In order to push/pull data from your Amazon S3 storage buckets, you must first configure an S3 Connection in our web portal. Go to the Connected Data -> Connections page and click the Add button. Choose the Amazon Web Services option to add a new blank S3 connection.
More information on how to add a Connection can be found here, Adding Data Connection.
Once added you will be presented with the Connections Properties window.
You now need to specify the credentials of an AWS user account which has access to your target S3 buckets.
| Property | Description | Obtained? |
| AWS Access Key | This is like a username. It is an alphanumeric text string that uniquely identifies the user who owns the account. No two accounts can have the same AWS Access Key. To find your access key click here. | via AWS account |
| AWS Secret Key | This key plays the role of a password. It's called secret because it is assumed to be known by the owner only. To find your access key click here. | via AWS account |
| Region | Amazon S3 creates buckets in a region you specify. You can choose any AWS region that is geographically close to you to optimize latency, minimize costs, or address regulatory requirements. For example, if you reside in Europe, you might find it advantageous to create buckets in the EU (Ireland) region. |
Finally, after entering your Access and Secret Key, hit Save and then Authorize.
Your connection will be verified automatically - you will see a green tick if everything is working.
If you are unsure of how to generate/download these access credentials for AWS, follow these steps:
- Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.
- Create a new user with permissions limited to the services and actions that you want our Connectors to have access to. For more information about creating a new IAM user, see Creating IAM Users (Console), and follow the instructions through to step 8.
- Choose Download .csv to save a local copy of your AWS credentials. You can then open this file to view the Access Key and Secret Key required by our AWS Connection.
Permissions
The AWS S3 Connection and Connectors require the following permissions set:
s3:ListBucket
s3:PutObject
s3:GetObject
NOTE:
Currently our S3 Form Connector creates files in the target S3 bucket with the access permission of "Public Read/Write", which means the file is accessible to anyone with the file's URL. This generally means that your S3 bucket must have a similar public access permission to allow these files to be created.
