vbv/docs/file_uploads.md

File uploads

S3 Buckets

Files uploaded by users are stored in S3 Buckets. These buckets are not publicly accessible.

There are buckets for each environment:

• myvbv-dev.iterativ.ch
• myvbv-stage.iterativ.ch
• myvbv-prod.iterativ.ch

IAM Users

In order to access the buckets a user is required. These users are created in the IAM Console. The users needs the following permissions:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "s3:ListAllMyBuckets",
            "Resource": [
                "arn:aws:s3:::*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::<bucket-name>",
                "arn:aws:s3:::<bucket-name>/*"
            ]
        }
    ]
}