setting-up-aws-credentials.md

Setting up AWS credentials

Before starting to use s3_website, you need to create AWS credentials.

Easy setup

• Go to AWS IAM console
• Create a new user that has full permissions to the S3 and CloudFront services
• Call s3_website cfg create and place the credentials of your new AWS user into the s3_website.yml file
• Read the main documentation for further info

Limiting the permissions of the credentials

AWS IAM offers multiple ways of limiting the permissions of a user. Below is one way of configuring the limitations and yet retaining the capability to use all s3_website features.

If you know the hostname of your public website (say my.website.com), perform the following steps:

• Create a user that has full permissions to the S3 bucket
• In addition, let the user have full permissions to CloudFront

Here is the IAM Policy Document of the above setup:

{
  "Statement": [
    {
      "Action": [
        "cloudfront:*"
      ],
      "Effect": "Allow",
      "Resource": [
        "*"
      ]
    },
    {
      "Action": [
        "s3:*"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::my.website.com",
        "arn:aws:s3:::my.website.com/*"
      ]
    }
  ]
}