Docs

Big Data File Storage

How to call an API

Authentication and authorization

When calling an API, you can authenticate your identity using either of the following two methods. You can only initiate API calls after authentication is successful.

AK/SK authentication: Signs the API request using Access Key ID and Secret Access Key. AK/SK authentication is recommended, as it is more secure than Token authentication.

Token authentication: Authenticates general requests using a Token.

AK/SK authentication

AK/SK authentication involves signing the request with Access Key ID and Secret Access Key, and adding the signature information to the request parameters when making the request.

To ensure the legitimacy of the requester's identity and prevent malicious tampering during transmission, the Volcano Engine signature mechanism requires the requester to calculate a hash value for the request parameters, sign it, and send it to the server together with the API request. The server will perform signature calculation on the received request using the same mechanism and compare it with the signature provided by the requester. If the signature fails verification, the request will be rejected. For details on how to calculate the signature, refer to Signature method.

Token authentication

Token authentication involves adding the Token to the request message header when calling the API, thereby authenticating your identity and obtaining permission to access the API.

The Token can be obtained by calling the AssumeRole API.

Last updated: 2026.02.02 11:24:27