Create a cloud target
POST /cloud/targets
Introduced In: 9.6
Creates a cloud target.
Required properties
- 
name- Name for the cloud target. - 
owner- Owner of the target: fabricpool, snapmirror. - 
provider_type- Type of cloud provider: AWS_S3, Azure_Cloud, SGWS, IBM_COS, AliCloud, GoogleCloud, ONTAP_S3. - 
server- Fully qualified domain name of the object store server. Required whenprovider_typeis one of the following: SGWS, IBM_COS, AliCloud. - 
container- Data bucket/container name. - 
access_key- Access key ID ifprovider_typeis not Azure_Cloud andauthentication_typeis key. - 
secret_password- Secret access key ifprovider_typeis not Azure_Cloud andauthentication_typeis key. - 
azure_account- Azure account ifprovider_typeis Azure_Cloud. - 
azure_private_key- Azure access key ifprovider_typeis Azure_Cloud. - 
cap_url- Full URL of the request to a CAP server for retrieving temporary credentials ifauthentication_typeis cap. - 
svm.nameorsvm.uuid- Name or UUID of SVM ifowneris snapmirror. - 
snapmirror_use- Use of the cloud target ifowneris snapmirror: data, metadata. 
Recommended optional properties
- 
authentication_type- Authentication used to access the target: key, cap, ec2_iam, gcp_sa, azure_msi. - 
ssl_enabled- SSL/HTTPS enabled or disabled. - 
port- Port number of the object store that ONTAP uses when establishing a connection. - 
ipspace- IPspace to use in order to reach the cloud target. - 
use_http_proxy- Use the HTTP proxy when connecting to the object store server. 
Default property values
- 
authentication_type - 
ec2_iam - if running in Cloud Volumes ONTAP in AWS
 - 
gcp_sa - if running in Cloud Volumes ONTAP in GCP
 - 
azure_msi - if running in Cloud Volumes ONTAP in Azure
 - 
key - in all other cases.
 - 
server - 
s3.amazonaws.com - if
provider_typeis AWS_S3 - 
blob.core.windows.net - if
provider_typeis Azure_Cloud - 
storage.googleapis.com - if
provider_typeis GoogleCloud - 
ssl_enabled- true - 
port - 
443 if
ssl_enabledis true andprovider_typeis not SGWS - 
8082 if
ssl_enabledis true andprovider_typeis SGWS - 
80 if
ssl_enabledis false andprovider_typeis not SGWS - 
8084 if
ssl_enabledis false andprovider_typeis SGWS - 
ipspace- Default - 
certificate_validation_enabled- true - 
ignore_warnings- false - 
check_only- false - 
use_http_proxy- false - 
server_side_encryption - 
none - if
provider_typeis ONTAP_S3 - 
sse_s3 - if
provider_typeis not ONTAP_S3 - 
url_style - 
path_style - if
provider_typeis neither AWS_S3 nor AliCloud - 
virtual_hosted_style - if
provider_typeis either AWS_S3 or _AliCloud_ 
Related ONTAP commands
- 
storage aggregate object-store config create 
Parameters
| Name | Type | In | Required | Description | 
|---|---|---|---|---|
ignore_warnings  | 
boolean  | 
query  | 
False  | 
Specifies whether or not warning codes should be ignored.  | 
check_only  | 
boolean  | 
query  | 
False  | 
Do not create the target configuration, only check that the POST request succeeds.  | 
return_timeout  | 
integer  | 
query  | 
False  | 
The number of seconds to allow the call to execute before returning. When doing a POST, PATCH, or DELETE operation on a single record, the default is 0 seconds. This means that if an asynchronous operation is started, the server immediately returns HTTP code 202 (Accepted) along with a link to the job. If a non-zero value is specified for POST, PATCH, or DELETE operations, ONTAP waits that length of time to see if the job completes so it can return something other than 202. 
  | 
return_records  | 
boolean  | 
query  | 
False  | 
The default is false. If set to true, the records are returned. 
