Amazon S3 Connector

Back Next

IAM authentication

Optionally, if you do not provide the access key and the secret key in the connection, Amazon S3 Connector uses AWS credentials provider chain that looks for credentials in the following order:

The

AWS_ACCESS_KEY_ID

and

AWS_SECRET_ACCESS_KEY

AWS_ACCESS_KEY

and

AWS_SECRET_KEY

environment variables.

The

aws.accessKeyId

and

aws.secretKey

java system properties.

The credential profiles file at the default location,

~/.aws/credentials

The instance profile credentials delivered through the Amazon EC2 metadata service.

You can configure IAM authentication when the Secure Agent runs on an Amazon Elastic Compute Cloud (EC2) system.

Perform the following steps to configure IAM authentication on EC2:

Create a minimal Amazon S3 bucket policy.

Create the Amazon EC2 role. The Amazon EC2 role is used when you create an EC2 system. For more information about creating the Amazon EC2 role, see the AWS documentation.

Link the minimal Amazon S3 bucket policy with the Amazon EC2 role.

Create an EC2 instance. Assign the Amazon EC2 role that you created in step #2 to the EC2 instance.

Install the Secure Agent on the EC2 system.

Use IAM authentication for secure and controlled access to Amazon S3 resources when you run a session.

Rename Saved Search

Table of Contents

Amazon S3 Connector

Amazon S3 Connector

IAM authentication

IAM authentication