You can configure AWS S3 cloud storage for Data Vault archive storage. If Data Archive and Data Vault are installed on a Windows 64-bit or Red Hat Enterprise Linux 7 environment, you can set up keyless access to the AWS S3 archive store.
To set up keyless access to the AWS S3 archive store, enter the following properties to the end of the
ssa.ini
file:
[AWS_SDK_CONNECTION]
Name of the archive folder. For example, if the name of the archive folder is
test
, then enter:
[AWS_SDK_CONNECTION test]
PROFILE_NAME
The profile name of the S3 connection. Specify a custom name or set to
default
. For example:
PROFILE_NAME=default
To connect a Data Archive instance that runs on Amazon EC2 to Amazon S3, add an Identity Access Management role. Set the profile name to
default
.
When Data Archive uses a service other than Amazon EC2, connect to Amazon S3 in one of the following ways:
Set the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY properties as environment variables. Set the profile name to
default
.
Create a credentials file using AWS CLI. This file contains the user defined profile and the values for the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY properties.
Testing the Connection
Use the
ssadrv
command to validate the connection details you provided in the
ssa.ini
file.
On the machine that hosts the Data Vault service, run the following command:
ssadrv -a aws_sdk://<connection name>/<Amazon bucket url>
For example:
ssadrv -a aws_sdk://test/https://s3.amazonaws.com/awsBucket/
You can use AWS virtual-hosted references. For example: