Integrating with S3
Last updated
Was this helpful?
Last updated
Was this helpful?
To connect your Amazon S3 bucket to Drivetrain, you need:
An S3 bucket containing files with CSV file types and encodings
For private or encrypted buckets, an AWS account with the ability to grant Drivetrain permission and to read from the bucket
We recommend disabling Access Control Lists (ACLs) on each S3 bucket so that the bucket contents are controlled by the bucket's access control settings and not the original file owner's settings. For more information about disabling ACLs for your bucket, see .
Method 1: Using the Access key and Secret
Bucket name
Folder path
Access key
Access secret
AWS Region
Method 2: Using Roles (More secure)
Bucket name
Folder path
AWS Region
Go to Policies, then click Create Policy
Go to the JSON tab
Copy the following policy and paste it into the visual editor. Replace {your-bucket-name} with the name of your S3 bucket. After that, click Next: Tags.
5. (Optional) If you use a customer-managed KMS key, add the following policy to the Action section of the IAM policy to provide read access to the encrypted files.
In the Add tags step, you can optionally add custom tags that will be associated with your bucket. Click Next: Review.
In the Review policy step, specify the name of your policy, for example "Drivetrain-S3-Access", then click Create policy.
Go to Users, then click Add users.
Enter the user name, then click Next.
Select the Attach policies directly option, then choose the "Drivetrain-S3-Access" policy you created in Step 1.
Click Next, then click Create User.
In the Users tab, open the User you created.
Go to the Security credentials tab and navigate to the Access keys section.
Click the Create access key.
From the Use Case options, select the Third-party service option and then click Next.
Enter a Description tag value and then click the Create access key.
Copy the Access key and Secret access key values. You will need them to configure the integration.
Share the following details with the Drivetrain team:
Bucket name
Folder path
Access key
Access secret
AWS Region
Go to Roles, then click Create role.
Select AWS account, then enter Drivetrain’s AWS Account ID, 865992467666, in the Account ID field.
In the Add permissions step, select the "Drivetrain-S3-Access" policy you created, then click Next.
Enter the name Drivetrain-Integration check Trust policy settings and attached policy and click Create Role.
To assign permissions to your S3 bucket, follow the below steps:
Select the bucket to which you want to assign permissions.
Navigate to the Permissions tab.
Go to Bucket Policy.
Click Edit. Copy the below policy and paste it into the visual editor. Replace {your-bucket-name} with the name of your S3 bucket.
Click 'Save' to apply the changes.
Share the following details with the Drivetrain team:
Bucket name.
Folder path.
AWS Region
For encrypted buckets, follow to modify the AWS KMS key's policy to grant Drivetrain permissions to download files from your encrypted bucket
Open your .
Open your .
Follow the same steps as in of Method 1.
