CINXE.COM
AWS Security Credentials - Amazon Web Services
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html","20180821190818","https://web.archive.org/","web","/_static/", "1534878498"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" /> <!-- End Wayback Rewrite JS Include --> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <title>AWS Security Credentials - Amazon Web Services</title> <meta name="viewport" content="width=device-width, initial-scale=1"/> <link rel="home" href="#top"/> <link rel="up" href="Welcome.html" title="AWS General Reference"/> <link rel="prev" href="rande.html" title="AWS Regions and Endpoints"/> <link rel="next" href="root-vs-iam.html" title="AWS Account Root User Credentials vs. IAM User Credentials"/> <meta name="description" content="Use AWS security credentials (passwords, access keys) to verify who you are and whether you have permission to access the AWS resources that you are requesting."/> <meta name="deployment_region" content="IAD"/> <meta name="product" content="Amazon Web Services"/> <meta name="guide" content="General Reference"/> <meta name="guide-locale" content="en_us"/> <link rel="icon" type="image/ico" href="/web/20180821190818im_/https://docs.aws.amazon.com/images/favicon.ico"/> <link rel="shortcut icon" type="image/ico" href="/web/20180821190818im_/https://docs.aws.amazon.com/images/favicon.ico"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/jquery-ui.min.css"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/font/css/font-awesome.min.css"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/google-font.css"/> <link id="code-style" rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/code/light.css"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/jquery-ui.theme.css"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/colorbox.css"/> <link rel="stylesheet" type="text/css" href="/web/20180821190818cs_/https://docs.aws.amazon.com/css/awsdocs.css?v=20170615"/><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/highlight.pack.js"></script><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/jquery.min.js"></script><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/jquery-ui.min.js"></script><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/handlebars.js"></script><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/jquery.colorbox.js"></script><script type="text/javascript" src="/web/20180821190818js_/https://docs.aws.amazon.com/js/awsdocs.min.js?v=20170615"></script></head> <body id="top"> <div xmlns:db="http://docbook.org/ns/docbook" id="aws-nav" class="aws-nav-header"> <div class="aws-nav-header-left"> <div id="aws-nav-flyout-trigger" class="aws-nav-flyout-trigger"><i class="fa fa-bars fa-2x"></i>Menu </div> <div class="aws-nav-logo"> <!--aws_logo_105x39.png--><a href="https://web.archive.org/web/20180821190818/http://aws.amazon.com/"><img src="/web/20180821190818im_/https://docs.aws.amazon.com/images/aws_logo_105x39.png" alt="Amazon Web Services"/></a></div> </div> <div id="aws-nav-header-right" class="aws-nav-header-right"> <div class="aws-nav-cta-button-outer"><a id="aws-nav-cta-button" class="aws-nav-button" href="https://web.archive.org/web/20180821190818/https://console.aws.amazon.com/console/home">Sign In to the Console</a></div> <div class="aws-nav-popover-trigger" data-dropdown="aws-nav-dropdown-lang"><select id="languageSelection" onchange="SelectLanguage()"> <option value="/de_de/general/latest/gr/aws-security-credentials.html">Deutsch</option> <option value="/en_us/general/latest/gr/aws-security-credentials.html" selected="selected">English</option> <option value="/es_es/general/latest/gr/aws-security-credentials.html">Español</option> <option