---
title: "Impossible Cloud Configuration"
slug: "impossiblecloud-configuration"
tags: ["Cloud Credentials", "Nasuni Edge Appliance", "Nasuni Management Console", "Object Storage", "Volume Management"]
status: "update"
updated: 2026-09-15T19:41:30Z
published: 2026-09-15T19:41:30Z
canonical: "docs.nasuni.com/impossiblecloud-configuration"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nasuni.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Impossible Cloud Configuration

Impossible Cloud offers high-performance S3 object storage with full API compatibility and enterprise durability. It is optimized for fast data backup and retrieval, and can be integrated with a number of applications, including cloud-based file services such as Nasuni.

## Configuration

> ***Note****: Nasuni supports Impossible Cloud by using the Nasuni Amazon S3 connector.*

> ***Note****: Existing buckets cannot be used. Nasuni creates the bucket after the initial snapshot. A volume is associated with a single bucket or container.*

> ***Note****: Port 443 (HTTPS) must be open between the Nasuni Edge Appliance and the Internet.*

### Prerequisites

The following are prerequisites for configuring Nasuni with Impossible Cloud:

- An Impossible Cloud Subscription.
- Port 443 (HTTPS).
- V4 Authentication.
- Access/Secret credentials with auto-provisioning permissions.
- Virtual-Hosted-Style URL.

## Configuring an Impossible Cloud permission policy for Nasuni

Nasuni requires the following permissions for Impossible Cloud S3 Buckets and Objects:

- PutObject
- GetObject
- DeleteObject
- CreateBucket
- ListBucket
- GetBucketLocation
- DeleteBucket

The following is an example of the Nasuni recommended minimum S3 permission policy:

```plaintext
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "NasuniBucketAndObjectAccess",
      "Effect": "Allow",
      "Action": [
        "s3:CreateBucket",
        "s3:DeleteBucket",
        "s3:ListBucket",
        "s3:GetBucketLocation",
        "s3:GetObject",
        "s3:PutObject",
        "s3:DeleteObject"
      ],
      "Resource": "arn:aws:s3:::nasuni*"
    }
  ]
}
```

To attach this policy to an IAM user in Impossible Cloud, follow these steps:

1. Create the policy by going to **IAM → Policies → Add Policy.**
2. Modify the policy document JSON to include at least the permissions listed above, then provide an appropriate policy name and description.
3. Click **Create Policy.**
4. Select **Groups**. Add a name to the group, then add the desired IAM user and the policy to the group by checking the box next to both.
5. Click **Add Group**.
6. Click **Users**. Ensure that the IAM user is a member of the group you created. You might need to refresh the page to see this populate.

### Adding Credentials

To configure Nasuni for Impossible Cloud, follow these steps:

1. Ensure that port 443 (HTTPS) is open between the Nasuni Edge Appliance and the object storage solution.
2. Navigate to the NMC UI and click **Account**.
3. From the left-side menu, select **Cloud Credentials**.
4. Click **Add New Credentials**, then select **Amazon S3** from the drop-down menu.
5. Enter the following information from the Impossible Cloud: **Name**: A name for this set of credentials, which is used for display purposes, such as ImpossibleCloudCred.

**Access Key ID**: The Access Key of the User with the appropriate permissions

**Secret Access Key**: The Secret access key to go with the above access key

**Hostname**: Find an Impossible Cloud regional endpoint [here.](https://docs.impossiblecloud.com/impossible-cloud-help/impossible-cloud-storage-guide/storage-console-urls-and-api-endpoints#sts-endpoints) It should be in the form of ‘https://<region>.storage.impossibleapi.net’. This regional endpoint determines which Impossible Cloud region while store Nasuni Volumes using this credential.

**Verify SSL Certificates**: Leave this box checked.

**Filers** (on NMC only): Edge Appliances that can use this credential to create volumes.
6. Click **Save Credentials**.

At this point, you can begin adding volumes to Nasuni Edge Appliances with Impossible Cloud.

## Adding Volumes

To add volumes with Impossible Cloud, follow these steps:

1. Click **Volumes**, then click **Add New Volume**. The **Add New Volume** page appears.
2. Enter the following information for the new volume: **Name**: Enter a human-readable name for the volume.

**Cloud Provider**: Select **Amazon S3**.

**Credentials**: Select the **Cloud Credentials** that you defined in step 5 for this volume.

**Region**: Use the default setting: **Other (S3 Compatible)**.

For the remaining options, select what is appropriate for this volume. For details, see the “[Create volume](/v1/docs/nmc-volumes-page#create-volume)” section in the Nasuni Management Console (NMC) Guide.
3. Click **Save**.

This creates a new volume with Impossible Cloud.