Skip to main content

Amazon S3 Pickup

Below is an example of a FarEarth Pickup configuration, for Amazon's S3 buckets.

{
"id": "farearth.amazon-s3-pickup-101",
"protocol": "amazon-s3",
"dataRetentionWindow": "12 hours",
"shareable": true,
"properties": {
"baseUrl": "...",
"bucketName": "pickup",
"sqsQueueUrl": "...",
"region": "us-east-1",
"accessKey": "...",
"secretKey": "..."
}
}

The required properties for the Amazon S3 bucket below.

FieldDetails
baseUrlBase URL (hostname) of the bucket, as provided by Amazon
bucketNameName of the bucket as it is configured on Amazon
sqsQueueUrlAn Amazon SQS queue where FarEarth will listed for new file events
regionRegion where the bucket is hosted, as provided by Amazon
accessKeyAccess key to connect to the bucket, as provided by Amazon
secretKeySecure secret key to the bucket, as provided by Amazon

FarEarth uses a secure data transfer mechanism, where the access credentials, including the secret key, never leave the FarEarth server where the key is configured (example, the Gateway). This means that even if other FarEarth components, running in other security realms, require access to the data on the bucket, it requests the access via the Gateway, using industry-standard secure communication. Data is retrieved via short-lived, access-constrained, and pre-signed URLs.

Advanced example

This example uses Amazon SQS queues.

{
"id": "farearth.aws-s3-trigger",
"protocol": "amazon-s3",
"dataRetentionWindow": "12 hours",
"skipTriggerFolderListing": true,
"readOnly": true,
"attachParameters": {
"workflowId": "farearth.data-workflow"
},
"triggers": [
{
"id": "ACCEPT_ALL"
}
],
"properties": {
"baseUrl": "https://s3.eu-west-2.amazonaws.com",
"bucketName": "bucket",
"region": "eu-west-2",
"accessKey": "<insert access key>",
"secretKey": "<insert secret key>",
"sqsQueueUrl": "https://sqs.eu-west-2.amazonaws.com/.../farearthqueue"
}
}

Features of this configuration.

  • Data is stored for 12 hours and then deleted by FarEarth
  • The farearth.data-workflow Workflow will be triggered to process
  • The Trigger is configured to accept all data