Credentials Accepted fields and official entry links

Provider credential schemas (47)

This page documents the credential field names accepted by the current runtime connection test parser. Use these schemas when adding accounts in the app or preparing automation payloads.

Docs > Providers & Credentials > Credential Schemas

Use this page after provider coverage is confirmed to prepare read-only fields and runtime-specific credential inputs.

Important Format Notes

  • AWS: Runtime scans commonly use local AWS profiles; JSON key/secret is used by the connection test flow.
  • GCP: Paste the full service account JSON content as credentials.
  • Token-only providers: Some runtimes accept plain token strings and also accept JSON wrappers with a token key.
  • S3-compatible providers: Most require access_key, secret_key, region, and endpoint.

How to Get Credentials

  1. Open the target provider console and go to IAM, API Access, or Security Credentials.
  2. Create a dedicated machine user or service principal for Cloud Waste Scanner instead of reusing personal credentials.
  3. Grant read-only permissions first, then add cleanup-related permissions only if you plan to execute cleanup actions.
  4. Copy the exact fields listed in each provider card below and validate with Connection Test before running scans.

AWS

Create an IAM user access key in IAM > Users > Security credentials.

Azure

Create an app registration and secret in Microsoft Entra ID > App registrations.

Google Cloud Platform

Create a service account key in IAM & Admin > Service Accounts and paste the full JSON.

Alibaba / Tencent / Huawei

Create AccessKey pairs in each provider's RAM/CAM/IAM console and keep region values consistent.

Token + S3-Compatible Providers

Generate API tokens or S3 keys in the provider access panel, then copy endpoint/region exactly as shown in provider docs.

Find a provider

Jump faster by provider name, runtime ID, or common credential field.

Showing all provider schemas.

Provider Credential Entry Links (47)

Use the official credential entry points below to create API tokens, access keys, or service-account credentials for each runtime provider.

Provider Runtime ID Required Keys Credential Entry Link
Akamai Connected Cloud akamai token Akamai/Linode token console
Alibaba Cloud alibaba access_key_id, access_key_secret, region_id Alibaba RAM AccessKey page
AWS aws key, secret (region is selected separately) AWS IAM security credentials
Azure azure subscription_id, tenant_id, client_id, client_secret Azure App registrations
Backblaze B2 backblaze access_key, secret_key, region, endpoint Backblaze application keys
Baidu AI Cloud baidu access_key, secret_key, region Baidu BCE access key management
Ceph RGW (S3-Compatible) ceph access_key, secret_key, region, endpoint Ceph RGW user/key admin guide
Civo civo token (+ optional endpoint) Civo API key guide
Cloudflare cloudflare token, account_id Cloudflare API tokens
Cloudian HyperStore (S3) cloudian access_key, secret_key, region, endpoint Cloudian documentation portal
Contabo contabo token OR token + client_id/client_secret/username/password/endpoint Contabo API access docs
Dell EMC ECS (S3) dell access_key, secret_key, region, endpoint Dell ECS administration guide
DigitalOcean digitalocean token string DigitalOcean API tokens
DreamHost DreamObjects dreamhost access_key, secret_key, region, endpoint DreamHost API category
Equinix Metal equinix token (+ optional endpoint and project_id) Equinix docs portal
Exoscale exoscale api_key, secret_key, endpoint Exoscale IAM API keys
Gcore gcore token (+ optional endpoint) Gcore docs portal
Generic S3-Compatible s3compatible access_key, secret_key, region, endpoint S3 access key model reference
Google Cloud (GCP) gcp raw service account JSON key document GCP service accounts
Hetzner hetzner token string Hetzner API token guide
Hitachi HCP (S3) hcp access_key, secret_key, region, endpoint Hitachi HCP documentation portal
HPE GreenLake (S3) greenlake access_key, secret_key, region, endpoint HPE GreenLake developer portal
Huawei Cloud huawei access_key, secret_key, region, project_id Huawei IAM access keys
IBM Cloud ibm api_key, region (+ optional cos_endpoint and cos_service_instance_id) IBM Cloud API keys
IDrive e2 idrive access_key, secret_key, region, endpoint IDrive e2 portal
IONOS Cloud ionos token (+ optional endpoint) IONOS docs portal
Leaseweb leaseweb token (+ optional endpoint) Leaseweb API key guide
Linode linode token Linode personal access tokens
MinIO (S3-Compatible) minio access_key, secret_key, region, endpoint MinIO IAM documentation
NetApp StorageGRID (S3) storagegrid access_key, secret_key, region, endpoint StorageGRID S3 access keys
Nutanix Objects (S3) nutanix access_key, secret_key, region, endpoint Nutanix Objects IAM guide
OpenStack openstack token (+ optional endpoint and project_id) OpenStack application credentials
Oracle Cloud oracle tenancy_id, user_id, fingerprint, private_key, region OCI user credentials guide
OVHcloud ovh application_key, application_secret, consumer_key, endpoint, project_id OVH API token creation
Pure Storage FlashBlade (S3) flashblade access_key, secret_key, region, endpoint Pure Storage support portal
Qumulo (S3) qumulo access_key, secret_key, region, endpoint Qumulo docs portal
Rackspace rackspace token (+ optional endpoint and project_id) Rackspace docs portal
Scaleway scaleway token (+ optional zones) Scaleway IAM API keys
Scality (S3) scality access_key, secret_key, region, endpoint Scality documentation portal
Seagate Lyve Cloud lyve access_key, secret_key, region, endpoint Seagate Lyve Cloud portal
Storj DCS storj access_key, secret_key, region, endpoint Storj developer portal
Tencent Cloud tencent secret_id, secret_key, region Tencent CAM API keys
Tianyi Cloud tianyi access_key, secret_key, region Tianyi documentation portal
UpCloud upcloud username, password (+ optional endpoint) UpCloud API credential guide
Volcengine volcengine access_key, secret_key, region Volcengine access key management
Vultr vultr api_key Vultr API key settings
Wasabi wasabi access_key, secret_key, region, endpoint Wasabi docs portal

