# Working with S3 Keys
## **Overview**
On the vStorage system, S3 key is a key pair including access key and secret key integrated by vStorage and compatible with S3 client tools such as s3cmd, s3 SDK,...
***
## Root User Account creates a S3 keys
To initialize an S3 key, follow the instructions below:
1. Log in to [https://vstorage.console.vngcloud.vn with ](https://vstorage.console.vngcloud.vn/storage/list)Root User Account .
2. Select **Region HAN02.**
3. Select the icon in the project you just created and then select **Identity and Access Management.**
4. Under **List of S3 keys of this project** , select **Generate S3 key** .
5. Select **Copy** or **Download** to download the Access Key/Secret Key information you just generated.
{% hint style="info" %}
**Attention:**
* After clicking to create S3 key, you need to **save the Access Key/Secret Key pair** for use. If you do not save it now, you will not be able to get the Secret Key of this Access Key later.
* The S3 key initialized by **the Root User Account** will have full access/operation rights on the buckets of this project.
{% endhint %}
***
## IAM User Account creates a S3 keys
To initialize an S3 key, follow the instructions below:
1. Log in to [https://vstorage.console.vngcloud.vn](https://vstorage.console.vngcloud.vn/storage/list) with your IAM User Account .
2. Select **Region HAN02.**
3. Select the icon in the project you just created and then select **Identity and Access Management.**
4. Under **List of S3 keys of this project** , select **Generate S3 key** .
5. Select **Copy** or **Download** to download the Access Key/Secret Key information you just generated.
{% hint style="info" %}
**Attention:**
* After clicking to create S3 key, you need to **save the Access Key/Secret Key pair** for use. If you do not save it now, you will not be able to get the Secret Key of this Access Key later.
* S3 keys created by **IAM User Account** will have full access/operation rights on buckets/objects according to the permissions of that IAM User Account. For example, if your IAM User Account only has Read Object permission, then S3 keys created by this IAM User Account will also only have Read Object permission.
{% endhint %}
***
## Work with the S3 API (or 3rd party software) via S3 keys
### Connect 3rd party softwares to vStorage
After you have successfully initialized the project and initialized the S3 key, you can now use 3rd party softwares to connect and work with your project. The 3rd party softwares you can choose to use can be S3cmd, Cyberduck, Rclone, S3 Browser, MinIO Client,... In this document, we will guide you to connect S3 Browser with vStorage. S3 Browser is an optimized tool that allows you to share and upload your files. This tool has a relatively simple interface, is easy to use and is compatible with the API of the vStorage storage service.
To integrate the S3 Browser tool with vStorage, you can follow the instructions below:
1. Download the S3 Browser user tool here .
2. Open the S3 Browser app **.** Select the Account folder, **then select Add new account**
3. The Add New Account screen appears, now you enter the following information:
* **Display name:** Display name of the account. Example: Demo\_HAN02
* **Account type** : Select **S3 Compatible Storage.**
* **REST Endpoint** : Path to vstorage, for Region HAN02 the path is [han02.vstorage.vngcloud.vn](http://han02.vstorage.vngcloud.vn/)
* **Access Key ID & Secret Access Key:** This is the S3 key pair you generated in step 2 earlier.
4. Select the **Use Secure transfer (SSL/TLS)** option because vStorage only supports encrypted transmission channels (HTTPS, port 443) to ensure data security, vStorage currently does not support unencrypted transmission channels (HTTP, port 80).
5. Select **Add new account.**
6. When the connection is successful, the S3 Browser screen will display as follows:
***
## Delete S3 keys
To cancel (delete) one or more previously created S3 keys, follow the instructions below:
1. Log in to [https://vstorage.console.vngcloud.vn with ](https://vstorage.console.vngcloud.vn/storage/list)Root User Account or IAM User Account .
2. Chọn **Region HAN02.**
3. Select the icon in the project you just created and then select **Identity and Access Management.**
4. In List **of S3 keys of this project** , select **the S3 key** you want to delete and then select **Delete.**
Once the S3 key is successfully cancelled, you will no longer be able to use this S3 key to access vStorage. Be careful when cancelling (deleting) an S3 account as you will not be able to recover this deleted account.
in the project you just created and then select **Identity and Access Management.**
4. In List **of S3 keys of this project** , select **the S3 key** you want to delete and then select **Delete.**
Once the S3 key is successfully cancelled, you will no longer be able to use this S3 key to access vStorage. Be careful when cancelling (deleting) an S3 account as you will not be able to recover this deleted account.
