Managing S3 Access from the VAST Web UI

To enable client access on VAST Cluster:

S3 client operations require a key pair for user authentication. The key pair consists of an access key and a secret key.

As a manager, you can create, remove, enable, and disable key pairs for client storage users. A user can have up to two key pairs at any time.

If the user does not appear in the users list on the Users tab in the Security page, add the user:
1. From the menu (click ), select Security and then select the Users tab.
2. Click .
  
  The Add User dialog appears.
3. Enter the user's name in the Name field.
4. Enter the user's UID in the UID field.
5. Click Create.
  
  The user is now added. If the UID that you entered belongs to a user already known to the cluster, then all of the user's settings are now filled from the user's already known database entry. For example, the user's GIDs are retrieved from the user database and entered into the GIDs field.
  
  The Create new key button now appears.
Click Create New Key.

An access key is displayed with its status (enabled by default).

The secret key is displayed below it with a Copy key button:
Click Copy key to copy the secret key to your clipboard.

Important

The secret key for this pair will not be shown again, so keep the key carefully to pass it onto the user.
Click Update to update the user definition.

You can now provide the user with the access key and the secret key.

In the Users page ( > Security > Users) , click the user's row in the grid.

The status of each of the user's key pairs is shown (enabled or disabled).
To enable a key pair, click . To disable a key pair, click .

In the Users page ( > Security > Users) , click the user's row in the grid.

The status of each of the user's key pairs is shown (enabled or disabled).
Click .

The key pair is removed.

Creating and removing S3 buckets require special permissions. The VAST Web UI enables you to grant these permissions to specific users.

From the menu (click ), select Security and then select the Users tab.
Click the user's row in the grid.
In the Update User dialog, enable the permission(s) you want to give the user:
- Allow create bucket
- Allow delete bucket
Click Save to save your changes.