S3 Browser

Credentials are used only in your browser to sign requests directly to S3 (via the AWS SDK). They are never sent anywhere else. Because this is a client-side app, avoid using long-lived root/admin credentials — use a scoped IAM user or temporary session credentials instead. Your bucket must also have a CORS policy allowing requests from this page's origin.

Getting a "CORS" or network error? Enable CORS on your bucket

Since this app talks to S3 directly from your browser, the bucket must explicitly allow requests from this page's origin.

1. Go to your AWS S3 Console tab.
2. Click on your bucket (e.g. your-bucket-name).
3. Go to the Permissions tab.
4. Scroll down to Cross-origin resource sharing (CORS) and click Edit.
5. Paste the following JSON:

[
    {
        "AllowedHeaders": ["*"],
        "AllowedMethods": ["GET", "PUT", "POST", "DELETE", "HEAD"],
        "AllowedOrigins": ["*"],
        "ExposeHeaders": ["ETag"]
    }
]

6. Click Save changes.

"AllowedOrigins": ["*"] allows any site to make requests to your bucket. That's fine for quick local testing, but for anything beyond that, restrict it to the specific origin(s) that serve this app (e.g. "http://localhost:8934") instead of *.