Start by visiting the Amazon Web Services's (AWS) IAM dashboard, [console.aws.amazon.com/iam/home](http://console.aws.amazon.com/iam/home).

Use the left-hand sidebar to navigate to the "Users" page.

You will be redirected to the "Create user" flow.

For Step #1, you’re going to want to give your user a descriptive name, appropriate for your use case. We’ll be calling our’s “imgix-example”.

Select the "Next" button to proceed onto Step #2.

Now you will be prompted to set the permissions for your IAM User. imgix only requires Read permissions to serve your media.

If your company requires an additional layer of security, you can create your own restricted permissions policy. At minimum, imgix requires the read-only permissions `ListBucket`, `GetBucketLocation` and `GetObject` to serve your assets. With a restricted policy, you can also define which specific S3 bucket(s) imgix can have access to.

Please visit our documentation, [docs.imgix.com/setup/creating-sources/amazon-s3#security](http://docs.imgix.com/setup/creating-sources/amazon-s3#security), for more information regarding this advanced flow.

In this tutorial, we’ll be keeping it simple and attaching a pre-existing, read-only Amazon policy template.

Select the “Attach Policies Directly” option.

Search "AmazonS3ReadOnlyAccess," no spaces.

The Amazon S3 Read Only Access policy template provides the best mix of ease, protection, and imgix feature future-proofing.

Check the "AmazonS3ReadOnlyAccess" policy.

Select the "Next" button to proceed onto Step #3.

Take a moment to review your imgix IAM User selections.

If everything looks correct, go ahead and create your user.

You will be redirected back to the Users page.

We’re halfway there! Now, we need to set up your Access Key and Secret Key credentials for this user.

Start by selecting the "View user" button in the notification banner to navigate to your imgix User’s page.

Select the “Security Credentials” tab.

Scroll until you see the section titled “Access keys," then select the "Create access key" button.

You will be redirected to the "Create access key" flow.

For Step #1 we're going to select the "Third-party service" option and check the "I understand..." checkbox. imgix requires long-term access keys to continue serving your assets without interruption.

This is an optional step; however, if you would like to create a description tag for your keys, input it here. 

Select the "Create access key" button to retrieve your keys.

Select "Download .csv file" to save a copy of your Access Key and Secret Access Key.

This is the only opportunity you will have to save your Secret Access Key. You can always revisit AWS to retrieve your Access Key again; however, your Secret Access Key can never be re-obtained. 

Before proceeding onto the next steps, take this moment to store your keys in a secure location for future use.

Once you have securely stored your credentials, input your Access and Secret Access Keys into the corresponding imgix Source Creation fields.

Navigate to [console.aws.amazon.com/s3/home](http://console.aws.amazon.com/s3/home).

Locate the bucket you want to link to imgix, and input its name into the corresponding imgix Source Creation field.

Congratulations! You should now have all the credentials needed to connect imgix to your Amazon S3 media assets. In the next step of our Source creation process, you’ll create a subdomain for your imgix Source.

Imgix

Amazon Web Services

In this tutorial we’ll show you how to connect imgix to your Amazon S3 bucket.

How to link to imgix to Amazon S3