value="/fr_fr/general/latest/gr/aws-security-credentials.html">Français</option> <option value="/it_it/general/latest/gr/aws-security-credentials.html">Italiano</option> <option value="/ja_jp/general/latest/gr/aws-security-credentials.html">日本語</option> <option value="/ko_kr/general/latest/gr/aws-security-credentials.html">한국어</option> <option value="/pt_br/general/latest/gr/aws-security-credentials.html">Português</option> <option value="/zh_cn/general/latest/gr/aws-security-credentials.html">中文 (简体)</option> <option value="/zh_tw/general/latest/gr/aws-security-credentials.html">中文 (繁體)</option></select></div><a class="btn btn-pdf-link" id="pdf-link-top" href="aws-general.pdf#aws-security-credentials" target="_blank" style="background-image: url("/web/20180821190818im_/https://docs.aws.amazon.com/images/Adobe_PDF_icon.png")" title="Open PDF"></a><div id="aws-nav-quicklinks-separator" class="aws-nav-quicklinks-separator"> <div class="aws-nav-left"></div> <div class="aws-nav-right"></div> </div> </div> <div xmlns:l="http://docbook.sourceforge.net/xmlns/l10n/1.0" id="topnav-flyout-menu-container"> <ul id="topnav-flyout-menu"><script id="flyout-item-template" type="text/x-handlebars-template"> {{#flyoutList}} {{#if topTarget}} <li class="awsdocs-flyout-link-wrapper"><a href="{{topTarget}}">{{listItem}}</a></li> {{else}} <li>{{listItem}} {{#if subList}} <ul> {{#subList}} <li class="awsdocs-flyout-link-wrapper"><a href="{{target}}">{{text}}</a></li> {{/subList}} </ul> {{/if}} </li> {{/if}} {{/flyoutList}} </script></ul> <div id="topnav-flyout-menu-spacer"></div> </div> </div> <div id="content-container"> <div id="left-column"> <div id="left-col-header"> <div xmlns:db="http://docbook.org/ns/docbook" id="left-col-top-content"> <div id="service-name">Amazon Web Services </div> <div id="search"><i id="search-icon" class="fa fa-search fa-2x"></i></div> <div id="guide-info">General Reference (Version 1.0) <div id="content-button"><i id="toggle-contents" class="fa fa-bars"></i></div> </div> </div> <form id="finegrainedSearch" method="get" onsubmit="return searchFormSubmit(this);" action="/web/20180821190818/https://docs.aws.amazon.com/search/doc-search.html"> <div id="search-form"><select id="search-select" name="searchPath"> <option value="all">Entire Site</option> <option value="AWSMarketplace">AMIs from AWS Marketplace</option> <option value="amis">AMIs from All Sources</option> <option value="articles">Articles & Tutorials</option> <option value="products_and_info">AWS Product Information</option> <option value="case_studies">Case Studies</option> <option value="customerapps">Customer Apps</option> <option value="documentation">Documentation</option> <option value="documentation-product">Documentation - This Product</option> <option value="documentation-guide" selected="selected">Documentation - This Guide</option> <option value="datasets">Public Data Sets</option> <option value="releasenotes">Release Notes</option> <option value="solution_providers">Partners</option> <option value="code">Sample Code & Libraries</option></select><br/><input id="search-query" name="searchQuery" type="text" placeholder="Search"/><input id="search-button" src="/web/20180821190818im_/https://docs.aws.amazon.com/images/search-button.png" alt="Go" type="image"/></div><input type="hidden" name="this_doc_product" id="this_doc_product" value="Amazon Web Services"/><input type="hidden" name="this_doc_guide" id="this_doc_guide" value="General Reference"/><input type="hidden" name="doc_locale" value="en_us"/></form> </div> <div id="toc"> <ul class="awstoc"> <li class="awstoc leaf"><a