WCPA – Cloud ( AWS s3) file upload

This document help you to configure Amazon S3 and link it with the product addon file upload settings. For this, you need to follow 4 steps.

1. Logging in to the AWS Console
2. Creating an IAM User
3. Create an Amazon S3 Bucket
4. Configure Plugin

Logging in to the AWS Console

To create an IAM User you will need to first log in to your pre-existing AWS account from here.
If you do not have an AWS account you can simply register a new one from here

Creating an IAM User

After logging in to your AWS account you will need to set up a new IAM user.

Below are the steps

• Log in to the AWS Management Console: Navigate to the AWS Console at console.aws.amazon.com.
• Open the IAM Dashboard: From the Services menu, choose IAM under “Security, Identity & Compliance.”

• Add a New User: In the left-hand navigation panel, select Users, then click on the Add user button.

• Configure User Details: Enter a new User name and click next
• Set Permissions: Select Attach policies from the permissions options. Set Permission policies >> search for AmazonS3FullAccess policy name and select it>> click next

• Add Tags (Optional):

• Review and Create: Verify all the information and click Create user.

• Create/Retrieve access key: Now click on the newly created user >> under users (left navigation,created users will be listed). Click on the create access key on the user settings page. Set description tag,if required (optional)>>click on create access key

Here you can download the credentials file or note the Access Key ID and Secret Access Key. These will not be displayed again.

Create an Amazon S3 Bucket

You need to set up an Amazon S3 Bucket to store the media.

For this, you will need to maneuver your way to the Amazon S3 page in the AWS console and click the Create Bucket button.

You can enter your bucket name in the field Bucket Name, And can choose the object ownership type,

You can choose ACLs disabled when all objects in this bucket are owned by this account. Access to this bucket and its objects is specified using only policies.

Otherwise, you can choose ACLs enabled when Objects in this bucket can be owned by other AWS accounts. Access to this bucket and its objects can be specified using ACLs.

In the next step, you can set the public access settings,

Uncheck all the checkboxes and enable public access to the bucket.

Rest of the settings you can keep the default settings, And click on to Create Bucket Button.

Then, Your bucket will be created in the specified region.

If you got any permission issues you can mention the bucket policies by adding a policy in JSON format.

You can use the below policy for the same.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": {
				"AWS": "arn:aws:iam::6580xxxx007:user/demo" // replace this AIM usr arn
			},
			"Action": [
				"s3:ListBucket",
				"s3:DeleteObjectVersionTagging",
				"s3:GetObjectAcl",
				"s3:GetObject",
				"s3:AbortMultipartUpload",
				"s3:DeleteObject"
			],
			"Resource": [
				"arn:aws:s3:::<BUCKET_NAME>/*",
				"arn:aws:s3:::<BUCKET_NAME>"
			]
		},
		{
			"Effect": "Allow",
			"Principal": "*",
			"Action": [
				"s3:PutObject",
				"s3:GetObject"
			],
			"Resource": [
				"arn:aws:s3:::<BUCKET_NAME>/*",
				"arn:aws:s3:::<BUCKET_NAME>"
			]
		}
	]
}

Replace <BUCKET_NAME> with your bucket name.

Also, You need to modify the CORS policy.

Scroll down to bottom from permissions tab, and see the CORS policy section.

[
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "GET",
            "POST",
            "PUT"
        ],
        "AllowedOrigins": [
            "<SITE_URL>" // change it with your site url, eg https://acowebs.com , also you can use “*” if you wont need to restrict 
        ],
        "ExposeHeaders": [],
        "MaxAgeSeconds": 3000
    },
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "GET"
        ],
        "AllowedOrigins": [
            "*"
        ],
        "ExposeHeaders": [],
        "MaxAgeSeconds": 3000
    }
]

Replace <SITE_URL>with your site url, eg. https://acowebs.com , also you can use “*” if you wont need to restrict per any site.

Configure Plugin

Now you will have the access key, secret key, bucket name, region and directory inside your amazon s3 account. You can add these data inside the custom product addon file upload settings and configure s3 as below.

Here, Region will be available on your s3 account as below. You can add it here.