> ## Documentation Index
> Fetch the complete documentation index at: https://docs.airys.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# S3 Bucket

> Configure Amazon S3 bucket as storage in AirysChat

## Using Amazon S3

You can get started with [Creating an S3 bucket](https://docs.aws.amazon.com/AmazonS3/latest/gsg/CreatingABucket.html) and [Create an IAM user](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html) to configure the following details.

Configure the following env variables.

```bash theme={null}
ACTIVE_STORAGE_SERVICE='amazon'
S3_BUCKET_NAME=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=
```

## S3 Bucket policy

Inorder to use S3 bucket in AirysChat, a policy has to be set with the correct credentials. A sample policy is given below, as the listed actions are required for the storage to work.

```json theme={null}
{
    "Version": "2012-10-17",
    "Id": "Policyxxx",
    "Statement": [
        {
            "Sid": "Stmtxxx",
            "Effect": "Allow",
            "Principal": {
                "AWS": "your-user-arn"
            },
            "Action": [
                "s3:DeleteObject",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:PutObject"
            ],
            "Resource": [
                "arn:aws:s3:::your-bucket-name",
                "arn:aws:s3:::your-bucket-name/*"
            ]
        }
    ]
}
```

Replace your *bucket name* in the appropriate places.

**User ARN** can be found using the following steps:

1. Login to AWS Console. Go to IAM, and click on Users from the left sidebar. You will be to see the list of users as follows.

<img src="https://mintcdn.com/airys/8PgT_S4ekmZVDkFb/self-hosted/images/s3-users-list.png?fit=max&auto=format&n=8PgT_S4ekmZVDkFb&q=85&s=5dde3feda552d2289edb3cec9f2c2c65" alt="s3-users-list" width="3064" height="1938" data-path="self-hosted/images/s3-users-list.png" />

2. Click on the user, you will be to see a screen as shown below. Copy the User ARN and paste it in the above policy.

<img src="https://mintcdn.com/airys/8PgT_S4ekmZVDkFb/self-hosted/images/user-arn.png?fit=max&auto=format&n=8PgT_S4ekmZVDkFb&q=85&s=5a852f71f7cb8f62b14f121fdd5e1696" alt="user-arn" width="3064" height="1938" data-path="self-hosted/images/user-arn.png" />

**Add CORS Configuration on your S3 buckets**

You need to configure CORS settings to the respective storage cloud to support Direct file uploads from the widget and the AirysChat dashboard.

Refer to this link for more information: [https://edgeguides.rubyonrails.org/active\_storage\_overview.html#cross-origin-resource-sharing-cors-configuration](https://edgeguides.rubyonrails.org/active_storage_overview.html#cross-origin-resource-sharing-cors-configuration)

To make CORS configuration changes on S3:

1. Go to your S3 bucket
2. Click on the permissions tab.
3. Scroll to Cross-origin resource sharing (CORS) and click on `Edit` and add the respective changes shown below.

<img src="https://mintcdn.com/airys/1FWn-RJM-8Ky_sbQ/self-hosted/images/aws-cors-setup.png?fit=max&auto=format&n=1FWn-RJM-8Ky_sbQ&q=85&s=dfed87e060dc851e8032fa781c4e599f" alt="aws-cors-setup" width="2188" height="1416" data-path="self-hosted/images/aws-cors-setup.png" />

Add your AirysChat URL to the `AllowedOrigin` as shown below.

```json theme={null}
[
  {
    "AllowedHeaders": [
      "*"
    ],
    "AllowedMethods": [
      "PUT",
      "POST",
      "DELETE",
      "GET"
    ],
    "AllowedOrigins": [
      "<add-your-domain-here eg: https://app.airyschat.com>"
    ],
    "ExposeHeaders": [
      "Origin",
      "Content-Type",
      "Content-MD5",
      "Content-Disposition"
    ],
    "MaxAgeSeconds": 3600
  }
]
```