Configure the Amazon S3 connector

In Amazon S3

Option 1 - Shared Credentials (simplest)

1. Log in to your AWS account

2. Go to IAM in the AWS console

3. In the left navigation bar, click Policies → Create policy

4. Select the JSON tab

5. In the policy editor, paste the following, replacing your-bucket-name with the name of your S3 bucket:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": "s3:ListBucket",
			"Resource": "arn:aws:s3:::your-bucket-name"
		},
		{
			"Effect": "Allow",
			"Action": [
				"s3:GetObject",
				"s3:PutObject"
			],
			"Resource": "arn:aws:s3:::your-bucket-name/*"
		}
	]
}

6. Click Create to save the policy

1. In IAM, click Create user

2. Give the user a name (e.g., captionhub-s3-user)

3. Choose Attach policies directly

4. Select the policy you just created

5. Click Next, then Create user

1. Click the name of the user you just created

2. Open the Security credentials tab

1. Scroll down and click Create access key

2. Select Third-party service



💡

If you’re concerned about the warning, consider using Option 2 - Trust policy instead

3. Confirm by selecting I understand the above recommendation and want to proceed to create an access key

4. Click Next

5. Skip the optional tags step

6. Copy the Access key ID. Then click Show to view and copy the Secret access key. You will need both of these later in CaptionHub.

7. Click Done

Option 2 - Trust policy (most secure)

1. Log in to your AWS account

2. Go to IAM in the AWS console

3. In the left navigation bar, click Policies → Create policy

4. Select the JSON tab

5. In the policy editor, paste the following, replacing your-bucket-name with the name of your S3 bucket:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": "s3:ListBucket",
			"Resource": "arn:aws:s3:::your-bucket-name"
		},
		{
			"Effect": "Allow",
			"Action": [
				"s3:GetObject",
				"s3:PutObject"
			],
			"Resource": "arn:aws:s3:::your-bucket-name/*"
		}
	]
}

6. Click Create to save the policy

Step 2

1. Navigate back to IAM

2. Click “Roles” in the left menu

3. Click “Create Role”

4. Choose “Custom Trust Policy”

5. Edit the text box for the policy and set it as follows, replacing CAPTIONHUB_ACCOUNT_ID with the value provided by our team and EXTERNAL_ID as a long, random string (we recommend a 36 character UUID)

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::CAPTIONHUB_ACCOUNT_ID:root"
            },
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                    "sts:ExternalId": "EXTERNAL_ID"
                }
            }
        }
    ]

1. Attach the permissions policy you created in step 1

2. Give the role a name, for example “captionhub-s3-access-role” and click “Save”

3. Now in the policy list, find the policy and open it

4. Copy the ARN and send it to the CaptionHub support team. It should look like:

arn:aws:iam::YOUR_ACCOUNT:role/captionhub-s3-access-role

1. Wait for confirmation that this has been set up at our end

In CaptionHub (both options)

1. From the team dropdown menu (top right), open the Connectors page

2. Find the Amazon S3 connector and click Edit

3. Enable the connector and enter:
• Access Key ID (if using option 1)
• Secret Access Key (if using option 1)
• Region
• Bucket Name
• Role ARN (if using option 2)
• External ID (if using option 2)

4. Click Save

1. On your Dashboard, choose New Project from… and select Amazon S3

2. Your Amazon S3 media will be displayed. Select the files you want to import into CaptionHub for subtitling.