ECS 3.6.2 Data Access Guide

PDF

Create an S3 secret key: self-service

The ECS Management REST API provides the ability to allow authenticated domain users to request a secret key to enable them to access the object store.

The ECS API Reference can be used where you want to create a custom client to perform certain ECS management operations. For simple operations domain users can use curl or a browser-based HTTP client to execute the API to create a secret key.

When a user runs the object/secret-keys API, ECS automatically creates an object user and assigns a secret key.

Table 1. Object Secret KeysThe following table describes the Object secret keys
API Path	Description
/object/secret-keys	API to allow S3 client users to create a new secret key that enables them to access objects and buckets within their namespace. This is also referred to as a self-service API.

The payload for the /object/secret-keys can include an optional existing key expiry time.

<secret_key_create_param>
    <existing_key_expiry_time_mins></existing_key_expiry_time_mins>
  </secret_key_create_param>

If you are creating a secret key for the first time, you can omit the existing_key_expiry_time_mins parameter and a call would be:

POST object/secret-keys

Request body
  <?xml version="1.0" encoding="UTF-8"?> 
  <secret_key_create_param/>
    

Response
  <user_secret_key>
    <secret_key>...</secret_key>
    <key_timestamp>...</key_timestamp>
    <link rel="..." href="..." />
  </user_secret_key>