Generating an S3 Access Key Pair
To generate an S3 access key pair for a user, use the user generate-key command.
Granting S3 Permissions
To attach or remove S3 identity policies for a user on any provider, use user query.
To grant or remove from users specific permission to create buckets, permission to delete buckets, and permission to override ACLs (S3 superuser permission) use one of the following commands:
For a user that resides on an external provider, use user query.
For a user on the local provider, use user modify.
Note
These create bucket, delete bucket and S3 super user permissions are overridden by any conflicting permission statements in attached S3 identity policies.
Enabling and Disabling a Key Pair
To enable or disable an S3 access key pair, use user modify-key.
Removing a Key Pair
To remove a user's S3 access key pair, use user remove-key.