Connect AWS S3
Amazon S3 is the storage service the S3 API is named after. This guide uses a dedicated IAM user with long-lived access keys, since that's what MyArboris's connection needs.
1. Create an AWS account and IAM user
Use an existing AWS account or create one, then in IAM create a new user for MyArboris with “programmatic access” (access key, no console password needed) — don't use your account's root credentials.
2. Create a bucket
In S3, create a new bucket — for example “<your-bucket-name>” — in the region of your choice. Leave “Block all public access” enabled; MyArboris reaches your files through signed requests and short-lived signed URLs, never a public bucket.
3. Attach a least-privilege policy
Attach an IAM policy to your new user that only allows s3:GetObject, s3:PutObject, s3:DeleteObject, and s3:ListBucket, scoped to just this bucket's ARN — not AdministratorAccess and not access to any other bucket.
4. Endpoint and region
Use the region-specific endpoint for the region you chose in step 2: https://s3.<region>.amazonaws.com (for example https://s3.eu-central-1.amazonaws.com). Region: the same region code (for example eu-central-1).
5. Access key ID and secret access key
In IAM, under your user's “Security credentials,” create an access key. Copy the Access key ID and Secret access key immediately — the secret is shown only once.
6. Path-style access
Leave “Use path-style access” unchecked. AWS S3 supports the default virtual-hosted addressing MyArboris uses.
7. Path prefix (optional)
If you're sharing this bucket with other tools, set a path prefix (for example “myarboris/”) so MyArboris's files stay in their own folder.
8. What to paste into MyArboris
Endpoint URL: the region-specific S3 endpoint from step 4. Region: the region code from step 4. Bucket name: the bucket from step 2. Access key ID / Secret access key: from step 5. Path prefix: optional, from step 7.
9. Test the connection
Click “Add storage” — MyArboris tests the connection automatically (a small write, read, and delete) and shows the result right away. You can re-run “Test connection” on the saved entry any time afterward.