# Configuring available secrets for a workspace

A Data Agent database might need to connect to external domains. For example, a workflow might need access to an external domain in order to complete its tasks. Or you might want to write output to an S3 bucket.

You configure the available domains in your account settings. For more information, go to [account-domains](https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/account-domains "mention").

In your workspace, you configure the secrets to use to connect to those domains. If the same domain is connected to from multiple workspaces, then you must configure the secrets in each workspace.

You configure the secrets in the **Secrets** section of the workspace settings page.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FihryoGT6MjgkK3qUPrrv%2FWorkspace_SecretsEmpty.png?alt=media&#x26;token=a228fd79-9585-4626-ba28-7e88c65256cf" alt=""><figcaption><p>Secrets section of the workspace settings page</p></figcaption></figure>

## **Adding a secret** <a href="#secret-add" id="secret-add"></a>

To add a secret to a workspace:

1. Click **Add Secret**.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FupdfxaKavmtVb1vdqR2A%2FWorkspace_AddSecret.png?alt=media&#x26;token=99340948-3b7c-4194-9758-5b5f6c9bd816" alt=""><figcaption><p>Add Secret panel to add a secret to the list</p></figcaption></figure>

2. In the **Name** field, provide the name of the secret.\
   \
   The name can only contain letters, numbers, and underscores.\
   \
   After you save the secret, you cannot change the name.
3. In the **Secret** field, provide the text of the secret.
4. Under **Allowed Domains**, provide the list of domains to use the secret to connect to.\
   \
   Place each domain on a separate line.\
   \
   The domains must be configured and verified in the account settings.
5. Click **Save**.

## **Editing a secret** <a href="#secret-edit" id="secret-edit"></a>

After you add a secret, you can change the secret and the domains that it can be used for.

You cannot change the secret name.

To edit a secret:

1. In the **Secrets** list, click the **Edit** option for the secret.
2. On the details panel, you can:
   * Change the text of the secret.
   * Change the domains. The domains must be configured and verified in the account settings.
3. Click **Save**.

## **Removing a secret** <a href="#secret-remove" id="secret-remove"></a>

To remove a secret, in the **Secrets** list, click the **Delete** option for the secret.

## About secrets to connect to Amazon S3

To connect to Amazon S3, you configure the following secrets:

* `AWS_ACCESS_KEY_ID`
* `AWS_SECRET_ACCESS_KEY`

For both secrets, you add the Amazon S3 domain that you configured for the account.