3.4.5.1.2.1. AWS S3

Prerequisites

• To connect to a cloud endpoint, you must have licensed the Archive Connector Module add-on.
• Standard S3, Standard IA, One Zone-IA and Glacier Instant Retrieval are fully supported for archival and retrieval operations.

!Intelligent tiering and Lifecycle rules can be applied to the bucket, but Strawberry cannot automatically retrieve files from Glacier Flexible Retrieval and Glacier Deep Archive. These files must be manually restored to a supported storage class before Strawberry can access them.

AWS Configuration Summary

This is a configuration summary. Please check the AWS documentation for details.

1. Create a private S3 bucket and configure Intelligent-tiering and Lifecycle rules as needed. Please note that server-side encryption is enabled by default.
2. Create a Strawberry archive user.
3. Create a policy granting the user access and scope only to the archive bucket. Required policies are:

• s3:ListBucket
• s3:DeleteObject
• s3:GetObject
• s3:PutObject
• s3:PutObjectACL
• s3:ListMultipartUploadParts
• s3:AbortMultipartUpload

4. Navigate back to IAM and select the user.
5. Under Security credentials, create an access key for that user.
6. Store the credentials in a secure location.

Strawberry Configuration

1. Log in to the Strawberry admin panel.
2. Click on the Archive tab.
3. Click on the Archive Strategies bar to expand it.
4. Click on the Add button located below the list of strategies.
5. Now provide the following information:

Name

The name of the archive strategy as users will see it when they archive projects. This can be something generic, such as Cloud Archive, or something more specific, such as AWS S3 Archive. The strategy name can be changed later.

Type

Select Cloud Endpoint as the type. From here, the following information needs to be provided:

• Cloud Storage: Select AWS S3. This cannot be changed later.
• Region: Select the region in which your archive bucket is located. You can get this information in the S3 section of your AWS Management Console. This cannot be changed later.
• Bucket: The name of the archive bucket as shown in the AWS Management Console. When copying the bucket name from AWS, check for and remove any trailing spaces. The bucket cannot be changed later!
• Access Key: The access key of the user that accesses the bucket.
• Secret Key: The secret key of the user that accesses the bucket.
• Prefix: This one is optional. Define the folder within the bucket into which Strawberry should archive projects. The default prefix is pam_archive, but it can be changed to a custom value, or you can keep it empty if projects should be archived to the top level of the bucket. The prefix cannot be changed later.

6. Once you are done, click on the Create button. Strawberry will check if the information entered is correct. If that’s the case, you will see a success message. If the test fails, you will see the failure’s reason as a read error message.