coreweave_object_storage_access_key (Resource)

​

Example usage

# Permanent key. Use a positive duration (for example, 86400) for an expiring key.
resource "coreweave_object_storage_access_key" "example" {
  duration_seconds = 0
  attributes = {
    application = "training"
  }
}

output "access_key_id" {
  value = coreweave_object_storage_access_key.example.id
}

# Sensitive outputs and secrets are still persisted in Terraform state.
output "secret_key" {
  value     = coreweave_object_storage_access_key.example.secret_key
  sensitive = true
}

# Manual rotation:
# terraform apply -replace=coreweave_object_storage_access_key.example
# For an imported key, omit duration_seconds to retain the existing key.
# Adding duration_seconds to an imported resource plans replacement.

​

Schema

​

Optional

• attributes (Map of String) Creation attributes, at most 15 entries. Keys must be lowercase DNS labels of 1-63 characters and must not start with cw-, role, or groups. Values must be Kubernetes label values of at most 63 characters (empty allowed). Changes replace the key. Omitted values are adopted during import.
• duration_seconds (Number) Required for creation; integer from 0 to 4294967295. Zero means permanent. Omit only when retaining an imported key whose original duration is unavailable. Changing this value replaces the key.

​

Read-Only

• expiry (String) Expiry in RFC 3339 UTC format, or null for a permanent key (including an absent or year-one API expiry).
• id (String) Access-key ID. Used for import and individual revocation.
• org_id (String) Organization cloud ID reported by the API.
• principal_name (String) Principal determined by the authenticated caller.
• secret_key (String, Sensitive) Secret returned only at creation. Preserved during refresh; unavailable after import. Sensitive values remain in Terraform state and state backups.
• status (String) Read-only API status, such as ACTIVE, EXPIRED, or FULL_SUSPENDED. The provider never changes principal-wide status.

​

Import

# Omit duration_seconds in the resource configuration before importing.
# Neither the secret nor the original duration can be recovered.
terraform import coreweave_object_storage_access_key.example CW_ACCESS_KEY_ID