Connect Amazon S3

Connect an Amazon S3 bucket you own so Greenpixie can read your input data and write the enriched file to output.

Create a bucket

Create or select an existing Amazon S3 bucket to use for input and output data. See the AWS guide to creating a bucket.

Bucket name

Your bucket name should include your company or team name.

For example, abc-corp-cur-data.

Bucket settings

Apply the following so that access is controlled through IAM rather than ACLs or public access:

• ACLs disabled
• Block all public access

See blocking public access to your S3 buckets.

Grant Greenpixie access

Access is granted through a bucket policy. In the Greenpixie environment there is a dedicated IAM user for each data connection, and you grant read and write access to this principal on your bucket.

Your Greenpixie contact provides the role-arn. bucket-name is the name of the bucket you created. Add the policy to your bucket, following the AWS guide to adding a bucket policy.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowGreenpixie",
      "Effect": "Allow",
      "Principal": {
        "AWS": [
          "{role-arn}"
        ]
      },
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "s3:PutObject",
        "s3:GetBucketLocation",
        "s3:ListBucketMultipartUploads",
        "s3:ListMultipartUploadParts",
        "s3:AbortMultipartUpload"
      ],
      "Resource": [
        "arn:aws:s3:::{bucket-name}",
        "arn:aws:s3:::{bucket-name}/*"
      ]
    }
  ]
}

Details to send Greenpixie

Send your bucket name to your Greenpixie contact.

Next steps

Once connected, Greenpixie enriches your data daily between 01:00 and 04:00 UTC, processing the month-to-date. Your Greenpixie contact will confirm the connection and the enrichment cadence.