Some enterprise and self-hosted providers expose credential management in tenant-specific admin panels. If your environment differs, open the linked official docs and search for API key or S3 access key creation.

Akamai Connected Cloud

akamai

Required Fields: token

{"token":"..."}

Related baseline optimization guide: akamai-instance-idle-cleanup.html

Alibaba Cloud

alibaba

Required Fields: access_key_id, access_key_secret, region_id

{"access_key_id":"AKID...","access_key_secret":"...","region_id":"cn-hangzhou"}

Related baseline optimization guide: alibaba-cloud-ecs-disks-cleanup.html

AWS

aws

Required Fields: key, secret (region is selected separately)

{"key":"AKIA...","secret":"..."}

Related baseline optimization guide: aws-ebs-volumes-cleanup.html

Azure

azure

Required Fields: subscription_id, tenant_id, client_id, client_secret

{"subscription_id":"...","tenant_id":"...","client_id":"...","client_secret":"..."}

Related baseline optimization guide: azure-blob-containers-cleanup.html

Backblaze B2

backblaze

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-west-004","endpoint":"https://s3.us-west-004.backblazeb2.com"}

Related baseline optimization guide: backblaze-bucket-empty-cleanup.html

Baidu AI Cloud

baidu

Required Fields: access_key, secret_key, region

{"access_key":"...","secret_key":"...","region":"bj"}

Related baseline optimization guide: baidu-cloud-bcc-instances-cleanup.html

Ceph RGW (S3-Compatible)

ceph

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://ceph.example.com"}

Related baseline optimization guide: ceph-bucket-empty-cleanup.html

Civo

civo

Required Fields: token (+ optional endpoint)

