• Object Storage Service

obs
  1. Help Center
  2. Object Storage Service
  3. User Guide
  4. OBS Browser Operation Guide
  5. Getting Started
  6. Creating Access Keys (AKs and SKs)

Creating Access Keys (AKs and SKs)

This section describes how to create access keys (AKs and SKs) in OBS Console. A pair of AK and SK is used to encrypt the signature of a request, ensuring that the request is secure and integral, and that identities of the request sender and receiver are correct.

Context

AKs and SKs support the authentication mechanism of Identity and Access Management (IAM).

  • An Access Key ID (AK) defines a user that accesses the OBS system. An AK belongs to only one user, but one user can have multiple AKs. The OBS system recognizes the users who access the system by their AKs.
  • A Secret Access Key (SK) is the key used by users to access OBS. It is the authentication information generated based on the AK and the request header. SKs and AKs are in one-to-one mapping.

Restrictions and Limitations

Each user can create up to two valid AK/SK pairs.

Prerequisites

An account has been registered and activated.

Procedure

  1. Log in to OBS Console.
  2. In the upper right corner of the page, click the username and select My Credential, as shown as in Figure 1.

    Figure 1 Choosing My Credential

  3. My Credential page is displayed. Choose Access Keys > Add Access Key, as shown in Figure 2.

    Figure 2 Adding access key

  4. In the Add Access Key dialog box that is displayed, enter the password and its verification code.

    NOTE:
    • If you have not bound an email address or mobile number, enter only the password.
    • If you have bound an email address and a mobile number, you can select the verification from either of these options.

  5. Click OK.
  6. Save the key as prompted. The key is directly saved to the default download folder of the browser.

    NOTE:
    • To prevent the access keys from being leaked, keep it secure. If you click Cancel in the dialog box, the access keys will not be downloaded, and you cannot download them later. You can re-create an access key if you need to use it.
    • The access keys (AK and SK) need to be updated regularly.

  7. Open the downloaded credentials.csv file to obtain the access keys (AK and SK).