¶ Configuration of AWS
Fotovender makes extensive use of Amazon Web Service (AWS). The images your customers upload will be stored on AWS. Functions such as creating thumbnail images and cropping are performed by AWS servers.
With Fotovender, you have a choice about which bucket will be used to store the images your customers upload:
- Bucket owned by Print Science
- Bucket in your own AWS account
There is no extra charge to use the bucket owned by Print Science. However, certain customers prefer to use their own bucket, primarily for security reasons.
If you choose to use your own AWS account and your own bucket, then you will need to create an account in AWS and then configure this account with a bucket and certain special access policies so that your account will work smoothly with Fotovender.
The steps required to configure AWS S3 are:
- Create an account with AWS
- Create a new bucket
- Adjust the bucket's CORS permissions
- Create an IAM Policy
- Create a new IAM user and assign the Policy to the new user
- Generate a set of credentials for the user
- Configure wp2print with AWS data
¶ Creating AWS account
This page contains instruction on how to Create a new AWS account.
¶ Creating AWS S3 bucket
With AWS S3, you must create and configure a "bucket" that your files will be stored in:
The screenshot below shows the configuration for creating a new bucket. You must replace the name of the bucket, shown as "mybucket" below, with the name of the bucket you will use:
¶ Adjust Bucket Permissions
After the bucket has been created, edit the newly created bucket and navigate to the Permissions tab
- Copy the CORS policy text below:
[
{
"AllowedHeaders": [
"*"
],
"AllowedMethods": [
"GET",
"POST"
],
"AllowedOrigins": [
"*"
],
"ExposeHeaders": [],
"MaxAgeSeconds": 3000
}
]
- Click the tab Permissions, navigate down until you see the CORS section, click the button Edit, then paste the CORS policy text you copied in step 1.
After editing, the CORS policy for the bucket should be as shown below:
¶ Creating AWS Policy and IAM user
In order to provide access to your AWS bucket to your wp2print website, we must create a new AWS IAM user. Your wp2print website will be configured with the credentials of this new IAM user which will give your wp2print access to store files in your AWS bucket.
Here are the steps to follow:
-
Create new Policy
The policy we are creating grants permission to perform actions on the bucket specified. Below is the policy text:
You must replace the text "mybucketname" with the name you have assigned to your new bucket
{
"Version":"2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:ListAllMyBuckets",
"Resource": "arn:aws:s3:::*"
},
{
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::mybucketname",
"arn:aws:s3:::mybucketname/*"
]
}
]
}
- Create new IAM user
- Assign policy created in step 1 to new user account
- Edit user and create credentials
This video illustrates configuring creating the IAM policy and creating a new IAM user account:
¶ Configure wp2print with AWS data
After you have created your AWS bucket and your AWS IAM user, the final step is to configure wp2print with this new information.
In the wp2print admin site, navigate to wp2print>>settings then select the "File upload" tab at top. In the dropdown "File upload target", select "Amazon S3". Then configure the following information:
- S3 Access key
- S3 Secret key
- S3 Bucket name
- S3 Region
- S3 Path
- S3 File access
- Maximum file size
S3 Region:
The S3 Region is a code assigned by Amazon for each of their data centers. The Region codes are displayed in the table below:
| Location | AWS Region |
|---|---|
| US East (Ohio) | us-east-2 |
| US East (N. Virginia) | us-east-1 |
| US West (N. California) | us-west-1 |
| US West (Oregon) | us-west-2 |
| Canada (Central) | ca-central-1 |
| Asia Pacific (Mumbai) | ap-south-1 |
| Asia Pacific (Seoul) | ap-northeast-2 |
| Asia Pacific (Singapore) | ap-southeast-1 |
| Asia Pacific (Sydney) | ap-southeast-2 |
| Asia Pacific (Tokyo) | ap-northeast-1 |
| EU (Frankfurt) | eu-central-1 |
| EU (Ireland) | eu-west-1 |
| EU (London) | eu-west-2 |
| South America (Sao Paulo) | sa-east-1 |
S3 Path:
The "path" added to the URL used to store the files. The "path" will allow you to sort the files into folders by date.
The configuration settings for AWS are locted wp2print >> Settings >> File Uploads. This video illustrates configuring the wp2print settings with your AWS bucket name and credentials: