Snowplow – S3 Setup

The Snowplow S3 integration with Indicative is available for Enterprise customers only. If interested, please contact us. The Snowplow Unified Log is stored in an S3 bucket and the customer is required to write an IAM policy to grant Indicative programmatic access to the respective S3 bucket.

To edit the IAM policy of an existing S3 bucket,

1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

2. Under the Services dropdown, select S3 under Storage.

spp2.png  

3. Click on the appropriate bucket and then click into Permissions. We recommend the enriched/archive bucket set up through your Snowplow configuration. 

spp3.png

4. Click Bucket Policy

spp4.png

5. Enter the following into the editor and click Save

Note: both the Indicative ARN and bucket name to be replaced are bold

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:List*"
      ],
      "Principal": {
        "AWS": "arn:aws:iam::064495811816:user/snowplow-integrations"
      },
      "Resource": "arn:aws:s3:::bucket-name-here"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:Get*", "s3:Head*"
      ],
      "Principal": {
        "AWS": "arn:aws:iam::064495811816:user/snowplow-integrations"
      },
      "Resource": "arn:aws:s3:::bucket-name-here/*"
    }
  ]
}

 

6. Contact your account manager once you have granted Indicative programmatic access and provide you S3 bucket name.

0 users found this helpful