How to set up Amazon S3 connections – Dropshare User Guide

Dropshare is compatible with Amazon S3 and S3 API-compliant connections.

Set up Amazon S3 for Dropshare

Setup with Terraform

The kind people of AWS created a repository for setting up Dropshare with Terraform. See this official aws-ia repository to set up Dropshare with S3 and CloudFront with Terraform.

Manual Setup

To manually set up S3 for Dropshare, please follow these steps:

Create a new S3 bucket in a region of your choice
Create a restricted IAM user for Dropshare
- Navigate to the IAM Users page on the AWS console. Create a new user there, and copy & paste the Access / Secret keys to your Dropshare connection.
  
  When being asked, you can select "CLI" for the Access Key type. Once the user is created, create a User Policy with the following JSON:
```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "s3:*",
            "Effect": "Allow",
            "Resource": [
             "arn:aws:s3:::BUCKETNAME",
             "arn:aws:s3:::BUCKETNAME/*"
            ]
        }
    ]
}
```
  Replace BUCKETNAME with the name of the bucket you created earlier.

Allow Public Access to a bucket with ACL disabled

To configure public read access for the bucket, in order to have downloadable files via the public S3 url, you need to set up the following bucket settings:

First, allow Public Access under the Permissions settings, section "Block public access".

Then, configure the following Bucket policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "PublicReadGetObject",
      "Effect": "Allow",
      "Principal": "*",
      "Action": [
        "s3:GetObject"
      ],
      "Resource": [
        "arn:aws:s3:::BUCKETNAME/*"
      ]
    }
  ]
}

Use a Public Access disabled bucket (e.g. for using CloudFront)

In order to allow Dropshare to upload to a bucket that has Public Access disabled altogether, e.g. when using CloudFront to serve the files from your bucket, please check the Omit ACL Header option in the connection preferences.

Set up the S3 connection in Dropshare

To create an Amazon S3 connection in Dropshare for Mac, first enter the preferences. Switch to the Connection tab. Select Amazon S3 for your connection, and enter all required information:

Bucket Name	Enter the name of the bucket you created in the Amazon S3 Console. You can optionally also enter a subfolder in that given bucket, e.g. bucketname/foldername The bucket needs to be public so files can be downloaded by URL, or you need to use CloudFront. See above for setup instructions.
Access Key ID	Enter the AWS Access Key ID you obtained for the IAM user
Secret Key	Enter the AWS Access Secret Key you obtained for the IAM user
Region	Select the bucket's region.
Domain Alias	Optional: Enter your bucket's domain alias. This requires a CNAME record to be set. (Learn more)
Storage Class	Choose between Standard, Reduced Redundancy or Intelligent Tiering.
Misc	Choose whether to use SSL Choose whether to use Path-Style URLs s3.amazonaws.com/bucketname/file.jpg instead of bucketname.s3.amazonaws.com/file.jpg Choose whether to omit the ACL header (does not set files to public by default) Choose whether you wish to use pre-signed URLs for your download links (using this allows Public Access disabled buckets)

Press Test Connection to make sure Dropshare is able to connect to Amazon S3 and successfully upload files.

Last updated: December 24, 2024 14:41