[{"data":1,"prerenderedAt":556},["ShallowReactive",2],{"navigation_docs":3,"-storage-access-keys":212,"-storage-access-keys-surround":551},[4,21,89,125,152,183,202,207],{"title":5,"collapsed":6,"path":7,"stem":8,"children":9,"page":20},"Getting Started",true,"/getting-started","1.getting-started",[10,15],{"title":11,"path":12,"stem":13,"icon":14},"Introduction","/getting-started/introduction","1.getting-started/introduction","i-lucide-info",{"title":16,"path":17,"stem":18,"icon":19},"Service Tiers","/getting-started/service-tiers","1.getting-started/service-tiers","i-lucide-layers",false,{"title":22,"collapsed":6,"path":23,"stem":24,"children":25,"page":20},"Containers","/containers","2.containers",[26,56],{"title":27,"path":28,"stem":29,"children":30,"page":20},"Kubernetes","/containers/kubernetes","2.containers/1.kubernetes",[31,36,41,46,51],{"title":32,"path":33,"stem":34,"icon":35},"Overview","/containers/kubernetes/overview","2.containers/1.kubernetes/1.overview","i-lucide-box",{"title":37,"path":38,"stem":39,"icon":40},"Create a Cluster","/containers/kubernetes/create-cluster","2.containers/1.kubernetes/2.create-cluster","i-lucide-plus-circle",{"title":42,"path":43,"stem":44,"icon":45},"Connect to Your Cluster","/containers/kubernetes/connect-cluster","2.containers/1.kubernetes/3.connect-cluster","i-lucide-link",{"title":47,"path":48,"stem":49,"icon":50},"Node Groups","/containers/kubernetes/node-groups","2.containers/1.kubernetes/4.node-groups","i-lucide-server",{"title":52,"path":53,"stem":54,"icon":55},"Ingress & Domains","/containers/kubernetes/ingress-domains","2.containers/1.kubernetes/5.ingress-domains","i-lucide-globe",{"title":57,"path":58,"stem":59,"children":60,"page":20},"Container Registry","/containers/container-registry","2.containers/2.container-registry",[61,65,69,74,79,84],{"title":32,"path":62,"stem":63,"icon":64},"/containers/container-registry/overview","2.containers/2.container-registry/1.overview","i-lucide-package",{"title":66,"path":67,"stem":68,"icon":40},"Create a Registry","/containers/container-registry/create-registry","2.containers/2.container-registry/2.create-registry",{"title":70,"path":71,"stem":72,"icon":73},"Push Images to Registry","/containers/container-registry/push-images","2.containers/2.container-registry/3.push-images","i-lucide-upload",{"title":75,"path":76,"stem":77,"icon":78},"Pull Images from Registry","/containers/container-registry/pull-images","2.containers/2.container-registry/4.pull-images","i-lucide-download",{"title":80,"path":81,"stem":82,"icon":83},"Manage Repositories","/containers/container-registry/manage-repositories","2.containers/2.container-registry/5.manage-repositories","i-lucide-folder",{"title":85,"path":86,"stem":87,"icon":88},"Manage Access Credentials","/containers/container-registry/manage-credentials","2.containers/2.container-registry/6.manage-credentials","i-lucide-key",{"title":90,"collapsed":6,"path":91,"stem":92,"children":93,"page":20},"Compute","/compute","3.compute",[94],{"title":95,"path":96,"stem":97,"children":98,"page":20},"Virtual Machines","/compute/virtual-machines","3.compute/virtual-machines",[99,102,106,111,116,121],{"title":32,"path":100,"stem":101,"icon":50},"/compute/virtual-machines/overview","3.compute/virtual-machines/1.overview",{"title":103,"path":104,"stem":105,"icon":40},"Launch an Instance","/compute/virtual-machines/launch-instance","3.compute/virtual-machines/2.launch-instance",{"title":107,"path":108,"stem":109,"icon":110},"Connect with SSH","/compute/virtual-machines/connect-with-ssh","3.compute/virtual-machines/3.connect-with-ssh","i-lucide-terminal",{"title":112,"path":113,"stem":114,"icon":115},"Manage Snapshots","/compute/virtual-machines/manage-snapshots","3.compute/virtual-machines/4.manage-snapshots","i-lucide-camera",{"title":117,"path":118,"stem":119,"icon":120},"Manage Backups","/compute/virtual-machines/manage-backups","3.compute/virtual-machines/5.manage-backups","i-lucide-shield-check",{"title":122,"path":123,"stem":124,"icon":88},"Manage SSH Keys","/compute/virtual-machines/manage-ssh-keys","3.compute/virtual-machines/6.manage-ssh-keys",{"title":126,"collapsed":6,"path":127,"stem":128,"children":129,"page":20},"Databases","/databases","4.databases",[130,134,138,143,147],{"title":32,"path":131,"stem":132,"icon":133},"/databases/overview","4.databases/1.overview","i-lucide-database",{"title":135,"path":136,"stem":137,"icon":40},"Create