Salesforce setup

Do this once per org, before or after the AWS work but before you test the connection. It assumes you have already assigned the base permission sets in Install and permission sets.

There is nothing to pre-configure in Setup. The S3_Storage Named and External Credential are created for you when you click Connect in Sliick Settings, with no URL, region, or principal-secret edits. The only Salesforce-side work is a permission grant.

Grant the S3 Storage principal on a permission set

The credential Sliick creates at connect is not covered by a packaged permission set, so you grant access on a permission set you control:

1. Setup → Permission Sets → open (or create) a permission set you manage for storage users.
2. Add External Credential Principal Access for the S3 Storage principal (sliick__S3_Storage-Default).
3. Assign that permission set to anyone who will upload, download, or delete S3-backed files, admins included.

Without this grant, the Connection Test and file downloads fail with a “couldn’t access the credential” error.

You never enter the AWS keys in Setup. They live only in Sliick Settings; the permission set just authorises your users to use the credential.

Next: Connect in Sliick Settings.