Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt

Use this file to discover all available pages before exploring further.

Organization access policies enforce permissions for AI Object Storage across your entire CoreWeave organization, automatically covering every resource, bucket, and user in your account. At least one organization access policy must be in place before you can create a bucket.

​
Example usage

resource "coreweave_object_storage_organization_access_policy" "test" {
  name = "full-s3-api-access"
  statements = [
    {
      name       = "allow-full-s3-api-access-to-all"
      effect     = "Allow"
      resources  = ["*"]
      principals = ["*"]
      actions = [
        "s3:*",
        "cwobject:*",
      ]
    }
  ]
}

​
Schema

​
Required

  • name (String) The name of the organization access policy, must be unique.
  • statements (Attributes Set) The list of access policy statements associated with this policy. At least one statement is required. (see below for nested schema)

​
Nested Schema for statements

Required:
  • actions (Set of String) Defines which operations the policy allows or denies. Organization access policies can include actions from two APIs - S3 (s3:) and AI Object Storage API (cwobject:). You can use wildcards (like s3:* or cwobject:*) to cover multiple actions at once.
  • effect (String) Must be either Allow or Deny (case-sensitive). Determines whether the statement grants or denies the specified actions on the listed resources for the designated principals. By default, all access is denied.
  • name (String) A short, human-readable identifier for this specific policy statement, similar to Sid in bucket access policies.
  • principals (Set of String) Defines which users, roles, or groups the policy applies to. Only short-form identifiers are supported. If you use a full ARN, the policy will fail with an error. See the AI Object Storage documentation for guidelines on defining principals.
  • resources (Set of String) Defines which resources the policy applies to. See the AI Object Storage documentation for guidelines on defining resources.

​
Import

Import is supported using the following syntax: 
terraform import coreweave_object_storage_organization_access_policy.default {{name}}
Last modified on March 24, 2026