AWS

AWS is optional. Enable it only when a resource backup policy uses AWS S3. Configure the API process and restart it:

TOWBAR_AWS_ENABLED=true
TOWBAR_AWS_REGION=us-east-1
TOWBAR_AWS_ACCESS_KEY_ID=<access-key-id>
TOWBAR_AWS_SECRET_ACCESS_KEY=<secret-access-key>

Temporary AWS sessions are not supported because they are not maintainable as static installation configuration. Scope the identity to the required buckets, prefixes, object versions, and KMS keys. Towbar shows AWS only when all enabled values pass startup validation and never returns the credential in the UI or API.

The AWS integration confirms that its runtime configuration is available without exposing credentials.

Runtime-managed integrations expose availability and documentation without returning their credentials.

Confirm permissions with a real resource backup and restore before relying on the configuration. Rotate the key in .env, recreate the API container, verify a backup, and then retire the old key.

Last modified on September 10, 2026

Get started

Deploy

Operate

Integrations

Workspace