How to Set-up Amazon S3 Photo Forwarding Location

Amazon S3 is an option available when configuring a Photo Forwarding location. It is more complicated to set-up than the other options available. Please find the steps below on how to set it up.

Setting up an AWS bucket

1. Open the AWS S3 console and click the "Create bucket" button.
2. Enter in a name for the bucket, and select the region files should be stored in.
3. Under the "Object Ownership" section, check the "ACLs enabled" option
4. Determine if private or public access is needed:
   • For private access:
     • Ensure "Block Public Access settings for this bucket" is selected
   • For public access:
     • Under the "Object Ownership" section, check the "Bucket owner preferred" option.
     • Under the "Block Public Access settings for this bucket", ensure all "block" options are unchecked.
5. Click the "Create bucket" button at the bottom of the page.

Create the IAM policy

1. Open the AWS IAM policy console and click the "Create policy" button.
2. Select the JSON tab.
3. Copy the following into the textbox.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl",
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::<bucket-name>/*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket"
            ],
            "Resource": "arn:aws:s3:::<bucket-name>"
        }
    ]
}

4. Replace both instances of <bucket-name> with the name of your target S3 bucket.
5. Click "Next: Tags", and then "Next: Review".
6. Enter a name for this role, and then click "Create policy".

Create AWS credentials

1. Open the AWS IAM user console and click the "Add users" button.
2. Enter a name for this user.
3. Ensure the "Access key - Programmatic access" option is checked, and the "Password - AWS Management Console access" option is unchecked.
4. Click the "Attach existing policies directly" button, and then select the policy created in the previous step.
5. Click "Next: Tags", and then "Next: Review".
6. Click the "Create user" button.
7. Click the "Show" button, and then note down the access key and secret access key.

Create the Photo Forwarding location

Now that Amazon S3 has been configured, you can set-up the Photo Forwarding location by following the How to Set-up Photo Forwarding guide.