Bobsled-managed S3 bucket setup guide

Bobsled can deliver data to a Bobsled-managed AWS S3 bucket. This provides a fast and easy way to deliver data, making it easy to grant access to third-party AWS accounts.

Prerequisites

• Before configuring a destination, a share must be created.

• Bobsled requires ARN to be provided to grant access to the data in the Bobsled-managed destination. To learn more about ARNs and how to find them, please visit Account Access Identifiers in AWS.

Setup instructions

1. On the share page, click the box Pick Destination

2. Choose the cloud platform Amazon S3 and choose the region of your target destination bucket(s). Keep the choice of "Bobsled-managed bucket" selected. Press continue.

3. Enter your ARN and click Grant Access. For information on the ARN's Bobsled accepts, and where your customer can find them, see our documentation about AWS Account Access Identifiers.
   
   

   

   
   
   

4. You've now successfully set up access.

After setting up the destination in a Share, and picking a source, you can get started and create a data transfer to share data with your consumers.

Permissions on the destination

Bobsled grants the following permissions to any ARN that is granted access to the data in the share:

• s3:GetObject Retrieves objects from Amazon S3

• s3:GetObjectAttributes Retrieves all the metadata from an object without returning the object itself

• s3:GetObjectVerison Retrieves a specific version of the object

• s3:ListBucket Allows the user to use the Amazon S3 GET Bucket (List Objects) operation

• s3:GetObjectTagging Returns the tag set of an object

To learn more about ARNs used within Bobsled please visit: Account Access Identifiers in AWS.

Revoking access

To revoke an ARN access to a share, click the button "revoke”.