Amazon S3
- Kiss, Mate
- Gabor Moczar (Unlicensed)
| Available in version 8.5 and later |
|---|
This page provides a guide to configuring an Amazon S3 service as a Storage Target in the Verba Recording System.
Amazon Simple Storage Service (Amazon S3) is storage for the Internet. You can use Amazon S3 to store and retrieve any amount of data at any time, from anywhere on the web. Amazon S3 stores data as objects within buckets.
Buckets are the containers for objects. You can have one or more buckets. For each bucket, you can control access to it (who can create, delete, and list objects in the bucket), view access logs for it and its objects, and choose the geographical region where Amazon S3 will store the bucket and its contents.
For a general description of storage targets, please refer to Storage and export targets.
Please refer to the official Amazon S3 guide to configure your service.
Creating an Amazon S3 target
Follow the steps below to create a new Verba Storage target for Amazon S3:
Step 1 - Open the Verba Web interface then select Data > Storage Targets from the top menu.
Step 2 - Click on Add New Storage Target
Step 3 - Fill in the configuration form according to the requirements in the following table.
| Configuration item | Description |
|---|---|
| Name | Name your storage target. This name will identify this target across the system. |
| Type | Select Amazon S3 |
| Bucket | The name of your Bucket in Amazon S3 |
| Region | Region-specific endpoints that Amazon S3 supports. |
| Server Side Encryption | Use Server-Side Encryption with Amazon S3-Managed Keys (see below) |
| Access Key Id | Access Key Id of your Amazon S3 |
| Secret Access Key | Secret Access Key of your Amazon S3 |
Step 4 - Click Save to save the settings
TLS connection configuration in Verba
If a TLS connection is to be established between Verba and Amazon S3, then the necessary certificates and keys need to be configured in the Verba server configuration.
In the Verba menu, navigate to System > Verba Servers, select the appropriate server, then click on the Change Configuration tab.
On this tab, fill in the configuration under Storage Management -> Storage Targets -> Amazon S3. See the table below for reference.
| Configuration item | Description |
|---|---|
| Use Https Protocol | Set to yes, if a secure connection should be used |
| Storage Class | Specifies what storage class should be used. Available options:
Reduced Redundancy Storage (RRS) is a new storage option within Amazon S3 that enables customers to reduce their costs by storing non-critical, reproducible data at lower levels of redundancy than Amazon S3’s standard storage. It provides a cost-effective, highly available solution for distributing or sharing content that is durably stored elsewhere, or for storing thumbnails, transcoded media, or other processed data that can be easily reproduced. |
| Connection Timeout (ms) | Defines the connection timeout value in milliseconds. |
| TLS Key password | Password for the certificate |
| TLS Key file | Path to the certificate Key file |
| TLS Certificate | Path to the certificate |
| TLS CA Certificate | Path to the CA certificate |
Configuring Server-Side Encryption in Amazon S3
if you want to use Server-Side Encryption, you will have to configure it in Amazon AWS S3. There is no configuration requirement in Verba other than the Server Side Encryption checkbox on the Amazon S3 storage target page (see above).
Learn more on the AWS site:
Overview in the AWS Official Blog - New – Amazon S3 Server Side Encryption for Data at Rest
AWS Documentation - Protecting Data Using Encryption