<<< Publish WeeWX to S3 >>>

Create an IAM Account to Access S3

Now that you have an S3 bucket, you need a way to populate it, to do that we need to create an IAM account

So type IAM into the search bar and select IAM Manage access to AWS resources

Create Policy

Before we can create an account we have to create a Policy that we can attach to the new account, this policy will restrict access to the S3 bucket that we have just created

Click on Policies, in the left hand frame, and then click Create Policy

Then click on the JSON Tab, this gives us more control over what we are creating

Enter the following string, and then press Review policy

Note: Replace 'mikes-weewx' with the name of the bucket you created earlier

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "WeeWxUpload",
            "Effect": "Allow",
            "Action": [
                "s3:DeleteObject",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource": [
                "arn:aws:s3:::mikes-weewx",
                "arn:aws:s3:::mikes-weewx/*"
            ]
        }
    ]
}

Give you policy a name and then click Create policy

Note: This policy is going to allow us to manage objects in the S3 bucket we have just created and nothing else

Create User

Now that you have created a policy you can create a new user, so from the left hand pane click on Users and then click Add User

Give your new user a name and make sure you also select Programmatic access, then click Next:Permissions

On this screen select Attach existing policies directly, at the top, filter the policies to find the one you just created, select it and then click Next:Tags

You can skip this screen, so click Next:Review and you should have something that looks like this

As long as you do click Create User

Record User Data

I CAN NOT STRESS ENOUGH HOW IMPORTANT THIS NEXT STEP IS

Record the Access key ID

Then click on Show under the Secret access key and record the string that is revealled

You should have something like this

Access key ID: AKIAIOSFODNN7EXAMPLE
AWS Secret Access Key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

Once you have recorded that you can press Close

Note: If you do not record this information there is no way to retrieve it, you will have to delete the key and regenerate it

Congratulations, you should now have an IAM user that can be used to populate your Website

Mike Revitt - Cloud Computing Specialist

<<< Publish WeeWX to S3 >>>

Create an IAM Account to Access S3

Create Policy

Create User

Record User Data