Send Data to Amazon S3

Overview

The S3 destination node sends items to an S3 destination.

Configure S3

Before you configure Edge Delta to sends logs to an AWS S3 endpoint, you must configure S3:

1. Create an IAM user to access the AWS S3 bucket. To learn how to create an IAM user, review this document from AWS.
2. Attach the following custom policy to the newly created IAM user. To learn how to create and add a custom policy, review this document from AWS.

The custom policy lists 3 permissions:

• PutObject
• GetObject
• ListBucket

If you want to create an S3 archive for rehydration purposes only, then at a minimum, your custom policy must include GetObject. All other permissions are only required for archiving purposes. As a result, if you prefer, you can create 2 different S3 archive integrations with different custom policies.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::<account-number>:role/<role-name>"
            },
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::bucket-name",
                "arn:aws:s3:::bucket-name/*"
            ]
        }
    ]
}

Configure Edge Delta

Next, you configure the S3 destination node.