Connect Amazon S3
To connect Amazon S3, Kelp needs an access key for an IAM user. Give that user access to only the buckets it needs.
Create an access key
- Sign in to the AWS console and open IAM → Users. Choose Create user and give it a name such as
kelp. - Attach a policy.
AmazonS3ReadOnlyAccessis enough to browse and download. To upload and delete, use a policy that also allowss3:PutObjectands3:DeleteObjecton your buckets. - Open the new user, go to Security credentials and choose Create access key. Pick Application running outside AWS as the use case.
- Copy the access key ID and the secret access key. AWS shows the secret only once.
Connection settings
| Setting | What to enter |
|---|---|
| Region | The region your buckets are in, for example eu-west-2. The S3 console shows it next to each bucket. |
| Endpoint | Leave empty. Kelp uses the standard AWS endpoint for the region. |
| Path-style addressing | Off. |
Add it to Kelp
- In Kelp, choose Add connection and pick Amazon S3.
- Enter a name you'll recognise, then paste your access key ID and secret access key.
- Fill in the connection settings from the table above.
- Choose Test connection. When it succeeds, choose Save.
Kelp saves your secret access key in the macOS Keychain. It's never written to a settings file or a log.