# GetAccessKeyResponse

**id** stringrequired  
Access key ID

**name** stringrequired  
Name of the access key

**status** stringrequired  
Status of the access key.

**Possible values:** [`Active`, `Inactive`]

**buckets_roles** object[]  
Array [  
  **bucket_name** stringrequired  
  Name of the bucket  
  
  **role** stringrequired  
  The role defines the permissions for the associated bucket:  
  - `ReadOnly`: Read-only access to the bucket. Permits read  
    operations like GetObject, HeadObject, ListObjects.  
  - `Editor`: Read and write access to the bucket. Includes  
    everything in ReadOnly, plus PutObject, DeleteObject, and bucket  
    configuration operations.  
  - `Admin`: Full access to all buckets in the org, bypasses all  
    permission checks. When used with `bucket_name: "*"`, the access  
    key is treated as a full org admin. The value of `bucket_name`  
    should always be `*` when using this role.  
  
  Example:  
  ```json  
  {  
      "bucket_name": "*",  
      "role": "Admin"  
  }  
  ```  
  **Possible values:** [`ReadOnly`, `Editor`, `Admin`]  
]

**attached_policies** string[]  
Names of IAM policies attached to this access key

**access_key_scope** AccessKeyScope  
Controls whether the key receives the implicit default-allowed operations  
(such as create bucket or list buckets) on top of what its policies and  
bucket roles grant.  
- `standard` (default): grants the default-allowed operations.  
- `no_default_allow`: denies them, so the key can do only what its policies  
and bucket roles explicitly allow.

**Possible values:** [`standard`, `no_default_allow`]

GetAccessKeyResponse  
```json  
{  
  "id": "string",  
  "name": "string",  
  "status": "Active",  
  "buckets_roles": [  
    {  
      "bucket_name": "string",  
      "role": "ReadOnly"  
    }  
  ],  
  "attached_policies": [  
    "string"  
  ],  
  "access_key_scope": "standard"  
}  
```