Overview
By the end of this guide, you’ll have an Intuned project that saves downloaded files directly to AWS S3. You’ll:- Create an S3 bucket and configure AWS credentials for Intuned.
- Configure S3 credentials in your project.
- Use the Browser SDK to save files to S3.
Prerequisites
Before you begin, ensure you have the following:- An AWS account with S3 access.
- An Intuned account.
This guide assumes you have a basic understanding of Intuned Projects. If you’re new to Intuned, start with the getting started guide.
When to use S3 attachment storage
Browser automations often need to download files—invoices from portals, reports from dashboards, or documents from authenticated sites. Instead of returning file content directly from your API, you can save files to S3 for better control and longer term access.Guide
1. Create an S3 bucket and access credentials
Create an S3 bucket and IAM credentials that Intuned can use to write data:Create an S3 bucket
- Log in to the AWS Management Console
- Navigate to the S3 service
- Select Create bucket
- Enter a unique bucket name (e.g.,
my-intuned-data)
Configure bucket settings
When creating your bucket:
- Object Ownership: Set to “Access Control Lists (ACLs) disabled”
- Block Public Access: Keep all public access blocked (recommended for security)
- Bucket Versioning: Optional - enable if you want to keep historical versions of files
- Encryption: Optional - enable default encryption for data at rest
- Select Create bucket to finish
Intuned only needs write access to your bucket, so keeping public access blocked is safe and recommended.
Create an IAM user for Intuned
Create a dedicated IAM user with limited permissions for Intuned:
- Navigate to IAM in the AWS Console
- Select Users in the left sidebar, then Create user
- Enter a username (e.g.,
intuned-s3-writer) - Select Next, which takes you to the permissions page
- Select Attach existing policies directly
- Select Create policy (opens in new tab)
- Select the JSON tab and paste this policy:
- Replace
YOUR-BUCKET-NAMEwith your actual bucket name - Select Next, which takes you to the Review page
- Name the policy
IntunedS3WritePolicy - Select Create policy
Attach policy and generate access keys
Back in the user creation flow:
- Refresh the policies list
- Search for
IntunedS3WritePolicy - Select the checkbox next to the policy
- Select Next to go to the Review page
- Select Create user
- Go to the Security credentials tab
- Select Create access key
- Choose Application running outside AWS and select Next
- Select Create access key
- Copy the Access key ID - you’ll need this for Intuned
- Copy the Secret access key - you’ll need this for Intuned (only shown once)
- Download the CSV or save these credentials securely
Note your configuration details
You now have everything needed to configure S3 in Intuned. Save these details:
- Bucket name: Your S3 bucket name
- Region: Your AWS region (e.g.,
us-west-2) - Access key ID: From the IAM user
- Secret access key: From the IAM user
2. Configure the S3 bucket as your attachment store
This guide is coming soon. In the meantime, you can use the
saveFileToS3 helper from the Browser SDK to save files to S3.See the saveFileToS3 documentation for usage details.