# Create a S3 key

To create an S3 key, follow the instructions below:

1. Log in to [https://iam.console.vngcloud.vn/](https://iam.console.vngcloud.vn/]\(https://iam.console.vngcloud.vn/\)) with your Root User Account.
2. Select the **vStorage credentials** menu.
3. Choose **Create an S3 key.**
4. Enter the **Name** for the S3 key you wish to create.
5. Select the **Region** containing your vStorage project.
6. Choose the **vStorage project** for which you want to create the S3 key.
7. Click **Create**.
8. Select **Copy** or **Download** to retrieve the Access Key/Secret Key information you just created.

Note: After creating the S3 key, make sure to **save the Access Key/Secret Key** pair for future use. If you do not store this information immediately, you won't be able to retrieve the Secret Key later.

**Note:**

1. When an S3 key is created, by default, its **Restriction by IAM** status is set to **NO**. In this state, you can use this S3 key to access resources within the chosen project during key creation. The vIAM system does not perform permission checks for this S3 key.
2. If you enable the **Restriction by IAM** attribute of the S3 key to **YES**, the key will be managed and subjected to permission checks by the vIAM system. Therefore, to use these S3 keys, you need to **associate them with a Service Account** to inherit the permissions of the linked Service Account. For details, please refer to [Attach S3 Keys and Swift Users to the Service Account](https://docs.vngcloud.vn/display/VSEN/Attach+S3+Keys+and+Swift+Users+to+the+Service+Account).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.vngcloud.vn/vng-cloud-document/vstorage/object-storage/vstorage-hcm03/identity-and-access-management/managing-vstorage-access-account/service-account/vstorage-credentials/create-a-s3-key.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.