Bring Your Own Storage

What It Is

By default, Shortcut stores your organization’s workbooks and workspace files in Shortcut-managed storage. With organization-owned storage, those files live in a Google Cloud Storage or Amazon S3 bucket that your organization owns instead.

You keep ownership of the bucket and everything attached to it: the access policy, lifecycle and retention rules, and your own encryption-key configuration where your cloud provider supports it.

How Access Works

You never hand Shortcut a long-lived secret. Shortcut does not ask for service-account keys or IAM access keys. Instead, you grant narrowly scoped access to a Shortcut identity, and Shortcut operates with short-lived credentials:

• Google Cloud Storage: you grant access on your bucket to a dedicated Shortcut identity created for your organization. Access is scoped to that bucket.
• Amazon S3: you create an IAM role in your account that trusts Shortcut’s identity, protected by a unique verification value Shortcut generates. Shortcut assumes that role for short-lived sessions.

Revocation stays in your hands, without involving Shortcut. On Google Cloud Storage, removing the bucket grant cuts off access. On Amazon S3, removing the bucket or KMS policy grant cuts off access immediately; changing the role’s trust policy stops new sessions, and any session already issued expires within five hours.

Getting Started

Organization-owned storage is available on enterprise plans and is set up together with Shortcut: your team creates the bucket and the access grant, and Shortcut provisions and verifies the connection for your organization.

Contact your Shortcut account team or support to plan an onboarding.