{"id":8346,"date":"2019-08-22T09:30:47","date_gmt":"2019-08-21T23:30:47","guid":{"rendered":"https:\/\/www.penguinpunk.net\/blog\/?p=8346"},"modified":"2019-08-22T09:23:15","modified_gmt":"2019-08-21T23:23:15","slug":"pure-storage-configuring-objectengine-bucket-security","status":"publish","type":"post","link":"https:\/\/www.penguinpunk.net\/blog\/pure-storage-configuring-objectengine-bucket-security\/","title":{"rendered":"Pure Storage – Configuring ObjectEngine Bucket Security"},"content":{"rendered":"

\"\"<\/a><\/p>\n

This is a quick post as a reminder for me next time I need to do something with basic S3 bucket security. A little while I ago I was testing Pure Storage’s ObjectEngine (OE)<\/a> device with a number of data protection products. I’ve done a few articles previously on what it looked like from the Cohesity<\/a> and Commvault<\/a> perspective, but thought it would be worthwhile to document what I did on the OE side of things.<\/p>\n

The first step is to create the bucket in the OE dashboard.<\/p>\n

\"\"<\/a><\/p>\n

You’ll need to call it something, and there are rules around the naming convention and length of the name.<\/p>\n

\"\"<\/a><\/p>\n

In this example, I’m creating a bucket for Commvault to use, so I’ve called this one “commvault-test”.<\/p>\n

\"\"<\/a><\/p>\n

Once the bucket has been created, you should add a security policy to the bucket.<\/p>\n

\"\"<\/a><\/p>\n

Click on “Add” and you’ll be prompted to get started with the Bucket Policy Editor.<\/p>\n

\"\"<\/a><\/p>\n

I’m pretty hopeless with this stuff, but fortunately there’s a policy generator on the AWS site you can use<\/a>.<\/p>\n

\"\"<\/a><\/p>\n

Once you’ve generated your policy, click on Save and you’ll be good to go. Keep in mind that any user you reference in the policy will need to exist in OE for the policy to work.<\/p>\n

\"\"<\/a><\/p>\n

Here’s the policy I applied to this particular bucket. The user is commvault, and the bucket name is commvault-test.<\/p>\n

{<\/strong>\r\n  \"Id\": \"Policy1563859773493\",<\/strong>\r\n  \"Version\": \"2012-10-17\",<\/strong>\r\n  \"Statement\": [<\/strong>\r\n  \u00a0 {<\/strong>\r\n  \u00a0 \u00a0 \"Sid\": \"Stmt1563859751962\",<\/strong>\r\n  \u00a0 \u00a0 \"Action\": \"s3:*\",<\/strong>\r\n  \u00a0 \u00a0 \"Effect\": \"Allow\",<\/strong>\r\n  \u00a0 \u00a0 \"Resource\": \"arn:aws:s3:::commvault-test\",<\/strong>\r\n  \u00a0 \u00a0 \"Principal\": {<\/strong>\r\n  \u00a0 \u00a0 \u00a0 \"AWS\": [<\/strong>\r\n  \u00a0 \u00a0 \u00a0 \u00a0 \"arn:aws:iam::0:user\/commvault\"<\/strong>\r\n  \u00a0 \u00a0 \u00a0 ]<\/strong>\r\n  \u00a0 \u00a0 }<\/strong>\r\n  \u00a0 },<\/strong>\r\n  \u00a0 {<\/strong>\r\n  \u00a0 \u00a0 \"Sid\": \"Stmt1563859771357\",<\/strong>\r\n  \u00a0 \u00a0 \"Action\": \"s3:*\",<\/strong>\r\n  \u00a0 \u00a0 \"Effect\": \"Allow\",<\/strong>\r\n  \u00a0 \u00a0 \"Resource\": \"arn:aws:s3:::commvault-test\/*\",<\/strong>\r\n  \u00a0 \u00a0 \"Principal\": {<\/strong>\r\n  \u00a0 \u00a0 \u00a0 \"AWS\": [<\/strong>\r\n  \u00a0 \u00a0 \u00a0 \u00a0 \"arn:aws:iam::0:user\/commvault\"<\/strong>\r\n  \u00a0 \u00a0 \u00a0 ]<\/strong>\r\n  \u00a0 \u00a0 }<\/strong>\r\n  \u00a0 }<\/strong>\r\n  ]<\/strong>\r\n}<\/strong><\/pre>\n
You can read more about the policy elements here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
This is a quick post as a reminder for me next time I need to do something with basic S3 bucket security. A little while I ago I was testing Pure Storage’s ObjectEngine (OE) device with a number of data protection products. I’ve done a few articles previously on what it looked like from the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[62,25,1237,692,5],"tags":[110,1209,693,891],"class_list":["post-8346","post","type-post","status-publish","format-standard","hentry","category-commvault","category-dataprotection","category-objectengine","category-pure-storage","category-storage","tag-howto","tag-objectengine","tag-pure-storage-2","tag-s3"],"_links":{"self":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/8346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/comments?post=8346"}],"version-history":[{"count":2,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/8346\/revisions"}],"predecessor-version":[{"id":8355,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/8346\/revisions\/8355"}],"wp:attachment":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/media?parent=8346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/categories?post=8346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/tags?post=8346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}