S3 Service Console - Users and Access Keys

The S3 Service Console is the administrator-facing interface for managing S3 users and access credentials. It is separate from the S3 Browser, which is intended for end users.

Screenshot reference: S3 users and access keys (../eekas-s3-screenshots/04-s3-users-access-keys.png)

Creating a User

Open S3 Management and use the Users / Access Keys tab.

Available fields:

Field	Description
Display name	Human-readable name for the S3 user.
UID	Optional internal S3 user ID. If left empty, eEKAS auto-generates it.
Email	Optional email address for customer or operator reference.
Assigned Buckets	Defines bucket access assignment behavior.
Site	Selects the S3 site/zone context. The default on the test system is `zone_eu-central-2`.
Max buckets	Optional bucket count limit for the user.
User quota GB	Optional total quota assigned to the user.

After creating a user, store the access key and secret key securely. Secret keys should be treated like passwords and should not be copied into documentation or screenshots.

Existing User Table

The user list shows:

UID
Site
Name
Email
Status
Max buckets
User quota
Access key
Actions

Common actions include:

Edit
Suspend
View Keys
Rotate Key
Delete

Key Rotation

Use Rotate Key when a credential may have been exposed, when handing over responsibility to another user, or as part of regular security maintenance.

Important behavior:

Key rotation returns new credentials once.
Existing clients must be updated immediately after rotation.
Avoid displaying or copying secret keys into tickets, screenshots or public documentation.

Administrator vs End-User View

Administrators can see and manage users across the service context. The S3 Browser is intentionally restricted: users only see their own allowed buckets and objects after logging in with their access key and secret key.

Source: eEKAS live test cluster and supplied euroNAS eEKAS documents, prepared on 2026-07-09.