Access keys and S3 tools · Storage

Create access keys and connect the AWS CLI, rclone, boto3 and other S3 clients.

Create an access key

Open Object Storage → Access keys and choose Create access key.

Name it after what will use it, for example website-backend.

Choose permissions: all buckets read and write, all buckets read only, or chosen buckets with no access, read only, write only or read and write per bucket.

Optionally set an expiry and a list of allowed IP addresses.

Copy the secret key or download it as CSV. It is shown only once.

Give each app or person its own key, so you can revoke one without breaking the others. A disabled key stops working at once and can be turned back on.

Connect a tool

Any S3-compatible tool works. Use the endpoint and region shown on the Object Storage page; it also has ready-made snippets for the AWS CLI, rclone and boto3.

# ~/.config/rclone/rclone.conf [bytenests] type = s3 provider = Ceph access_key_id = <ACCESS_KEY_ID> secret_access_key = <SECRET_ACCESS_KEY> endpoint = <endpoint from the Object Storage page> region = <region from the Object Storage page>