Message Aid

Settings

Setting	Description	Required
Bucket	The S3 bucket where messages should be stored	Yes
Region	The region the the bucket is in	Yes
Prefix	Should the agent store the messages with a prefix?	No
AccessKey	The IAM Access Key ID	No
AccessSecret	The IAM Secret Access Key	No

Authentication

Message Aid supports both IAM roles for authentication and passing explicit IAM Access Keys. We suggest that when ever possible that you rely on using AWS IAM Roles rather than using Access Keys.

Authorization

An example read/write (no delete) IAM policy might look like

{
  "Version": "2012-10-17",
  "Statement": {
    "Action": [
      "s3:Get*",
      "s3:List*",
      "s3:Put*"
    ],
    "Resource": [
      "arn:aws:s3:::$BUCKET_NAME",
      "arn:aws:s3:::$BUCKET_NAME/*"
    ],
    "Effect": "Allow"
  }
}