Management of access to object storage services using a directory service

A system comprising:

• processor circuitry;
• and
• instructions that when executed by the processor circuitry cause the system to:
• receive, by a storage operating system in a computing system, an access key identifier (ID) and access key associated with a user of an object storage service;
• determine, by a directory service, whether the user is a member of a group authorized to access a storage object in at least one of a network accessible storage volume or an object storage service bucket, based at least in part on the access key ID;
• in response to the user being a group member, attempt to authenticate the user by the storage operating system with the directory service based at least in part on the access key ID and the access key;
• and
• in response to the user being authenticated by the directory service, allow, by the storage operating system, access by the user to the storage object stored in at least one of the network accessible storage volume or the object storage service bucket.

A non-transitory, machine-readable medium storing instructions, which when executed by processing circuitry of a computing system, cause the computing system to:

• receive, by a storage operating system in the computing system, an access key identifier (ID) and access key associated with a user of an object storage service;
• determine, by a directory service, whether the user is a member of a group authorized to access a storage object in at least one of a network accessible storage volume or an object storage service bucket, based at least in part on the access key ID;
• in response to the user being a group member, attempt to authenticate the user by the storage operating system with the directory service based at least in part on the access key ID and the access key;
• and
• in response to the user being authenticated by the directory service, allow, by the storage operating system, access by the user to the storage object stored in at least one of the network accessible storage volume or the object storage service bucket.