# Kaltura S3 and CloudFront Integration Guide
**THIS DOCUMENT IS A WORK IN PROGRESS. Contributions are most welcome.**
## Configuring an S3 Bucket
**NOTE: Before creating a bucket, you need to create an IAM user and generate an access key and secret.
To do so, go to the [IAM management console](https://console.aws.amazon.com/iam/home#/home).**
Go to the [S3 management console](https://s3.console.aws.amazon.com/s3/home) and create the bucket.
S3 offers automatic content encryption and other services that this guide does not cover.
When creating the bucket, you may want to enable the "Object-level logging" and "Server access logging" options for auditing purposes but in order for the Kaltura integration to work, none of the options under the "Set Properties" configuration view are needed.
Under "Set Permissions", the default values can be left as they are.
After creating the bucket, you will need to add an access policy. Go to the ```bucket configuration->Permissions->Bucket Policy```.
Amazon has a [Policy Generator](http://awspolicygen.s3.amazonaws.com/policygen.html) you can use to generate the policy JSON.
The actions you should allow are:
```
s3:GetObject
s3:ListBucket
s3:PutObject
This file has been truncated. show original