Skip to main content

Amazon S3 Readiness

Amazon S3 Audit Export Readiness​

Last verified: 2026-06-01

Intended Setup​

Create a dedicated bucket and a dedicated IAM identity for Awthy audit exports. Grant only the minimum object-write permissions for the export prefix you choose.

Use HTTPS for production endpoints. Local development can use the bundled SeaweedFS service on localhost.

Configuration Fields​

These are the intended configuration fields for the preview feature. Self-serve cloud setup is not ready yet.

  • Bucket: required.
  • Region: defaults to us-east-1 when omitted.
  • Prefix: optional path prefix for audit objects.
  • Endpoint: optional S3-compatible endpoint. Production endpoints must use HTTPS; local localhost and 127.0.0.1 HTTP endpoints are for development only.
  • Access key ID and secret access key: encrypted at rest and never returned through the admin REST API.
  • Session token: optional for temporary credentials.

Development Smoke​

The local stack includes SeaweedFS S3-compatible storage in infra/compose-files/seaweedfs.yml. It creates a development bucket and lets the export client run against http://localhost:8333 without touching a real cloud account.

Last updated on