Help Center> Object Storage Service> C> Quick Start> Setting Up an OBS Environment
Updated on 2024-05-07 GMT+08:00

Setting Up an OBS Environment

If you have any questions during development, post them on the Issues page of GitHub.

  1. Sign up for a cloud service account.

    Create an account to use OBS. If you already have one, use it instead.

    1. Open a browser.
    2. Visit the Huawei Cloud official website.
    3. In the upper right corner of the page, click Register.
    4. Enter the registration information and click Register.

  2. Subscribe to OBS.

    You are required to top up your account before using OBS.

    1. Log in to OBS Console.
    2. Click Billing in the upper right corner of the page to go to the billing center.
    3. Click Top Up. The dialog box for top-up is displayed.
    4. Top up the account as prompted.
    5. After the top-up is complete, close the dialog box and go back to the management console homepage.
    6. On the homepage, click Object Storage Service to subscribe to the OBS service and log in to OBS Console.

  3. Create access keys.

    OBS uses the AK and SK of an account for signature verification to make sure that only authorized accounts can access specified OBS resources. Detailed explanations about AK and SK are as follows:

    • An access key ID (AK) defines a user who accesses the OBS system. An AK belongs to only one user, but one user can have multiple AKs. The OBS system recognizes the users who access the system by their access key IDs.
    • An SK is the secret access key on OBS, which is required to access OBS. You can generate authentication information based on the SKs and request header fields. An SK matches an AK, and they group into a pair.

    Access keys are classified into permanent access keys (AK/SK) and temporary access keys (AK/SK and security token). A user can create a maximum of two valid permanent access keys. Temporary access keys can be used to access OBS only within the specified validity period. After the temporary access keys expire, they need to be obtained again. For security purposes, you are advised to use temporary access keys to access OBS, or periodically update your access keys if you use permanent access keys. The following describes how to obtain access keys of these two types.

    • Permanent access keys:
      1. Log in to OBS Console.
      2. In the upper right corner of the page, hover the cursor over the username and choose My Credentials.
      3. On the My Credentials page, select Access Keys in the navigation pane on the left.
      4. On the Access Keys page, click Create Access Key.
      5. In the Create Access Key dialog box that is displayed, enter the password and verification code.
        • If you have not bound an email address or mobile number, you need to enter only the login password.
        • If you have bound an email address and a mobile number, you can select the verification either by email address or mobile number.
      6. Click OK.
      7. In the Download Access Key dialog box that is displayed, click OK to save the access keys to your browser's default download path.
      8. Open the downloaded credentials.csv file to obtain the access keys (AK and SK).
        • Each user can create up to two valid access keys.
        • To prevent your access keys from being leaked, keep them secure. If you click Cancel in the dialog box, the access key will not be downloaded, and can neither be obtained later. If you need to use an access key later, you need to create a new one.
    • To get temporary security credentials, refer to the following:

      Temporary security credentials are issued by the system and are only valid for 15 minutes to 24 hours. They follow the principle of least privilege. When using temporary security credentials, you must use an AK/SK pair and a security token together.

      To obtain them, see Obtaining a Temporary AK/SK and a Security Token.

      OBS is a global service. When obtaining temporary access keys, set the token scope to domain to apply the token to global services. Global services are not differentiated by any project or region.