Docs

Torch Object Storage

Tool Guide

Signature tool

TOS offers a self-service signature tool in the console that automatically generates authentication signatures for HTTP request headers based on your configured parameters. This topic provides background information, considerations, and operating instructions for the tool.

Background information

TOS authenticates each access request. When calling TOS APIs, you must include the signature information by adding an Authorization header to your request. The signature tool can automatically generate authentication signatures for headers, eliminating the need for complex calculations. For information about the API signature mechanism, see Signature mechanism.

Notes

The signature tool only calculates signatures. It does not detect errors in the parameters you enter or prompt you about their correctness. Consequently, there may be cases where the generated signature fails verification.

Steps

In the left navigation pane, click Signature tool.

Configure the parameters and click Generate Signature.

Parameter	Required	Description
AccessKeyID	Yes	The access key ID (AK) of your Volcano Engine account. For instructions on how to view the AK and SK, see Viewing the Access Key ID and Secret Access Key.
AccessKeySecret	Yes	The secret access key (SK) of your Volcano Engine account.
SecurityToken	No	This parameter is required when accessing TOS with temporary credentials of Security Token Service (STS). For more information, see Accessing TOS with temporary credentials of Security Token Service.
Request Method	Yes	Request method. Possible values: GET, POST, PUT, DELETE, and HEAD.
Endpoint	Yes	Access domain. For more information, see Regions and endpoints.
Generation time	Yes	The time at which the signature is generated. warning The time at which the signature is generated must differ from the current time on the TOS server by no more than 15 minutes. Otherwise, the request will fail.
Bucket	No	The name of the bucket you want to access. tip This parameter is required when calling an API that operates on a specific bucket.
Object	No	The name of the object you want to access. tip This parameter is required when calling an API that operates on a specific object.
Request Header	No	The request headers that need to be passed to TOS.
Query	No	Used for validating URL parameters. It consists of key-value pairs with the following requirements: Keys must be lowercase. Values must be URL-encoded. Multiple keys should be arranged in lexicographical order and connected using "&", for example, max-keys=100&prefix=abc. tip This parameter is required when calling an API that requires setting a Query.

After you finish configuring, the signature calculation process will be displayed on the right side of the Signature tool page. Find the computed signature in Signature result.

Last updated: 2025.12.12 16:41:55