StorafleetStorafleet

/// CONNECT A PROVIDER / IBM CLOUD OBJECT STORAGE

IBM Cloud Object Storage

IBM Cloud Object Storage is S3-compatible, but you must authenticate with HMAC credentials — and IBM does not create them by default. You explicitly opt in when you make the service credential, then connect with the regional endpoint.

Don't have a bucket yet? Create one first →

What you need

  • An HMAC Access Key ID and Secret Access Key (the cos_hmac_keys block of a service credential) — not an IAM API key.
  • The bucket name and its region (e.g. us-south, eu-de).

Create HMAC credentials

  1. In the IBM Cloud console, open your Cloud Object Storage instance → Service credentialsNew credential.
  2. Expand Advanced options and turn Include HMAC Credential to On — this is the step most people miss.
  3. Pick the Writer (or Manager) role and click Add, then expand the credential and copy access_key_id and secret_access_key from the cos_hmac_keys block.
If you don't toggle Include HMAC Credential, the credential only contains an IAM API key — which the S3 API can't use.

Endpoint & region

https://s3.<REGION>.cloud-object-storage.appdomain.cloud — e.g. https://s3.us-south.cloud-object-storage.appdomain.cloud. Use the public endpoint for the region your bucket lives in; IBM's docs list regional and cross-region endpoints.

Connect the Fleet

  1. Create Fleet → Access Keys; enter a name, the bucket name, and the region.
  2. Paste the HMAC Access Key ID and Secret Access Key.
  3. Set the regional endpoint and click Connect Fleet (path-style).

Supported features

IBM supports versioning, lifecycle (expiration), CORS, object tags, and Object Lock.

Access policy is managed with IBM IAM, not S3 bucket policies, so the bucket-policy panel doesn't apply.