Skip to content

Configure AWS S3 Multiple Account Support

  1. SSH to the instance where Privacera Manager is installed.
  2. Open the vars.dataserver.aws.yml file in an editor:
    Bash
    1
    vi config/custom-vars/vars.dataserver.aws.yml
  3. Modify the following properties:
    YAML
     1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
    DATASERVER_AWS_MULTI_ACCOUNT_PROFILE_ENABLE: "true"
DATASERVER_AWS_PROFILE_NAME_DEFAULT: "aws_account1"
DATASERVER_AWS_PROFILE_NAMES: "aws_account1, aws_account2"
DATASERVER_AWS_PROFILE_PROPERTIES:
- PROFILE_NAME: "aws_account1"
    PROFILE_PROPERTIES:
      - AUTHN_METHOD: "CUSTOM_IAM"
      - IAM_ARN: "arn:aws:iam::<account_id>:role/<role_name>"
      - REGION: "us-east-1"
- PROFILE_NAME: "aws_account2"
    PROFILE_PROPERTIES:
      - AUTHN_METHOD: "CUSTOM_IAM"
      - IAM_ARN: "arn:aws:iam::<account_id>:role/<role_name>"
      - IAM_ROLE_EXTERNAL_ID: "test1234"
      - REGION: "us-east-1"
  4. Once the properties are configured, refer to the Privacera Manager Quickstart.

To configure AWS S3 multiple account support in PrivaceraCloud, follow the Setup for AWS S3 steps for each account.

Managing AWS S3 Profiles After Privacera Manager Upgrade

  • If you are upgrading Privacera Manager with a dataserver that has multiple AWS profiles, and the portal already contains an AWS S3 application, it will neither add nor modify the AWS S3 information with respect to profile support.
  • To enable the portal to support multiple profiles following the Privacera Manager update, it is essential to first back up the application properties.

  • Adhere to the following steps to back up the AWS S3 application properties:

    1. Access the Platform portal.
    2. Navigate to Settings and select Data Source Registration.
    3. Click the edit icon adjacent to the AWS S3 application.
    4. Select Application Properties.
    5. Click on Import/Export Properties, and then select Export Properties.
    6. After exporting, delete the application and restart the portal.

Comments