Setting up S3 for filepicker.io

Question

although I am pretty sure that I did everything exactly like in the video given on filepicker.io site, testing my S3 settings comes up with an error, only.

Error in uploading: Custom S3 is not yet on. Maybe check that an ID, Key, and Bucket are all specified? Please check your settings and try again

I have double checked that the 'S3 Access Key ID' and 'S3 Secret Access Key' and 'S3 Bucket' are correct. I even created a new bucket and tried again, but to no avail. Here is the policy I generated for the filepicker user:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Sid": "Stmt1371459382000",
      "Resource": [
        "arn:aws:s3:::mybucket-real-name-omitted/*"
      ],
      "Effect": "Allow"
    }
  ]
}

It looks a bit different from what is posted on filepicker.io s3 help page but I do not know how eliminate these differences and if it matters.

If anybody has a hint about how to fix this I'd be grateful.

Thanks in advance Captain Fim

Answer 1

Your AWS security policy is definitely wrong - you need to allow the PutObjectACL action. Filepicker sets an ACL for each object it uploads. You also need to allow the DeleteObject action if you want to use filepicker to remove uploaded files.

You can edit your AWS security policy in the AWS Console. Got to Services -> IAM -> Users and select your filepicker user. Then select the Permissions tab, select the policy you are using and click Manage Policy. You can then manually edit the policy and apply the changes.

This is what my policy looks like:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:PutObject",
        "s3:PutObjectAcl"
      ],
      "Sid": "Stmt1370702252000",
      "Resource": [
        "arn:aws:s3:::<my bucket name here>/*"
      ],
      "Effect": "Allow"
    }
  ]
}

There's a Test S3 settings button on filepicke's S3 Settings page that might by useful as well.