Learn more about Streama© – the foundational technology behind our stateful streaming data platform. Learn More

S3 Archive – Your bucket, forever

Coralogix helps you in creating an s3 archive to all your data on your own bucket, so it stays yours, forever. 

How to configure your bucket

1. Go to the TCO tab and click on Archive. Add the Region code and Bucket name and Save.

Use the table below for the region name.

2. Under your AWS account in the search type S3.

3. Navigate to the Permissions and click Edit.

4. In Block public access (bucket settings) click ‘Edit’. Uncheck Block all public access and then check all bottom three options, leaving only Block public access to buckets and objects granted through new access control lists (ACLs) unchecked. Click Save changes.

5. Still Under Permissions scroll down to Access control list (ACL) and click Edit.

6. Click on Add grantee and Insert Coralogix canonical id: fa35ef450b07d311b09810445df9c1c4a316118d1899e4cd3db935414e4ba62d. Check the Write Objects checkbox to give Coralogix write objects permissions and click Save changes.

7. If you are also wishing to use Coralogix Archive query feature, later on, you will need to check the List Objects and Read Bucket ACL options. Click Save changes.

Read/write permissions on  the bucket are mandatory  for direct  Archive Query to work.

8. After we already added the bucket details in Coralogix (see step 1), all we need to do next is to validate our archive. Click on Validate Settings to make sure you have Succedded setting your archive.

Note:
If encryption with AWS Key Management Service key (SSE-KMS) is enabled on your S3 bucket, then it is required to add “arn:aws:iam::625240141681:root” to your key policy. Example:

{
    "Version": "2012-10-17",
    "Id": "key-consolepolicy-3",
    "Statement": [
        {
            "Sid": "Enable IAM User Permissions",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::625240141681:root",
                    "arn:aws:iam::123456789012:root"
                ]
            },
            "Action": "kms:*",
            "Resource": "*"
        }
    ]
}

Now you are All set!