AWS S3

AWS is the industry leader in cloud storage. Prices depend on region and usage.

Creating a New Bucket

1. Login to your AWS Console

2. In the top menu, select Services

3. Search for S3 and open it

4. Press the Create bucket button

5. Choose your a bucket name

6. Choose your AWS Region

• You can choose a region close to your server to increase speed, or further away if you want to mitigate risk

1. Leave Block all public access checked

2. You can leave all other options at default, or configure them manually

3. Press Create bucket

Creating a New IAM User

1. Leave S3 and find IAM from the top services menu

2. Press Users on left sidebar

3. Press the Add user button

• Give them a user name (e.g. snapshooter)

• Check Programmatic access

4. Ignore the Permissions section and press Next: Tags. We recommend you don't use the attach existing polices directly with AmazonS3FullAccess, as this will grant SnapShooter permission for every S3 bucket in your account and is unnecessary

• You can optionally create tags for the user

5. Press Next: Review

6. Press Create user

7. View Details SAVE THE SECRET KEY, this will never be shown again

8. In IAM find the user list and click on your new user

9. Press Add inline policy.

10. Choose JSON Editor and paste the following:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:PutObject",
        "s3:PutObjectAcl"
      ],
      "Resource": [
        "arn:aws:s3:::BUCKET_NAME/*",
        "arn:aws:s3:::BUCKET_NAME"
      ]
    }
  ]
}

Replace BUCKET_NAME with the newly created bucket name e.g.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:PutObject",
        "s3:PutObjectAcl"
      ],
      "Resource": [
        "arn:aws:s3:::s3.snapshooter.com/*",
        "arn:aws:s3:::s3.snapshooter.com"
      ]
    }
  ]
}

11. Press Create Policy (give it a useful name)

Attaching S3 to SnapShooter

1. Go back to SnapShooter

2. https://snapshooter.com/dashboard/settings/storage/attach

3. Choose a Friendly Name

4. Select AWS Storage Provider

5. Select the s3 region where you created your bucket

6. Paste in the saved access keys

7. Enter the correct bucket name

8. Press Save

9. We will check the API key is valid and works before allowing you to save. Once complete, you are ready to create a Backup Job that uses external storage