# Create an S3 Bucket
**URL:** https://discourse.sst.dev/t/create-an-s3-bucket/48
**Category:** Chapter Comments
**Created:** [May 9, 2018, 6:39pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48 "2018-05-09T18:39:11Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@anomalyinnovations](https://discourse.sst.dev/u/anomalyinnovations)
#### Post date: [May 9, 2018, 6:39pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/1 "2018-05-09T18:39:11Z")
_From @jayair on Mon Apr 10 2017 01:08:56 GMT+0000 (UTC)_
Link to chapter - [http://serverless-stack.com/chapters/create-an-s3-bucket.html](http://serverless-stack.com/chapters/create-an-s3-bucket.html)
_Copied from original issue: [https://github.com/AnomalyInnovations/serverless-stack-com/issues/62](https://github.com/AnomalyInnovations/serverless-stack-com/issues/62)_
---
### Author:  [@doruk](https://discourse.sst.dev/u/doruk)
#### Post date: [June 29, 2018, 8:28pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/2 "2018-06-29T20:28:06Z")
When the bucket policy given in the book is applied, aws console displays a warning;
> This bucket has public access
> You have provided public access to this bucket. We highly recommend that you never grant any kind of public access to your S3 bucket.
Is this expected behavior? If so, what should one do instead?
---
### Author:  [@jayair](https://discourse.sst.dev/u/jayair)
#### Post date: [June 29, 2018, 8:58pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/3 "2018-06-29T20:58:32Z")
In this case, we want our S3 bucket (and the app inside it) to be publicly accessible. So it is safe to ignore this. However, we shouldn’t make our file uploads bucket publicly accessible.
---
### Author:  [@christianreed](https://discourse.sst.dev/u/christianreed)
#### Post date: [November 17, 2018, 12:27am UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/4 "2018-11-17T00:27:40Z")
There are two new default settings in the boilerplate setup that prevent you from adding public policies to buckets, and, apparently, from allowing a bucket to be public while you “fix the policy.”
Or at least I had these come up, and was wondering why I was getting 403s on updating the policy. If you’re getting these, edit the “Public access settings,” and uncheck the options for “Manage public bucket policies for this bucket.”
---
### Author:  [@jayair](https://discourse.sst.dev/u/jayair)
#### Post date: [November 19, 2018, 1:52am UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/5 "2018-11-19T01:52:42Z")
Thanks for sharing. Sounds like we need to update the screenshots.
---
### Author:  [@HannahStahl](https://discourse.sst.dev/u/HannahStahl)
#### Post date: [November 29, 2018, 7:39pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/6 "2018-11-29T19:39:04Z")
Yes, I had the same issue and found the same solution. This screenshot shows the two boxes that need to be unchecked:
---
### Author:  [@jayair](https://discourse.sst.dev/u/jayair)
#### Post date: [December 2, 2018, 9:52pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/7 "2018-12-02T21:52:34Z")
Got it. Yeah it needs to be updated.
---
### Author:  [@filmboy3](https://discourse.sst.dev/u/filmboy3)
#### Post date: [February 21, 2019, 8:37pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/8 "2019-02-21T20:37:54Z")
FYI, I also had this same issue, but to solve it, unchecking of these two ‘manage public policies’ boxes had to also be done on the larger, console level for the entire account – i.e., change the bucket-changing policies for ALL Buckets, not just the individual client app bucket. Thank you so much for your incredible tutorial!!!
---
### Author:  [@jayair](https://discourse.sst.dev/u/jayair)
#### Post date: [February 25, 2019, 7:31pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/9 "2019-02-25T19:31:27Z")
Thanks for letting us know!
---
### Author:  [@jamesrusso](https://discourse.sst.dev/u/jamesrusso)
#### Post date: [December 23, 2020, 6:14pm UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/10 "2020-12-23T18:14:49Z")
It would be a great example to show how this entire bucket setup and cloud formation, SSL certificates, etc. Could all be done by SST as part of an IAC project. This way everything is ready to go and then in the react or angular project you can simply sync it to the bucket, invalidate the index.html (if you want?) and be good to go.
Bonus points to extract the bucket name from the output of the stack to use in the deployment?
---
### Author:  [@jayair](https://discourse.sst.dev/u/jayair)
#### Post date: [January 3, 2021, 1:04am UTC](https://discourse.sst.dev/t/create-an-s3-bucket/48/11 "2021-01-03T01:04:01Z")
Yeah we’ll do this at some point in the near future!