Connect Amazon S3

To connect Amazon S3, Kelp needs an access key for an IAM user. Give that user access to only the buckets it needs.

Create an access key

  1. Sign in to the AWS console and open IAM → Users. Choose Create user and give it a name such as kelp.
  2. Attach a policy. AmazonS3ReadOnlyAccess is enough to browse and download. To upload and delete, use a policy that also allows s3:PutObject and s3:DeleteObject on your buckets.
  3. Open the new user, go to Security credentials and choose Create access key. Pick Application running outside AWS as the use case.
  4. Copy the access key ID and the secret access key. AWS shows the secret only once.

Connection settings

SettingWhat to enter
RegionThe region your buckets are in, for example eu-west-2. The S3 console shows it next to each bucket.
EndpointLeave empty. Kelp uses the standard AWS endpoint for the region.
Path-style addressingOff.

Add it to Kelp

  1. In Kelp, choose Add connection and pick Amazon S3.
  2. Enter a name you'll recognise, then paste your access key ID and secret access key.
  3. Fill in the connection settings from the table above.
  4. Choose Test connection. When it succeeds, choose Save.

Kelp saves your secret access key in the macOS Keychain. It's never written to a settings file or a log.