Getting Set Up - AWS and Portal Accounts
Welcome to S-Drive! S-Drive uses Amazon Web Services (AWS) to store files, and an S-Drive portal account to track usage and billing. Let’s get those set up first.
Create an Amazon Web Services Account
To set up an AWS account, go to https://aws.amazon.com/ or directly to https://portal.aws.amazon.com/billing/signup#/start to create an account.
Note: It’s very important to keep track of the login credentials for this account and to make sure they are not lost if the person who created them leaves the organization. They will be needed at times in the future when it may be necessary to update or change your bucket.
You will create a bucket later on when you configure S-Drive. There is no need to create a bucket directly in AWS and we recommend against it.
Access Key and Secret Key
When creating your account, you will be given an Access Key and Secret Key, which you will need later in order to activate S-Drive.
Save your Access Key and Secret Key somewhere secure. You will need these and cannot get them from AWS. You must create new ones if you lose these.
If you need to create keys again, you can go to https://aws.amazon.com/ and go to Security Credentials.
Note: Your access key may be exposed when sharing a link to files or uploading files. The Access Key is akin to a username, while the Secret Key is like a password, so exposing the Access Key is not considered a security risk. It is how AWS works with pre-signed URLs.
See these articles for more information:
Sharing Objects using presigned URLs (AWS)
AWS security credentials (AWS)
Managing access keys for IAM users (AWS)
Is an AWS "Access Key ID" a secret? (Stack Exchange)
Identity and Access Management (IAM) Policies and Minimum Policy Example
Create an S-Drive Portal Account
In order to use S-Drive, you need to create your own S-Drive Portal account. Once you install S-Drive in your Salesforce org, you will login to this portal acount and connect your org. Your portal can connect multiple orgs--sandboxes and production. In the portal, you will also be able to see your Amazon account, your S-Drive invoices, and payment details. Go https://portal.sdriveapp.com. Register for a free account, or login if you already have an account.
For more information about your Portal account, including how to register a payment method, see payment details, download invoices, connect or reconnect to organizations, change your password or Account information and more, see https://cyangate.atlassian.net/wiki/spaces/SK/pages/1871052801
Creating a Bucket
We recommend creating a bucket from within S-Drive. See https://cyangate.atlassian.net/wiki/spaces/SD225/pages/1994883199 This will ensure the settings on the bucket are correct.
CORS (cross-origin resource sharing) settings
If you choose to create a bucket directly in S3, make sure it has the following CORS settings, which can be found under the bucket permissions in AWS.
[
{
"AllowedHeaders": [
""
],
"AllowedMethods": [
"GET",
"PUT",
"POST",
"DELETE",
"HEAD"
],
"AllowedOrigins": [
""
],
"ExposeHeaders": []
}
]