Let Offloft Pro set up your storage.
Offloft Pro can create your Cloudflare R2 or Amazon S3 bucket for you, with a key that works for that bucket only and the address visitors load your files from. You give it temporary access, it does the setup in about a minute, and that access is removed at the end.
What does it create?
- A bucket for this site's media.
- A key for that bucket only, saved to Offloft and tested.
- The address visitors load files from. On Cloudflare R2 that's your own domain, when you connect one.
What access does it need, and why is it temporary?
Making a bucket and a key takes more permission than running a site should ever hold. So Offloft asks for that permission once, uses it during setup only and never saves it. From then on your site uses only the key for its own bucket.
Cloudflare R2, step by step
- Open Cloudflare with the link in Offloft. It's pre-filled with the name and permissions.
- At the bottom of that page, press Review token, then Create token.
- Copy the token and paste it into Offloft.
- Choose a domain, if you want to connect one, and let Offloft run.
Use Offloft's link, not the "Manage API tokens" button on the R2 page. Tokens made there can't do this setup.
Amazon S3, step by step
- In the IAM console, create a user named
temporary-offloft-setup. - Attach the IAMFullAccess and AmazonS3FullAccess policies directly to that user.
- On the user, open Security credentials and press Create access key. Choose Other when asked what it's for.
- Copy the access key ID and the secret access key, paste them into Offloft, and let it run.
What gets removed afterwards?
On Cloudflare, Offloft removes the temporary token once it no longer needs it. If it can't, it tells you, and you delete the token in API Tokens.
On AWS, Offloft removes the temporary access key, so the user can do nothing. Delete the user temporary-offloft-setup in the IAM console whenever you like.
The last screen shows you what was removed and what's left for you, so you can check.
Questions about automatic setup
Is the temporary access saved anywhere?
No. Offloft uses it during setup only and never saves it. It isn't shown again after it's accepted.
What if setup stops halfway?
Run it again with temporary access. Offloft picks up where it stopped and reuses a bucket and key it already made, rather than creating them twice.
Can I use my AWS root keys?
No, please do not. Create the temporary user the steps describe, so it can be deleted afterwards.
Which providers does automatic setup cover?
Cloudflare R2 and Amazon S3. Every other provider has a step-by-step guide with values to copy and paste.
Skip the setup steps.
Automatic setup comes with every Pro plan, and every plan has a 14-day money-back guarantee.