Securing S3

Under Ozone, the clients can download the access key directly from Ozone. The user needs to first and once they have authenticated via kerberos they can download the S3 access key ID and AWS secret. Just like AWS S3, both of these are secrets that needs to be protected by the client since it gives full access to the S3 buckets.

• S3 clients can get the secret access id and user secret from OzoneManager.

Please note: These S3 credentials are like your Kerberos passwords that give complete access to your buckets.

Next >>