S3 Compatible Storage Credential
Manage and use S3-compatible storage credentials in AutoSSL.
Overview
S3 Compatible Storage credentials are used to authenticate requests from AutoSSL to any S3-compatible object storage service. By adding these credentials, you authorize AutoSSL to upload SSL certificate files to your bucket on your behalf.
This credential type works with services such as MinIO, Ceph RADOS Gateway, Wasabi, DigitalOcean Spaces, and other providers that expose an S3-compatible API.
This credential type is separate from AWS, Cloudflare R2, and other provider-specific access keys. Use it when your storage endpoint is fully custom and not covered by a dedicated provider.
Configuration Parameters
| Parameter | Description |
|---|---|
| Access Key ID | Your S3-compatible storage Access Key ID. |
| Secret Access Key | The corresponding Secret Access Key. This value is securely encrypted before being stored in AutoSSL. |
Important
If you need to modify the Secret Access Key field later, you must provide the full secret again.
How to Obtain Credentials
The exact steps depend on your storage platform. In general:
- Log in to your object storage management console or MinIO admin panel.
- Create a dedicated user or service account for AutoSSL.
- Generate an Access Key ID and Secret Access Key pair.
- Grant the user permission to upload objects to the target bucket (e.g.
PutObject/s3:PutObject). - Copy the credentials into AutoSSL.
MinIO Example
- Open the MinIO Console and go to Access Keys.
- Click Create access key and copy the Access Key and Secret Key.
- Ensure the associated user has write access to the target bucket.
Security Recommendations
- Use Dedicated Credentials: Create a separate access key for AutoSSL rather than reusing admin credentials.
- Principle of Least Privilege: Only grant
PutObject(and optionallyListBucketon the target prefix) on the specific bucket. - Regular Rotation: Periodically rotate access keys to reduce the risk of leaked credentials.
Supported Deployment Targets
The S3 Compatible Storage credential is used by the following deployment provider in AutoSSL:
- S3 Compatible Storage: Uploads certificate files to a custom S3-compatible bucket with versioned and latest paths.