# Authentication needed to Backup on S3

**URL:** <https://forums.foundationdb.org/t/authentication-needed-to-backup-on-s3/3359>\
**Category:** Running FoundationDB\
**Created:** [June 6, 2022, 11:01pm UTC](https://forums.foundationdb.org/t/authentication-needed-to-backup-on-s3/3359 "2022-06-06T23:01:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![chetan\_pg](https://avatars.discourse-cdn.com/v4/letter/c/d6d6ee/32.png) [@chetan\_pg](https://forums.foundationdb.org/u/chetan_pg)\
**Post date:** [June 6, 2022, 11:01pm UTC](https://forums.foundationdb.org/t/authentication-needed-to-backup-on-s3/3359/1 "2022-06-06T23:01:42Z")

</div>

I am using following command to take backup on S3 bucket. Because we use IAM role/Profile assigned to EC2 server using STS assume policy I have to use the temp token too .

fdbbackup start -d “blobstore://aws\_access\_key\_id:access\_secret\_access\_key:aws\_session\_token@s3.us-east-1.amazonaws.com/myFirstBackup?bucket=bucket name” .

I am getting following error when i run the above command :-  
ERROR: Could not create backup container: Operation timed out  
ERROR: An error was encountered during submission  
Fatal Error: Backup error

When i ran regular AWS command after setting these ENV variables it does copy the file to the bucket so accesss key/password/token is not an issue for sure.  
aws s3 cp test.txt s3://

So is the URL need to be different in the fdbbackup command. Can someone help here ?

---

<div class="post-metadata">

**Author:** ![chetan\_pg](https://avatars.discourse-cdn.com/v4/letter/c/d6d6ee/32.png) [@chetan\_pg](https://forums.foundationdb.org/u/chetan_pg)\
**Post date:** [June 6, 2022, 11:24pm UTC](https://forums.foundationdb.org/t/authentication-needed-to-backup-on-s3/3359/2 "2022-06-06T23:24:42Z")

</div>

I found the solution in one of the post …so i ran the following and it ran fine

“blobstore://aws\_access\_key\_id:access\_secret\_access\_key:aws\_session\_token@s3.us-east-1.amazonaws.com/myFirstBackup?bucket=bucket name&sc=0" .

If using sc=0 will compromise the security of the backup data (our bucket dont have public access and proper role/bucket policy /acl is in place ) ? What I will need to do to use sc=1 to be successfully which is default ?