Skip to content
Supabase · Data and observabilityJul 16, 2026, 17:55 UTC

S3 endpoints for keys with special characters broken

MinorNot disclosedUpdated 38h ago
Jul 16, 17:55 UTCJul 16, 18:49 UTC
Duration
54m
Impact
Minor
Root cause
Not disclosed
Supabase, 90 days
58 incidents
Affected
Storage
Status page

Final update

This incident has been resolved. A recent API Gateway deployment altered how certain special characters in S3 object key paths were encoded before reaching storage, causing signature verification failures (403) for affected requests. The change has been reverted and issue is now fixed.

Timeline

  1. Resolved · Jul 16, 18:49 UTC
    This incident has been resolved. A recent API Gateway deployment altered how certain special characters in S3 object key paths were encoded before reaching storage, causing signature verification failures (403) for affected requests. The change has been reverted and issue is now fixed.
  2. Identified · Jul 16, 18:32 UTC
    We have implemented a PR rollback to mitigate this issue. We will actively monitor its progress
  3. Identified · Jul 16, 18:23 UTC
    A likely mitigation has been identified and we are discussing the proper implementation method.
  4. Identified · Jul 16, 17:55 UTC
    We have identified an issue where S3 endpoints for keys with special characters will be broken. We are actively investigating the correct mitigation for this issue.

More from Supabase

Full history
StartedIncidentDuration
Sep 2415:36 UTCProject Lifecycle Issues in eu-west-12h 2m
Sep 2410:37 UTCPermission errors in the Supabase Dashboard1h 12m
Sep 2321:58 UTCSupabase CLI CI workflow failures1h 42m
Sep 2309:31 UTCStorage search failing for restored projects24h 30m
Sep 2309:21 UTCIncreased error rate in project creation and project restore1h 28m
Sep 2210:49 UTCSupavisor connection disruptions in EU West 1 (Ireland)1h 31m

Sources: vendors' own status pages, published postmortems and SEC 8-K Item 1.05 filings, read daily. Times as reported. Logos via logo.dev; trademarks belong to their owners.

Outages by email

Saturday mornings: the week's major outages, new postmortems and disclosed breaches, only in weeks that had some.

Double opt-in. Unsubscribe any time.