Scoped S3/R2 access keys for the /s3 wire gateway (SigV4) and the API. Keys are Vault-backed (SS-05); the secret is shown once and never leaves Vault as a raw credential.
| Label | Key | Scope | Last used | Status | |
|---|---|---|---|---|---|
| Production deploy | r2_live_2f91…a7c | Full access | 3m ago | Active | |
| site-assets writer | r2_live_88b1…0d2 | R2 read/write | 1h ago | Active | |
| CI / staging | r2_test_41aa…9f0 | R2 read-only | yesterday | Active | |
| Legacy import | r2_live_0c33…b18 | Full access | 42d ago | Revoked | — |