# Full data migration - Configure `Amazon S3` access

+ Use an `AWS` access key: use the access key of an `IAM` user to access your `Amazon S3 bucket`.
+ Use a `Role ARN`: use a `Role ARN` to access your `Amazon S3 bucket`.

-----------------------------------------------------------------------
If your source data is stored in `Amazon S3` or `Google Cloud Storage (GCS) buckets`, before importing or migrating the data to `TiDB Cloud`, you need to configure cross-account access to the buckets.
Please see https://docs.pingcap.com/tidbcloud/config-s3-and-gcs-access#configure-amazon-s3-access