Provisioning S3 Manually

1. Create two IAM users. One user has AmazonS3FullAccess. The other user has AmazonS3ReadOnlyAccess (the credentials for this user will become public...)

2. Create an S3 bucket (in region US Standard) with the following CORS configuration:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfigurationxmlns="http://s3.amazonaws.com/doc/2006-03-01/">
<CORSRule>
<AllowedOrigin>*</AllowedOrigin>
<AllowedMethod>GET</AllowedMethod>
<AllowedMethod>HEAD</AllowedMethod>
<MaxAgeSeconds>3000</MaxAgeSeconds>
<ExposeHeader>ETag</ExposeHeader>
<AllowedHeader>*</AllowedHeader>
</CORSRule>
</CORSConfiguration>

3. Give the bucket this policy (replace BUCKET_NAME):

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PublicReadGetObject",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::BUCKET_NAME/*"
}
]
}

This bucket must be used exclusively for checks for this status page.