What are minimal permissions for Amazon S3 storage?
I was really disappointed in the current FluentCommunity documentation for S3 permissions https://fluentcommunity.co/docs/configuring-amazon-s3/. Suggesting "AmazonS3FullAccess" policy for a production server is very risky. Why even have that permission level in the docs? I would like to know the exact minimal policy permissions needed to use S3 with FluentCommunity. I spend time trying different policies that "seem" to give the needed permissions only to have generic errors show up when I try to connect using the integration. I bet a FluentCommunity dev has a good idea of what preset Amazon permission policy is needed. Do tell please. I really want to avoid storing objects on the Wordpress server. S3 is far better. This could be a great boon to all your users who want to use S3 yet wouldn't do so thus far because the "AmazonS3FullAccess" allows unfettered access. Help please! Kindly, Loren
Absolutely, Object storage bucket better than local server. But the FC team will release Bunny integration soon as possible. That will be better integration and cheaper than S3.
Moha Alabri Thanks for the reply. In the meantime, how about the name of the minimal S3 policy that will work. For example, would a IAM user with "AmazonS3ObjectLambdaExecutionRolePolicy" work? Please remember that many of us aren't AWS policy experts. I hope the community may answer rather than me having to hire a AWS expert to figure it out for me.
Loren Strand I didn’t use it from long time actually but I will attach a link for u may will find an answer
I switched from S3 to R2 by CloudFlare... imo it's faster... and for sure cheaper. As soon as bunny will appear I might do migration - depend. For now I dream about video support by bunny - just to play from there... and thinking about future - I'd love my users to be able to post mp4 files and they will be stored and transcoded directly via bunny
Tom Robak Yes, we are waiting for these too.
I followed the steps in the video. Error. Reported to support because I am unable to figure it out. I imagine that FC would support adequate docs for S3 because some of us still use that service.