# Manage S3 service accounts using the CLI

With the CLI, as an S3 user, you can:

* [View S3 service accounts](#view-existing-s3-service-accounts)
* [Add an S3 service account](#add-an-s3-service-account)
* [Show S3 service account details](#show-an-s3-service-account-details)
* [Remove an S3 service account](#creating-a-new-iam-policies)

**Related topics**

[#s3-service-accounts](https://docs.weka.io/4.2/additional-protocols/s3/s3-users-and-authentication/..#s3-service-accounts "mention")

## View existing S3 service accounts

**Command:** `weka s3 service-account list`

Use this command to list the existing S3 service accounts.

The command lists only the access keys of the S3 service accounts added by the S3 user.

## Add an S3 service account

**Command:** `weka s3 service-account add`

Use the following command line to add an S3 user account:

`weka s3 service-account add <policy-file>`

The system returns an access key and a secret key. If you do not specify a `policy-file`, the S3 service account inherits the IAM policy from the parent S3 user.

{% hint style="warning" %}
The secret key is visible **only once** when adding the S3 service account. You must save the secret key in a safe place for later use.
{% endhint %}

**Parameters**

<table data-header-hidden><thead><tr><th>Name</th><th>Type</th><th width="168">Value</th><th>Limitations</th><th>Mandatory</th><th>Default</th></tr></thead><tbody><tr><td><strong>Name</strong></td><td><strong>Type</strong></td><td><strong>Value</strong></td><td><strong>Limitations</strong></td><td><strong>Mandatory</strong></td><td><strong>Default</strong></td></tr><tr><td><code>policy-file</code></td><td>String</td><td>The IAM policy file to attach to the S3 service account</td><td></td><td></td><td>Inherits the IAM policy from the parent S3 user</td></tr></tbody></table>

## Show an S3 service account details

**Command:** `weka s3 service-account show`

Use the following command line to display the policy details attached to the specified S3 service account:

`weka s3 service-account show <access-key>`

**Parameters**

<table><thead><tr><th width="228">Name</th><th>Value</th></tr></thead><tbody><tr><td><code>access-key</code>*</td><td>The access key of the S3 service account.</td></tr></tbody></table>

## Remove S3 service account <a href="#creating-a-new-iam-policies" id="creating-a-new-iam-policies"></a>

**Command:** `weka s3 service-account remove`

Use the following command line to remove an S3 service account:‌

`weka s3 service-account remove <access-key>`‌

**Parameters**

<table><thead><tr><th width="232">Name</th><th>Value</th></tr></thead><tbody><tr><td><code>access-key</code>*</td><td>The access key of the S3 service account to remove.</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.weka.io/4.2/additional-protocols/s3/s3-users-and-authentication/s3-users-and-authentication-1.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.