# CredentialSchemaGet

### Object

#### Metadata
**[SasTokenMetadataSchema](https://docs.mediakind.com/api-reference/media-api/schemas/sastokenmetadataschema)**  
Metadata about the credential.

- **created**: string (Optional, format: date-time)  
  The time when the resource was created
- **createdBy**: string (Optional, format: uuid)  
  ID of the user who created the resource
- **createdByEmail**: string (Optional)  
  Email of the user who created the resource
- **id**: string (Required, format: uuid)  
  The ID of the resource
- **updated**: string (Optional, format: date-time)  
  The time when the resource was last updated
- **updatedBy**: string (Optional, format: uuid)  
  ID of the user who last updated the resource
- **updatedByEmail**: string (Optional)  
  Email of the user who last updated the resource

#### Spec
**object (Required)**  
The specification of the credential.

Select one variant:

- **Microsoft.Storage**  
  **[AzureCredentialSpecRead](https://docs.mediakind.com/api-reference/media-api/schemas/azurecredentialspecread)**  
  **credential** _[AzureCredentialRead](https://docs.mediakind.com/api-reference/media-api/schemas/azurecredentialread) (Required)_  
  The credential for the Azure Storage Account
  - **sasToken**: string (Required, pattern: ^\\?([a-z]+=[^&]+)(&[a-z]+=[^&]+)+$)  
    SAS Token for Azure Storage Account, including leading ?
  - **signedExpiry**: string (Required, format: date-time)  
    The expiry time of the token.
  - **signedStart**: string or null (Required, format: date-time)  
    The start time of the token.
  - **type**: enum or null (Required)  
    The type of the credential.
    Allowed values: Microsoft.Storage, AWS.S3, Google.Storage

- **AWS.S3**  
  **object [AWSCredentialSpec](https://docs.mediakind.com/api-reference/media-api/schemas/awscredentialspec)**  
  **credential** _[AWSCredential](https://docs.mediakind.com/api-reference/media-api/schemas/awscredential) (Required)_  
  The credential for the AWS S3 bucket.
  - **accessKeyId**: string (Required, pattern: ^A[KS]IA[0-9A-Z]{16}$)  
    The access key ID for the bucket.
  - **secretAccessKey**: string (Required, pattern: ^[A-Za-z0-9+/=]{40}$)  
    The secret access key for the bucket.
  - **type**: enum or null (Required)  
    The type of the credential.
    Allowed values: Microsoft.Storage, AWS.S3, Google.Storage

- **Google.Storage**  
  **object [GoogleCredentialSpec](https://docs.mediakind.com/api-reference/media-api/schemas/googlecredentialspec)**  
  **credential** _[GoogleCredential](https://docs.mediakind.com/api-reference/media-api/schemas/googlecredential) (Required)_  
  The credential for the Google Storage bucket.
  - **gacmap**: map from strings to string (Required)  
    Google Application Credentials in JSON format.  
    You can generate this from the command line with `gcloud iam service-accounts keys create key.json --iam-account=<service_account>@<project>.iam.gserviceaccount.com`
    Or download it from the GCP console.
  - **type**: enum or null (Required)  
    The type of the credential.
    Allowed values: Microsoft.Storage, AWS.S3, Google.Storage