S3 Access Keys

Create and manage S3 access keys — per-user access-key/secret pairs with per-bucket grants, usable via SigV4 on the S3 endpoint and HTTP Basic auth on this API

postCreate S3 access key

Creates an access key with optional per-bucket grants. The secret access key is returned exactly once and cannot be retrieved again.

postList S3 access keys

Lists the caller's access keys with metadata and last-used timestamps. Secrets are never returned.

postRevoke S3 access key

Permanently revokes an access key. This cannot be undone.

postRotate S3 access key secret

Generates a replacement secret for the key. The previous secret is invalidated immediately and the new one is returned exactly once.

postUpdate S3 access key

Updates an access key's label, replaces its grant set, or pauses/resumes it.