Configuring S3 Object Storage Credentials

Objective

**How to Get Your S3 Credentials:**

**Request from IBM Technology Zone Support Team:**

1. **Submit a Support Request:**

   - Navigate to IBM Technology Zone support portal

   - Submit a ticket requesting S3 Object Storage credentials

   - Specify your use case: "Bob AI Assistant integration for content management"

   - Include your IBM w3id and team information

2. **What to Request:**

   Ask the support team to provide:

   - ✅ **Access Key ID** - Your S3 access key identifier

   - ✅ **Secret Access Key** - Your S3 secret key (keep secure!)

   - ✅ **S3 Bucket Name** - The bucket you have access to

   - ✅ **S3 Region** - The AWS region (e.g., `us-east-1`, `us-west-2`)

   - ✅ **S3 Endpoint** (if using IBM Cloud Object Storage) - The endpoint URL

3. **Wait for Credentials:**

   - The TechZone support team will provision credentials for you

   - You'll receive the credentials via secure channel

   - Credentials are typically provided within 1-2 business days

**Important Security Notes:**

- ⚠️ **DO NOT** attempt to create COS credentials yourself

- ⚠️ **DO NOT** use personal IBM Cloud accounts for TechZone work

- ⚠️ All S3/COS credentials must be obtained through official TechZone channels

- ⚠️ Credentials are tied to specific buckets and have limited permissions

- ⚠️ Never share your credentials or commit them to version control

**Configure Environment Variables:**

Once you receive your credentials from the TechZone support team, add them to your shell configuration:

**For macOS/Linux (bash/zsh):**

```bash

# Add to ~/.zshrc or ~/.bashrc

# S3 Object Storage Credentials (from TechZone Support)

export AWS_ACCESS_KEY_ID="your_access_key_from_techzone"

export AWS_SECRET_ACCESS_KEY="your_secret_key_from_techzone"

export AWS_REGION="us-east-1"  # Region provided by TechZone support

export S3_BUCKET_NAME="techzone-content-bucket"  # Bucket name from support

# If using IBM Cloud Object Storage (endpoint provided by support)

export AWS_ENDPOINT_URL="https://s3.us-south.cloud-object-storage.appdomain.cloud"

```

**For Windows (PowerShell):**

```powershell

[System.Environment]::SetEnvironmentVariable('AWS_ACCESS_KEY_ID', 'your_access_key_from_techzone', 'User')

[System.Environment]::SetEnvironmentVariable('AWS_SECRET_ACCESS_KEY', 'your_secret_key_from_techzone', 'User')

[System.Environment]::SetEnvironmentVariable('AWS_REGION', 'us-east-1', 'User')

[System.Environment]::SetEnvironmentVariable('S3_BUCKET_NAME', 'techzone-content-bucket', 'User')

```

**Reload Configuration:**

```bash

source ~/.zshrc  # or source ~/.bashrc

```

**S3 MCP Server Configuration:**

The S3 MCP server is configured in `.bob/mcp.json`:

```json

{

    "mcpServers": {

        "s3": {

            "command": "npx",

            "args": ["-y", "@modelcontextprotocol/server-aws-s3"],

            "env": {

                "AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}",

                "AWS_SECRET_ACCESS_KEY": "${AWS_SECRET_ACCESS_KEY}",

                "AWS_REGION": "${AWS_REGION}"

            },

            "disabled": false,

            "alwaysAllow": []

        }

    }

}

```

**Verify S3 Access:**

Test your S3 credentials after configuration:

```bash

# Using AWS CLI (if installed)

aws s3 ls s3://${S3_BUCKET_NAME} --region ${AWS_REGION}

# Or using curl (for IBM Cloud Object Storage)

curl -H "Authorization: AWS ${AWS_ACCESS_KEY_ID}:${AWS_SECRET_ACCESS_KEY}" \

  ${AWS_ENDPOINT_URL}/${S3_BUCKET_NAME}

```

**Common Use Cases:**

- **OADP Backups**: Access backup files for OpenShift restore operations

- **Content Storage**: Store and retrieve deployment artifacts and manifests

- **Data Management**: Manage datasets and configuration files

- **Log Storage**: Access application and deployment logs

- **Artifact Repository**: Store Terraform states and Ansible artifacts

**Troubleshooting S3 Access:**

If you encounter issues:

1. Verify credentials are correctly set in environment variables

2. Confirm the bucket name and region match what support provided

3. Check that credentials haven't expired

4. Contact TechZone support if access is denied

5. Ensure you're using the correct endpoint (if IBM Cloud Object Storage)

The GitHub MCP server configuration is stored in `.bob/mcp.json`. Verify it's configured correctly:

```json

{

    "mcpServers": {

        "github": {

            "command": "npx",

            "args": [

                "-y",

                "@modelcontextprotocol/server-github"

            ],

            "env": {

                "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_PERSONAL_ACCESS_TOKEN}"

            },

            "disabled": false,

            "alwaysAllow": []

        }

    }

}

```

For assistance with any issue, please open a case with our Techzone support team.