What are the recommended/minimal AWS S3 privileges for Otto FMS’ Offsite Backups feature? I’d prefer to avoid granting full access privileges for the AWS Access Key, if at all possible. I was not able to find this information in the docs.
Welcome to the community! OttoFMS uses the following AWS permissions to do file transfers to AWS storage:
ListBucket
DeleteObject
GetObject
PutObject
PutObjectACL
CreateBucket
I would also recommend the ListAllMyBuckets permission, as that allows OttoFMS to give you a list of buckets to choose from when creating offsite schedules. Without this you will need to enter a full path when adding an offsite location and manually enter the bucket when creating a schedule.
I’ll add this list to the docs as well. Let me know if you have any issues with these!