Using COG from private S3 bucket in geoserver

Question

I am hosting some cloud optimised geotiffs in an S3 bucket to be used as a data store in geoserver. I am having trouble getting this working with a private bucket though, even after providing my AWS keys. I have tried various combinations of options but have had no luck. I can't see anywhere about using a private S3 bucket so wondering if this is actually possible, and if so if I am missing some step.

Steps taken:

1. install extension
2. add new data store and provide URL to S3 object
3. Select Cloud Optimized GeoTIFF (COG)
4. Select HTTP (I have also tried S3) as Range Reader settings
5. Provide AWS keys with correct permissions to read from S3.

Currently just running locally and have tried setting environment variables etc.

Answer 1

The answer was simple: set permissions on the bucket.

{
"Version": "2012-10-17",
"Statement": [
    {
        "Sid": "AddPerm",
        "Effect": "Allow",
        "Principal": {
            "AWS": "arn:aws:iam::ACCOUNT:user/USER"
        },
        "Action": "s3:GetObject",
        "Resource": "arn:aws:s3:::BUCKET/*"
    }
]

}

I then had to provide the URL of the S3 object, select S3 as the Range Reader settings and provide AWS keys with correct permissions.

I was then able to load this externally in QGIS.