Creating a COS Policy

Prerequisites for a COS Policy

1. Install Required Linux Packages

2. Generate a self-contained AWS CLI binary with PyInstaller

   Make sure to:

   a. Install PyInstaller

   b. Install the Amazon AWS Command Line Utility

   c. Create a Runtime Hook

3. Configure a CTE COS S3 Role for Guarded Buckets

User Set

• Create User Sets by Adding Members Manually

Key Rule

• Add Key Rules

• For COS keys:

  • Algorithm: AES

  • Object Type: Symmetric Key

  • Size: 256

  • Encryption Mode: CBC-CS1

  • Key Usage: Encrypt, Decrypt

  • Exportable: On

Process Set

• The Directory is the directory where you created the binary when you generated a self-contained AWS CLI binary with PyInstaller in step 2 of the prerequisite section above.

• The File is the file created during that process.