View Attach (9) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 »S3_VFS_config.png 143.0 kB 2 20-May-2025 04:42 krivacsz
png
 »S3_bucket_info.png 99.3 kB 1 05-Dec-2023 05:32 Sandor
png
 »assume_create_role_final_check... 119.7 kB 1 07-Oct-2024 07:25 krivacsz
png
 »assume_role_entity_type.png 94.2 kB 1 07-Oct-2024 07:16 krivacsz
png
 »assume_role_s3_access.png 140.2 kB 1 07-Oct-2024 07:20 krivacsz
png
 »assume_role_user_permission_po... 103.9 kB 1 07-Oct-2024 07:36 krivacsz
png
 »assume_role_vfs_settings.png 183.7 kB 2 07-Oct-2024 08:02 krivacsz
png
 »create_assume_role.png 84.5 kB 1 07-Oct-2024 07:14 krivacsz
png
 »s3_ec2_general_settings.png 30.1 kB 1 20-May-2025 03:50 krivacsz

This page (revision-119) was last changed on 24-Jun-2025 01:34 by krivacsz

This page was created on 05-Dec-2023 05:32 by Sandor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

-
Difference between version and

At line 3 changed one line
Allows you to use a S3 bucket as the backend filesystem. However since S3 isn't hierarchical, you only get simulated folders, and no ability to rename, and some other gotchas about how S3 works. These aren't limitations we impose, but just due to the design decisions S3 made in that it's intended for static item consumption and not as a location for holding and manipulating file names. \\
Allows you to use a S3 bucket as the backend filesystem. However, since S3 isn't hierarchical, you only get simulated folders, and no ability to rename, and some other gotchas about how S3 works. These aren't limitations we impose, but just due to the design decisions S3 made in that it's intended for static item consumption and not as a location for holding and manipulating file names. \\
At line 5 changed one line
The url should look like (Replace the url with your corresponding data!):\\
!1. Configuration.\\
At line 7 added 2 lines
The URL should look like this (Replace the URL with your corresponding data!):\\
\\
At line 21 changed 9 lines
s3:GetBucketLocation
s3:ListAllMyBuckets
s3:ListBucket
s3:ListBucketMultipartUploads
s3:PutObject
s3:AbortMultipartUpload
s3:ListMultipartUploadParts
s3:DeleteObject
}}}
"s3:GetBucketLocation",
"s3:ListAllMyBuckets",
"s3:ListBucket",
"s3:ListBucketMultipartUploads",
"s3:PutObject",
"s3:AbortMultipartUpload",
"s3:ListMultipartUploadParts",
"s3:DeleteObject",
"s3:GetObject",
"s3:GetObjectAttributes"
}}}\\
\\
!2. Access other cloud storage through S3 REST API\\
\\
Google Cloud - [Google Cloud Storage Integration] \\
BackBlaze(b2) - [BackBlaze(b2) integration]\\
\\
!3. Assume Role access\\
\\
You can use IAM roles to delegate access to your AWS resources. With IAM roles, you can establish trust relationships between your trusting account and other AWS trusted accounts. (for more info see: [https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html], and [https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html])\\
\\
Create the assume role at __Identity and Access Management (IAM)__:\\
\\
[attachments|create_assume_role.png]\\
\\
[attachments|assume_role_entity_type.png]\\
\\
[attachments|assume_role_s3_access.png]\\
\\
[attachments|assume_create_role_final_check.png]\\
\\
Add permission policy to the specified user. This policy will use the above-created assume role.\\
\\
[attachments|assume_role_user_permission_policy.png]\\
\\
{{{
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "Statement1",
"Effect": "Allow",
"Action": "sts:AssumeRole",
"Resource": "arn:aws:iam::XXXXX:role/AssumeRoleS3"
}
]
}
}}}\\
\\
Use the specified user's Access key and Secret along with the Assume Role ARN to obtain S3 access.\\
\\
[attachments|assume_role_vfs_settings.png]\\
\\
Version Date Modified Size Author Changes ... Change note
119 24-Jun-2025 01:34 14.432 kB krivacsz to previous
118 13-Jun-2025 03:05 14.431 kB krivacsz to previous | to last
117 13-Jun-2025 02:59 13.982 kB krivacsz to previous | to last
116 13-Jun-2025 02:40 13.497 kB krivacsz to previous | to last
115 13-Jun-2025 02:38 13.392 kB krivacsz to previous | to last
114 13-Jun-2025 02:37 13.275 kB krivacsz to previous | to last
113 13-Jun-2025 02:31 13.044 kB krivacsz to previous | to last
112 13-Jun-2025 02:30 13.044 kB krivacsz to previous | to last
111 13-Jun-2025 02:28 13.038 kB krivacsz to previous | to last
110 13-Jun-2025 02:27 13.034 kB krivacsz to previous | to last
109 13-Jun-2025 02:26 12.9 kB krivacsz to previous | to last
108 13-Jun-2025 02:22 12.96 kB krivacsz to previous | to last
107 13-Jun-2025 02:21 12.825 kB krivacsz to previous | to last
106 13-Jun-2025 02:21 12.7 kB krivacsz to previous | to last
105 13-Jun-2025 02:18 12.501 kB krivacsz to previous | to last
104 13-Jun-2025 02:15 12.495 kB krivacsz to previous | to last
103 13-Jun-2025 02:14 12.474 kB krivacsz to previous | to last
102 13-Jun-2025 02:12 12.294 kB krivacsz to previous | to last
101 13-Jun-2025 02:09 12.21 kB krivacsz to previous | to last
« This page (revision-119) was last changed on 24-Jun-2025 01:34 by krivacsz
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
BackBlaze(b2) integration
Google Cloud Storage Integration
LeftMenu

JSPWiki