Also I’m not sure about one more thing. The

$BUCKET_URL

that I need to paste in

conf.default.yml

is the url of bucket with static website hosting enabled and with enabled public access, right? It wasn’t clear from the documentation which steps should be done in order to set up the bucket for Cerbos. Thanks in advance!

$BUCKET_URL

is the url of the S3 bucket in the format

<s3://my-bucket?region=us-west-1>

- see https://docs.cerbos.dev/cerbos/latest/configuration/storage.html#blob-driver You don't have to enable static website hosting or public access, but you will have to set up the Lambda function an IAM role with permission to read from the bucket.

Thanks, will try it