Aws cloud

S3 bucket

1. should have public access for getting files from 'brnup' bucket with 'pictures/theme', 'pictures/unverified' subbuckets.
2. should have role with delete/add files permission, convert file creds into base64 string and put it into S3_KEY secret

Bucket brnup policy

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AddPerm", "Effect": "Allow", "Principal": "", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::brnup/" }, { "Sid": "DeleteObjForDeveloper", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::449895215005:user/developer" }, "Action": [ "s3:PutObject", "s3:DeleteObject" ], "Resource": "arn:aws:s3:::brnup/*" } ] }

current CORS

ACL