Provider credential schemas (47)
This page documents the credential field names accepted by the current runtime connection test parser. Use these schemas when adding accounts in the app or preparing automation payloads.
Docs > Providers & Credentials > Credential Schemas
Use this page after provider coverage is confirmed to prepare read-only fields and runtime-specific credential inputs.
Important Format Notes
- AWS: Runtime scans commonly use local AWS profiles; JSON key/secret is used by the connection test flow.
- GCP: Paste the full service account JSON content as credentials.
- Token-only providers: Some runtimes accept plain token strings and also accept JSON wrappers with a
tokenkey. - S3-compatible providers: Most require
access_key,secret_key,region, andendpoint.
How to Get Credentials
- Open the target provider console and go to IAM, API Access, or Security Credentials.
- Create a dedicated machine user or service principal for Cloud Waste Scanner instead of reusing personal credentials.
- Grant read-only permissions first, then add cleanup-related permissions only if you plan to execute cleanup actions.
- Copy the exact fields listed in each provider card below and validate with Connection Test before running scans.
AWS
Create an IAM user access key in IAM > Users > Security credentials.
Azure
Create an app registration and secret in Microsoft Entra ID > App registrations.
Google Cloud Platform
Create a service account key in IAM & Admin > Service Accounts and paste the full JSON.
Alibaba / Tencent / Huawei
Create AccessKey pairs in each provider's RAM/CAM/IAM console and keep region values consistent.
Token + S3-Compatible Providers
Generate API tokens or S3 keys in the provider access panel, then copy endpoint/region exactly as shown in provider docs.
Find a provider
Jump faster by provider name, runtime ID, or common credential field.
Showing all provider schemas.
Provider Credential Entry Links (47)
Use the official credential entry points below to create API tokens, access keys, or service-account credentials for each runtime provider.
| Provider | Runtime ID | Required Keys | Credential Entry Link |
|---|---|---|---|
| Akamai Connected Cloud | akamai |
token | Akamai/Linode token console |
| Alibaba Cloud | alibaba |
access_key_id, access_key_secret, region_id | Alibaba RAM AccessKey page |
| AWS | aws |
key, secret (region is selected separately) | AWS IAM security credentials |
| Azure | azure |
subscription_id, tenant_id, client_id, client_secret | Azure App registrations |
| Backblaze B2 | backblaze |
access_key, secret_key, region, endpoint | Backblaze application keys |
| Baidu AI Cloud | baidu |
access_key, secret_key, region | Baidu BCE access key management |
| Ceph RGW (S3-Compatible) | ceph |
access_key, secret_key, region, endpoint | Ceph RGW user/key admin guide |
| Civo | civo |
token (+ optional endpoint) | Civo API key guide |
| Cloudflare | cloudflare |
token, account_id | Cloudflare API tokens |
| Cloudian HyperStore (S3) | cloudian |
access_key, secret_key, region, endpoint | Cloudian documentation portal |
| Contabo | contabo |
token OR token + client_id/client_secret/username/password/endpoint | Contabo API access docs |
| Dell EMC ECS (S3) | dell |
access_key, secret_key, region, endpoint | Dell ECS administration guide |
| DigitalOcean | digitalocean |
token string | DigitalOcean API tokens |
| DreamHost DreamObjects | dreamhost |
access_key, secret_key, region, endpoint | DreamHost API category |
| Equinix Metal | equinix |
token (+ optional endpoint and project_id) | Equinix docs portal |
| Exoscale | exoscale |
api_key, secret_key, endpoint | Exoscale IAM API keys |
| Gcore | gcore |
token (+ optional endpoint) | Gcore docs portal |
| Generic S3-Compatible | s3compatible |
access_key, secret_key, region, endpoint | S3 access key model reference |
| Google Cloud (GCP) | gcp |
raw service account JSON key document | GCP service accounts |
| Hetzner | hetzner |
token string | Hetzner API token guide |
| Hitachi HCP (S3) | hcp |
