{"type":"doc","content":[{"type":"paragraph","content":[{"text":"When using AWS S3 Storage, uploads of all files in our application will go to the defined S3 Buckets. Depending on the type of file, they are served differently. Media files (public and private) are served directly by S3. either served directly by amazon s3 (by injecting the links directly into the webpage) or via the application server.","type":"text"}]},{"type":"paragraph","content":[{"text":"To enable the S3 storage add and set the following variables in the root ","type":"text"},{"text":"values.yaml","type":"text","marks":[{"type":"code"}]},{"text":":","type":"text"}]},{"type":"codeBlock","attrs":{"language":"yaml"},"content":[{"text":"fileStorageConfig:\n s3:\n enabled: true\n region:\n publicBucket:\n privateBucket:\n uploadsBucket:\n accessKey:\n secretKey:\n\ninitConfig\n copyStaticFilesToS3:\n enabled: true","type":"text"}]},{"type":"paragraph"},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Configuration variables:","type":"text"}]},{"type":"table","attrs":{"layout":"default","localId":"a6d57d1c-5f73-47a4-a4c1-e791b4c71d40"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Settings Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"Possible Values","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"region","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"An AWS Region, eg ","type":"text"},{"text":"eu-central-1","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"Specify the region of the S3 Bucket","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"publicBucket","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"A valid S3-Bucket name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"The name of the bucket that holds the public media files","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"privateBucket","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"A valid S3-Bucket name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"The name of the bucket that holds the private media files","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"uploadsBucket","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"A valid S3-Bucket name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"The name of the bucket that holds the uploads (eg - 3D files)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"accessKey","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"Any String","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"The access key of the IAM user that should access the private and public media buckets","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"secretKey","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[177.0]},"content":[{"type":"paragraph","content":[{"text":"Any String","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[406.0]},"content":[{"type":"paragraph","content":[{"text":"The secret key of the IAM user that should access the private and public media buckets","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":5},"content":[{"text":"Bucket Permissions","type":"text"}]},{"type":"paragraph","content":[{"text":"You will need to specify a bucket for each of the 3 different file types. We suggest you create one bucket for each. Each of the buckets would need to have the following ACL set:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Public Media: ","type":"text"},{"text":"ACL=public-read","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Private Media: ","type":"text"},{"text":"ACL=private","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"3D files: ","type":"text"},{"text":"ACL=private","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"paragraph","content":[{"text":"Furthermore, you will need to give an IAM user full access to all buckets and permission to list all available buckets. To do so, attach the following IAM policy to the entity that's accessing the buckets:","type":"text"}]},{"type":"codeBlock","content":[{"text":"{\n \"Version\": \"2012-10-17\",\n \"Statement\": [{\n \"Action\": \"s3:*\",\n \"Effect\": \"Allow\",\n \"Resource\": [\n \"arn:aws:s3:::<>\",\n \"arn:aws:s3:::<>/*\",\n \"arn:aws:s3:::<>\",\n \"arn:aws:s3:::<>/*\",\n \"arn:aws:s3:::<<3D-Files-Bucket>>\",\n \"arn:aws:s3:::<<3D-Files-Bucket>>/*\"\n ]\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListAllMyBuckets\",\n \"Resource\": \"arn:aws:s3:::*\"\n }\n ]\n}","type":"text"}]},{"type":"paragraph"}],"version":1}

Browser not supported