Connect an AWS account with a one-click, keyless cross-account role — no access keys to copy or store.
Click Connect AWS Account and enter your 12-digit AWS account ID (it's not a secret) and default region.
We open a pre-filled CloudFormation stack in your own AWS console. Review the permissions and create it — this makes a scoped role S3 Forge can assume.
Come back and click Verify connection. That's it — done.
No AWS access keys ever leave your account. S3 Forge uses short-lived credentials from a role you control, gated by a unique external ID, and you can revoke access any time by deleting the CloudFormation stack.
Loading accounts...