Transloadit

What are Template Credentials?

Template Credentials are access credentials for storage providers, such as Amazon S3 or Google Cloud Storage, stored securely in a Transloadit Workspace. Multiple Templates can reference the same credential record.

How Template Credentials work

Template Credentials are reusable Workspace-side secret records that Templates can reference when a Robot needs to read from or write to an external storage service. The workflow stores an indirection to the credential instead of embedding provider keys in Assembly Instructions or browser code. Access still depends on the external provider’s permissions, expiration rules, and resource policies. They connect Transloadit’s execution environment to storage operations and therefore require dependency tracking, least-privilege scoping, and planned rotation.

Key facts

  1. One credential record may be shared by several Templates, which simplifies rotation but turns its deletion, expiration, or permission loss into a multi-workflow failure domain.
  2. A successful credential lookup does not guarantee an operation will succeed: bucket policy, object path, region, provider-side role, and allowed actions can independently deny access.
  3. Keeping provider secrets behind a Template reference prevents their disclosure in submitted Instructions, logs, or client bundles, but Collaborators with Workspace access still need appropriately limited privileges.

When Template Credentials matter

Reuse Template Credentials when several workflows need the same storage access, reducing duplicated secret configuration. Rotate or replace them carefully because one change may disrupt every dependent Template.

Turn media knowledge into a working pipeline

Connect uploads, processing, AI, storage, and delivery through one declarative API — with the encoding stack, scaling, and format churn handled for you.

Try Transloadit for free