anchor.diff:  // CONSOLE
   // TEST[skip:we don't have s3 setup while testing this]
   
  -Most client settings are specified inside `elasticsearch.yml`, but some are
  -sensitive and must be stored in the {ref}/secure-settings.html[elasticsearch keystore].
  -
  -For example, before you start the node, run these commands to add AWS access
  -key settings to the keystore:
  +Most client settings can be added to the `elasticsearch.yml` configuration file
  +with the exception of the secure settings, which you add to the {es} keystore.
  +For more information about creating and updating the {es} keystore, see
  +{ref}/secure-settings.html[Secure settings].
  +
  +For example, before you start the node, run these commands to add AWS access key
  +settings to the keystore:
   
   [source,sh]
   ----
  
positive.code: [[repository-s3-client]]
  ==== Client Settings
  
  The client used to connect to S3 has a number of settings available. Client setting names are of
  the form `s3.client.CLIENT_NAME.SETTING_NAME`. The default client name, which is looked up by
  an `s3` repository, is called `default`. It can be modified using the
  <<repository-s3-repository, repository setting>> `client`. For example:
  
  [source,js]
  ----
  
negative.code: 
      The port of a proxy to connect to s3 through.
  
  `proxy.username` ({ref}/secure-settings.html[Secure])::
  
      The username to connect to the `proxy.host` with.    
  
  `proxy.password` ({ref}/secure-settings.html[Secure])::
  
      The password to connect to the `proxy.host` with.   
  
  `read_timeout`::
  
  