Prerequisites for AWS S3

Create a table inside Amazon DynamoDB with the following values:

Field	Value	Type
Table name	TungstenImportConnector (use same casing)	N/A
Partition key	FolderLock (use same casing)	String
Sort key	N/A (leave it empty)	N/A

Amazon S3 access permissions

• Following are the minimum set of permissions required for the buckets configured in the watched folder URL field:

  • ListBucket
  • GetBucketLocation

• Following are the minimum set of permissions required for the objects inside the buckets configured in the watched folder URL field:

  • GetObject

  • DeleteObject

  • PutObject

Amazon DynamoDB table permissions

Following are the minimum set of permissions required for the Tungsten Import Connector Amazon DynamoDB table:

• GetItem

• DeleteItem

• PutItem

For more information, refer to the following sample JSON permisions script:

Where:

• <BUCKET> = The name of the bucket inside the configured watched folder URL.
• <REGION> = The region in which the DynamoDB table TungstenImportConnector is hosted.
• <ACCOUNT> = The account ID in which the table is hosted.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::<BUCKET>"
            ]
        },
        {
            "Sid": "Statement2",
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3::: testbucket /*"
            ]
        },
        {
            "Sid": "Statement3",
            "Effect": "Allow",
            "Action": [
                "dynamodb:GetItem",
                "dynamodb:PutItem",
                "dynamodb:DeleteItem"
            ],
            "Resource": [
                arn:aws:dynamodb:<REGION>:<ACCOUNT>:table/TungstenImportConnector
            ]
        }
    ]
}

Message Connector configuration is required only once and only if the Message Connector was installed before Tungsten TotalAgility2025.1.