Rotating applications' Ceph S3 credentials: Revision history

Jump to navigation Jump to search

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

23 July 2025

  • curprev 22:3922:39, 23 July 2025Adj talk contribs 8,143 bytes +1 No edit summary
  • curprev 22:3022:30, 23 July 2025Adj talk contribs 8,142 bytes +3,746 No edit summary
  • curprev 22:0722:07, 23 July 2025Adj talk contribs 4,396 bytes +4,396 Created page with "At $DAYJOB, some concern has been expressed that S3 client applications have no credential rotation. Which is probably fair. Here are some thoughts on the subject: * S3 bucket and object access is assigned to an abstraction called a "user." * Users identify themselves to the storage not by presenting their name, but my means of an "access key" and "secret key." The secret key is not sent across the wire to the S3 server. Instead it is used to sign any given request...."