The answer
No. Use trusted server or worker configuration and scoped temporary access for browsers when needed.
How do you configure an S3-compatible client for Cloudflare R2?
Should R2 access keys be embedded in the frontend?
Still have questions?
Browse all our FAQs or reach out to our support team
Want to upskill yourself?
Your learning library
Small steps. Big possibilities.
Find your next course. Build something great.