Create Lightsail object storage bucket access keys
You can use access keys to create a set of credentials that grant full access to a bucket and its objects. Access keys consist of an access key ID and a secret access key as a set. The secret access key is visible only when you create it. When you configure access keys on your software or plugin, it can have full read and write access to a bucket using the AWS APIs, and AWS SDKs. You can also configure access keys on the AWS CLI.
Important
Although you can have two access keys per bucket, we recommend that you only create one bucket access key at a time. We also recommend that you periodically rotate your keys and take inventory of your existing keys. If your secret access key is copied, lost, or becomes compromised, you should delete your access key and create a new one. For more information on the best practices for rotating your bucket access keys, see Rotate bucket access keys.
For more information about permission options, see Bucket permissions. For more information about buckets, see Object storage.
Create access keys for a bucket
Complete the following procedure to create access keys for a bucket.
-
Sign in to the Lightsail console
. -
In the left navigation pane, choose Storage.
-
Choose the name of the bucket for which you want to configure access permissions.
-
Choose the Permissions tab.
The Access keys section of the page displays the existing access keys for the bucket, if any.
-
Choose Create access key to create a new access key for the bucket.
-
In the prompt that appears, choose Yes, create to confirm that you want to create a new access key. Otherwise, choose No, cancel.
-
In the success prompt that appears, make a note of the access key ID.
-
Choose Show secret access key to view the secret access key, and make a note of it. The secret access key will not be shown again.
Important
Store your access key ID and secret access key in a secure location. If it becomes compromised, you should delete it and create a new one. For more information, see Delete access keys for a Lightsail object storage bucket.
-
Choose Continue to finish.
The new access key is listed in the Access keys section of the page. If your access key becomes compromised, or lost, delete it and create a new one.
Note
The Last used column displayed next to each access key identifies when the key was last used. A dash is displayed when the key has not been used. Expand the access key node to view the service and AWS Region where the key was last used.
