S3 User Credentials
HCP for cloud scale includes an application to obtain S3 user credentials.
Amazon Web Services uses security credentials, called S3 credentials, to authenticate and authorize data requests. The credentials consist of an access key and a secret key. Client applications that make S3 requests to perform actions, such as uploading documents, reading documents, and adding buckets, to Hitachi Content Platform for cloud scale (HCP for cloud scale) must include these credentials.
HCP for cloud scale includes a simple application, S3 User Credentials, to obtain these credentials for registered users of the system. The application obtains an OAuth token from system services when you log in and thereafter gives credentials on demand.
Obtaining S3 credentials
You can use the S3 User Credentials application or API to obtain S3 credentials.
The S3 User Credentials application retrieves credentials (an access key and a secret key) to access Amazon S3 bucket services. These credentials are linked to the username and password supplied in the API request. Thus, each unique user retrieves a unique set of credentials.
If a user makes multiple, repeated API requests, only the last set of credentials remains active. Previously retrieved credentials no longer work. Credentials expire automatically if a user changes his or her password stored by the identity provider.
S3 application instructions
Obtaining credentials nullifies any pre-existing S3 credentials you already have.
To obtain S3 user credentials:
Procedure
From the Applications page, select the application S3 User Credentials.
Click Generate S3 Credentials.
You are warned that any existing credentials for the logged-in user will be nullified.Click Generate.
NoteIf this step fails, your session might have timed out.The application generates and displays an Access Key and a Secret Key.Click Copy, next to the Access Key field, and paste the credential into the client application that you use to make S3 requests to HCP for cloud scale.
Click Copy, next to the Secret Key field, and paste the credential into the client application that you use to make S3 requests to HCP for cloud scale.
Related REST API methods
POST /s3/user/generate_credentials
For information about specific API methods, see the MAPI Reference or, in the Object Storage Management application, click the profile icon and select REST API.
Revoking S3 credentials
Amazon S3 credentials can be revoked by the associated user or by other users with appropriate permissions. If you have permissions you can revoke all Amazon S3 credentials belonging to a specific user. Use the method /user/list to look up the ID of the user for whom you want to revoke credentials.
POST /user/list
POST /user/revoke_credentials
For information about specific API methods, see the MAPI Reference or, in the Object Storage Management application, click the profile icon and select REST API.