{"token":"...","endpoint":"https://api.civo.com"}

Related baseline optimization guide: civo-instance-idle-cleanup.html

Cloudflare

cloudflare

Required Fields: token, account_id

{"token":"...","account_id":"..."}

Related baseline optimization guide: cloudflare-r2-buckets-cleanup.html

Cloudian HyperStore (S3)

cloudian

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.cloudian.example"}

Related baseline optimization guide: cloudian-bucket-empty-cleanup.html

Contabo

contabo

Required Fields: token OR token + client_id/client_secret/username/password/endpoint

{"token":"...","client_id":"...","client_secret":"...","username":"...","password":"...","endpoint":"..."}

Related baseline optimization guide: contabo-instance-idle-cleanup.html

Dell EMC ECS (S3)

dell

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://ecs.example.com"}

Related baseline optimization guide: dell-bucket-empty-cleanup.html

DigitalOcean

digitalocean

Required Fields: token string

dop_v1_xxxxxxxxx

Related baseline optimization guide: digitalocean-droplets-cleanup.html

DreamHost DreamObjects

dreamhost

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://objects-us-east-1.dream.io"}

Related baseline optimization guide: dreamhost-bucket-empty-cleanup.html

Equinix Metal

equinix

Required Fields: token (+ optional endpoint and project_id)

{"token":"...","endpoint":"https://api.equinix.com","project_id":"..."}

Related baseline optimization guide: equinix-instance-idle-cleanup.html

Exoscale

exoscale

Required Fields: api_key, secret_key, endpoint

{"api_key":"...","secret_key":"...","endpoint":"https://api-ch-gva-2.exoscale.com"}

Related baseline optimization guide: exoscale-instance-idle-cleanup.html

Gcore

gcore

Required Fields: token (+ optional endpoint)

{"token":"...","endpoint":"https://api.gcore.com"}

Related baseline optimization guide: gcore-instance-idle-cleanup.html

Generic S3-Compatible

s3compatible

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.example.com"}

Related baseline optimization guide: s3compatible-bucket-empty-cleanup.html

Google Cloud (GCP)

gcp

Required Fields: raw service account JSON key document

{"type":"service_account","project_id":"...","private_key":"...","client_email":"..."}

Related baseline optimization guide: gcp-idle-vms-cleanup.html

Hetzner

hetzner

Required Fields: token string

hcloud_token_xxx

Related baseline optimization guide: hetzner-ip-unused-cleanup.html

Hitachi HCP (S3)

hcp

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://hcp.example.com"}

Related baseline optimization guide: hcp-bucket-empty-cleanup.html

HPE GreenLake (S3)

greenlake

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://greenlake.example.com"}

Related baseline optimization guide: greenlake-bucket-empty-cleanup.html

Huawei Cloud

huawei

Required Fields: access_key, secret_key, region, project_id

{"access_key":"...","secret_key":"...","region":"cn-north-4","project_id":"..."}

Related baseline optimization guide: huawei-cloud-ecs-instances-cleanup.html

IBM Cloud

ibm

Required Fields: api_key, region (+ optional cos_endpoint and cos_service_instance_id)

{"api_key":"...","region":"us-south","cos_endpoint":"...","cos_service_instance_id":"..."}

Related baseline optimization guide: ibm-cloud-block-storage-cleanup.html

IDrive e2

idrive

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://endpoint.idrivee2.com"}

Related baseline optimization guide: idrive-bucket-empty-cleanup.html

IONOS Cloud

ionos

Required Fields: token (+ optional endpoint)

{"token":"...","endpoint":"https://api.ionos.com"}

Related baseline optimization guide: ionos-instance-idle-cleanup.html

Leaseweb

leaseweb

Required Fields: token (+ optional endpoint)

{"token":"...","endpoint":"https://api.leaseweb.com"}

Related baseline optimization guide: leaseweb-instance-idle-cleanup.html

Linode

linode

Required Fields: token

{"token":"linode_pat..."}

Related baseline optimization guide: linode-instances-cleanup.html

MinIO (S3-Compatible)

minio

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://minio.example.com"}

Related baseline optimization guide: minio-bucket-empty-cleanup.html

NetApp StorageGRID (S3)

storagegrid

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://storagegrid.example.com"}

