# AWS S3

Steps to connect your S3 storage to SimpleBackups

## How to connect your AWS S3 to SimpleBackups

### 1. Create your AWS S3 Bucket

Skip this step if you already have an AWS S3 bucket.

- **Sign in** to your [AWS Management Console](https://console.aws.amazon.com/)
- Go to your [AWS S3 bucket list](https://s3.console.aws.amazon.com/s3/) and create a new bucket

![AWS S3 screenshot 1](https://simplebackups.com/docs/docs-assets/www-notion-so/b5319fc674e0c0a46b50.png)

Keep default options for (2) Configure options, (3) Set Permission, review and create your bucket.

### Information You'll Need In Step 3

- Your **"Bucket" name**, in this case "myacme-backups"
- Your **"Bucket" Region**, in this case "US West - N. California"

![AWS S3 screenshot 2](https://simplebackups.com/docs/docs-assets/www-notion-so/1286973518ad71f2779c.png)

### 2. Create your AWS credentials

In order to give access to your newly created bucket, you'll need to provide credentials to SimpleBackups.

Creating an access key and a secret key for your _Amazon S3_ account requires some little work. SimpleBackups needs S3 keys that allow both, read and write permissions to be able to store and retrieve backups under your S3 account.

**Step 2.** Click **Users** from the left side bar then click **Add user**

![AWS S3 screenshot 3](https://simplebackups.com/docs/docs-assets/www-notion-so/488077d2babd548f8723.png)

**Step 3.** Type in a user name and choose **Programmatic access** as shown then proceed

![AWS S3 screenshot 4](https://simplebackups.com/docs/docs-assets/www-notion-so/ad587618cd2e4432e702.png)

**Step 4.** Click **Attach existing policies directly** then filter by **S3** as shown and choose **AmazonS3FullAccess** _(this is discouraged, and not recommended actually, so please check at the end of this article for the minimum permissions needed)._

![AWS S3 screenshot 5](https://simplebackups.com/docs/docs-assets/www-notion-so/ede9f11793344fc55d47.png)

**Step 5.** Confirm you can see the highlighted policy and click **Create user**

![AWS S3 screenshot 6](https://simplebackups.com/docs/docs-assets/www-notion-so/2c45c73f361e080d9213.png)

**Step 6.** Finally you will see the newly created **Access Key** and **Secret Key** that allow full read and write to S3. Please use these two values when adding your storage to SimpleBackups

![AWS S3 screenshot 7](https://simplebackups.com/docs/docs-assets/www-notion-so/7e692549df76e6970495.png)

### Information You'll Need In Step 3

- **Access Key**
- **Secret**

### 3. Connect your S3 bucket to SimpleBackups

- Log into SimpleBackups and head to the [connect your storage](https://my.simplebackups.com/storage/create) page
- In the storage provider list select **"Amazon S3 Storage"**, and fill in the form with your AWS credentials and newly created bucket information

![AWS S3 screenshot 8](https://simplebackups.com/docs/docs-assets/www-notion-so/5d1a407cf5bae3167ade.png)

You'll have to input :

- **Key**: Access Key described in (step 2)
- **Secret**: Secret described in (step 2)
- **Region**: Bucket Region described in (step 1)
- **Bucket**: Bucket name described in (step 1)
- Give your storage a **name** (the bucket name is usually a good pick, but you can be creative) and click on "Save new storage".

## Limit S3 Access / Scope via IAM policy

**Policy scope:**
S3 IAM Policy, S3 Permissions, Limit S3 Scope, Only grant limited access.

To create an S3 storage user for SimpleBackups, the following minimum permissions are required to be available on the backup bucket of your choice:

```json
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:DeleteObject",
                "s3:GetObject",
                "s3:PutObject",
                "s3:PutObjectAcl",
                "s3:AbortMultipartUpload",
                "s3:ListMultipartUploadParts",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": [
                "arn:aws:s3:::MY_BACKUPS_BUCKET/*",
                "arn:aws:s3:::MY_BACKUPS_BUCKET"
            ]
        }
    ]
}
```

The policy above can be used to only allow SimpleBackups to work on the backups bucket of your choice.

Don't forget to change `MY_BACKUPS_BUCKET` to the actual buckets you create for backups.

### Note #1

The following permissions are needed for cleaning up uncompleted uploads and save storage space.

- s3:AbortMultipartUpload
- s3:ListMultipartUploadParts
- s3:ListBucketMultipartUploads

### Note #2

You should also add `_s3:CopyObject_` permission to be able to use server-side copy if needed.