# How to access S3 like it's your local files

At the end of this **quick** guide you'll be able to access S3's unlimited storage locally form your PC.

After setting this up once, you don't need to even open a browser!

## 1\. The tools

We'll use the following tools:

* S3
    
* IAM for permissions
    
* Cyberduck (or any other file explorer client with S3 support)
    

That's all!

## 2\. S3 setup

Go to S3 here, and create a bucket `Amazon S3 => Buckets => Create bucket`

Give it a name, and leave everything else default (for now).

<div data-node-type="callout">
<div data-node-type="callout-emoji">💡</div>
<div data-node-type="callout-text">S3 bucket names are globally unique.</div>
</div>

## 3\. IAM setup

As Cyberduck (and many 3rd party tools) only accepts access key and secret key, we'd need to generate one with appropriate permissions.

If you're doing this as an admin, you don't want to have all permissions associated with your account provided to Cyberduck.

In security, it's called Principle of least privilege, which is:

> ... a security concept that ensures users or entities **only** have access to the necessary data, resources, and applications for completing a task, and no more.

Let's create a new user for this purpose at `IAM => Users => Create user` . Give it a name.

Then create a new policy at `IAM => Policies => Create policy`

And add a JSON for the policy with your own bucket name:

```json
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket"
            ],
            "Resource": "arn:aws:s3:::cyberduck-bucket"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:DeleteObject",
                "s3:AbortMultipartUpload",
                "s3:ListMultipartUploadParts",
                "s3:InitiateMultipartUpload",
                "s3:UploadPart",
                "s3:CompleteMultipartUpload"
            ],
            "Resource": "arn:aws:s3:::cyberduck-bucket/*"
        }
    ]
}
```

Save this policy under a name, then go back to your user and attach the policy to it.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1708005578307/1b88f593-9b1e-4d47-b1b3-bd32761c9193.png align="center")

Once done, create an access key for the user `IAM Users => cyberduck-user => Create access key`

Once you generated one, you can go to the next section and enter it in Cyberduck.

## 4\. File explorer

Download [Cyberduck](https://cyberduck.io/download/) (or your tool of choice) and install it.

Create a new "bookmark" and fill in these details.

Add the Access Key ID of the user we created in the previous section.

Make sure you add the bucket name to the "path" variable. As you see this is also appended to the URL above. If you're using a different client, it may ask for the full URL instead.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1708004574804/58839f62-f678-4c60-949a-8e0df66c5f22.png align="center")

Once done, you can drag and drop files across S3 without resorting to S3's own console or using the terminal.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1708005839466/fb488888-b5b4-4682-bc08-8f48d07a8f96.png align="center")

That's it!

Hope this quick tutorial helped you being more comfortable using S3.