a Database","/databases/create-database","4.databases/2.create-database",{"title":139,"path":140,"stem":141,"icon":142},"Connect to a Database","/databases/connect-database","4.databases/3.connect-database","i-lucide-plug",{"title":117,"path":144,"stem":145,"icon":146},"/databases/manage-backups","4.databases/4.manage-backups","i-lucide-history",{"title":148,"path":149,"stem":150,"icon":151},"Manage Database","/databases/manage-database","4.databases/5.manage-database","i-lucide-settings",{"title":153,"collapsed":6,"path":154,"stem":155,"children":156,"page":20},"Storage","/storage","5.storage",[157,161,166,170,174,178],{"title":32,"path":158,"stem":159,"icon":160},"/storage/overview","5.storage/1.overview","i-lucide-hard-drive",{"title":162,"path":163,"stem":164,"icon":165},"Create a Bucket","/storage/create-bucket","5.storage/2.create-bucket","i-lucide-folder-plus",{"title":167,"path":168,"stem":169,"icon":73},"Upload & Manage Objects","/storage/manage-objects","5.storage/3.manage-objects",{"title":171,"path":172,"stem":173,"icon":88},"Access Keys","/storage/access-keys","5.storage/4.access-keys",{"title":175,"path":176,"stem":177,"icon":110},"S3 API Usage","/storage/s3-api-usage","5.storage/5.s3-api-usage",{"title":179,"path":180,"stem":181,"icon":182},"Usage & Billing","/storage/usage","5.storage/6.usage","i-lucide-bar-chart",{"title":184,"collapsed":6,"path":185,"stem":186,"children":187,"page":20},"Account","/account","6.account",[188,192,197],{"title":189,"path":190,"stem":191,"icon":88},"API Keys","/account/api-keys","6.account/api-keys",{"title":193,"path":194,"stem":195,"icon":196},"Billing","/account/billing","6.account/billing","i-lucide-credit-card",{"title":198,"path":199,"stem":200,"icon":201},"Limits & Quotas","/account/limits-quotas","6.account/limits-quotas","i-lucide-gauge",{"title":203,"path":204,"stem":205,"icon":206},"FAQ","/faq","faq","i-lucide-help-circle",{"title":208,"path":209,"stem":210,"icon":211},"Support","/support","support","i-lucide-life-buoy",{"id":213,"title":171,"body":214,"description":544,"extension":545,"links":546,"meta":547,"navigation":548,"path":172,"seo":549,"stem":173,"__hash__":550},"docs/5.storage/4.access-keys.md",{"type":215,"value":216,"toc":531},"minimark",[217,221,234,239,287,295,300,307,328,336,339,343,346,416,420,423,440,447,451,454,467,471,513,517],[218,219,171],"h1",{"id":220},"access-keys",[222,223,224,225,229,230,233],"p",{},"Access keys are S3-compatible credentials that allow programmatic access to your buckets via boto3, aws-cli, or any S3-compatible SDK. Each key consists of an ",[226,227,228],"strong",{},"Access Key ID"," and a ",[226,231,232],{},"Secret Access Key",".",[235,236,238],"h2",{"id":237},"creating-an-access-key","Creating an Access Key",[240,241,242,252,258,265],"ol",{},[243,244,245,246,249,250],"li",{},"Navigate to ",[226,247,248],{},"Object Storage"," → ",[226,251,171],{},[243,253,254,255],{},"Click ",[226,256,257],{},"Create Access Key",[243,259,260,261,264],{},"Enter a ",[226,262,263],{},"Label"," — a descriptive name for the key (e.g., \"Production API\", \"CI/CD Pipeline\")",[243,266,267,268,271,272],{},"Choose ",[226,269,270],{},"Bucket Access",":\n",[273,274,275,281],"ul",{},[243,276,277,280],{},[226,278,279],{},"All Buckets"," — key can access every bucket in your account",[243,282,283,286],{},[226,284,285],{},"Specific Buckets"," — select one or more buckets from the list",[240,288,290],{"start":289},5,[243,291,254,292],{},[226,293,294],{},"Create",[296,297,299],"h3",{"id":298},"save-your-credentials","Save Your Credentials",[222,301,302,303,306],{},"After creation, your credentials are displayed ",[226,304,305],{},"one time only",":",[273,308,309,323],{},[243,310,311,313,314,318,319,322],{},[226,312,228],{}," — format: ",[315,316,317],"code",{},"NQAK"," followed by 16 characters (e.g., ",[315,320,321],{},"NQAK8f7x9k2m1pq0",")",[243,324,325,327],{},[226,326,232],{}," — 40-character random string",[329,330,332,335],"alert",{"type":331},"warning",[226,333,334],{},"Save these credentials immediately."," The Secret Access Key is shown only