# Configuring backup storage (s3) secrets to use service account key or workdload identity federation

**URL:** <https://forums.percona.com/t/configuring-backup-storage-s3-secrets-to-use-service-account-key-or-workdload-identity-federation/36367>\
**Category:** Percona Operator for MongoDB\
**Created:** [January 27, 2025, 2:01pm UTC](https://forums.percona.com/t/configuring-backup-storage-s3-secrets-to-use-service-account-key-or-workdload-identity-federation/36367 "2025-01-27T14:01:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ranjithnairs84](https://avatars.discourse-cdn.com/v4/letter/r/b3f665/32.png) [@ranjithnairs84](https://forums.percona.com/u/ranjithnairs84)\
**Post date:** [January 27, 2025, 2:01pm UTC](https://forums.percona.com/t/configuring-backup-storage-s3-secrets-to-use-service-account-key-or-workdload-identity-federation/36367/1 "2025-01-27T14:01:36Z")

</div>

I am trying to follow [Configure storage for backups - Percona Operator for MongoDB](https://docs.percona.com/percona-operator-for-mongodb/backups-storage.html) to configure backup storage secrets, and I wanted to understand if instead of access key id , workload-identity or service account key-pair is an option to access storage bucket ?

---

<div class="post-metadata">

**Author:** ![Natalia\_Marukovich](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/natalia_marukovich/32/6407_2.png) [@Natalia\_Marukovich](https://forums.percona.com/u/Natalia_Marukovich)\
**Post date:** [March 10, 2025, 10:05am UTC](https://forums.percona.com/t/configuring-backup-storage-s3-secrets-to-use-service-account-key-or-workdload-identity-federation/36367/2 "2025-03-10T10:05:59Z")

</div>

> [@ranjithnairs84](#):
>
> Configure storage for backups - Percona Operator for MongoDB

> **[Percona Operator for MongoDB - Configure storage for backups](https://docs.percona.com/percona-operator-for-mongodb/backups-storage.html#automating-access-to-amazon-s3-based-on-iam-roles)**
>
> You can configure storage for backups in the backup.storages subsection of the
> Custom Resource, using the deploy/cr.yaml  
> configuration file.

You can try these instructions.

Let me know if you need any help with it.