To use obsutil, you need to register a cloud service account, enable OBS, and obtain the access keys (AK and SK) first.

1. Register a cloud service account.

   Before using OBS, ensure that you have a cloud service account.

   1. Open a browser.
   2. Log in to the HUAWEI CLOUD website at www.huaweicloud.com/en-us/.
   3. In the upper right corner of the page, click Register.
   4. Enter the registration information and click Register.

2. Enable OBS.

   Ensure that your account balance is sufficient before using OBS.

   1. Log in to OBS Console.
   2. Click Fees in the upper right corner of the page. The Billing Center page is displayed.
   3. Then click Top Up.
   4. Top up the account as prompted.
   5. Go back to the management console page after the recharging is successful.
   6. Click Service List on the top menu bar. Choose Storage > Object Storage Service to log in to OBS Console.

3. (Optional) Create an IAM user.
   For data security, it is recommended that you do not use the account directly to access OBS. Through the Identity and Access Management (IAM) service, you can create a user who has the permission to access OBS resources and manage buckets and objects on obsutil. If you do not need to use any IAM user, skip this step.

   1. On the top navigation bar of the console, choose Service List > Management & Governance > Identity and Access Management.
   2. On the displayed IAM console page, create a user group with OBS permissions configured.

      For details, see Creating a User Group. After the user group is created, locate the row that displays Global service > OBS in the User Group Permissions, and click Configure Policy in the row to set OBS permissions for the user group.

      

      For details about OBS policies, see Permissions Management

   3. Create a user.

      For details, see Creating a User. When creating a user, set the User Group to the one created in 3.b with OBS permissions configured.

      

      If the user group is not configured with OBS permissions, you can configure fine-grain permissions on OBS Console through bucket policies or object policies. For details, see OBS Permission Control.

4. Obtain access keys.

   OBS uses AKs and SKs in user accounts for signature verification to ensure that only authorized accounts can access specified OBS resources. Detailed explanations about AK and SK are as follows:

   • Access key ID (AK): indicates the ID of the access key, which is a unique identifier used together with a secret access key to sign requests cryptographically.
   • Secret access key (SK): indicates the private key used together with its associated AK to cryptographically sign requests. The AK and SK are used together to identify a request sender to prevent the request from being modified.
   

   A user can create a maximum of two valid access keys.

   Create access keys as follows:

   1. In the upper right corner of the console page, select My Credential under the username.
   2. On the My Credentials page, select Access Keys in the navigation pane on the left.
   3. On the Access Keys page, click Add Access Key.
      

      A user can create a maximum of two valid access keys.

   4. In the Add Access Key dialog box that is displayed, enter the password and its verification code.
      

      • If you have not bound an email address or mobile number, enter only the password.
      • If you have bound an email address and a mobile number, you can select the verification by email or mobile phone.
   5. Click OK.
   6. In the Download Access Key dialog box that is displayed, click OK to save the access keys to your browser's default download path.
      

      Keep the access keys properly to prevent information leakage. If you click Cancel in the dialog box, the access keys will not be downloaded, and you cannot download them later. Re-create access keys if required.

   7. Open the downloaded credentials.csv file to obtain the access keys (AK and SK).
      

      In the access key file, the value in the Access Key ID column is the AK, and the value in the Secret Access Key column is the SK.