https://www.growthbook.io/ logo
#ask-questions
Title
# ask-questions
h

high-lighter-68682

12/14/2022, 10:25 AM
Hey Team GB, I am having trouble setting up S3 as upload storage. There is a 403 response when uploading screenshots via pre-signed URL in the frontend. CORS headers are in-place. Could you tell me which is the appropriate bucket settings in order to make this work? @mysterious-iron-16289
Did you try that?
h

high-lighter-68682

12/15/2022, 8:52 AM
That's a good hint, thanks!
f

fresh-football-47124

12/15/2022, 9:20 AM
let me know if that didn’t help
h

high-lighter-68682

12/15/2022, 9:39 AM
I will have to clarify, if we can make the bucket publicly available. That could be a security risk.
f

fresh-football-47124

12/15/2022, 9:45 AM
ah, yes - perhaps there is a better way to lock it down
you’ll need access to it from where ever you’re running GrowthBook
h

high-lighter-68682

12/15/2022, 10:13 AM
I need to investigate a bit more, but the task roles are having full access to S3 already
f

fresh-football-47124

12/15/2022, 10:17 AM
Happy to update the docs if you find a better way
h

high-lighter-68682

12/15/2022, 4:58 PM
do you have a reference for S3 permission setup? Somehow it keeps denying access although task role should be allowed to read/write to the bucket.
n

numerous-army-92497

12/20/2022, 1:20 PM
Hi @fresh-football-47124, nice to meet you - I’m Robert and assisting Jakob in configuring the S3 upload. We succeeded by making the bucket public but that triggered security alerts as publicly accessible buckets are forbidden by our security team. Their recommendation is to keep the bucket private and use pre-signed urls instead. Is this an option to configure?
f

fresh-football-47124

12/20/2022, 2:21 PM
@future-teacher-7046 do you know?
f

future-teacher-7046

12/20/2022, 3:12 PM
We don't support that right now. We use presigned URLs for uploading files, but not for downloading.
n

numerous-army-92497

12/20/2022, 3:21 PM
Gotcha - thanks for checking. Is this potentially planned for the future? Or some other mechanism (e.g. via CloudFront distribution)?
f

fresh-football-47124

12/20/2022, 5:01 PM
That is something we could add - would you mind opening a ticket/issue on github for it?
👍 1
n

numerous-army-92497

12/21/2022, 12:13 PM
Done: https://github.com/growthbook/growthbook/issues/857 - please let me know if you require more input
9 Views