> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How do I share an Object Storage bucket with an external vendor?

The right approach depends on whether the vendor has their own CoreWeave organization or is on a different platform (AWS, GCP, on-prem, and others).

**If the vendor is on CoreWeave:** Attach a bucket access policy that allows their organization's principals on the buckets they need. Use a wildcard Principal scoped with a `cw:PrincipalOrgID` condition listing both organization IDs, as shown in [Allow access from another organization](/products/storage/object-storage/auth-access/bucket-access/examples#allow-access-from-another-organization). The vendor uses their own CoreWeave credentials.

**If the vendor is external:** Create a CoreWeave access key for a user or service principal whose organization access policy grants only the actions and resources the vendor needs (for example, `s3:GetObject` on the short-form resource `[BUCKET-NAME]/[PREFIX]/*`). Share the key with the vendor through a secure channel and rotate it on a defined schedule. For more secure short-lived credentials, see [Workload Identity Federation](/products/storage/object-storage/auth-access/workload-identity-federation/about).

For full details, see [Object Storage policies](/products/storage/object-storage/auth-access/policies).

***

<Badge stroke shape="pill" color="blue" size="md">[Administrator](/support/storage/tags/administrator)</Badge>