  | 
Request Body
| Name | Type | Description | 
|---|---|---|
access_key  | 
string  | 
Access key ID for AWS_S3 and other S3 compatible provider types.  | 
authentication_type  | 
string  | 
Authentication used to access the target. SnapMirror does not yet support CAP. Required in POST.  | 
azure_account  | 
string  | 
Azure account  | 
azure_private_key  | 
string  | 
Azure access key  | 
cap_url  | 
string  | 
This parameter is available only when auth-type is CAP. It specifies a full URL of the request to a CAP server for retrieving temporary credentials (access-key, secret-pasword, and session token) for accessing the object store.  | 
certificate_validation_enabled  | 
boolean  | 
Is SSL/TLS certificate validation enabled? The default value is true. This can only be modified for SGWS, IBM_COS, and ONTAP_S3 provider types. 
  | 
cluster  | 
||
container  | 
string  | 
Data bucket/container name  | 
ipspace  | 
IPspace to use in order to reach the cloud target.  | 
|
name  | 
string  | 
Cloud target name  | 
owner  | 
string  | 
Owner of the target. Allowed values are FabricPool or SnapMirror. A target can be used by only one feature.  | 
port  | 
integer  | 
Port number of the object store that ONTAP uses when establishing a connection. Required in POST. 
  | 
provider_type  | 
string  | 
Type of cloud provider. Allowed values depend on owner type. For FabricPool, AliCloud, AWS_S3, Azure_Cloud, GoggleCloud, IBM_COS, SGWS, and ONTAP_S3 are allowed. For SnapMirror, the valid values are AWS_S3 or SGWS. 
  | 
secret_password  | 
string  | 
Secret access key for AWS_S3 and other S3 compatible provider types.  | 
server  | 
string  | 
Fully qualified domain name of the object store server. Required on POST.  For Amazon S3, server name must be an AWS regional endpoint in the format s3.amazonaws.com or s3-  | 
server_side_encryption  | 
string  | 
Encryption of data at rest by the object store server for AWS_S3 and other S3 compatible provider types. This is an advanced property. In most cases it is best not to change default value of "sse_s3" for object store servers which support SSE-S3 encryption. The encryption is in addition to any encryption done by ONTAP at a volume or at an aggregate level. Note that changing this option does not change encryption of data which already exist in the object store. 
  | 
snapmirror_use  | 
string  | 
Use of the cloud target by SnapMirror.  | 
ssl_enabled  | 
boolean  | 
SSL/HTTPS enabled or not  | 
svm  | 
This field is only applicable when used for SnapMirror. For POST and PATCH, SVM information is required for SnapMirror targets and not allowed for FabricPool targets.  | 
|
url_style  | 
string  | 
URL style used to access S3 bucket.  | 
use_http_proxy  | 
boolean  | 
Use HTTP proxy when connecting to the object store.  | 
used  | 
integer  | 
The amount of cloud space used by all the aggregates attached to the target, in bytes. This field is only populated for FabricPool targets. The value is recalculated once every 5 minutes.  | 
uuid  | 
string  | 
Cloud target UUID  | 
Example request
{
  "access_key": "string",
  "authentication_type": "string",
  "azure_account": "string",
  "azure_private_key": "string",
  "cap_url": "https://123.45.67.89:1234/CAP/api/v1/credentials?agency=myagency&mission=mymission&role=myrole",
  "cluster": {
    "name": "string",
    "uuid": "string"
  },
  "container": "bucket1",
  "ipspace": {
    "name": "exchange",
    "uuid": "1cd8a442-86d1-11e0-ae1c-123478563412"
  },
  "name": "string",
  "owner": "string",
  "provider_type": "string",
  "secret_password": "string",
  "server": "string",
  "server_side_encryption": "string",
  "snapmirror_use": "string",
  "svm": {
    "name": "svm1",
    "uuid": "02c9e252-41be-11e9-81d5-00a0986138f7"
  },
  "url_style": "string",
  "used": 0,
  "uuid": "string"
}
Response
Status: 202, Accepted
| Name | Type | Description | 
|---|---|---|
job  | 
Example response
{
  "job": {
    "uuid": "string"
  }
}
Error
Status: Default, Error
Definitions
See Definitions
href
| Name | Type | Description | 
|---|---|---|
href  | 
string  | 
_links
cluster
| Name | Type | Description | 
|---|---|---|
name  | 
string  | 
The name of the cluster that owns the cloud target. For POST, this accepts the name of the peer cluster only if the cluster is in switchover state.  | 
uuid  | 
string  | 
The UUID of the cluster that owns the cloud target. For POST, this accepts the UUID of the peer cluster only if the cluster is in switchover state.  | 
ipspace
IPspace to use in order to reach the cloud target.
