You use the -auth-type CAP parameter to obtain credentials for C2S access.

The storage aggregate object-store config create command fails if ONTAP cannot access Amazon S3 with the provided information.

You use the -access-key parameter to specify the access key for authorizing requests to the Amazon S3 object store.

You use the -secret-password parameter to specify the password (secret access key) for authenticating requests to the Amazon S3 object store.

If the Amazon S3 password is changed, you should update the corresponding password stored in ONTAP immediately.

cluster1::> storage aggregate object-store config create
-object-store-name my_aws_store -provider-type AWS_S3
-server s3.amazonaws.com -container-name my-aws-bucket
-access-key DXJRXHPXHYXA9X31X3JX

cluster1::> storage aggregate object-store config create -object-store-name my_c2s_store -provider-type AWS_S3 -auth-type CAP -cap-url https://123.45.67.89/api/v1/credentials?agency=XYZ&mission=TESTACCT&role=S3FULLACCESS -server my-c2s-s3server-fqdn -container my-c2s-s3-bucket