AWS ACCESS SECRET KEY PAIR
Stores an AWS access key ID and secret access key, together with a default region.
AWS ACCESS SECRET KEY PAIR is the third entry in the Secret Type dropdown and it's available at all three scopes: User, Workspace and Tenant. It stores the long-lived credential pair AWS issues for an IAM identity, alongside a default region, so the jobs and notebooks you grant access to can reach S3 buckets and other AWS services without that region being configured separately everywhere it's needed.
Long-lived keys carry the obvious operational cost: they don't expire on their own, so rotating them is your responsibility rather than something the platform does for you.
We can exercise the pair before you rely on it.
Basic Details
Common to every secret type:
| Field | Required | Control | Placeholder / default |
|---|---|---|---|
| Secret Name | Yes | text | title_example_user_secret_1 |
| Secret Type | Yes | dropdown | select AWS ACCESS SECRET KEY PAIR |
| Workspace | Yes | dropdown | Workspace scope only |
| Description | No | textarea | Enter Description |
Secret Details
| Field | Required | Control | Placeholder |
|---|---|---|---|
| AWS Access Key ID | Yes | text | e.g., AKIAIOSFODNN7EXAMPLE |
| AWS Secret Access Key | Yes | password | e.g., wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY |
| AWS Default Region | Yes | filterable dropdown | Select AWS default region |
AWS Default Region
The dropdown is filterable and offers 25 regions, in this order:
us-gov-west-1 · us-gov-east-1 · sa-east-1 · me-central-1 · me-south-1 · eu-north-1 · eu-west-3 · eu-south-1 · eu-west-2 · eu-west-1 · eu-central-1 · ca-central-1 · ap-northeast-1 · ap-southeast-2 · ap-southeast-1 · ap-northeast-2 · ap-northeast-3 · ap-south-1 · ap-southeast-3 · ap-east-1 · af-south-1 · us-west-2 · us-west-1 · us-east-1 · us-east-2
Validate and Metastore
- Validate is available for this type, and stays disabled until all three required fields are filled.
- This type does not expose the Metastore dropdown.
