Managing access keys for project users

To add an access key pair for a project S3 user

Admin panel

Open the Storage services > S3 > Users screen, and then select a user.
On the user right pane, browse the S3 access keys section and click Create.
In the Create S3 access key window, optionally specify a name for the key, and then click Create.

Command-line interface

Use the following command:

# vinfra service s3 project user key create --project <project> --domain <domain> --s3-user <s3_user>
                                            [--access-key <key>] [--secret-key <secret>] [--name <friendly-name>]

--project <project>: Project name or ID
--domain <domain>: Domain name or ID (required when a project name is specified)
--s3-user <s3_user>: S3 user ID
--access-key <key>: Access key ID (auto-generated if not provided)
--secret-key <secret>: Secret key (auto-generated if not provided)
--name <friendly-name>: A user-friendly name for the key

For example, to create an auto-generated key pair for the user with the ID 1, run:

# vinfra service s3 project user key create --project myproject --domain mydomain --s3-user 1
+------------+------------------------------------------+
| Field      | Value                                    |
+------------+------------------------------------------+
| acc_key    | e14bbf0baae895ca0GMO                     |
| acc_secret | OeZFWDSCbB8vDwlwkbjI3G1R5xUDpEdJTc99wClt |
| enabled    | True                                     |
| name       |                                          |
+------------+------------------------------------------+

You can check the existing key pairs in the vinfra service s3 project user key list output:

# vinfra service s3 project user key list --project myproject --domain mydomain --s3-user 1
+---------+---------------------------------+
| Field   | Value                           |
+---------+---------------------------------+
| enabled | True                            |
| keys    | - acc_key: e14bbf0baae895ca1SFH |
|         |   enabled: true                 |
|         |   name: null                    |
|         | - acc_key: e14bbf0baae895ca0GMO |
|         |   enabled: true                 |
|         |   name: null                    |
+---------+---------------------------------+

To disable an access key pair for a project S3 user

Admin panel

Open the Storage services > S3 > Users screen, and then select a user.
On the user right pane, browse the S3 access keys section, click the ellipsis icon next to the key, and then click Disable.
Click Disable in the confirmation window.

Command-line interface

Use the following command:

# vinfra service s3 project user key disable --project <project> --domain <domain> --s3-user <s3_user> --key <key>

--project <project>: Project name or ID
--domain <domain>: Domain name or ID (required when a project name is specified)
--s3-user <s3_user>: S3 user ID
--key <key>: Access key ID

For example, to disable the access key with the ID e14bbf0baae895ca0GMO, run:

# vinfra service s3 project user key disable --project myproject --domain mydomain --s3-user 1 --key e14bbf0baae895ca0GMO

To enable an access key pair for a project S3 user

Admin panel

Open the Storage services > S3 > Users screen, and then select a user.
On the user right pane, browse the S3 access keys section, click the ellipsis icon next to the disabled key, and then click Enable.
Click Enable in the confirmation window.

Command-line interface

Use the following command:

# vinfra service s3 project user key enable --project <project> --domain <domain> --s3-user <s3_user> --key <key>

--project <project>: Project name or ID
--domain <domain>: Domain name or ID (required when a project name is specified)
--s3-user <s3_user>: S3 user ID
--key <key>: Access key ID

For example, to enable the access key with the ID e14bbf0baae895ca0GMO, run:

# vinfra service s3 project user key enable --project myproject --domain mydomain --s3-user 1 --key e14bbf0baae895ca0GMO

To delete an access key pair for a project S3 user

Admin panel

Open the Storage services > S3 > Users screen, and then select a user.
On the user right pane, browse the S3 access keys section, click the ellipsis icon next to the disabled key, and then click Delete.
Click Delete in the confirmation window.

Command-line interface

Use the following command:

# vinfra service s3 project user key delete --project <project> --domain <domain> --s3-user <s3_user> --access-key <key>

--project <project>: Project name or ID
--domain <domain>: Domain name or ID (required when a project name is specified)
--s3-user <s3_user>: S3 user ID
--access-key <key>: Access key ID

For example, to delete the access key with the ID e14bbf0baae895ca0GMO, run:

# vinfra service s3 project user key delete --project myproject --domain mydomain --s3-user 1 --access-key e14bbf0baae895ca0GMO