access_key, secret_key, region, endpoint | Hitachi HCP documentation portal |
| HPE GreenLake (S3) | greenlake |
access_key, secret_key, region, endpoint | HPE GreenLake developer portal |
| Huawei Cloud | huawei |
access_key, secret_key, region, project_id | Huawei IAM access keys |
| IBM Cloud | ibm |
api_key, region (+ optional cos_endpoint and cos_service_instance_id) | IBM Cloud API keys |
| IDrive e2 | idrive |
access_key, secret_key, region, endpoint | IDrive e2 portal |
| IONOS Cloud | ionos |
token (+ optional endpoint) | IONOS docs portal |
| Leaseweb | leaseweb |
token (+ optional endpoint) | Leaseweb API key guide |
| Linode | linode |
token | Linode personal access tokens |
| MinIO (S3-Compatible) | minio |
access_key, secret_key, region, endpoint | MinIO IAM documentation |
| NetApp StorageGRID (S3) | storagegrid |
access_key, secret_key, region, endpoint | StorageGRID S3 access keys |
| Nutanix Objects (S3) | nutanix |
access_key, secret_key, region, endpoint | Nutanix Objects IAM guide |
| OpenStack | openstack |
token (+ optional endpoint and project_id) | OpenStack application credentials |
| Oracle Cloud | oracle |
tenancy_id, user_id, fingerprint, private_key, region | OCI user credentials guide |
| OVHcloud | ovh |
application_key, application_secret, consumer_key, endpoint, project_id | OVH API token creation |
| Pure Storage FlashBlade (S3) | flashblade |
access_key, secret_key, region, endpoint | Pure Storage support portal |
| Qumulo (S3) | qumulo |
access_key, secret_key, region, endpoint | Qumulo docs portal |
| Rackspace | rackspace |
token (+ optional endpoint and project_id) | Rackspace docs portal |
| Scaleway | scaleway |
token (+ optional zones) | Scaleway IAM API keys |
| Scality (S3) | scality |
access_key, secret_key, region, endpoint | Scality documentation portal |
| Seagate Lyve Cloud | lyve |
access_key, secret_key, region, endpoint | Seagate Lyve Cloud portal |
| Storj DCS | storj |
access_key, secret_key, region, endpoint | Storj developer portal |
| Tencent Cloud | tencent |
secret_id, secret_key, region | Tencent CAM API keys |
| Tianyi Cloud | tianyi |
access_key, secret_key, region | Tianyi documentation portal |
| UpCloud | upcloud |
username, password (+ optional endpoint) | UpCloud API credential guide |
| Volcengine | volcengine |
access_key, secret_key, region | Volcengine access key management |
| Vultr | vultr |
api_key | Vultr API key settings |
| Wasabi | wasabi |
access_key, secret_key, region, endpoint | Wasabi docs portal |
Some enterprise and self-hosted providers expose credential management in tenant-specific admin panels. If your environment differs, open the linked official docs and search for API key or S3 access key creation.
Akamai Connected Cloud
akamai
Required Fields: token
{"token":"..."}Related baseline optimization guide: akamai-instance-idle-cleanup.html
Alibaba Cloud
alibaba
Required Fields: access_key_id, access_key_secret, region_id
{"access_key_id":"AKID...","access_key_secret":"...","region_id":"cn-hangzhou"}Related baseline optimization guide: alibaba-cloud-ecs-disks-cleanup.html
AWS
aws
Required Fields: key, secret (region is selected separately)
{"key":"AKIA...","secret":"..."}Related baseline optimization guide: aws-ebs-volumes-cleanup.html
Azure
azure
Required Fields: subscription_id, tenant_id, client_id, client_secret
{"subscription_id":"...","tenant_id":"...","client_id":"...","client_secret":"..."}Related baseline optimization guide: azure-blob-containers-cleanup.html
Backblaze B2
backblaze
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-west-004","endpoint":"https://s3.us-west-004.backblazeb2.com"}Related baseline optimization guide: backblaze-bucket-empty-cleanup.html
Baidu AI Cloud
baidu
Required Fields: access_key, secret_key, region
{"access_key":"...","secret_key":"...","region":"bj"}Related baseline optimization guide: baidu-cloud-bcc-instances-cleanup.html
Ceph RGW (S3-Compatible)
ceph
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://ceph.example.com"}Related baseline optimization guide: ceph-bucket-empty-cleanup.html
