{"metadata":{"image":[],"title":"","description":""},"api":{"url":"","auth":"required","settings":"","results":{"codes":[]},"params":[]},"next":{"description":"","pages":[]},"title":"Attach an Amazon Web Services S3 volume","type":"basic","slug":"attach-an-amazon-web-services-s3-volume","excerpt":"","body":"## Overview\n\nAttach a volume for use on CAVATICA's visual interface. Use this tutorial if your cloud storage provider is Amazon Web Services (AWS).\n\nOr, learn more if the storage bucket that you want to attach is hosted on [Google Cloud Storage (GCS)](doc:attach-a-google-cloud-storage-volume).\n\n## Prerequisite\n1. An [Amazon Web Services (AWS)](https://aws.amazon.com/) account.\n2. One or more buckets on this AWS account.\n\n## Step 1: Access the Volumes Dashboard\n1. Click on the **Data** tab of the top navigation bar.\n2. Select **Volumes** from the drop-down menu.\n\n## Step 2: Choose a cloud storage provider\n1. On the Volumes Dashboard, click **+Attach volume**.\n2. Select **Amazon Web Services** as your cloud storage provider.\n\n## Step 3: Provide S3 bucket details\n1. Enter your S3 bucket name, as displayed in the [AWS Management Console](https://console.aws.amazon.com/). \n2. (Optional) Define a new name for the volume created from this S3 bucket on CAVATICA.\n3. (Optional) Enter a description for your volume.\n4. Select access privileges: choose between **Read only (RO)** and **Read and Write (RW)** permissions.\n5. (Optional) enter a prefix. Learn more about [prefixes](doc:volumes#prefix).\n6. Click **Next**.\n\n## Step 4: Copy the policy\n\nIn this step, copy the policy and use it to create a new custom policy in the [AWS Management Console](https://aws.amazon.com/console/).\n1. Copy the policy from the text box on CAVATICA.\n2. Go to the [AWS Management Console](https://aws.amazon.com/console/).\n3. In the top menu select **Services** and then choose **IAM**.\n4. In the left navigation menu select **Policies**.\n5. Click **Create policy** and select the **JSON** tab.\n6. Paste the policy you copied from the wizard on CAVATICA, replacing the existing content.\n7. Click **Review policy** and enter a policy name, e.g. `sb-access-policy` (remember this policy name as you will need to attach it later to the IAM user).\n8. (Optional) Enter the policy description.\n9. Click **Create policy** to finish process of policy creation.\n\n## Step 5: Set up an IAM user and enter its details\n\nAuthentication of CAVATICA is done through AWS Identity and Access Management (IAM) services and, specififcally using the IAM user authentication method.\n\nFollow these steps to set up an AWS IAM user that you will use to connect an S3 bucket (volume) to CAVATICA:\n1. In the volume connection wizard on CAVATICA select **IAM User**.\n2. Go to the [AWS Management Console](https://console.aws.amazon.com/).\n3. In the top menu select **Services** and then choose **IAM**.\n4. In the left navigation menu select **Users**, and then choose **Add user**.\n5. Enter the **User name** for the user you are creating.\n6. In the **Access type** section, select **Programmatic access**.\n7. Click **Next: Permissions**.\n8. In the **Set permissions** section select **Attach existing policies directly**.\n9. Use search bar to find and select the policy you created earlier (e.g. `sb-access-policy`)\n10. Click **Next: Tags**.\n11. (Optional) Add tags to the user. These are key-value pairs that contain additional information about the IAM user and are not necessary for the process of attaching a volume to CAVATICA.\n12. Click **Next: Review**. The user details screen is displayed. Check once again that all entered information is correct.\n13. Click **Create user**. You will see a message that the user is successfully created.\n14. On the confirmation screen, copy the provided **Access key ID** and **Secret access key** and use them for volume creation on CAVATICA.