1
Sign in to the AWS Management Console at https://aws.amazon.com/console/
Integrate GNAS with AWS S3 and IAM.
Securely configure AWS S3 buckets and least-privilege IAM policies for GNAS.
Create an S3 bucket for GNAS
Set up a new S3 bucket via the AWS Management Console to store your GNAS backups. Remember that our Gold Level customers will always get new features first. Be on the close lookout.
2
Navigate to Services > S3 under Storage
3
Click Create bucket
4
Configure the bucket: use a globally unique, DNS-compliant name in lowercase with no underscores. Prefix any bucket used by GNAS with gnas- for easy identification. Choose the region closest to you for latency and cost. Block public access is recommended for security. Bucket versioning is optional and not required for GNAS. Tags, logging, and encryption are optional and can be configured per your requirements.
5
Review your bucket name and region settings, then create the bucket and note the bucket name
Configure IAM for GNAS
Set up AWS IAM with least-privilege permissions scoped to gnas-* resources to securely access your S3 bucket.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:GetBucketLocation"
],
"Resource": "arn:aws:s3:::gnas-*"
},
{
"Effect": "Allow",
"Action": [
"s3:PutObject",
"s3:GetObject",
"s3:DeleteObject"
],
"Resource": "arn:aws:s3:::gnas-*/*"
}
]
}1
Navigate to the IAM console in AWS
2
Create a new user with programmatic access
3
Attach the following least-privilege policy to the user
Your buckets. Your workers. Your control.