once and cannot be retrieved later. If lost, revoke the key and create a new one.",[222,337,338],{},"Copy both values using the copy buttons and store them securely.",[235,340,342],{"id":341},"viewing-access-keys","Viewing Access Keys",[222,344,345],{},"The Access Keys page shows all keys for your account:",[347,348,349,362],"table",{},[350,351,352],"thead",{},[353,354,355,359],"tr",{},[356,357,358],"th",{},"Column",[356,360,361],{},"Description",[363,364,365,375,386,396,406],"tbody",{},[353,366,367,372],{},[368,369,370],"td",{},[226,371,263],{},[368,373,374],{},"User-defined name",[353,376,377,381],{},[368,378,379],{},[226,380,228],{},[368,382,383,384,322],{},"Public key identifier (starts with ",[315,385,317],{},[353,387,388,393],{},[368,389,390],{},[226,391,392],{},"Buckets",[368,394,395],{},"\"All Buckets\" or list of permitted bucket names",[353,397,398,403],{},[368,399,400],{},[226,401,402],{},"Status",[368,404,405],{},"Active or Revoked",[353,407,408,413],{},[368,409,410],{},[226,411,412],{},"Created",[368,414,415],{},"Creation timestamp",[235,417,419],{"id":418},"revoking-a-key","Revoking a Key",[222,421,422],{},"Revoking disables a key immediately while preserving it in your history:",[240,424,425,428,434],{},[243,426,427],{},"Find the key in the table",[243,429,254,430,433],{},[226,431,432],{},"Revoke"," (orange button)",[243,435,436,437],{},"The key status changes to ",[226,438,439],{},"Revoked",[222,441,442,443,446],{},"Revoked keys cannot be used to authenticate API requests. Any application using the key will receive ",[315,444,445],{},"403 Forbidden"," errors.",[235,448,450],{"id":449},"deleting-a-key","Deleting a Key",[222,452,453],{},"Deleting permanently removes a key from your account:",[240,455,456,458,464],{},[243,457,427],{},[243,459,254,460,463],{},[226,461,462],{},"Delete"," (red button)",[243,465,466],{},"Confirm the deletion",[235,468,470],{"id":469},"best-practices","Best Practices",[273,472,473,479,485,495,501,507],{},[243,474,475,478],{},[226,476,477],{},"Principle of least privilege"," — scope keys to specific buckets rather than \"All Buckets\" whenever possible. If a key is compromised, the blast radius is limited to those buckets only.",[243,480,481,484],{},[226,482,483],{},"Rotate keys regularly"," — create a new key, update your applications, then revoke the old key. Aim for rotation every 90 days.",[243,486,487,490,491,494],{},[226,488,489],{},"Never commit keys to source control"," — use environment variables or a secrets manager (e.g., AWS Secrets Manager, HashiCorp Vault, or ",[315,492,493],{},".env"," files excluded from git).",[243,496,497,500],{},[226,498,499],{},"Use descriptive labels"," — include the application name and environment (e.g., \"webapp-prod\", \"backup-script-staging\") so you can identify which key is used where.",[243,502,503,506],{},[226,504,505],{},"Revoke before deleting"," — if you suspect a key is compromised, revoke it immediately to stop access, then investigate before permanent deletion.",[243,508,509,512],{},[226,510,511],{},"One key per application"," — avoid sharing keys across multiple services. This makes rotation and auditing easier.",[235,514,516],{"id":515},"next-steps","Next Steps",[273,518,519,526],{},[243,520,521,525],{},[522,523,524],"a",{"href":176},"Use the S3 API"," — configure boto3 and aws-cli with your access key",[243,527,528,530],{},[522,529,179],{"href":180}," — monitor per-bucket data transfer and operations",{"title":532,"searchDepth":533,"depth":533,"links":534},"",2,[535,539,540,541,542,543],{"id":237,"depth":533,"text":238,"children":536},[537],{"id":298,"depth":538,"text":299},3,{"id":341,"depth":533,"text":342},{"id":418,"depth":533,"text":419},{"id":449,"depth":533,"text":450},{"id":469,"depth":533,"text":470},{"id":515,"depth":533,"text":516},"Create and manage S3-compatible access keys for Object Storage","md",null,{},{"icon":88},{"title":171,"description":544},"bjPwGZj8LBUmJl5o8RYAIXh_Y6_13HZWA-W39B-PhPk",[552,554],{"title":167,"path":168,"stem":169,"description":553,"icon":73,"children":-1},"Upload, browse, and delete objects in your storage bucket",{"title":175,"path":176,"stem":177,"description":555,"icon":110,"children":-1},"Connect to Object Storage using boto3 and aws-cli",1778274380594]