\n15. Click **Close**.\n16. On CAVATICA, enter **Access Key ID** and **Secret Access Key** in the corresponding fields of the volume connection wizard.\n17. Click **Next**.\n\n## Step 6: Configure additional options\n\nIn this tab, you have the option to configure the endpoint, including a [FIPS endpoint](doc:amazon-web-services-simple-storage-service-s3-volumes#section-amazon-s3-fips-endpoints) if you need to use one. You can also set up [server-side encryption](https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html), and AWS Canned ACL.\n\n## Step 7: Review volume details\n\nOn this tab, review the details for your volume and click **Connect**.\n\n## Next step\n\nCongratulations! You've attached your volume to CAVATICA. You can make individual data objects within it available as \"aliases\" on CAVATICA. Aliases point to files stored on your cloud storage bucket and can be copied, executed, and organized like normal files on CAVATICA. We call this operation \"importing\". Learn more about [working with aliases](doc:aliases).","updates":[],"order":4,"isReference":false,"hidden":false,"sync_unique":"","link_url":"","link_external":false,"_id":"5f083ab9800e1b0018a183f9","createdAt":"2020-07-10T09:54:01.352Z","user":"5767bc73bb15f40e00a28777","category":{"sync":{"isSync":false,"url":""},"pages":[],"title":"Connect cloud storage","slug":"connect-cloud-storage","order":23,"from_sync":false,"reference":false,"_id":"5f0839d3f4b24e005ebbbc29","createdAt":"2020-07-10T09:50:11.713Z","version":"5773dcfc255e820e00e1cd50","project":"5773dcfc255e820e00e1cd4d","__v":0},"version":{"version":"1.0","version_clean":"1.0.0","codename":"","is_stable":true,"is_beta":false,"is_hidden":false,"is_deprecated":false,"categories":["5773dcfc255e820e00e1cd51","5773df36904b0c0e00ef05ff","577baf92451b1e0e006075ac","577bb183b7ee4a0e007c4e8d","577ce77a1cf3cb0e0048e5ea","577d11865fd4de0e00cc3dab","578e62792c3c790e00937597","578f4fd98335ca0e006d5c84","578f5e5c3d04570e00976ebb","57bc35f7531e000e0075d118","57f801b3760f3a1700219ebb","5804d55d1642890f00803623","581c8d55c0dc651900aa9350","589dcf8ba8c63b3b00c3704f","594cebadd8a2f7001b0b53b2","59a562f46a5d8c00238e309a","5a2aa096e25025003c582b58","5a2e79566c771d003ca0acd4","5a3a5166142db90026f24007","5a3a52b5bcc254001c4bf152","5a3a574a2be213002675c6d2","5a3a66bb2be213002675cb73","5a3a6e4854faf60030b63159","5c8a68278e883901341de571","5cb9971e57bf020024523c7b","5cbf1683e2a36d01d5012ecd","5dc15666a4f788004c5fd7d7","5eaff69e844d67003642a020","5eb00899b36ba5002d35b0c1","5eb0172be179b70073dc936e","5eb01b42b36ba5002d35ebba","5eb01f202654a20136813093","5eb918ef149186021c9a76c8","5f0839d3f4b24e005ebbbc29","5f893e508c9862002d0614a9","6024033e2b2f6f004dfe994c","60a7a12f9a06c70052b7c4db","60a7ab97266a4700161507c4","60b0c84babba720010a8b0b5"],"_id":"5773dcfc255e820e00e1cd50","__v":39,"createdAt":"2016-06-29T14:36:44.812Z","releaseDate":"2016-06-29T14:36:44.812Z","project":"5773dcfc255e820e00e1cd4d"},"project":"5773dcfc255e820e00e1cd4d","__v":0,"parentDoc":null}

Attach an Amazon Web Services S3 volume


## Overview Attach a volume for use on CAVATICA's visual interface. Use this tutorial if your cloud storage provider is Amazon Web Services (AWS). Or, learn more if the storage bucket that you want to attach is hosted on [Google Cloud Storage (GCS)](doc:attach-a-google-cloud-storage-volume). ## Prerequisite 1. An [Amazon Web Services (AWS)](https://aws.amazon.com/) account. 2. One or more buckets on this AWS account. ## Step 1: Access the Volumes Dashboard 1. Click on the **Data** tab of the top navigation bar. 2. Select **Volumes** from the drop-down menu. ## Step 2: Choose a cloud storage provider 1. On the Volumes Dashboard, click **+Attach volume**. 