> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/configuration/s3-bucket-management.md).

# S3 bucket management

Session recordings and other large files are stored in an S3 bucket rather than in the database. This is where that bucket is configured.

Select **Configuration → S3 Bucket Management**.

![S3 Bucket Management.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/1WdQVW6g1fJf6KVc0IpX/assets/01.png)

The list shows the bucket name, the folder path within it, the access key, the status and who configured it.

## Adding a bucket

Select **Add S3 Bucket**.

![Adding a bucket.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/4rww06ncsVEsYA6ciX5u/assets/02.png)

| Field             | What to enter                                       |
| ----------------- | --------------------------------------------------- |
| Bucket Name       | The S3 bucket. Required                             |
| Folder            | The path within the bucket to write under. Required |
| Access Key ID     | The AWS access key ID. Required                     |
| Secret Access Key | Its secret. Required                                |

Use **Test Connection** before creating. A bucket that saves but is unreachable fails silently later, when a session recording has nowhere to go.

{% hint style="warning" %}
Give the credentials only the permissions the bucket needs. A key with wider access than the bucket is a larger problem than it looks.
{% endhint %}

## Editing

**Edit** reopens the configuration.

![Editing a bucket.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/5aNCO7wZRoIphC0bM2AX/assets/03.png)

The secret access key is left blank — enter a new one to change it, or leave it blank to keep the existing one.

## Deleting

**Delete** removes the bucket configuration, after confirmation.

{% hint style="warning" %}
Deleting the configuration removes SECUREpass's link to the bucket. **Recordings already stored in it are not deleted** — but SECUREpass can no longer reach them, so they stop being available for playback until a configuration pointing at the same bucket is created again.
{% endhint %}