Creating an AWS User and Authorizing AK/SK¶

1. Click Go to authorize to access the console and select IAM.

2. Select Access Management > Users, then click Add user.

2.1 Go to Step 1 > Specify user details to begin creating a user.

2.2 In User details, enter a user name.

2.3 Go to Step 2 > Set permissions > Permissions options, select Attach policies directly, then click Create policy.

2.3.1 In Edit policy > Modify permissions > Policy editor, enter the following:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:CreateBucket",
                "s3:ListAllMyBuckets",
                "s3:ListBucket"
            ],
            "Resource": "arn:aws-cn:s3:::*"
        }
    ]
}

Note: Only domestic sites support the aws-cn configuration. International site accounts must use aws.

2.3.2 In Review and create > Policy details > Policy name, enter a name to identify this policy, then save the permissions.

2.4 Return to the Create user interface, click , and select the permissions you just created.

2.5 Complete the Create user process.

1. Create AK/SK. Select Access Management > Users, then click Security credentials. Scroll down and select Create access key.

3.1 Select Local code.

3.2 The AK/SK is generated.

This is the only time you can view or download the secret access key. You will not be able to recover it later. However, you can create a new access key at any time.