Credentials
Credentials are not managed identically and depend on the selected store provider. See Stores Properties for properties definitions.
Azure Blob
Credentials are managed in the following order:
- Connection String (az.connectionString). Connection String includes endpoint.
- StorageSharedKeyCredential using account name and account key (az.accountName , az.accountKey) using calculated endpoint. For more information, refer to Stores Properties.
Google Storage
Only the Google Account generated json credential file can be used. Set property gs.credentialsPath to locate this file.
IBM Cloud Object Storage
Credentials are managed in the following order:
- Json credentials file path (cos.credentialsPath)
- BasicIBMOAuthCredentials using Api key and service Id (cos.apiKey, cos.serviceId)
- BasicAWSCredentials using hmac access key and secret key (cos.hmacAccessKey, cos.hmacSecretKey)
- ProfileCredentialsProvider using profile path and profile name (cos.profilePath, cos.profileName)
- The default credentials provider chain
- Environment Variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
- Java System Properties aws.accessKeyId and aws.secretKey
- JSON credential file at the default location (~/.bluemix/cos_credentials)
- Web Identity Token credentials from the environment or container.
- Credential profiles file at the default location (~/.aws/credentials)
- Credentials delivered through the Amazon EC2 container service if AWS_CONTAINER_CREDENTIALS_RELATIVE_URI" environment variable is set and security manager has permission to access the variable
- Instance profile credentials delivered through the Amazon EC2 metadata service
Amazon S3
Credentials are managed in the following order:
- AwsBasicCredentials using hmac access key and secret key (s3.accessKey, s3.secretKey)
- ProfileCredentialsProvider using profile path and profile name (s3.profilePath,s3.configPath,s3.profileName)
- The default credentials provider chain
- Environment Variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
- Java System Properties aws.accessKeyId and aws.secretKey
- Web Identity Token credentials from the environment or container
- Credential profiles file at the default location (~/.aws/credentials)
- Credentials delivered through the Amazon EC2 container service if AWS_CONTAINER_CREDENTIALS_RELATIVE_URI" environment variable is set and security manager has permission to access the variable.
- Instance profile credentials delivered through the Amazon EC2 metadata service