CREATE CREDENTIAL Examples
1. Create an AWS S3 credential:
CREATE CREDENTIAL my_s3_cred
WITH TYPE = 'AWS_SIMPLE',
ENDPOINT = 's3.amazonaws.com', REGION = 'us-west-2', ACCESS = 'READ_WRITE', SECRET = '{"AWS_ACCESS_KEY": "AKIAIOSFODNN7EXAMPLE", "AWS_SECRET_KEY": "wJalrXUtnFEMI/K7MDENG/ bPxRfiCYEXAMPLEKEY"}'
2. Create a Google Cloud Storage credential:
CREATE CREDENTIAL my_gcs_cred
WITH
TYPE = 'GCS_SERVICE_1',
ENDPOINT = 'storage.googleapis.com',
ACCESS = 'READ',
EXPIRE_DATE = '2026-12-31 23:59:59',
SECRET = '{
"GCS_EMAIL": "service-account@project-id.iam.gserviceaccount.com",
"GCS_PRIVATE_KEY_ID": "a1b2c3d4e5f6g7h8i9j0",
"GCS_PRIVATE_KEY": "-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKY...remaining part of sample key...=\n-----END PRIVATE KEY-----\n"
}'
3. Create an Azure Blob Storage credential:
CREATE CREDENTIAL my_azure_cred
WITH
TYPE = 'AZURE_SHARED_KEY',
ENDPOINT = 'myaccount.blob.core.windows.net',
SECRET = '{"AZURE_ACCESS_KEY": "?sv=2022-11-02&ss=b&srt=c&sp=rwl&se=2023-12- 31T21:00:00Z&st=2023-01-01T13:00:00Z&spr=https&sig=abcdefg"}'
4. Create a credential for shared use:
CREATE CREDENTIAL shared_azure_cred
WITH
TYPE = 'AZURE_SHARED_KEY',
ENDPOINT = 'myaccount.blob.core.windows.net',
SECRET = '{"AZURE_ACCESS_KEY": "?sv=2022-11-02&ss=b&srt=c&sp=rwl&se=2023-12-31T21:00:00Z"}';
Grant privileges to specific users:
GRANT USAGE ON CREDENTIAL shared_azure_cred TO user1, user2;
Grant privileges to all users:
GRANT USAGE ON CREDENTIAL shared_azure_cred TO PUBLIC;
Last modified date: 09/11/2026