Storage account, AWS credentials, and container management
All credentials are associated with storage accounts, and are created after appropriate accounts are created.
After Container Mode is enabled, all user requests are executed on containers instead of vaults. This means that a user must have the correct storage account and credentials created through the Service API before they can successfully access an IBM COS system in Container Mode for reads and writes.
The Container Mode Storage Account Management and Container Mode Credentials Management APIs are Service APIs that support the following operations:
Container Mode Storage Account Management:
- Account listing
- Account creation
- Account retrieval
- Show account details
- Account modification
- Accounts deletion
Container Mode Credentials Management:
- Create credential
- List credential
- Show credential Details
- Delete credential
- Update credential
Additionally, IBM COS provides flexibility for service providers to have full
control over bucket resources and to prevent end users from using the Cloud Storage Object API to
perform a subset of container-level operations (such as create bucket, delete bucket, and access or
update security information such as ACLs). These service providers can use the Service APIs to
manage containers on behalf of their client, including:
- Create container
- Retrieve container metadata
- Update container metadata such as ACL, IP access control, and hard quota
- Delete container