Create and manage project

Project in KakaoCloud is for owning services and using their resources. The project creation and management described in this document are only available to users assigned the following IAM roles.

Project management by IAM role

Feature	Org Admin	Org Reader	Project Admin	Project Member	Project Reader
View all projects	✓	✓
Create project	✓
Edit project information	✓
Set default project	✓
Request project deletion	✓

Create project

To use KakaoCloud resources, you must first create a project within your organization.
Only users with the Org Admin role can create a project.

info

You must register a payment method before creating a project.
For details, see Manage payment method.

1. Go to the KakaoCloud Console > Management > IAM menu.

2. In the left-hand Projects menu, click the [Create project] button.

3. In the popup window, enter the required project information and click [Create].

   Field	Description
   Organization name	The organization name registered by the owner during initial signup (auto-filled)
   Project name	Unique identifier used in APIs - Cannot be changed after creation
   Project nickname	Display name of the project
   Description (optional)	Description of the project

Manage project

View all projects

Org Admin can view all projects within the organization.
Project Admin and Project Member can only view the projects they are part of.

1. Go to the KakaoCloud Console > Management > IAM menu.
2. In the left-hand Projects menu, view all projects in the organization.

Modify project information

Org Admin can edit project details such as the project nickname and description.

1. Go to the KakaoCloud Console > Management > IAM menu.

2. In the left-hand Projects menu, click the edit icon next to the project you want to modify.

   • Project information can only be edited from within the organization to which the project belongs. Make sure the correct organization is selected before proceeding.

3. In the Edit project popup, modify the Project nickname and Description, then click [Save].

   Field	Description
   Project nickname	Display name of the project
   Description (optional)	Description of the project

Request project deletion

Users with the Org Admin role can request project deletion by submitting an inquiry to the Help Desk.
A feature for directly deleting projects in the console will be available in the future.

caution

When a project is deleted, all resources created within that project are also permanently deleted and cannot be recovered.

1. Go to the Help Desk and click the [Submit Inquiry] button at the top right.

2. Click the [Technical Inquiry] button, fill in the required information, and click [Submit].

   Request project deletion

   Field	Description
   Inquiry type	Select from General or Technical - For project deletion, select Technical Inquiry
   Detailed type	Specific category of the inquiry - For project deletion, select Project deletion under Service
   Project name	Name of the project to be deleted
   Title	Title of the inquiry
   Inquiry details	Description of the request - You can mark the inquiry as private
   Attachment	Attach files if needed

Manage service account

A service account is not an actual IAM user account. Instead, it is used to access or control resources within a project. It can be used to issue API tokens in place of IAM user accounts. The service account management features described in this document are available only to users with the following IAM roles.

Service account management by IAM role

info

As of November 15, 2024, permissions for Project Member and Project Reader roles have been partially restricted.

Feature	Org Admin	Org Reader	Project Admin	Project Member	Project Reader
View service accounts			✓
Create service account			✓
Change service account status			✓
Delete service account			✓
Add/delete service access key			✓
View service agent account			✓

View service account

A service account allows project members to call APIs using the service account's API authentication token to access or control KakaoCloud resources. Follow the steps below to view a service account.

info

You can use a service account's access key to issue API tokens. However, an API token issued by a service account cannot be used to add access keys, delete the service account, or delete access keys associated with it.
- You also cannot create new service accounts or delete other service accounts or their keys.

1. Go to the KakaoCloud Console, and select the Project where you want to check the service account.

2. In the selected project, click Go to Project Management on the dashboard.

3. In the Service Account menu, view the service accounts created in the project.

   Field	Description
   ID	Service account ID - Format: {custom-input}-project-unique-ID@kc.serviceaccount.com
   Name	User-defined name for the service account
   Status	Service account status - 🟢 Active: Account is active and usable - ⚪️ Inactive: Account is restricted from use
   Created at	Date and time the service account was created

Create service account

A service account is not a real IAM user, but is used by project members to access or control KakaoCloud resources via API authentication tokens. Follow the steps below to create a service account.

info

Each project can have up to 100 service accounts, including inactive ones.

1. Go to the KakaoCloud Console, and select the Project where you want to create the service account.

2. In the selected project, click Go to Project Management on the dashboard.

3. In the Service Account menu, click the [Create service account] button.

4. In the Create service account popup, fill in the required information and click [Create].

   Create service account

   Field	Description
   Project	Name of the project (auto-filled)
   Service account name	Name: Name of the service account   └ Up to 30 characters
   Service account ID	ID: Service account ID   └ Automatically generated in email format: {custom-input}-project-unique-ID@kc.serviceaccount.com
   Project role	Automatically assigned as Project Member

Change service account state

A service account can be toggled between active and inactive states. When a service account is set to inactive, all issued access keys and API authentication tokens are immediately expired. This may result in loss of access to certain resources, so please proceed with caution when changing the account state.

