Credentials

Credentials enable secure access to cloud storage (GCS, S3) for your organization.

Viewing Credentials

Organization administrators can view all credentials in the Credentials section.

Supported Backends

Backend	Provider	Credential Type
GCS	Google Cloud Storage	Service Account JSON
S3	Amazon S3 / Compatible	Access Key + Secret

Creating Credentials

Google Cloud Storage (GCS)

1. Click New Credential
2. Select GCS as the backend type
3. Enter a name for the credential
4. Paste the service account JSON key
5. Specify the bucket name
6. Click Create

Service Account Setup

Create a service account in GCP with Storage Object Viewer role (or Storage Object Admin for write access).

Amazon S3

1. Click New Credential
2. Select S3 as the backend type
3. Enter a name for the credential
4. Provide Access Key ID and Secret Access Key
5. Specify the bucket name and region
6. Click Create

Assigning Credentials to Projects

Credentials are assigned at the project level:

1. Go to the project settings
2. Select a credential from the dropdown
3. Optionally set a bucket prefix to restrict access
4. Save changes

Security

• Credentials are encrypted at rest
• Only organization admins can view/create credentials
• Credentials are never exposed to end users
• Access is logged for audit purposes

Next Steps

• Projects - Assign credentials to projects
• File Browser - Use credentials to browse files