Configure a Bobsled managed bucket

Bobsled can deliver data to a Bobsled managed AWS S3 bucket. This provides a fast and easy way to deliver data, making it easy to grant access to third party AWS accounts.

Prerequisites

• Before configuring a destination, a share must be created. 
• Bobsled requires ARN to be provided to grant access to the data in the Bobsled-managed destination. 
  • To learn more about ARN's and how to find them, please visit: Account Access Identifiers in AWS

Configuring the destination

1. On the share page, click the box Choose Destination

2. Choose the cloud platform Amazon S3 and choose the region of your target destination bucket(s). Keep the choice of "Bobsled-managed bucket" selected.  Press continue

3. Enter your ARN and click Grant Access. 

You've now successfully setup access.

Bobsled grants the following permissions to any ARN that is granted access to the data in the share:

• s3:GetObject
  • Retrieves objects from Amazon S3
• s3:GetObjectAttributes
  • Retrieves all the metadata from an object without returning the object itself
• s3:GetObjectVerison
  • Retrieves a specific version of the object 
• s3:ListBucket
  • Allows the user to use the Amazon S3 GET Bucket (List Objects) operation
• s3:GetObjectTagging
  • Returns the tag-set of an object

To learn more about ARN's used within Bobsled please visit: Account Access Identifiers in AWS. 

Revoking access

To revoke an ARN access to a share, click the button "revoke”.