diff --git a/api/chalicelib/utils/s3.py b/api/chalicelib/utils/s3.py
index 366a5d181..655628602 100644
--- a/api/chalicelib/utils/s3.py
+++ b/api/chalicelib/utils/s3.py
@@ -16,7 +16,8 @@ else:
                           aws_access_key_id=config("S3_KEY"),
                           aws_secret_access_key=config("S3_SECRET"),
                           config=Config(signature_version='s3v4'),
-                          region_name=config("sessions_region"))
+                          region_name=config("sessions_region"),
+                          verify=not config("S3_DISABLE_SSL_VERIFY", default=False, cast=bool))
 
 
 def __get_s3_resource():
@@ -26,7 +27,8 @@ def __get_s3_resource():
                           aws_access_key_id=config("S3_KEY"),
                           aws_secret_access_key=config("S3_SECRET"),
                           config=Config(signature_version='s3v4'),
-                          region_name=config("sessions_region"))
+                          region_name=config("sessions_region"),
+                          verify=not config("S3_DISABLE_SSL_VERIFY", default=False, cast=bool))
 
 
 def exists(bucket, key):
@@ -81,7 +83,8 @@ def get_presigned_url_for_upload_secure(bucket, expires_in, key, conditions=None
         Conditions=conditions,
     )
     req = PreparedRequest()
-    req.prepare_url(f"{url_parts['url']}/{url_parts['fields']['key']}", url_parts['fields'])
+    req.prepare_url(
+        f"{url_parts['url']}/{url_parts['fields']['key']}", url_parts['fields'])
     return req.url
 
 
@@ -101,7 +104,8 @@ def get_file(source_bucket, source_key):
 
 def rename(source_bucket, source_key, target_bucket, target_key):
     s3 = __get_s3_resource()
-    s3.Object(target_bucket, target_key).copy_from(CopySource=f'{source_bucket}/{source_key}')
+    s3.Object(target_bucket, target_key).copy_from(
+        CopySource=f'{source_bucket}/{source_key}')
     s3.Object(source_bucket, source_key).delete()
 
 
diff --git a/api/env.default b/api/env.default
index 12feccf1f..8d0131dd7 100644
--- a/api/env.default
+++ b/api/env.default
@@ -10,6 +10,7 @@ EMAIL_USE_TLS=true
 S3_HOST=
 S3_KEY=
 S3_SECRET=
+S3_DISABLE_SSL_VERIFY=
 SITE_URL=
 announcement_url=
 captcha_key=
diff --git a/ee/api/env.default b/ee/api/env.default
index df353d071..c5d1c95f7 100644
--- a/ee/api/env.default
+++ b/ee/api/env.default
@@ -11,6 +11,7 @@ LICENSE_KEY=
 S3_HOST=
 S3_KEY=
 S3_SECRET=
+S3_DISABLE_SSL_VERIFY=
 SAML2_MD_URL=
 SITE_URL=
 announcement_url=