Connect to Amazon S3 in AWS GovCloud (US)

AWS GovCloud (US) is an isolated AWS partition with two Regions, designed for eligible U.S. customers with specific regulatory and compliance requirements.

CS Browser supports Amazon S3 in both AWS GovCloud (US) Regions and can connect through standard or FIPS endpoints:

To connect to Amazon S3 in AWS GovCloud (US)

You need an eligible AWS GovCloud (US) account and IAM access keys created in the GovCloud partition. Direct AWS customers can create an AWS GovCloud (US) account through a linked standard AWS account or AWS Organizations. Customers who purchase AWS services through a reseller should contact their reseller or solution provider. See the AWS GovCloud (US) account sign-up process.

1. Start CS Browser and choose Accounts -> Add new account...

   

   The Add New Account dialog will appear:

   

2. Choose an account type:

   Select Amazon S3 GovCloud Storage to use standard endpoints, or Amazon S3 GovCloud Storage (FIPS 140-2) to use FIPS endpoints.

3. Enter the Access Key ID and Secret Access Key created in the AWS GovCloud (US) partition.

4. Access keys are always encrypted before they are stored. Select Encrypt Access Keys with a password to protect them with your own master password instead of the built-in application key.

5. Click Add new account.

   After the account is added, select it from the Accounts menu:

   

Advanced Account Settings

You may also configure additional settings when adding a new account or editing an existing account.

To open advanced account settings, click the advanced settings link located at the bottom-left corner of the dialog.

The Advanced Account Settings dialog will open:

You can configure the following settings:

Use dual-stack endpoints (IPv4/IPv6) - When selected, CS Browser will use dual-stack endpoints to access storage, allowing connections over both IPv4 and IPv6. This improves compatibility with networks that support IPv6.

List all my buckets when account assigned - When selected, CS Browser will perform the s3:ListAllMyBuckets call when the account is assigned. If the account does not have permission to list all buckets, you can uncheck this option to avoid failed tasks and warnings in the log.

External Buckets - You can edit the external buckets associated with the account. Each bucket should be listed on a new line. Optional paths are also supported, with a slash used as the delimiter, for example my-bucket/and/optional/path.