| Name | Type | Description | 
|---|---|---|
name  | 
string  | 
IPspace name  | 
uuid  | 
string  | 
IPspace UUID  | 
svm
This field is only applicable when used for SnapMirror. For POST and PATCH, SVM information is required for SnapMirror targets and not allowed for FabricPool targets.
| Name | Type | Description | 
|---|---|---|
name  | 
string  | 
The name of the SVM.  | 
uuid  | 
string  | 
The unique identifier of the SVM.  | 
cloud_target
| Name | Type | Description | 
|---|---|---|
access_key  | 
string  | 
Access key ID for AWS_S3 and other S3 compatible provider types.  | 
authentication_type  | 
string  | 
Authentication used to access the target. SnapMirror does not yet support CAP. Required in POST.  | 
azure_account  | 
string  | 
Azure account  | 
azure_private_key  | 
string  | 
Azure access key  | 
cap_url  | 
string  | 
This parameter is available only when auth-type is CAP. It specifies a full URL of the request to a CAP server for retrieving temporary credentials (access-key, secret-pasword, and session token) for accessing the object store.  | 
certificate_validation_enabled  | 
boolean  | 
Is SSL/TLS certificate validation enabled? The default value is true. This can only be modified for SGWS, IBM_COS, and ONTAP_S3 provider types. 
  | 
cluster  | 
||
container  | 
string  | 
Data bucket/container name  | 
ipspace  | 
IPspace to use in order to reach the cloud target.  | 
|
name  | 
string  | 
Cloud target name  | 
owner  | 
string  | 
Owner of the target. Allowed values are FabricPool or SnapMirror. A target can be used by only one feature.  | 
port  | 
integer  | 
Port number of the object store that ONTAP uses when establishing a connection. Required in POST. 
  | 
provider_type  | 
string  | 
Type of cloud provider. Allowed values depend on owner type. For FabricPool, AliCloud, AWS_S3, Azure_Cloud, GoggleCloud, IBM_COS, SGWS, and ONTAP_S3 are allowed. For SnapMirror, the valid values are AWS_S3 or SGWS. 
  | 
secret_password  | 
string  | 
Secret access key for AWS_S3 and other S3 compatible provider types.  | 
server  | 
string  | 
Fully qualified domain name of the object store server. Required on POST.  For Amazon S3, server name must be an AWS regional endpoint in the format s3.amazonaws.com or s3-  | 
server_side_encryption  | 
string  | 
Encryption of data at rest by the object store server for AWS_S3 and other S3 compatible provider types. This is an advanced property. In most cases it is best not to change default value of "sse_s3" for object store servers which support SSE-S3 encryption. The encryption is in addition to any encryption done by ONTAP at a volume or at an aggregate level. Note that changing this option does not change encryption of data which already exist in the object store. 
  | 
snapmirror_use  | 
string  | 
Use of the cloud target by SnapMirror.  | 
ssl_enabled  | 
boolean  | 
SSL/HTTPS enabled or not  | 
svm  | 
This field is only applicable when used for SnapMirror. For POST and PATCH, SVM information is required for SnapMirror targets and not allowed for FabricPool targets.  | 
|
url_style  | 
string  | 
URL style used to access S3 bucket.  | 
use_http_proxy  | 
boolean  | 
Use HTTP proxy when connecting to the object store.  | 
used  | 
integer  | 
The amount of cloud space used by all the aggregates attached to the target, in bytes. This field is only populated for FabricPool targets. The value is recalculated once every 5 minutes.  | 
uuid  | 
string  | 
Cloud target UUID  | 
job_link
| Name | Type | Description | 
|---|---|---|
uuid  | 
string  | 
The UUID of the asynchronous job that is triggered by a POST, PATCH, or DELETE operation.  | 
error_arguments
| Name | Type | Description | 
|---|---|---|
code  | 
string  | 
Argument code  | 
message  | 
string  | 
Message argument  | 
error
| Name | Type | Description | 
|---|---|---|
arguments  | 
array[error_arguments]  | 
Message arguments  | 
code  | 
string  | 
Error code  | 
message  | 
string  | 
Error message  | 
target  | 
string  | 
The target parameter that caused the error.  |