---
name: satellite-iam-api-key
title: API keys in IBM Cloud
description: Satellite uses IBM Cloud IAM API keys to authorize various requests.
last-updated: 2026-08-27
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/satellite?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# API keys in IBM Cloud 
{: #iam-api-key}

Satellite uses IBM Cloud IAM [API keys](https://cloud.ibm.com/docs/iam?topic=iam-manapikey&format=markdown) to authorize various requests.
{: shortdesc}


## Satellite API key
{: #api-key-satellite}

Satellite automatically creates an IBM Cloud IAM API key for you, that impersonates the permissions of the user that creates the location. The API key name is formatted as `satellite-<LOCATION_NAME>`.

## Container service API key
{: #api-keys-containers}

Satellite uses the Red Hat OpenShift on IBM Cloud API key specific to the resource group and region managing the Satellite location.
{: shortdesc}

The API key name is in the format `containers-kubernetes-key`. The account owner can reset the API key by logging in to a region and resource group and running `ibmcloud ks api-key reset`.

This API key is used to authorize actions to various IBM Cloud services, such as one of the following.
- Red Hat OpenShift on IBM Cloud for clusters.
- IBM Cloud Container Registry for images.
- Service-to-service authorization in IAM for any Satellite-enabled IBM Cloud services that you add to your location.

For more information, see the [Red Hat OpenShift on IBM Cloud documentation](https://cloud.ibm.com/docs/openshift?topic=openshift-access-creds&format=markdown).

## Infrastructure provider credentials
{: #api-keys-templates}

When creating a Satellite location from a template, Satellite checks an API key for [permissions to create a location](https://cloud.ibm.com/docs/satellite?topic=satellite-iam&format=markdown#iam-roles-usecases), including IBM Cloud Schematics access.
{: shortdesc}