1. Go to the KakaoCloud Console, and select the Project associated with the service account.
2. In the selected project, click Go to Project Management from the dashboard.
3. In the Service Account menu, click the [More] icon next to the target service account and select Settings.
4. In the popup window, set the status to Active or Inactive, and click [Save].

Delete service account

You can delete service accounts that are no longer needed.

caution

When a service account is deleted, all associated access keys and API tokens are immediately expired. Please proceed with caution.

1. Go to the KakaoCloud Console, and select the Project associated with the service account.
2. In the selected project, click Go to Project Management from the dashboard.
3. In the Service Account menu, check the box for the service account to delete and click the [Delete] button.
4. In the confirmation popup, enter Delete service account, then click [Delete].

Get credentials for service account

Issue IAM access key

Get IAM access key

To use KakaoCloud APIs, you must issue an API authentication token, known as an IAM access key (consisting of an Access Key ID and a Secret Access Key). Follow the steps below to issue one:

caution

• Once created, the Secret Access Key cannot be retrieved again.
  
• You cannot temporarily disable an IAM access key or set an expiration date.
  

1. Go to the KakaoCloud Console, and select the Project associated with the service account.

2. In the selected project, click Go to Project Management from the dashboard.

3. In the Service Account menu, click the service account ID to go to the detail page.

4. In the Credentials > IAM Access Key tab, click [Create IAM Access Key].

   Field	Description
   Project	Project Name (Nickname): Auto-filled based on the project
   Service account ID	Auto-filled in the format {custom-input}-{project-ID}@kc.serviceaccount.com
   IAM access key name	Name of the IAM access key for the service account
   IAM access key description (optional)	Up to 30 characters allowed

info

You can create up to 2 IAM access keys per service account.

5. Check the issued Access Key ID and Secret Access Key, then click the [Copy] button.

   • The Secret Access Key cannot be viewed again after creation. Be sure to copy and store it securely.

6. Click [OK] to complete the access key creation.

Issue S3 access key

Get S3 access key

To use the object storage S3 API, you must issue an API authentication token called an S3 access key (access key and secret access key). Follow the steps below to issue an S3 access key.

info

The user account must have a role assigned to the object storage bucket in order to make API calls using the S3 access key.

caution

Be careful not to leak your S3 access key, as it may be misused if exposed externally.

1. Go to the KakaoCloud Console > Dashboard > Select project to access the project associated with the service account.

2. In the selected project, go to Dashboard > Project management.

3. Under the Service account menu, click the service account ID for which you want to add an S3 access key to open the detail page.

4. In the Credentials > S3 access key tab, click the [Create S3 access key] menu.

   Item	Description
   Project	- Project name (project nickname): The name of the associated project (auto-filled)
   Service account ID	ID in the format {user input}-{project unique ID}@kc.serviceaccount.com, auto-filled
   S3 access key name	Name of the S3 access key for the service account
   S3 access key description (optional)	Up to 30 characters

   info

   You can create up to 2 S3 access keys per service account.

5. Review the issued access key & secret access key, and click the [Copy] button to copy them.

6. Click the [Confirm] button to complete the creation of the S3 access key.

Delete credentials for service account

Delete IAM access key

Delete IAM access key for service account

You can delete an IAM access key that is no longer in use.

caution

When an IAM access key is deleted, any API authentication tokens issued with that key will immediately expire. Proceed with caution.

1. Go to the KakaoCloud Console, and select the Project associated with the service account.

2. In the selected project, click Go to Project Management from the dashboard.

3. In the Service Account menu, click the service account ID to go to the detail page.

4. In the Credentials > IAM Access Key tab, select the access key to delete and click the [Delete] button.

5. In the confirmation popup, enter Delete IAM access key, and click [Delete].

View service agent

A service agent is used by KakaoCloud services to access resources or fulfill user requests in the background. These accounts are automatically created when using certain KakaoCloud services and cannot be manually deleted or modified by users. Follow the steps below to view service agents:

1. Go to the KakaoCloud Console, and select the Project to view service agents.

2. In the selected project, click Go to Project Management from the dashboard.

3. In the Service Agent menu, view the service agents associated with the project.

   Field	Description
   Service	Name of the service that created the agent
   ID	Service agent ID - Format: project-ID@service-name.kc.serviceaccount.com
   Status	Service account status - 🟢 Active: The account is available for use - ⚪️ Inactive: The account is restricted
   Created at	Date the service agent was created when using a KakaoCloud service

Appendix. Check project ID

When you create a project in the KakaoCloud environment, a unique project ID is automatically assigned to it.
You can check the project ID on the KakaoCloud Console main page at the top under Current Project, or in the IAM > Project list.