---
title: "Create an encrypted S3/S3-compatible destination"
method: POST
path: "/v1/export-destinations"
tags: ["ExportDestinations"]
---

# Create an encrypted S3/S3-compatible destination

`POST /v1/export-destinations`

## Request

- Base URL: `https://api.ironfang.com/audit`
- URL: `https://api.ironfang.com/audit/v1/export-destinations`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Stores an S3 or S3-compatible destination for the authenticated organisation. Access credentials are encrypted before storage and are not returned by destination listings.

## Request body

- object
  - `access_key` string, required
  - `bucket` string, required
  - `endpoint` string, uri
  - `export_mode` 'after_every_audit' | 'only_if_compliance_changes' | 'only_if_audit_fails' | 'manual_only'
  - `path_style` boolean
  - `prefix` string
  - `region` string, required
  - `secret_key` string, required
  - `session_token` string

## Response `201`

Destination created

## Other responses

- `400`: Problem response
- `401`: Problem response
- `403`: Problem response
- `422`: Problem response

---

[API](https://skmtc.dev/ironfang/apis/ironfang-audit-api.md) · [All operations](https://skmtc.dev/ironfang/apis/ironfang-audit-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ironfang/apis/ironfang-audit-api/revisions/7430deff2cbd?raw)