2. Select **Amazon Web Services** as your cloud storage provider. ## Step 3: Provide S3 bucket details 1. Enter your S3 bucket name, as displayed in the [AWS Management Console](https://console.aws.amazon.com/).  2. (Optional) Define a new name for the volume created from this S3 bucket on CAVATICA. 3. (Optional) Enter a description for your volume. 4. Select access privileges: choose between **Read only (RO)** and **Read and Write (RW)** permissions. 5. (Optional) enter a prefix. Learn more about [prefixes](doc:volumes#prefix). 6. Click **Next**. ## Step 4: Copy the policy In this step, copy the policy and use it to create a new custom policy in the [AWS Management Console](https://aws.amazon.com/console/). 1. Copy the policy from the text box on CAVATICA. 2. Go to the [AWS Management Console](https://aws.amazon.com/console/). 3. In the top menu select **Services** and then choose **IAM**. 4. In the left navigation menu select **Policies**. 5. Click **Create policy** and select the **JSON** tab. 6. Paste the policy you copied from the wizard on CAVATICA, replacing the existing content. 7. Click **Review policy** and enter a policy name, e.g. `sb-access-policy` (remember this policy name as you will need to attach it later to the IAM user). 8. (Optional) Enter the policy description. 9. Click **Create policy** to finish process of policy creation. ## Step 5: Set up an IAM user and enter its details Authentication of CAVATICA is done through AWS Identity and Access Management (IAM) services and, specififcally using the IAM user authentication method. Follow these steps to set up an AWS IAM user that you will use to connect an S3 bucket (volume) to CAVATICA: 1. In the volume connection wizard on CAVATICA select **IAM User**. 2. Go to the [AWS Management Console](https://console.aws.amazon.com/). 3. In the top menu select **Services** and then choose **IAM**. 4. In the left navigation menu select **Users**, and then choose **Add user**. 5. Enter the **User name** for the user you are creating. 6. In the **Access type** section, select **Programmatic access**. 7. Click **Next: Permissions**. 8. In the **Set permissions** section select **Attach existing policies directly**. 9. Use search bar to find and select the policy you created earlier (e.g. `sb-access-policy`) 10. Click **Next: Tags**. 11. (Optional) Add tags to the user. These are key-value pairs that contain additional information about the IAM user and are not necessary for the process of attaching a volume to CAVATICA. 12. Click **Next: Review**. The user details screen is displayed. Check once again that all entered information is correct. 13. Click **Create user**. You will see a message that the user is successfully created. 14. On the confirmation screen, copy the provided **Access key ID** and **Secret access key** and use them for volume creation on CAVATICA. 15. Click **Close**. 16. On CAVATICA, enter **Access Key ID** and **Secret Access Key** in the corresponding fields of the volume connection wizard. 17. Click **Next**. ## Step 6: Configure additional options In this tab, you have the option to configure the endpoint, including a [FIPS endpoint](doc:amazon-web-services-simple-storage-service-s3-volumes#section-amazon-s3-fips-endpoints) if you need to use one. You can also set up [server-side encryption](https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html), and AWS Canned ACL. ## Step 7: Review volume details On this tab, review the details for your volume and click **Connect**. ## Next step Congratulations! You've attached your volume to CAVATICA. You can make individual data objects within it available as "aliases" on CAVATICA. Aliases point to files stored on your cloud storage bucket and can be copied, executed, and organized like normal files on CAVATICA. We call this operation "importing". Learn more about [working with aliases](doc:aliases).