
</ParamField>

<ParamField body="endpoint" type="string">
  Endpoint personalizado (MinIO, DO Spaces, Backblaze). Vacío para AWS S3 oficial.
</ParamField>

<ParamField body="pathPrefix" type="string">
  Prefijo de path (p. ej., `media/myinstance/`).
</ParamField>

## Notas

<Warning>
  **No hay testing de credenciales.** El endpoint guarda la config sin validar si el bucket existe o si las credenciales funcionan, el error solo aparece cuando el próximo upload de media intenta autenticarse (visible en los logs del servidor).
</Warning>

<Note>
  Deshabilitar (`enabled=false`) **elimina** las credenciales de la base de datos. Para volver a habilitar más tarde, todos los campos deben enviarse de nuevo.
</Note>

## Errores

| HTTP | `error.message`                         | Cuándo                     |
| :--: | --------------------------------------- | -------------------------- |
|  400 | `Invalid request body`                  | JSON malformado.           |
|  401 | `Invalid token`                         | Token faltante o inválido. |
|  404 | `Instance not found`                    | Nombre no existe.          |
|  429 | `Rate limit exceeded. Try again later.` | Más de 100 req/min.        |
|  500 | `Failed to update S3 configuration`     | Error de base de datos.    |

```json theme={null}
{
  "success": false,
  "error": {
    "message": "Failed to update S3 configuration"
  }
}
```