S3 Offsite Backup Permissions

Hi,

What are the recommended/minimal AWS S3 privileges for Otto FMS’ Offsite Backups feature? I’d prefer to avoid granting full access privileges for the AWS Access Key, if at all possible. I was not able to find this information in the docs.

Thanks!

Hey Nick,

Welcome to the community! OttoFMS uses the following AWS permissions to do file transfers to AWS storage:

  • ListBucket
  • DeleteObject
  • GetObject
  • PutObject
  • PutObjectACL
  • CreateBucket

I would also recommend the ListAllMyBuckets permission, as that allows OttoFMS to give you a list of buckets to choose from when creating offsite schedules. Without this you will need to enter a full path when adding an offsite location and manually enter the bucket when creating a schedule.

I’ll add this list to the docs as well. Let me know if you have any issues with these!

-Kyle

1 Like