Contents:
Contents:
NOTE: This section applies to using S3 as the default storage layer. Before you begin, some information must be gathered from AWS. See Enable Access to S3 and AWS Resources.
Authentication method
The following methods can be used to manage authentication with AWS.
| Credential Provider | Description |
|---|---|
| Use a cross-account role (IAM role) | The Designer Cloud Powered by Trifacta platform can use any IAM roles that have been defined for workspace members to access AWS data sources, such as S3 and Redshift. Tip: This credential provider method is recommended. |
| Use access keys | You can apply key and secret access key combinations to gate access to AWS data sources. These access keys can be applied in workspace mode or in per-user mode by individual members. |
Use a Cross-Account Role - Create an IAM Policy
After you select a cross-account role, you must specify an IAM policy and apply it to the workspace.
Copy policy
Choose an S3 bucket: Enter the name of your S3 bucket.
Tip: This value specifies your default S3 bucket and referenced in the IAM policy that is displayed.
Follow the instructions to copy the specified policy to the clipboard.
Create IAM role
You can follow the instructions on-screen to define an IAM role that uses your new policy.
Fields:
| Setting | Description |
|---|---|
| Account ID | This value is pre-populated when the workspace is created. NOTE: Do not modify. |
| External ID | This value is pre-populated when the workspace is created. NOTE: Do not modify. |
Copy the IAM role ARN from the AWS console and paste it into the textbox.
Use Access Keys - Provide Your AWS Credentials
For key-secret authentication to AWS, please specify the following settings.
NOTE: The AWS key and secret must provide read/write access to the default S3 bucket at least.
The account must have the ListAllMyBuckets ACL among its permissions.
| Setting | Description |
|---|---|
| AWS access key | The AWS access key to use. |
| AWS secret key | The AWS secret associated with the access key. |
Storage and encryption
S3 Buckets
For key-secret authentication to AWS, please specify the following settings.
| Setting | Description |
|---|---|
| Default S3 bucket for uploaded files, temporary files, and job results | Specify the name of the default S3 bucket. NOTE: Specify the top-level bucket name only. There should not be any backslashes in your entry. |
| Additional S3 buckets | You can specify any additional S3 buckets in a comma-separated list of names. |
Encryption type
The Designer Cloud Powered by Trifacta platform supports the use of server-side encryption when writing results.
NOTE: When encryption is enabled, all buckets to which you are writing must share the same encryption policy.
| Setting | Description |
|---|---|
| Encryption Type | Supported encryption types: NOTE: If
|
| KMS key ID | If SSE-KMS has been selected, you can paste the KMS Key ID value in this field. |
This page has no comments.