Skip to main content
PATCH
Update object storage WIF config

Authorizations

Authorization
string
header
default:Bearer {API_ACCESS_TOKEN}
required

CoreWeave API access token sent as a bearer token.

Query Parameters

updateMask
string<field-mask>

Comma-separated JSON paths to update. An omitted or empty mask replaces the whole configuration. The wildcard * is supported only over binary protobuf (gRPC or Connect protobuf), not JSON Connect or the REST updateMask query value.

Body

application/json

ObjectStorageWifConfig is the organization's object-storage workload-identity federation config and the policy ceiling for per-sandbox object_storage_access.

wifConfigId
string

The WIF config id from the CoreWeave Cloud Console (a Workload Federation configuration). Required on create / full-replace.

enabled
boolean

Whether object-storage access is enabled for the organization.

allowedBuckets
string[]

Buckets the org may access; empty means all buckets.

maxPermission
enum<string>

Maximum permission a sandbox may be granted. Specify OBJECT_STORAGE_PERMISSION_READ or OBJECT_STORAGE_PERMISSION_READ_WRITE on create, full replacement, or an update that selects maxPermission. OBJECT_STORAGE_PERMISSION_UNSPECIFIED is invalid in these writes. A partial update that excludes this field preserves its current value.

Available options:
OBJECT_STORAGE_PERMISSION_UNSPECIFIED,
OBJECT_STORAGE_PERMISSION_READ,
OBJECT_STORAGE_PERMISSION_READ_WRITE

Response

OK

ObjectStorageWifConfig is the organization's object-storage workload-identity federation config and the policy ceiling for per-sandbox object_storage_access.

wifConfigId
string

The WIF config id from the CoreWeave Cloud Console (a Workload Federation configuration). Required on create / full-replace.

enabled
boolean

Whether object-storage access is enabled for the organization.

allowedBuckets
string[]

Buckets the org may access; empty means all buckets.

maxPermission
enum<string>

Maximum permission a sandbox may be granted. Specify OBJECT_STORAGE_PERMISSION_READ or OBJECT_STORAGE_PERMISSION_READ_WRITE on create, full replacement, or an update that selects maxPermission. OBJECT_STORAGE_PERMISSION_UNSPECIFIED is invalid in these writes. A partial update that excludes this field preserves its current value.

Available options:
OBJECT_STORAGE_PERMISSION_UNSPECIFIED,
OBJECT_STORAGE_PERMISSION_READ,
OBJECT_STORAGE_PERMISSION_READ_WRITE
createTime
string<date-time>
read-only
updateTime
string<date-time>
read-only