​

TLDR

1. Create a bucket in AWS Console
2. Create a custom policy in AWS Console with the following permissions:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "s3:DeleteObject",
        "s3:GetObjectAcl",
        "s3:PutObjectAcl",
        "s3:PutObject"
      ],
      "Resource": [
        // rewrite your-bucket-name with your bucket name
        "arn:aws:s3:::your-bucket-name",
        "arn:aws:s3:::your-bucket-name/*"
      ]
    }
  ]
}

3. Create an IAM user in AWS Console & attach the policy from the previous step.
4. Go to User settings & create an Access Key in AWS Console.
5. Add the Access Key and Secret Key in Coolify when you create a new S3 source.
   You need to use the S3 HTTP endpoit without the bucket name, for example, https://s3.eu-central-1.amazonaws.com.

​

Detailed steps

​

Create a bucket

1

Create a bucket.

Go to AWS Console and create a new bucket.

2

Name your bucket.

​

Create a new policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "s3:DeleteObject",
        "s3:GetObjectAcl",
        "s3:PutObjectAcl",
        "s3:PutObject"
      ],
      "Resource": [
        "arn:aws:s3:::your-bucket-name",
        "arn:aws:s3:::your-bucket-name/*"
      ]
    }
  ]
}

​

Create a new IAM user

1

Create a new IAM User.

Go to AWS Console and create a new user.

2

Name your user.

3

Attach the policy created in the previous step.

4

Go to your user settings.

5

Create a new `Access Key`.

6

Set `Other` as use-case.

7

Copy the `Access Key` & `Secret Access Key`.

You will need it to configure this S3 storage in Coolify.

​

Configure S3 in Coolify

Well done!