Credential Management
What is Credential Management
The Credential feature provides a secure way to store and manage authentication information required for accessing external services such as AWS S3, Google Cloud Storage, Azure Blob Storage, and other external systems. This feature enables database applications to interact with cloud resources while maintaining security and access control.
Credentials are stored securely in encrypted form in the database system and, by default, only the credential owner can use or modify their credentials. With built-in support for various authentication methods such as simple key/secret, tokens, and OAuth, this feature provides easy and secure authentication with external cloud services.
The Credential feature eliminates the need to pass sensitive credential information in every SQL statement that requires access to remote objects. Instead, the SQL statements can use and access the available credentials by name as per the access privileges.
Note: This feature is enabled by default and does not require any configurations.
Using the Credential feature, you can:
• Access and manage data stored in external cloud services.
• Authenticate with external APIs and Web services. The following authentication types are supported:
• AWS - Simple (access/secret keys), session-based, and token-based
• Google Cloud Storage - Service account and token-based
• Azure - OAuth2, Shared Key, and token-based
• General Purpose - Basic (username/password), token-based, and OAuth
Credential secrets are stored securely as structured JSON documents. Each authentication type requires a specific JSON structure for its SECRET parameter. See
CREATE CREDENTIAL/
ALTER CREDENTIAL for details.
• Enable secure access to external data sources.
• Use cloud storage for database backup and restore operations.
• Extract, transform, and load data from cloud sources.
• Allow multiple users to access shared cloud resources using a single credential.
• Secure training and deployment of ML models using cloud services.
Last modified date: 09/11/2026