Amazon S3 Setup: Connect & Transfer Files
3 min read
Amazon Simple Storage Service (S3) is Amazon's object storage service and one of the most widely used. In Blober, S3 paths use this format:
bucket-name/path/to/file.ext
- ✅ Browse buckets and objects
- ✅ Upload files (including large files)
- ✅ Download files
- ✅ Delete objects
- ✅ Copy/move within S3 and across providers
- ✅ Storage class selection
- An AWS account (create one)
- An S3 bucket (or permission to list buckets)
- IAM user or role with S3 permissions
- Access key ID and secret access key
- Example:
AKIAIOSFODNN7EXAMPLE
- Example:
wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
- Default:
STANDARD
| Storage class | Use case | Retrieval |
|---|---|---|
STANDARD |
Frequently accessed data | Immediate |
INTELLIGENT_TIERING |
Unknown/changing access patterns | Immediate |
STANDARD_IA |
Infrequent access, rapid retrieval | Immediate |
ONEZONE_IA |
Infrequent, non-critical data | Immediate |
GLACIER_IR |
Archive with instant retrieval | Immediate |
GLACIER |
Long-term archive | Minutes to hours |
DEEP_ARCHIVE |
Lowest cost archive | 12-48 hours |
- Go to S3 Console
- Click "Create bucket"
- Enter a bucket name (must be globally unique)
- Choose your preferred AWS Region
- Configure settings as needed
- Click "Create bucket"
- Go to IAM Console
- Click Users => Create user
- Enter a username (e.g.,
blober-s3-user) - Click Next
- Select Attach policies directly
- For a quick setup, attach
AmazonS3FullAccess. For production, create a custom policy with the minimum permissions instead (see Security) - Click through to Create user
- Click on your new user
- Go to Security credentials tab
- Under Access keys, click Create access key
- Select Application running outside AWS
- Save the Access Key ID and Secret Access Key. AWS shows them only once
- In Blober, go to Workflows => New Workflow
- Select Amazon S3 as source or destination
- Enter your Access Key ID and Secret Access Key
- Test by browsing your buckets
- Double-check your Access Key ID and Secret Access Key
- Verify the IAM user has the correct S3 permissions
- Ensure the bucket policy doesn't block your IAM user
- Your IAM user needs
s3:ListAllMyBucketspermission - If using a restricted policy, add
ListBucketfor specific buckets
- Choose an S3 region geographically close to you
- Large files are automatically uploaded in parts for reliability
- Check your network speed. Transfers run over your own connection, so S3 can only go as fast as it does
- Create a dedicated IAM user for Blober instead of using root credentials
- Give it the minimum permissions it needs (don't use
AmazonS3FullAccessin production) - Rotate access keys periodically
- Enable MFA on your AWS account
- Use Intelligent Tiering for data with unpredictable access patterns
- Move old backups to Glacier or Deep Archive, which cost much less to store
- Enable S3 Lifecycle rules to automate tier transitions
- Monitor costs in the AWS Billing Console
- AWS IAM Access Keys
- S3 Storage Classes
- IAM Best Practices
- S3 Security Best Practices
- AWS S3 Pricing
- S3-Compatible storage in Blober, for non-AWS services that speak the S3 API