---
id: cloud-accounts.temporary-aws-credentials
url: https://storagestudio.us/faq/cloud-accounts/temporary-aws-credentials
category: "Cloud accounts"
subcategory: "Amazon S3"
question: "Can I use temporary AWS credentials or single sign-on with Storage Studio?"
alt_questions:
  - "AWS SSO credentials Storage Studio"
  - "Session token S3 Storage Studio"
  - "ASIA temporary access key"
  - "IAM Identity Center with Storage Studio"
  - "S3 keys expire after an hour"
short_answer: "The form takes a long-lived Access Key ID and Secret Access Key; there's no session-token field, and temporary credentials expire, breaking schedules. Create a dedicated user with its own key, limited to one bucket."
tags: ["amazon s3", "aws iam", "access keys"]
related: ["https://storagestudio.us/faq/cloud-accounts/what-aws-permissions-does-storage-studio-need", "https://storagestudio.us/faq/cloud-accounts/what-is-an-access-key-id"]
applies_to: "all"
last_reviewed: 2026-10-01
---

# Can I use temporary AWS credentials or single sign-on with Storage Studio?

The Bucket Storage form takes a long-lived **Access Key ID** and **Secret Access Key**; there's no field for the session token that temporary credentials need, and they expire anyway, which would break scheduled transfers.

Create a dedicated user with its own access key for Storage Studio, limited to the one bucket it needs. Temporary keys usually start with `ASIA`; long-lived user keys usually start with `AKIA`.
