Create credential

Create a new secret access key and corresponding access key ID for the specified user. The default status for new keys generated by the IBM Cloud Object Storage System™ is Active.

If a "blob" is not sent in the request, then the system will generate keys for the request and send as part of the response. Note that if a "blob" is sent, it must contain an access key but is not required to have a secret key. In this case, the system will generate the secret and send this in the response along with the access key provided in the "blob".

See the following section for the recommended way of generating AWS keys in the case where this will be provided as part of "blob" in the request (for example, if the system is not expected to generate the AWS keys for the request, but is expected to store and use what is provided by the clients).

Impersonate permission is required in order to create a key when project_id does not match the authenticated user.