This guide shows you how to give Browse AI permission to your S3 bucket without compromising your security. We'll do this using AWS CloudFormation templates, so no coding is required!

What you'll need

An Amazon Web Services (AWS) Account
You'll need to be logged in to your AWS account. Make sure you have permissions to create something called a "CloudFormation stack" and "IAM roles" – if you're the main user of your AWS account, you'll most likely have this.
Your S3 bucket name
Browse AI will need access to a single bucket where your exported datasets will be stored. You'll need the name of the bucket on your AWS S3.
Optional: A specific folder path (within the Bucket):
If you only want Browse AI to access a specific folder inside your bucket, you'll need that folder's name.
- For example, if your bucket is named my-data, and the folder is named browse-ai-exports, you'd use browse-ai-exports. Don't add a slash (/) at the end.

Quick setup summary

Go to the AWS Management Console and sign in.
Search for "CloudFormation" and open the service.
Click "Create stack", then select "With new resources (standard)", only if prompted.
Choose "Choose from existing template", select "Amazon S3 URL", and paste this link:
https://browse-ai-integration.s3.us-east-1.amazonaws.com/s3-integration.yaml
Enter required details:
- Stack name: Any name (e.g., BrowseAI-S3-Access).
- BucketName: Your exact S3 bucket name.
- ExternalId: Generate a random 20-character string using only letters and numbers.
- BucketPathName (optional): Enter a folder name or leave blank for full bucket access.
Review and submit:
- Acknowledge that AWS CloudFormation can create IAM resources if prompted.
- Review all details and click Submit to complete the setup.
Retrieve IAM Role ARN:
- After submission, you’ll be redirected to the Stacks page.
- Open the Resources tab.
- Click on the URL under Physical Link associated with S3AccessRole (opens in a new tab).
- Copy the ARN from the Summary section.
Integrate configuration into Browse AI:
- Open Browse AI, select your robot, and navigate to the Integrations tab.
- Choose AWS → "+ Add new S3 bucket" from drop-down menu.
- Paste the copied ARN and fill in the required details.
- Once completed, click on Add button.

For a detailed walkthrough, please check out the detailed step-by-step guide below. 👇

Detailed step-by-step guide

Log in to AWS
- Visit the AWS Management Console and log in to your account.
Once you're logged in, open CloudFormation
- In the AWS search bar at the top, type "CloudFormation" and select it, like so:
- CloudFormation helps automate the setup process for AWS resources.
Create a new stack
- Click the "Create stack" button.
  - Select "With new resources (standard)" if prompted.
Use the pre-built template
- Under "Prerequisite - Prepare template", choose "Choose an existing template":
- Under "Specify template", select "Amazon S3 URL.":
- In the Amazon S3 URL text box, paste this link:
  https://browse-ai-integration.s3.us-east-1.amazonaws.com/s3-integration.yaml
- Click "Next."
Enter required details
You'll now be asked to enter some configuration details:
- Stack name: Choose any name (e.g., BrowseAI-S3-Access).
- BucketName: Enter the exact name of your S3 bucket.
- BucketPathName (Optional):
  - If you want Browse AI to access only a specific folder inside your bucket, enter the folder name (e.g., browse-ai-exports).
  - If you want Browse AI to access the entire bucket, leave this blank.
- ExternalId: Generate a 20-character string consisting of uppercase letters, lowercase letters, and numbers.
  - You can use an online random string generator or a command-line tool to accomplish this.
Review and submit
- During the 'Configure Stack Options' step in CloudFormation, you need to:
  - Acknowledge that AWS CloudFormation can create IAM resources before proceeding:
- Once you've confirmed every information, feel free to click on the "Submit" button.
Retrieve IAM Role ARN
- After clicking Submit, you’ll be redirected to the Stacks/Stacks info page:
- Click on the "Resources" tab.
- Click on the URL under Physical Link table associated with S3AccessRole (opens in a new tab):
- Once you're in the IAM window, copy the ARN from the Summary section:
Integrate configuration into your Browse AI dashboard
- Navigating to Integrations:
  - On your Browse AI dashboard, choose your robot (and approve it if not yet done).
  - Go to the Integrations tab and select AWS.
  - Then choose + Add S3 Account from the "Choose S3 bucket" drop-down:
- Fill out integration details. Here's a sample:
  - AWS Region: Enter your S3 bucket’s region.
  - Role ARN: Paste the ARN you copied from S3AccessRole.
  - External ID: Enter the 20-character alphanumeric string you generated earlier.
  - Bucket Name: Enter the exact name of your S3 bucket (e.g., my-bucket).
  - Bucket Path: Match the configuration used in your CloudFormation stack.
- Once done, click on "Add" button. Afterwards, your S3 bucket should appear in the "Choose S3 bucket" drop-down. Here's an example: