Secure an S3 Bucket with the CTE COS S3 Role

When you enable the CTE COS S3 Role for a bucket, the associated bucket policy prevents unauthorized users from accessing the contents of the bucket. To enable the CTE COS S3 Role for a bucket, use the following command: :::yaml voradmin cos s3 role secure-bucket

where:

• <aws_key_id> is the AWS secret key ID for the delegated IAM user that you created.

• <aws_secret_key> is the AWS secret key for the delegated IAM user that you created.

• <cos name> is the cloud service name from CTS COS configuration file, <installation directory>/agent/squid/etc/cos.conf.

• <region> is the region where the S3 bucket is located in the targeted cloud storage service.

• <bucket_name> is the name of the S3 bucket on which you want to enable the CTE COS S3 Role.

For example, if the bucket name is vte-cos-s3-rtb, you would enter:

voradmin cos s3 role secure-bucket AKIA****P KQSm****D aws us-west-1  vte-cos-s3-rtb