Issue
Some organizations have security policies that restrict the creation of AWS IAM users. Customers may wish to migrate Twilio Video recordings directly to Amazon S3 without using an IAM user.
Product
Programmable Video
Resolution
1. Migrating Video Recordings to S3 Without an IAM User
Current Requirement:
Twilio’s standard method for exporting Video recordings to AWS S3 requires creating an IAM user with specific permissions. This IAM user allows Twilio to securely upload recordings to your S3 bucket.
Alternative Methods:
-
Bucket Policy Only:
As of now, Twilio does not support exporting recordings to S3 using only a bucket policy (i.e., without an IAM user). -
Manual Download and Upload:
If your organization cannot create an IAM user, you can:- Download recordings from Twilio’s storage via API or Console.
- Upload them to your S3 bucket using your own internal processes and credentials.
- Automate this process as needed.
Product Feedback:
Twilio is aware that support for bucket policy-only authentication is a common enterprise request. While there is no timeline for this feature, feedback is being shared with the product team.
Additional Information
- There is currently no supported method to export directly to S3 without an IAM user.
- Manual workflows are the recommended alternative for organizations with IAM restrictions.
Below you will find references to useful documents: