Create or prepare an Amazon S3 bucket to store Agentic Voice call recordings. The bucket must remain private and use server-side encryption so that recordings are protected at rest.

Creating AWS S3 Bucket

Option A: New Bucket

Create a dedicated Amazon S3 bucket for call recordings.

1. Go to AWS S3 Console and click Create bucket.
2. Enter bucket name (globally unique, 7-bit ASCII only — no special characters like ü, ç, é).
   For example: company-call-recordings-prod. 
3. Select the AWS region.
4. Enable Block all public access.
5. Enable Server-side encryption (SSE-S3).
6. Click Create bucket.

Where: 

• BUCKET-NAME equals your bucket name from step 2.

• REGION equals your AWS region from step 3 (e.g., us-east-1, eu-west-1).

• FOLDER equals optional subfolder for recordings (e.g., recordings).

For example https://company-call-recordings-prod.s3-us-east-1.amazonaws.com/recordi….

Option B: Existing Bucket

Use an existing private Amazon S3 bucket for call recordings.

1. Verify Block all public access is enabled.
2. Note your bucket name and region.
3. Your S3 Bucket URL is: https://BUCKET-NAME.s3-REGION.amazonaws.com/FOLDER/.

Creating IAM Credentials

Create dedicated AWS Identity and Access Management (IAM) credentials that let Agentic Voice write recordings to the selected S3 bucket. Restrict the credentials to the minimum required permissions and store the generated access keys securely.

Creating IAM User

Create a dedicated IAM user for the Agentic Voice recording export integration.

1. Go to AWS IAM Console and click Users → Create user.
2. Enter a descriptive name (e.g., agentic-voice-s3-uploader) and click Next.

Attaching S3 Write Policy

Attach an inline IAM policy that permits the user to upload objects only to the selected bucket and folder

1. Click Attach policies directly.
2. Click Create inline policy.
3. Select JSON and paste the following code:
   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Sid": "DenyEverything",
               "Effect": "Deny",
               "NotAction": "*",
               "Resource": "*"
           },
           {
               "Sid": "AllowS3PutObject",
               "Effect": "Allow",
               "Action": ["s3:PutObject"],
               "Resource": ["arn:aws:s3:::BUCKET_NAME/recordings/*"]
           }
       ]
   }
4. Replace BUCKET_NAME with your bucket name.
5. Click Create policy.

Generating Access Keys

Generate an access key ID and secret access key for the IAM user so that Agentic Voice can authenticate to AWS.

1. Select the user.
2. In the Security credentials tab, click Create access key.
3. Select Application running outside AWS.
4. Click Create access key.