On this page you can see your Bucket names, IDs Regions, File Level Encryption settings and Version settings. You can update/re-authenticate your credentials, and configure your Buckets, Bucket Folders, Metadata, and Multiple Bucket Settings.
Upload Amazon S3 Credentials (Access Key, Secret Key) and Bucket Configurations
Clicking Configure takes you to this page
Enter your Access Key and Secret Key to be able to manage your bucket configurations and add new buckets
Add buckets by choosing Use existing bucket or Create a new bucket
The Bucket Id field is a text field up to 40 characters and must be unique among all your buckets. This Id will be used in the bucket field you set up on the file object. For example, if your bucket field is a picklist, the picklist values need to be the bucket ids. The bucket id can be the same as the bucket name.
Bucket Folder Configuration Clicking the “Configure” button will take you to a page where you can configure Bucket Folders for each file object. Bucket Folders allow you to control where files are stored in your AWS bucket. See Bucket Folders under Advanced Features for how to configure this feature.
Metadata Configuration Clicking the “Configure” button will take you to a page where you can define metadata for each file object. Metadata is extra data stored with the file in your AWS bucket. For more information about metadata in AWS, see AWS’s Working with Metadata help page. For information about configuring Metadata in S-Drive, see User-defined Metadata for how to configure this feature.
On this page you can see your bucket name and File Upload Encryption setting and update/re-authenticate your credentials, including changing your bucket or file encryption type. You can also block public access to your bucket, and access your portal account.
Bucket Name Amazon bucket name used for S-Drive is displayed here.
File Level Encryption Encryption used when files are uploaded to your S3 bucket. This can be the same type of encryption as configured in AWS for your bucket (see Configuring Encryption below) or can be different, which will override the setting in your bucket. You can also choose to use the same encryption as the bucket. The Encryption options are:
S3-Managed Keys (SSE-S3) (default)
AWS Key Managment Service (SSE-KMS)
Use same encryption as S3 bucket (not recommended if bucket is not encrypted)
Update Amazon S3 Credentials (Access Key, Secret Key) and Bucket Configurations You can display and update your Amazon S3 credentials and bucket names. See GETTING SET UP - AWS and Portal Accounts for more details.
Block Bucket Public Access If you created new a new S3 bucket during the first S-Drive configuration, your bucket is public by default. To change the S3 bucket access settings to private, click on this button.
S-Drive Account, Usage and Billing Information You can access your S-Drive portal account for account, usage and billing information.
Configuring Encryption
When files are uploaded to S-Drive and stored in your AWS bucket, they may be encrypted depending on your configuration. There are 2 parts to configuring how files will be encrypted, described as follows:
S3 Bucket Encryption
In AWS, you can choose the encryption method for your bucket. See Setting default server-side encryption behavior for Amazon S3 buckets for more information. The options are
Disable (no encryption is enabled on the bucket)
Enable - Amazon S3 Key (SSE-S3)
Enable - AWS Key Management Service key (SSE-KMS).
For SSE-KMS, only AWS managed key will work with S-Drive.
S-Drive File Upload Encryption
This setting determines how files will be encrypted when uploaded. The Upload File Encryption Type does not have to match your Bucket Encryption.
The options are
S3-Managed Keys (SSE-S3)
AWS Key Management Service (SSE-KMS)
Use same encryption as S3 Bucket - this setting uploads files with the encryption type configured on your S3 bucket
If your bucket encryption is disabled (no encryption) and you choose “Use same encryption as S3 Bucket, your files will not be encrypted.
This table shows what encryption method is used for each combination of settings. The S-Drive File Upload Encryption Type overrides the bucket encryption unless the S-Drive setting is “use same encryption as S3 bucket)
Bucket Encryption ➡ S-Drive Configuration ⬇ | Disable | Enable/Amazon S3 Key (SSE-S3) | Enable/AWS Key Management Service key (SSE-KMS) |
|---|---|---|---|
S3-Managed Keys (SSE-S3) | SSE-S3 | SSE-S3 | SSE-S3 |
AWS Key Management Service (SSE-KMS) | SSE-KMS | SSE-KMS | SSE-KMS |
Use same encryption as S3 Bucket | No Encryption | SSE-S3 | SSE-KMS |
If you are upgrading from a previous version, check that the custom setting for this configuration has been created:
Go to Setup-->Custom Settings
Click Manage next to SDriveConfig
See if there is a setting for S3EncryptionType. It should be set to AES256. This is the value that corresponds to SSE-S3 and is the default value for S-Drive Configuration
If there is no custom setting called S3EncryptionType, create it:
From the page with the list of settings (after you clicked Manage), click New at the top
Under Name, enter S3EncryptionType
Under Value, enter AES256
Once this value is set, you can change it if needed by going to the S-Drive Configuration page shown above
