---
title: Object Storage Access Keys
summary: >-
  This API manages access keys for use with <a
  href="https://www.fastly.com/documentation/guides/full-site-delivery/object-storage/">Fastly
  Object Storage</a>.
url: >-
  https://www.fastly.com/documentation/reference/api/services/resources/object-storage-access-keys
---

This API manages access keys for use with <a href="https://www.fastly.com/documentation/guides/full-site-delivery/object-storage/">Fastly Object Storage</a>.

## Permissions

When access keys are created, they are assigned a set of permissions.
These permissions can't be changed after the access key has been created.

- `read-write-admin` - Full access to all buckets and objects.
- `read-only-admin` - Read-only access to all buckets and objects.
- `read-write-objects` - Read, write, and delete access to objects.  This access can be limited to specific buckets.
- `read-only-objects` - Read-only access to objects.  This access can be limited to specific buckets.

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `buckets` | array |  |
| `description` | string | A description of the access key. |
| `permission` | string | The permissions granted to an access key. |
| `access_key` | string | Generated access key. |
| `created_at` | string | Date and time in ISO 8601 format. (Read-only) |
| `secret_key` | string | Generated secret key. |

## API endpoints

### List access keys

**GET** `/resources/object-storage/access-keys`

List access keys.

### Create an access key

**POST** `/resources/object-storage/access-keys`

Create an access key.

### Get an access key

**GET** `/resources/object-storage/access-keys/{access_key}`

Get an access key by its identifier.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `access_key` | string | path | Yes | access key to lookup or delete. |

### Delete an access key

**DELETE** `/resources/object-storage/access-keys/{access_key}`

Delete an access key.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `access_key` | string | path | Yes | access key to lookup or delete. |