# Setting up S3

By default, CISO Assistant stores attachments on the local filesystem.\
You can configure it to use an S3-compatible object storage (AWS S3, MinIO, etc.).

### Prerequisitories

* A running S3-compatible storage
* An existing bucket (must be created **before** starting CISO Assistant)
* Valid access credentials (Access Key / Secret Key)

### Configure environment variables 

Set the following environment variables in the backend environment:

```
export USE_S3=True
export AWS_ACCESS_KEY_ID=<your-access-key>
export AWS_SECRET_ACCESS_KEY=<your-secret-key>
export AWS_STORAGE_BUCKET_NAME=<your-bucket-name>
export AWS_S3_ENDPOINT_URL=<your-s3-endpoint>
```

That's it ! You can now launch your backend and your attachments will be sent to your S3 🔥

### Example case : local MinIO block storage&#x20;

You can test S3 support using MinIO:

```
docker run -d \
  --name minio \
  -p 9000:9000 \
  -p 9001:9001 \
  -e MINIO_ROOT_USER=ciso-assistant-admin \
  -e MINIO_ROOT_PASSWORD=not_secure_password \
  -v minio_data:/data \
  minio/minio server /data --console-address ":9001"
```

Then go on <http://localhost:9001> , enter your minio root user/password and create a bucket with the name 'my-ciso-bucket'.

The backend environment variables will be:

```
export USE_S3=True
export AWS_ACCESS_KEY_ID=ciso-assistant-admin
export AWS_SECRET_ACCESS_KEY=not_secure_password
export AWS_STORAGE_BUCKET_NAME=my-ciso-bucket
export AWS_S3_ENDPOINT_URL=http://localhost:9000
```

You can now see your attachments on the MinIO console after importing them in ciso-assistant.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://intuitem.gitbook.io/ciso-assistant/deployment/setting-up-s3.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.