Skip to content

docs(r2): clarify billing for failed 4xx requests in pricing FAQ #32832

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
krys-cf wants to merge 1 commit into
base: production
Choose a base branch
from
+10 −2
Open

docs(r2): clarify billing for failed 4xx requests in pricing FAQ #32832

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions src/content/docs/r2/pricing.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -164,8 +164,16 @@ To learn more about how usage is billed, refer to [Cloudflare Billing Policy](/b

## Frequently asked questions

### Will I be charged for unauthorized requests to my R2 bucket?
### Will I be charged for failed requests to my R2 bucket?

No. You are not charged for operations when the caller does not have permission to make the request (HTTP 401 `Unauthorized` response status code).
Requests that fail at the authentication layer are not charged. This includes:

- HTTP 401 (`Unauthorized`) — missing or invalid credentials.
- HTTP 403 when caused by an authentication failure such as `SignatureDoesNotMatch`, `ExpiredRequest`, or `RequestTimeTooSkewed`.

Requests that pass authentication but fail for other reasons are counted and billed according to the operation's class. For example:

- A `PutObject` returning HTTP 412 (`PreconditionFailed`) due to a conditional header like `If-None-Match` counts as a Class A operation.
- A `PutObject` returning HTTP 400 (`BadDigest`) due to a mismatched `Content-MD5` counts as a Class A operation.

[^1]: Egressing directly from R2, including via the [Workers API](/r2/api/workers/), [S3 API](/r2/api/s3/), and [`r2.dev` domains](/r2/buckets/public-buckets/#enable-managed-public-access) does not incur data transfer (egress) charges and is free. If you connect other metered services to an R2 bucket, you may be charged by those services.
Loading