Amazon S3

Set set the following CORS Configuration to your bucket:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="">

Note: Replace *ROCKET_CHAT_DOMAIN* with the domain of your Rocket Chat installation, e.g. If for some reason you want to make your CORS configuration ridiculously insecure, you can set it to * to allow CORS requests from any host on the Internet, but do so at your own risk.

Basic Configuration

Set the following fields:

Config. Name


Amazon S3 bucket name

The bucket name you created on Amazon S3

Amazon S3 AWSAccessKeyId

Your Amazon Access Key ID (optional)

Amazon S3 AWSSecretAccessKey

Your Amazon Secret Access Key (optional)

Note: If no AWSAccessKeyId and AWSSecretAccessKey are set, the underlying AWS SDK will fallback and try to retrieve credentials from the usual locations.

Advanced Configuration

The following fields are optional, and you don't need to set them to get the upload to S3 working.

Config. Name



If you created your bucket on a region different from the US Standard, this is where you must set their code (see a list of region codes here)

Amazon S3 acl

A Canned ACL configuration (see a full list here)

CDN domain for downloads

If you set a CDN for your bucket, put it here

Bucket URL

Override URL to which files are uploaded. This URL is also used for downloads, unless youset a CDN.