Versions Compared

Old Version 1

changes.mady.by.user Claire SanNicolas

Saved on

compared with

New Version Current

changes.mady.by.user Claire SanNicolas

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Info

Increasing security

The user installing and connecting S-Drive in the portal must have Modify All Data and Customize Application permissions. This is typically an Admin user.

To increase security, we recommend setting up a special user with its own profile that will have Modify All Data and Customize Application permissions, and after installation those permissions will be removed. You can clone the System Administrator profile and remove permissions after installation.

The steps to do this are described briefly here, but are in the instructions on this page in more detail.

  1. Create a user that will be a service user that has Admin permissions, including Modify All Data and Customize Application.

  2. Login as the service user and Install S-Drive and connect the org in the portal as described in the steps below.

  3. Now login to Salesforce as Admin.

  4. Go to S-Drive Configuration General Settings tab and scroll down to Other Settings

  5. Click the Reschedule button

  6. Edit the profile for the service user and remove Modify All Data and Customize Application permissions. (You can set up a permission set for these permissions.) Make sure the service user still has the necessary permissions to send outbound messages and has CRUD permissions to all S-Drive objects

NOTE: Any time Anytime your org is disconnected from the portal for any reason, you will need to restore Modify All Data and Customize Application Permissions to the service user, reconnect in the portal, then remove the permissions again.

...

Step 2: Configure Amazon S3 Credentials:
This step is required to connect your Amazon S3 account with S-Drive. You need to enter a valid "Amazon Access Key" and "Secret Key". After providing keys, if you see "Amazon S3 Credentials are configured correctly," continue with the next step.

...

Step 3: Configure Amazon S3 Bucket Name:
This is the bucket that will be used to store your files in your Amazon S3 account. You can configure more than one bucket. Bucket name must be unique and must comply with DNS naming conventions. Bucket names cannot have capital letters or underscores or contain dots (“.”)

You can select "Use existing bucket" or "Create a new bucket" option. We recommend creating your bucket here in the S-Drive Configuration, rather than directly in AWS or using a bucket previously created here.

  • Create new bucket:

    Image RemovedImage Added

    • provide Provide a valid bucket name

    • Provide a unique bucket id. This can be anything and can be the same as the bucket nameselect . This field is used to reference the bucket when configuring Multiple Bucket Support.

    • Select the region name to create the bucket on this endpoint location

    • Click “Check Remote Sites.” You will be taken to a Remote Site Setting and need will need to save it.

    • When complete, click “Configure Amazon S3 Bucket Name”

    • You will see the page refresh and show your bucket name and the default File Upload Encryption, which is SSE-S3. This can be changed later. See S-Drive Authentication Settings for more information.

...

    • You can also use the Action buttons to Block Public Access (recommended), Enable Versioning, Enable Acceleration or you can click Add More Buckets to add another bucket.

      Image Added

  • Use existing bucket:

    • Select one of the bucket name from the list (that is retrieved from your Amazon S3 account).
      Important Note:  If you are using and existing bucket and are planning to use S-Drive Versioning feature, we strongly suggest you use a "versioning never enabled bucket". To ensure versioning status of your bucket, sign in to your amazon console, find your bucket from S3 service and check bucket properties.

    • Provide a unique bucket id. This can be anything and can be the same as the bucket name. This field is used to reference the bucket when configuring Multiple Bucket Support.

    • Select the File Upload Encryption Type. This can be changed later. See S-Drive Authentication Settings for more information.

    • Click “Check Remote Sites.” You will be taken to a new Remote Site Setting and will need to save it.

    • When complete, click “Configure Amazon S3 Bucket Name”

Info

If you configure more than one bucket, one must be chosen as the Default bucket. This will be used when no specific bucket is specified for upload.

Note

Security: Your bucket access settings will be public by default when it is created. After it is created and you have finished the configuration process, there will be a button on the S-Drive configuration page under Authentication Settings called “Block Bucket Public Access” on the configuration page. Simply click the button to make your bucket private. This is recommended.

Step 4: S-Drive Authorization: 
Go to https://portal.sdriveapp.com and login into the S-Drive portal account you created earlier. Authorize S-Drive to connect to your organization:

...