Civo
civo
Required Fields: token (+ optional endpoint)
{"token":"...","endpoint":"https://api.civo.com"}Related baseline optimization guide: civo-instance-idle-cleanup.html
Cloudflare
cloudflare
Required Fields: token, account_id
{"token":"...","account_id":"..."}Related baseline optimization guide: cloudflare-r2-buckets-cleanup.html
Cloudian HyperStore (S3)
cloudian
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.cloudian.example"}Related baseline optimization guide: cloudian-bucket-empty-cleanup.html
Contabo
contabo
Required Fields: token OR token + client_id/client_secret/username/password/endpoint
{"token":"...","client_id":"...","client_secret":"...","username":"...","password":"...","endpoint":"..."}Related baseline optimization guide: contabo-instance-idle-cleanup.html
Dell EMC ECS (S3)
dell
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://ecs.example.com"}Related baseline optimization guide: dell-bucket-empty-cleanup.html
DigitalOcean
digitalocean
Required Fields: token string
dop_v1_xxxxxxxxxRelated baseline optimization guide: digitalocean-droplets-cleanup.html
DreamHost DreamObjects
dreamhost
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://objects-us-east-1.dream.io"}Related baseline optimization guide: dreamhost-bucket-empty-cleanup.html
Equinix Metal
equinix
Required Fields: token (+ optional endpoint and project_id)
{"token":"...","endpoint":"https://api.equinix.com","project_id":"..."}Related baseline optimization guide: equinix-instance-idle-cleanup.html
Exoscale
exoscale
Required Fields: api_key, secret_key, endpoint
{"api_key":"...","secret_key":"...","endpoint":"https://api-ch-gva-2.exoscale.com"}Related baseline optimization guide: exoscale-instance-idle-cleanup.html
Gcore
gcore
Required Fields: token (+ optional endpoint)
{"token":"...","endpoint":"https://api.gcore.com"}Related baseline optimization guide: gcore-instance-idle-cleanup.html
Generic S3-Compatible
s3compatible
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.example.com"}Related baseline optimization guide: s3compatible-bucket-empty-cleanup.html
Google Cloud (GCP)
gcp
Required Fields: raw service account JSON key document
{"type":"service_account","project_id":"...","private_key":"...","client_email":"..."}Related baseline optimization guide: gcp-idle-vms-cleanup.html
Hetzner
hetzner
Required Fields: token string
hcloud_token_xxxRelated baseline optimization guide: hetzner-ip-unused-cleanup.html
Hitachi HCP (S3)
hcp
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://hcp.example.com"}Related baseline optimization guide: hcp-bucket-empty-cleanup.html
HPE GreenLake (S3)
greenlake
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://greenlake.example.com"}Related baseline optimization guide: greenlake-bucket-empty-cleanup.html
Huawei Cloud
huawei
Required Fields: access_key, secret_key, region, project_id
{"access_key":"...","secret_key":"...","region":"cn-north-4","project_id":"..."}Related baseline optimization guide: huawei-cloud-ecs-instances-cleanup.html
IBM Cloud
ibm
Required Fields: api_key, region (+ optional cos_endpoint and cos_service_instance_id)
{"api_key":"...","region":"us-south","cos_endpoint":"...","cos_service_instance_id":"..."}Related baseline optimization guide: ibm-cloud-block-storage-cleanup.html
IDrive e2
idrive
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://endpoint.idrivee2.com"}Related baseline optimization guide: idrive-bucket-empty-cleanup.html
IONOS Cloud
ionos
Required Fields: token (+ optional endpoint)
{"token":"...","endpoint":"https://api.ionos.com"}Related baseline optimization guide: ionos-instance-idle-cleanup.html
Leaseweb
leaseweb
Required Fields: token (+ optional endpoint)
{"token":"...","endpoint":"https://api.leaseweb.com"}Related baseline optimization guide: leaseweb-instance-idle-cleanup.html
Linode
linode
Required Fields: token
{"token":"linode_pat..."}Related baseline optimization guide: linode-instances-cleanup.html
MinIO (S3-Compatible)
minio
