AWS S3 Streaming Configuration

This document provides information on configuring an AWS S3 connection with real-time event monitoring and data streaming.

To enable DDR (Streaming) for an existing AWS S3 scan, follow these steps:

Prerequisites

Existing AWS S3 connection:

1. An AWS S3 scan configuration must already exist.

• If an AWS S3 scan has not been configured yet, follow this guide to create a new AWS S3 scan and ensure the necessary credentials are set up.

1. Extend AWS S3 policy permissions to allow data streaming:

Require a separate set of permissions for AWS SNS service:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "SNSScoped",
			"Effect": "Allow",
			"Action": [
				"sns:CreateTopic",
				"sns:DeleteTopic",
				"sns:TagResource",
				"sns:SetTopicAttributes",
				"sns:Subscribe",
				"sns:ConfirmSubscription"
			],
			"Resource": [
				"arn:aws:sns:*:876326936841:s3-event-topic-*"
			]
		},
		{
			"Sid": "S3BucketNatification",
			"Effect": "Allow",
			"Action": [
				"s3:PutBucketNotification"
			],
			"Resource": "*"
		}
	]
}

Steps to Enable Data Streaming

1. Select an Existing Scan Configuration

1. Go to the Scan Configurations page in the product UI.

2. Select AWS S3 and create credentials for AWS S3

   

   Create AWS S3 credentials with required permissions
3. Find the AWS S3 scan configuration and select Edit Configuration from the options menu.

Create new AWS S3 Scan

Select Patch to be tracked for streaming

select Data streaming checkbox and modify webhook host if it's required for firewall configuration

To validate that streaming events coming though the system you may check Administration -> Live Events -> Streaming