Cloud Connectors - AWS

To create and configure a cloud connector with AWS:

1. Go to Connectors > Cloud > + New Cloud Connector.

2. Enter a Name for the connector; for example, inS3.
3. Enter a Description.
4. In the Folder field, if for example you uploaded files to S3, you can set this to bring in or out only files from a designated folder.

5. Click Next.
6. Here we’ll select aws-S3 as the cloud service.

7. Click Next.
8. Select the Region where you are installing (for example, eu-west-1). The Region Name will populate based on that.
9. Enter the Bucket name, based on the S3 bucket you created in AWS.
10. You will now need to create permissions for the bucket that you created. You can do this through AWS IAM, when adding/creating a new user.
11. Once you create your new user in IAM (for example, dmaxuser), you can click on that user that you created and set the permissions for it.
12. Go to the Permissions tab in IAM.

13. Click Add permissions on the right, and click Attach policies directly, under Permissions options.

14. Here you can select the permissions/folder that you want to use (for example, AmazonS3FullAccess - with Read/Write permissions).
15. Click Add permissions.
16. Go to the Security credentials tab, and then click Create access key.
17. Click the Third-party service option, and click Next.
18. Set a Description tag (for example, dmax), and click Create access key.
19. You can then select your Access Key ID and Secret Access Key from there, and copy them back into the Defender Max platform.

20. Click Test to make sure the test passed. If the test passes, you will see green checks on the test page. If there are any errors, you will see red x’s, indicating that the test did not pass.
21. Once the test passes, click Create at the bottom of the screen to proceed.
22. In AWS S3, you can now go into your bucket, and select the files/folders that you want to upload to S3.
23. Go back to the flow policy in Defender Max (Policies > Flow Policies), and select the relevant source and destination.
24. Click Apply. You will now connect to S3, where you can take the file, check for viruses, and move the file to (for example) your organization’s SFTP server. You can check the Traffic Log to see if the file was successfully transferred.