---
title: "Managing S3 Access from the VAST CLI"
slug: "managing-s3-access-from-the-vast-cli"
updated: 2026-10-27T17:23:57Z
published: 2026-10-27T17:23:57Z
canonical: "docs.vastdata.com/managing-s3-access-from-the-vast-cli"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing S3 Access from the VAST CLI

- [Generating an S3 Access Key Pair](/docs-5-3/docs/en/managing-s3-access-from-the-vast-cli#generating-an-s3-access-key-pair)
- [Granting S3 Permissions](/docs-5-3/docs/en/managing-s3-access-from-the-vast-cli#granting-s3-permissions)
- [Enabling and Disabling a Key Pair](/docs-5-3/docs/en/managing-s3-access-from-the-vast-cli#enabling-and-disabling-a-key-pair)
- [Removing a Key Pair](/docs-5-3/docs/en/managing-s3-access-from-the-vast-cli#removing-a-key-pair)

## Generating an S3 Access Key Pair

To generate an S3 access key pair for a user, use the [user generate-key](/docs-5-3/docs/en/user-generate-key) command.

## Granting S3 Permissions

To attach or remove S3 identity policies for a user on any provider, use [user query](/docs-5-3/docs/en/user-query).

To grant or remove from users specific permission to create buckets, permission to delete buckets, and permission to override ACLs (S3 superuser permission) use one of the following commands:

- For a user that resides on an external provider, use [user query](/docs-5-3/docs/en/user-query).
- For a user on the local provider, use [user modify](/docs-5-3/docs/en/user-modify).

> [!NOTE]
> Note
> 
> These create bucket, delete bucket and S3 super user permissions are overridden by any conflicting permission statements in attached S3 identity policies.

## Enabling and Disabling a Key Pair

To enable or disable an S3 access key pair, use [user modify-key](/docs-5-3/docs/en/user-modify-key).

## Removing a Key Pair

To remove a user's S3 access key pair, use [user remove-key](/docs-5-3/docs/en/user-remove-key).