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://minio.example.com"}Related baseline optimization guide: minio-bucket-empty-cleanup.html
NetApp StorageGRID (S3)
storagegrid
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://storagegrid.example.com"}Related baseline optimization guide: storagegrid-bucket-empty-cleanup.html
Nutanix Objects (S3)
nutanix
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://objects.nutanix.example.com"}Related baseline optimization guide: nutanix-bucket-empty-cleanup.html
OpenStack
openstack
Required Fields: token (+ optional endpoint and project_id)
{"token":"...","endpoint":"https://openstack.example.com","project_id":"..."}Related baseline optimization guide: openstack-instance-idle-cleanup.html
Oracle Cloud
oracle
Required Fields: tenancy_id, user_id, fingerprint, private_key, region
{"tenancy_id":"...","user_id":"...","fingerprint":"...","private_key":"-----BEGIN PRIVATE KEY-----...","region":"us-ashburn-1"}Related baseline optimization guide: oracle-cloud-boot-volumes-cleanup.html
OVHcloud
ovh
Required Fields: application_key, application_secret, consumer_key, endpoint, project_id
{"application_key":"...","application_secret":"...","consumer_key":"...","endpoint":"eu","project_id":"..."}Related baseline optimization guide: ovh-instance-idle-cleanup.html
Pure Storage FlashBlade (S3)
flashblade
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://flashblade.example.com"}Related baseline optimization guide: flashblade-bucket-empty-cleanup.html
Qumulo (S3)
qumulo
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://qumulo.example.com"}Related baseline optimization guide: qumulo-bucket-empty-cleanup.html
Rackspace
rackspace
Required Fields: token (+ optional endpoint and project_id)
{"token":"...","endpoint":"https://lon.identity.api.rackspacecloud.com","project_id":"..."}Related baseline optimization guide: rackspace-instance-idle-cleanup.html
Scaleway
scaleway
Required Fields: token (+ optional zones)
{"token":"...","zones":"fr-par-1,nl-ams-1"}Related baseline optimization guide: scaleway-ip-unused-cleanup.html
Scality (S3)
scality
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://scality.example.com"}Related baseline optimization guide: scality-bucket-empty-cleanup.html
Seagate Lyve Cloud
lyve
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-west-1","endpoint":"https://s3.lyvecloud.seagate.com"}Related baseline optimization guide: lyve-bucket-empty-cleanup.html
Storj DCS
storj
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://gateway.storjshare.io"}Related baseline optimization guide: storj-bucket-empty-cleanup.html
Tencent Cloud
tencent
Required Fields: secret_id, secret_key, region
{"secret_id":"...","secret_key":"...","region":"ap-guangzhou"}Related baseline optimization guide: tencent-cloud-cbs-disks-cleanup.html
Tianyi Cloud
tianyi
Required Fields: access_key, secret_key, region
{"access_key":"...","secret_key":"...","region":"cn-east-1"}Related baseline optimization guide: tianyi-cloud-cloud-hosts-cleanup.html
UpCloud
upcloud
Required Fields: username, password (+ optional endpoint)
{"username":"...","password":"...","endpoint":"https://api.upcloud.com"}Related baseline optimization guide: upcloud-instance-idle-cleanup.html
Volcengine
volcengine
Required Fields: access_key, secret_key, region
{"access_key":"...","secret_key":"...","region":"cn-beijing"}Related baseline optimization guide: volcengine-ebs-volumes-cleanup.html
Vultr
vultr
Required Fields: api_key
{"api_key":"..."}Related baseline optimization guide: vultr-blocks-cleanup.html
Wasabi
wasabi
Required Fields: access_key, secret_key, region, endpoint
{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.wasabisys.com"}Related baseline optimization guide: wasabi-bucket-empty-cleanup.html
Next Step
After preparing credentials, continue with the API Reference for endpoint-level request examples, or use the Automation Playbooks for production workflows.
Check one provider credential path before scaling rollout.
Save your first $1,000 before the next billing cycle.