Skip to content

Provisioning S3 Manually

Matt Holt edited this page Oct 15, 2016 · 2 revisions
  1. Create two IAM users. One user has AmazonS3FullAccess. The other user has AmazonS3ReadOnlyAccess (the credentials for this user will become public...)

  2. Create an S3 bucket (in region US Standard) with the following CORS configuration:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
    <CORSRule>
        <AllowedOrigin>*</AllowedOrigin>
        <AllowedMethod>GET</AllowedMethod>
        <AllowedMethod>HEAD</AllowedMethod>
        <MaxAgeSeconds>3000</MaxAgeSeconds>
        <ExposeHeader>ETag</ExposeHeader>
        <AllowedHeader>*</AllowedHeader>
    </CORSRule>
</CORSConfiguration>
  1. Give the bucket this policy (replace BUCKET_NAME):
{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "PublicReadGetObject",
			"Effect": "Allow",
			"Principal": "*",
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::BUCKET_NAME/*"
		}
	]
}

This bucket must be used exclusively for checks for this status page.

Clone this wiki locally