forked from docs/doc-exports
Hasko, Vladimir
342f52c5ae
Reviewed-by: gtema <artem.goncharov@gmail.com> Co-authored-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-committed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
48 lines
5.0 KiB
HTML
48 lines
5.0 KiB
HTML
<a name="obs_03_0208"></a><a name="obs_03_0208"></a>
|
|
|
|
<h1 class="topictitle1">Access Keys (AK/SK)</h1>
|
|
<div id="body1499753333225"><p id="obs_03_0208__p52592197">OBS uses an access key ID (AK) and secret access key (SK) to authenticate the identity of a requester. When you use OBS APIs for secondary development and use the AK and SK for authentication, the signature must be calculated based on the algorithm defined by OBS and added to the request.</p>
|
|
<p id="obs_03_0208__p3139131403119">The authentication can be based on a permanent AK and SK pair, or based on a temporary AK/SK pair and security token.</p>
|
|
<p id="obs_03_0208__p2396184515319"><strong id="obs_03_0208__b41846336393">Permanent AK/SK Pair</strong></p>
|
|
<p id="obs_03_0208__p15291241">You can create a pair of permanent AK and SK on the <strong id="obs_03_0208__b18786137102311">My Credentials</strong> page.</p>
|
|
<ul id="obs_03_0208__ul36784332"><li id="obs_03_0208__li32558606">Access key ID (AK): indicates the ID of the access key. It is the unique ID associated with the SK. The AK and SK are used together to obtain an encrypted signature for a request.</li><li id="obs_03_0208__li24592002">Secret access key (SK): indicates the private key used together with its associated AK to cryptographically sign requests. The AK and SK are used together to identify a request sender to prevent the request from being modified.</li></ul>
|
|
<p id="obs_03_0208__p11982124418368"><strong id="obs_03_0208__b1848794564015">Temporary AK/SK Pair</strong></p>
|
|
<p id="obs_03_0208__p16519181820419">A temporary AK/SK pair and security token assigned by OBS comply with the principle of least privilege and are for temporarily accessing OBS. They are valid from 15 minutes to 24 hours, and need to be obtained again once they expire. If the security token is missing from your request, a 403 error will be returned.</p>
|
|
<ul id="obs_03_0208__ul14493111816456"><li id="obs_03_0208__li15131041194414">Temporary AK: indicates the ID of a temporary access key. It is the unique ID associated with the SK. The AK and SK are used together to obtain an encrypted signature for a request.</li><li id="obs_03_0208__li134941318104514">Temporary SK: indicates the temporary private key used together with its associated temporary AK. The AK and SK are used together to identify a request sender to prevent the request from being modified.</li><li id="obs_03_0208__li9725287468">Security token: indicates the token used together with the temporary AK and SK to access all resources of a specified account.</li></ul>
|
|
<p id="obs_03_0208__p31525188">When using the following tools to access OBS resources, you need to use the AK/SK pair for security authentication.</p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_03_0208__table95276448493" frame="border" border="1" rules="all"><caption><b>Table 1 </b>OBS resource management tools</caption><thead align="left"><tr id="obs_03_0208__row1527844104914"><th align="left" class="cellrowborder" valign="top" width="23.48%" id="mcps1.3.10.2.3.1.1"><p id="obs_03_0208__p352713445495">Tool</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="76.52%" id="mcps1.3.10.2.3.1.2"><p id="obs_03_0208__p1652794404910">AK/SK Configuration</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="obs_03_0208__row752744464920"><td class="cellrowborder" valign="top" width="23.48%" headers="mcps1.3.10.2.3.1.1 "><p id="obs_03_0208__p752784416490">OBS Browser</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.52%" headers="mcps1.3.10.2.3.1.2 "><p id="obs_03_0208__p197185522277">Configure the AK and SK during account configuration.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0208__row17528444194913"><td class="cellrowborder" valign="top" width="23.48%" headers="mcps1.3.10.2.3.1.1 "><p id="obs_03_0208__p1852824444918">SDKs</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.52%" headers="mcps1.3.10.2.3.1.2 "><p id="obs_03_0208__p1728443644914">Configure the AK and SK in the initialization phase.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0208__row1152810445492"><td class="cellrowborder" valign="top" width="23.48%" headers="mcps1.3.10.2.3.1.1 "><p id="obs_03_0208__p13528174418494">APIs</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.52%" headers="mcps1.3.10.2.3.1.2 "><p id="obs_03_0208__p20251647144417">Add the AK/SK pair to the request when computing the signature.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<div class="section" id="obs_03_0208__section9138185144512"><h4 class="sectiontitle">References</h4><p id="obs_03_0208__p15612536144510">For details about how to obtain a permanent AK/SK pair, see <a href="obs_03_0405.html">Creating Access Keys (AK and SK)</a>.</p>
|
|
<p id="obs_03_0208__p1363391583514">For details about how to obtain a temporary AK/SK pair and security token, see <a href="https://docs.otc.t-systems.com/en-us/api/iam/en-us_topic_0097949518.html" target="_blank" rel="noopener noreferrer">Obtaining a Temporary AK/SK</a>.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0205.html">Basic Concepts</a></div>
|
|
</div>
|
|
</div>
|
|
|