IAM User Setup

This is a quick guide to creating a set of AWS credentials that S3STAT can use to set up your account for logging and reporting.

Please don't give us your primary set of AWS credentials. Create an Identity and Access Management (IAM) user account for S3STAT using this IAM Policy containing everything we need to do our thing. Here's how:

1. Head over to the IAM User section of your AWS Management Console
2. Click "Add user"
3. Name him "S3stat". Check "Programmatic access", Click "Next: Permissions"
4. Expand "Attach existing policies directly", Click "Create Policy" (This will open a new tab)
5. Click the "JSON" tab, then copy & paste this big hunk of text into the "Policy Document" box: { "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1334764540928", "Action": [ "s3:GetBucketAcl", "s3:GetBucketLogging", "s3:GetBucketLocation", "s3:GetObject", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:PutBucketAcl", "s3:PutBucketLogging", "s3:PutObject", "s3:PutObjectAcl" ], "Effect": "Allow", "Resource": [ "arn:aws:s3:::*" ] }, { "Sid": "Stmt1334764631669", "Action": [ "cloudfront:GetDistribution", "cloudfront:GetDistributionConfig", "cloudfront:GetStreamingDistribution", "cloudfront:GetStreamingDistributionConfig", "cloudfront:ListDistributions", "cloudfront:ListStreamingDistributions", "cloudfront:UpdateDistribution", "cloudfront:UpdateStreamingDistribution" ], "Effect": "Allow", "Resource": [ "*" ] }, { "Sid": "AllowCreateRole", "Action": [ "iam:GetUser", "iam:GetRole", "iam:CreateRole", "iam:PutRolePolicy" ], "Effect": "Allow", "Resource": [ "*" ] }, { "Sid": "AllowCloudWatchBucketInfo", "Action": [ "cloudwatch:GetMetricStatistics" ], "Effect": "Allow", "Resource": [ "*" ] } ] }

   Click "ReviewPolicy".

6. Name your policy "S3stat", then click Create Policy.
7. Close the tab (which should now show a confirmation message).
8. 

   Switch to the original Add User tab, click the "Refresh" button on the page,

   find & check the "S3stat" policy at the top of the list

9. Click "Next:Review"
10. Click "Create user"
11. Find and click the little "Show" link in the "Secret access key" column. copy & paste the keys into the S3STAT Secure Setup tool
12. ... and you're done. Eleven easy steps, eh? (You can click that Continue button on the setup tool now)