class="awstoc" href="Welcome.html">AWS General Reference</a></li> <li class="awstoc leaf"><a class="awstoc" href="rande.html">AWS Regions and Endpoints</a></li> <li class="awstoc opened"><a class="awstoc selected" href="aws-security-credentials.html">AWS Security Credentials</a><ul class="awstoc"> <li class="awstoc closed"><a class="awstoc" href="root-vs-iam.html">AWS Account Root User Credentials vs. IAM User Credentials</a><ul class="awstoc"> <li class="awstoc leaf"><a class="awstoc" href="aws_tasks-that-require-root.html">AWS Tasks That Require AWS Account Root User Credentials</a></li> </ul> </li> <li class="awstoc leaf"><a class="awstoc" href="aws-sec-cred-types.html">Understanding and Getting Your Security Credentials</a></li> <li class="awstoc leaf"><a class="awstoc" href="acct-identifiers.html">AWS Account Identifiers</a></li> <li class="awstoc leaf"><a class="awstoc" href="aws-access-keys-best-practices.html">Best Practices for Managing AWS Access Keys</a></li> <li class="awstoc leaf"><a class="awstoc" href="managing-aws-access-keys.html">Managing Access Keys for Your AWS Account Root User</a></li> <li class="awstoc leaf"><a class="awstoc" href="aws-security-audit-guide.html">AWS Security Audit Guidelines</a></li> </ul> </li> <li class="awstoc leaf"><a class="awstoc" href="aws-arns-and-namespaces.html">Amazon Resource Names (ARNs) and AWS Service Namespaces</a></li> <li class="awstoc closed"><a class="awstoc" href="signing_aws_api_requests.html">Signing AWS API Requests</a><ul class="awstoc"> <li class="awstoc closed"><a class="awstoc" href="signature-version-4.html">Signature Version 4 Signing Process</a><ul class="awstoc"> <li class="awstoc leaf"><a class="awstoc" href="sigv4_changes.html">Changes in Signature Version 4</a></li> <li class="awstoc leaf"><a class="awstoc" href="sigv4_elements.html">Signature Version 4 Request Elements</a></li> <li class="awstoc closed"><a class="awstoc" href="sigv4_signing.html">Signing AWS Requests</a><ul class="awstoc"> <li class="awstoc leaf"><a class="awstoc" href="sigv4-create-canonical-request.html">Task 1: Create a Canonical Request</a></li> <li class="awstoc leaf"><a class="awstoc" href="sigv4-create-string-to-sign.html">Task 2: Create a String to Sign</a></li> <li class="awstoc leaf"><a class="awstoc" href="sigv4-calculate-signature.html">Task 3: Calculate the Signature</a></li> <li class="awstoc leaf"><a class="awstoc" href="sigv4-add-signature-to-request.html">Task 4: Add the Signature to the HTTP Request</a></li> </ul> </li> <li class="awstoc leaf"><a class="awstoc" href="sigv4-date-handling.html">Handling Dates</a></li> <li class="awstoc leaf"><a class="awstoc" href="signature-v4-examples.html">Examples of How to Derive a Signing Key</a></li> <li class="awstoc leaf"><a class="awstoc" href="sigv4-signed-request-examples.html">Signing Examples (Python)</a></li> <li class="awstoc leaf"><a class="awstoc" href="signature-v4-test-suite.html">Test Suite</a></li> <li class="awstoc leaf"><a class="awstoc" href="signature-v4-troubleshooting.html">Troubleshooting</a></li> <li class="awstoc leaf"><a class="awstoc" href="reference-for-signature-version-4.html">Service-Specific Reference</a></li> </ul> </li> <li class="awstoc leaf"><a class="awstoc" href="signature-version-2.html">Signature Version 2 Signing Process</a></li> </ul> </li> <li class="awstoc leaf"><a class="awstoc" href="aws_service_limits.html">AWS Service Limits</a></li> <li class="awstoc leaf"><a class="awstoc" href="aws-ip-ranges.html">AWS IP Address Ranges</a></li> <li class="awstoc leaf"><a class="awstoc" href="api-retries.html">API Retries</a></li> <li class="awstoc leaf"><a class="awstoc" href="aws_sdk_cryptography.html">AWS