Detailed AWS IAM setup

In the AWS Console search bar, search for IAM, or open IAM from Recently visited.

In the IAM sidebar, choose Policies.

Click Create policy.

Open the JSON tab so you can paste the permission policy document.

On the S3Pixels Setup page, Step 1, use Copy on the permission policy JSON.

In the policy editor, select any sample text, replace it with what you copied from Step 1, then scroll down and click Next.

Enter a policy name (for example S3Pixels-S3Access). Use a name you will recognize when you attach it to the role. Click Next, then create the policy.

After you see the policy created confirmation, open Roles in the IAM sidebar.

Click Create role.

Choose Custom trust policy (not an AWS service shortcut).

On S3Pixels Setup, Step 2, copy the trust policy JSON (it includes your External ID when you are signed in).

Paste the JSON into the trust policy editor and click Next.

Search for the policy name you created earlier, select it, then click Next.

Enter a role name you will remember, click Next if prompted, then Create role.

After creation you return to the roles list. Search for or click the role you just created to open its summary.

On the role summary page, copy the full ARN (it looks like `arn:aws:iam::123456789012:role/YourRoleName`).

On S3Pixels Setup, Step 3, paste the Role ARN and click Verify & Connect.

You should see a success state when the role is verified and saved. Use Go to dashboard to continue.

On the dashboard you will see your connection name and bucket count. Open Manage buckets to list buckets and work with objects.