---
title: "Get Project Storage Upload STS Credentials"
method: POST
path: "/openapi/v2.0/project/sts-token"
tags: ["Common/System Health & Access"]
---

# Get Project Storage Upload STS Credentials

`POST /openapi/v2.0/project/sts-token`

## Request

- Base URL: `` (relative, and it does not resolve against the document’s source URL)
- URL: `/openapi/v2.0/project/sts-token`
- Auth: none required

Get the project-scope object storage upload STS temporary credentials; clients can use them to upload files directly to object storage

## Headers

- `X-User-Token` string, required
- `X-Project-Uuid` string, required
- `X-Request-Id` string
- `X-Language` string

## Request body

- object
  - `specify_path` string: Specified Storage Path
  - `file_uuid` string: File UUID

## Response `200`

Success

- object
  - `code` integer: Business status code, 0 means success
  - `message` string: Business Message
  - `data` object: Project Storage Upload STS Credentials and Target Object Info
    - `endpoint` string: Object storage Endpoint, the service address used by the client to upload (e.g., https://oss-cn-hangzhou.aliyuncs.com)
    - `provider` 'ali' | 'aws' | 'minio': Object storage provider: ali=Aliyun OSS, aws=AWS S3, minio=self-hosted MinIO
    - `region` string: Object storage region identifier (e.g., oss-cn-hangzhou)
    - `bucket` string: Target Bucket Name
    - `object_key_prefix` string: Enforced object key prefix for this upload; the actual object_key must start with this prefix (typically formatted as {org_uuid}/{project_uuid}/{...})
    - `credentials` object: Temporary upload credentials (STS), issued by the object storage provider
      - `access_key_id` string: STS Temporary Access Credential ID
      - `access_key_secret` string: STS Temporary Access Credential Secret
      - `expire` integer: Credential validity period, in seconds (TTL relative to issuance time)
      - `security_token` string: STS security token; sent together with the request when calling Aliyun/AWS
      - `platform` integer: Credential platform identifier, internal enum corresponding to provider

## Other responses

- `400`: Invalid request parameters (incorrect format, missing required fields, etc.)
- `401`: Authentication failed (token invalid or expired)
- `403`: Insufficient permission (token does not have the corresponding permission in this project/organization)
- `500`: Server Internal Error

---

[API](https://skmtc.dev/dji/apis/flighthub-2-openapi-v2-0-public-cloud.md) - [All operations](https://skmtc.dev/dji/apis/flighthub-2-openapi-v2-0-public-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/dji/apis/flighthub-2-openapi-v2-0-public-cloud/revisions/aeef0010be34?raw)