SDK Support for Amazon S3 Client-Side Encryption</a></li> <li class="awstoc leaf"><a class="awstoc" href="aws-markdown.html">Markdown in AWS</a></li> <li class="awstoc leaf"><a class="awstoc" href="docconventions.html">Document Conventions</a></li> <li class="awstoc leaf"><a class="awstoc" href="glos-chap.html">AWS Glossary</a></li> <li id="toc-additional-links"><a class="btn btn-pdf-link" id="pdf-link-alt" href="aws-general.pdf#general-ref-top" target="_blank" style="background-image: url("/web/20180821190818im_/https://docs.aws.amazon.com/images/Adobe_PDF_icon.png")" title="Open PDF"></a></li> </ul> </div> </div> <div id="main-column"> <div id="main"> <div id="main-content"> <div id="main-col-body"> <table summary="Breadcrumbs"> <tr> <td> <div class="breadcrumb"><a href="https://web.archive.org/web/20180821190818/http://aws.amazon.com/documentation">AWS Documentation</a> » <a href="index.html">General Reference</a> » <span class="breadcrumb">AWS Security Credentials</span></div> </td> </tr> </table> <div></div> <h1 class="topictitle" id="aws-security-credentials">AWS Security Credentials</h1> <p>When you interact with AWS, you specify your AWS <em>security credentials</em> to verify who you are and whether you have permission to access the resources that you are requesting. AWS uses the security credentials to authenticate and authorize your requests. </p> <p>For example, if you want to download a specific file from an Amazon Simple Storage Service (Amazon S3) bucket, your credentials must allow that access. If your credentials aren't authorized to download the file, AWS denies your request. </p> <div class="aws-note"> <p class="aws-note">Note</p> <p>In some cases, you can make calls to AWS without security credentials, such as downloading a file that is publicly shared in an Amazon S3 bucket. </p> </div> <div class="highlights"> <p><strong>Topics</strong></p> <ul> <li><a href="root-vs-iam.html">AWS Account Root User Credentials vs. IAM User Credentials</a></li> <li><a href="aws-sec-cred-types.html">Understanding and Getting Your Security Credentials</a></li> <li><a href="acct-identifiers.html">AWS Account Identifiers</a></li> <li><a href="aws-access-keys-best-practices.html">Best Practices for Managing AWS Access Keys</a></li> <li><a href="managing-aws-access-keys.html">Managing Access Keys for Your AWS Account Root User</a></li> <li><a href="aws-security-audit-guide.html">AWS Security Audit Guidelines</a></li> </ul> </div> </div> <noscript> <div> <div> <div> <div id="js_error_message"> <p><img src="https://web.archive.org/web/20180821190818im_/https://d1ge0kk1l5kms0.cloudfront.net/images/G/01/webservices/console/warning.png" alt="Warning"/> <strong>Javascript is disabled or is unavailable in your browser.</strong></p> <p>To use the AWS Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. </p> </div> </div> </div> </div> </noscript> <div id="main-col-footer"> <div id="doc-conventions"><a target="_top" href="/web/20180821190818/https://docs.aws.amazon.com/general/latest/gr/docconventions.html">Document Conventions</a></div> <div id="next"><a class="awstoc" accesskey="p" href="rande.html">« Previous </a><a class="awstoc" accesskey="n" href="root-vs-iam.html">Next »</a></div> <div id="copyright-main-footer">© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.