/// CONNECT A PROVIDER / IBM CLOUD OBJECT STORAGE
IBM Cloud Object Storage
IBM Cloud Object Storage is S3-compatible, but you must authenticate with HMAC credentials — and IBM does not create them by default. You explicitly opt in when you make the service credential, then connect with the regional endpoint.
Don't have a bucket yet? Create one first →
What you need
- An HMAC Access Key ID and Secret Access Key (the
cos_hmac_keysblock of a service credential) — not an IAM API key. - The bucket name and its region (e.g.
us-south,eu-de).
Create HMAC credentials
- In the IBM Cloud console, open your Cloud Object Storage instance → Service credentials → New credential.
- Expand Advanced options and turn Include HMAC Credential to On — this is the step most people miss.
- Pick the Writer (or Manager) role and click Add, then expand the credential and copy
access_key_idandsecret_access_keyfrom thecos_hmac_keysblock.
If you don't toggle Include HMAC Credential, the credential only contains an IAM API key — which the S3 API can't use.
Endpoint & region
https://s3.<REGION>.cloud-object-storage.appdomain.cloud — e.g. https://s3.us-south.cloud-object-storage.appdomain.cloud. Use the public endpoint for the region your bucket lives in; IBM's docs list regional and cross-region endpoints.
Connect the Fleet
- Create Fleet → Access Keys; enter a name, the bucket name, and the region.
- Paste the HMAC Access Key ID and Secret Access Key.
- Set the regional endpoint and click Connect Fleet (path-style).
Supported features
IBM supports versioning, lifecycle (expiration), CORS, object tags, and Object Lock.
Access policy is managed with IBM IAM, not S3 bucket policies, so the bucket-policy panel doesn't apply.