Setting up authorizations to store data extracts#
This guide explains how to set up an authorization to be used as storage for data extracts.
Introduction#
Set up an authorization to a storage provider where data extracts are stored once the data has been collected. Use the authorization to set up storage in your workspace. For more information, see Setting up storage for data extracts.
This guide explains how to set up the most commonly used authorizations.
Prerequisites#
Before you complete the procedure in this guide, perform all of the following actions:
Configure the server firewall settings so that Adverity can establish a connection.
Ensure you have the credentials to access your chosen authorization.
When setting up the credentials, ensure you have read, write, delete and list permissions (or equivalent) for the applicable storage type. For more information, see Configuring required permissions for data extract storage.
Setting up an authorization using SFTP#
To set up an authorization using SFTP, follow these steps:
Go to the Authorizations page.
In the top right corner, click + Create Authorization.
Search for and click File.
Click Setup a new Authorization.
Enter the Username and Password for your SFTP authorization.
Enter the server Hostname.
Click Authorize.
Click Save.
The authorization using SFTP is now set up.
Setting up an authorization using SFTP Public Key Authentication#
Before you complete the procedure in this guide, perform all of the following actions:
Create an SFTP Public Key.
Procedure#
To set up an authorization using SFTP Public Key Authentication, follow these steps:
Go to the Authorizations page.
In the top right corner, click + Create Authorization.
Search for and click SFTP Public Key.
Click Setup a new Authorization.
Enter the server Hostname.
Enter the Username.
In Key Type, select the public key type.
In Private Key, upload the private key file to authorize the SFTP authorization.
Click Authorize.
Click Save.
The authorization using SFTP Public Key Authentication is now set up.
For more information, see Setting up an authorization to SFTP server with a public key.
Setting up an authorization to Amazon S3#
To set up an authorization to Amazon S3, follow these steps:
Go to the Authorizations page.
In the top right corner, click + Create Authorization.
Search for and click Amazon S3.
Click Setup a new Authorization.
Enter the Access Key ID and Secret Access Key for your Amazon S3 authorization.
(Optional) If you want to assume an AWS IAM role, enter the AWS Role ARN to assume.
If your AWS role requires an External ID, enter it in the External ID field below the AWS Role ARN. Use this field to provide a unique identifier when assuming an AWS role. This is a security best practice to prevent unauthorized cross-account access (the “confused deputy problem”) and secure resources in your AWS account. For more information, see the AWS documentation on the confused deputy problem.
Note
The combination of AWS Role ARN and External ID (if provided) will be used to authenticate and authorize access to your Amazon S3 resources.
Click Authorize.
Click Save.
The authorization to Amazon S3 is now set up.
Setting up an authorization to Azure Blob Storage#
To set up an authorization to Azure Blob Storage, follow these steps:
Go to the Authorizations page.
In the top right corner, click + Create Authorization.
Search for and click File Azure.
Click Setup a new Authorization.
Enter the Account name and Account Key for your Azure Blob Storage authorization.
Click Authorize.
Click Save.
The authorization to Azure Blob Storage is now set up.
Setting up an authorization to Google Cloud Storage (Service Account)#
Before you complete the procedure in this guide, perform all of the following actions:
Create a service account file in a JSON format. For more information, see the Google documentation.
Procedure#
To set up an authorization to Google Cloud Storage (Service Account), follow these steps:
Go to the Authorizations page.
In the top right corner, click + Create Authorization.
Search for and click Google Cloud Storage (Service Account).
Click Setup a new Authorization.
In Service account data, upload the service account file to authorize the authorization.
Click Authorize.
Click Save.
The authorization to Google Cloud Storage (Service Account) is now set up.