</div> </div> </div> </div> <div id="right-expanded"> <div id="right-content-wrapper"></div> </div> </div> </div> <div id="cookie-notice"> <div class="cookie-notice-text">We use cookies to provide and improve our services. By using our site, you consent to cookies. <a href="https://web.archive.org/web/20180821190818/http://aws.amazon.com/legal/cookies">Learn more</a></div> </div> <div id="footer"> <div id="footer_short_fb" class="hide" title="Feedback"><a target="_blank" href="https://web.archive.org/web/20180821190818/https://docs.aws.amazon.com/forms/aws-doc-feedback?feedback_destination_id=072c708d-371f-4403-bf5e-e03ff3249b4a&topic_url=http://docs.aws.amazon.com/en_us/general/latest/gr/aws-security-credentials.html&hidden_guide_name=General Reference&hidden_api_version=1.0&hidden_file_name=aws-security-credentials"><i class="fa fa-envelope-o"></i></a></div> <div id="footer_toggle" class="mediaobject"><img id="footer_toggle_img" src="/web/20180821190818im_/https://docs.aws.amazon.com/images/expanderarrow.png"/><img id="footer_toggle_img_collapse" class="hide" src="/web/20180821190818im_/https://docs.aws.amazon.com/images/expanderarrowright.png"/></div> <div id="footer-left"><a target="_top" href="https://web.archive.org/web/20180821190818/http://aws.amazon.com/terms">Terms of Use</a> | <a target="_top" href="https://web.archive.org/web/20180821190818/http://aws.amazon.com/privacy">Privacy</a> | © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved. </div> <div id="footer-right"> <div id="feedback"> <div id="forums"></div> <div id="feedback-message">Did this page help you?</div> <div id="feedback-yesno-buttons"><a class="awstoc btn btn-default" target="_blank" href="feedbackyes.html?topic_url=http://docs.aws.amazon.com/en_us/general/latest/gr/aws-security-credentials.html">Yes</a><a class="awstoc btn btn-default" target="_blank" href="feedbackno.html?topic_url=http://docs.aws.amazon.com/en_us/general/latest/gr/aws-security-credentials.html">No</a></div> <div id="feedback-feedback-button"><a class="awstoc btn btn-default" target="_blank" href="https://web.archive.org/web/20180821190818/https://docs.aws.amazon.com/forms/aws-doc-feedback?feedback_destination_id=072c708d-371f-4403-bf5e-e03ff3249b4a&topic_url=http://docs.aws.amazon.com/en_us/general/latest/gr/aws-security-credentials.html&hidden_guide_name=General Reference&hidden_api_version=1.0&hidden_file_name=aws-security-credentials">Feedback</a></div> </div> </div> </div> <!-- SiteCatalyst code version: H.25.2. Copyright 1996-2012 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com --><script language="JavaScript" type="text/javascript" src="https://web.archive.org/web/20180821190818js_/https://a0.awsstatic.com/s_code/js/1.0/awshome_s_code.js"></script><script language="JavaScript" type="text/javascript"> <!-- // Documentation Service Name s.prop66='Amazon Web Services'; s.eVar66='D=c66'; // Documentation Guide Name s.prop65='General Reference'; s.eVar65='D=c65'; var s_code=s.t();if(s_code)document.write(s_code)//--></script><script language="JavaScript" type="text/javascript"> <!-- if(navigator.appVersion.indexOf('MSIE')>=0)document.write(unescape('%3C')+'\!-'+'-') //--></script><noscript><img src="https://web.archive.org/web/20180821190818im_/https://amazonwebservices.d2.sc.omtrdc.net/b/ss/awsamazondev/1/H.25.2--NS/0" height="1" width="1" border="0" alt=""/></noscript> <!--/DO NOT REMOVE/--> <!-- End SiteCatalyst code version: H.25.2. --> </body> </html><!-- FILE ARCHIVED ON 19:08:18 Aug 21, 2018 AND RETRIEVED FROM THE INTERNET ARCHIVE ON 17:30:27 Nov 30, 2024. JAVASCRIPT APPENDED BY WAYBACK MACHINE, COPYRIGHT INTERNET ARCHIVE. ALL OTHER CONTENT MAY ALSO BE PROTECTED BY COPYRIGHT (17 U.S.C. SECTION 108(a)(3)). --> <!-- playback timings (ms): captures_list: 0.72 exclusion.robots: 0.035 exclusion.robots.policy: 0.021 esindex: 0.013 cdx.remote: 7.286 LoadShardBlock: 85.462 (3) PetaboxLoader3.datanode: 94.333 (4) load_resource: 70.702 PetaboxLoader3.resolve: 32.777 -->