Related baseline optimization guide: storagegrid-bucket-empty-cleanup.html

Nutanix Objects (S3)

nutanix

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://objects.nutanix.example.com"}

Related baseline optimization guide: nutanix-bucket-empty-cleanup.html

OpenStack

openstack

Required Fields: token (+ optional endpoint and project_id)

{"token":"...","endpoint":"https://openstack.example.com","project_id":"..."}

Related baseline optimization guide: openstack-instance-idle-cleanup.html

Oracle Cloud

oracle

Required Fields: tenancy_id, user_id, fingerprint, private_key, region

{"tenancy_id":"...","user_id":"...","fingerprint":"...","private_key":"-----BEGIN PRIVATE KEY-----...","region":"us-ashburn-1"}

Related baseline optimization guide: oracle-cloud-boot-volumes-cleanup.html

OVHcloud

ovh

Required Fields: application_key, application_secret, consumer_key, endpoint, project_id

{"application_key":"...","application_secret":"...","consumer_key":"...","endpoint":"eu","project_id":"..."}

Related baseline optimization guide: ovh-instance-idle-cleanup.html

Pure Storage FlashBlade (S3)

flashblade

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://flashblade.example.com"}

Related baseline optimization guide: flashblade-bucket-empty-cleanup.html

Qumulo (S3)

qumulo

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://qumulo.example.com"}

Related baseline optimization guide: qumulo-bucket-empty-cleanup.html

Rackspace

rackspace

Required Fields: token (+ optional endpoint and project_id)

{"token":"...","endpoint":"https://lon.identity.api.rackspacecloud.com","project_id":"..."}

Related baseline optimization guide: rackspace-instance-idle-cleanup.html

Scaleway

scaleway

Required Fields: token (+ optional zones)

{"token":"...","zones":"fr-par-1,nl-ams-1"}

Related baseline optimization guide: scaleway-ip-unused-cleanup.html

Scality (S3)

scality

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://scality.example.com"}

Related baseline optimization guide: scality-bucket-empty-cleanup.html

Seagate Lyve Cloud

lyve

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-west-1","endpoint":"https://s3.lyvecloud.seagate.com"}

Related baseline optimization guide: lyve-bucket-empty-cleanup.html

Storj DCS

storj

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://gateway.storjshare.io"}

Related baseline optimization guide: storj-bucket-empty-cleanup.html

Tencent Cloud

tencent

Required Fields: secret_id, secret_key, region

{"secret_id":"...","secret_key":"...","region":"ap-guangzhou"}

Related baseline optimization guide: tencent-cloud-cbs-disks-cleanup.html

Tianyi Cloud

tianyi

Required Fields: access_key, secret_key, region

{"access_key":"...","secret_key":"...","region":"cn-east-1"}

Related baseline optimization guide: tianyi-cloud-cloud-hosts-cleanup.html

UpCloud

upcloud

Required Fields: username, password (+ optional endpoint)

{"username":"...","password":"...","endpoint":"https://api.upcloud.com"}

Related baseline optimization guide: upcloud-instance-idle-cleanup.html

Volcengine

volcengine

Required Fields: access_key, secret_key, region

{"access_key":"...","secret_key":"...","region":"cn-beijing"}

Related baseline optimization guide: volcengine-ebs-volumes-cleanup.html

Vultr

vultr

Required Fields: api_key

{"api_key":"..."}

Related baseline optimization guide: vultr-blocks-cleanup.html

Wasabi

wasabi

Required Fields: access_key, secret_key, region, endpoint

{"access_key":"...","secret_key":"...","region":"us-east-1","endpoint":"https://s3.wasabisys.com"}

Related baseline optimization guide: wasabi-bucket-empty-cleanup.html

Next Step

After preparing credentials, continue with the API Reference for endpoint-level request examples, or use the Automation Playbooks for production workflows.

Credential Setup

Check one provider credential path before scaling rollout.

Save your first $1,000 before the next billing cycle.