Platform and Reseller Guides

Use these guides to build, brand, secure, and operate storage services on Backblaze B2 Cloud Storage. They are intended for platform providers, resellers, managed service providers, and neocloud operators that integrate B2 into their own products or manage storage for multiple customers.

Choose a Platform or Reseller Guide

Get started with Powered By Backblaze: Start with the Powered By Backblaze Quickstart Guide to learn about the available platform services and requirements. Access to features such as the Partner API and Custom Domains may require approval from Backblaze.

Provision storage for each tenant: Compare account-per-tenant, bucket-per-tenant, and prefix-per-tenant models, and use the Partner API with the S3-Compatible API or B2 Native API to provision customer storage.

Present a branded S3 endpoint: Configure a custom domain for the B2 S3-Compatible API and understand the authentication, TLS, addressing, and proxy requirements.

Map IAM and ACL patterns to B2 application keys: Translate common AWS IAM and S3 access patterns into B2 application key capabilities, bucket restrictions, and filename-prefix restrictions.

Use customer-managed encryption keys: Use Server-Side Encryption with Customer-Managed Keys (SSE-C) to give tenants control of their encryption keys on a B2 storage backend.

Configure immutable storage for reseller and MSP customers: Use Object Lock, retention settings, Legal Hold, and tenant isolation to provide immutable, ransomware-resistant storage.

Configure audit and access logging: Use Bucket Access Logs, Event Notifications, and tenant-specific application keys to record and attribute activity across customer storage.

Design for network throughput and peering: Select the appropriate public endpoint, partner network, private networking, and transfer configuration for high-throughput workloads.