On this page

Create, list, inspect, delete, and assign roles to access keys. Access keys are credentials used for programmatic API access.

**Alias:**`keys`

## Usage

```bash
tigris access-keys <operation> [flags]

t3 keys <operation> [flags]
```

## Commands

| Command | Description |
| --- | --- |
| [`list`](/content/docs/cli/access-keys/list/index.html) | List all access keys in the current organization |
| [`create`](/content/docs/cli/access-keys/create/index.html) | Create a new access key |
| [`delete`](/content/docs/cli/access-keys/delete/index.html) | Permanently delete an access key |
| [`get`](/content/docs/cli/access-keys/get/index.html) | Show details for an access key |
| [`assign`](/content/docs/cli/access-keys/assign/index.html) | Assign per-bucket roles to an access key |
| [`rotate`](/content/docs/cli/access-keys/rotate/index.html) | Rotate an access key's secret |
| [`attach-policy`](/content/docs/cli/access-keys/attach-policy/index.html) | Attach an IAM policy to an access key |
| [`detach-policy`](/content/docs/cli/access-keys/detach-policy/index.html) | Detach an IAM policy from an access key |
| [`list-policies`](/content/docs/cli/access-keys/list-policies/index.html) | List all IAM policies attached to an access key |

## Examples

```bash
tigris access-keys list

tigris access-keys create my-ci-key

tigris access-keys assign tid_AaBb --bucket my-bucket --role Editor

tigris access-keys rotate tid_AaBbCcDdEeFf --yes

tigris access-keys attach-policy tid_AaBb --policy-arn arn:aws:iam::org_id:policy/my-policy
```