# Configuring available secrets for a workspace

A database might need to connect to external domains. For example, a workflow might need access to an external domain in order to complete its tasks. Or you might want to write output to an S3 bucket.

You configure the available domains in your account settings. For more information, go to [Managing allowed domains for an account](/fabricate/fabricate-accounts-and-users/account-domains.md).

In your workspace, you configure the secrets to use to connect to those domains. If the same domain is connected to from multiple workspaces, then you must configure the secrets in each workspace.

You configure the secrets in the **Secrets** section of the [workspace settings page](/fabricate/workspaces/workspaces-manage.md#workspace-settings-display).

<figure><img src="/files/MQQoXITNwA2yYJuV4hof" alt=""><figcaption><p>Secrets section of the workspace settings page</p></figcaption></figure>

## **Adding a secret** <a href="#secret-add" id="secret-add"></a>

To add a secret to a workspace:

1. Click **Add Secret**.

<figure><img src="/files/TP6WFWNBMGCpAQP6f4K7" alt=""><figcaption><p>Add Secret panel to add a secret to the list</p></figcaption></figure>

2. In the **Name** field, provide the name of the secret.\
   \
   The name can only contain letters, numbers, and underscores.\
   \
   After you save the secret, you cannot change the name.
3. In the **Secret** field, provide the text of the secret.
4. Under **Allowed Domains**, provide the list of domains to use the secret to connect to.\
   \
   Place each domain on a separate line.\
   \
   The domains must be configured and verified in the account settings.
5. Click **Save**.

## **Editing a secret** <a href="#secret-edit" id="secret-edit"></a>

After you add a secret, you can change the secret and the domains that it can be used for.

You cannot change the secret name.

To edit a secret:

1. In the **Secrets** list, click the **Edit** option for the secret.
2. On the details panel, you can:
   * Change the text of the secret.
   * Change the domains. The domains must be configured and verified in the account settings.
3. Click **Save**.

## **Removing a secret** <a href="#secret-remove" id="secret-remove"></a>

To remove a secret, in the **Secrets** list, click the **Delete** option for the secret.

## About secrets to connect to Amazon S3

To connect to Amazon S3, you configure the following secrets:

* `AWS_ACCESS_KEY_ID`
* `AWS_SECRET_ACCESS_KEY`

For both secrets, you add the Amazon S3 domain that you configured for the account.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tonic.ai/fabricate/workspaces/workspace-secrets.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.