Exporting your data with the console

Step 1: Setting up your Amazon S3 bucket

1. Open the Amazon S3 console.

2. Choose Create bucket.

   

3. Name your bucket and select an appropriate region. Then, at the bottom of the page, choose Create bucket.

   Important

   At this time, Amazon Monitron is only supported in three regions:

   • US East (N. Virginia) us-east-1

   • EU (Ireland) eu-west-1

   • Asia Pacific (Sydney) ap-south-east-2

   Therefore, your Amazon S3 bucket must be in one of those regions.

   It must also be the same region in which you are using the Amazon Monitron service.

   

4. Review the rest of the options on the page, and make the appropriate choices, depending on your security needs and policies.

   Important

   You are responsible for taking the appropriate steps to secure your data. We strongly recommend using server-side encryption and blocking public access to your bucket.

5. Using the search box, find the bucket you just created, and then choose it.

   

6. From the Properties tab, make a note of the name, ARN, and region of the bucket.

   

Step 2: Give Amazon Monitron permission to access Amazon S3

1. Open the IAM console and choose Policies.

   

2. Choose Create policy.

   

3. Select the JSON tab.

   

4. Delete the default JSON text so that the form is empty.

5. Paste in the bucket access policy.

   {
       "Statement": [
           {
               "Action": [
                   "s3:GetBucketAcl",
                   "s3:GetBucketLocation",
                   "s3:ListBucket"
               ],
               "Effect": "Allow",
               "Resource": [
                   "arn:aws:s3:::bucketname"
               ]
           },
           {
               "Action": [
                   "s3:PutObject",
                   "s3:GetBucketAcl"
               ],
               "Effect": "Allow",
               "Resource": [
                   "arn:aws:s3:::bucketname/*"
               ]
           }
       ],
       "Version": "2012-10-17"
   }

   

6. Select Next.

7. On the Review and create page, do the following:

   1. In Policy details, enter a Policy name and optional Description.

   2. Leave the Permissions defined in this policy section as is.

   3. In Add tags — optional, you can choose to add tags to keep track of your resources..

   4. Choose Create policy.

      

Step 3: Create the role

1. Open the IAM console and choose Roles.

   

2. Choose Create role.

   

3. On the Select trusted entity, in Trusted entity type, choose AWS account.

4. In An AWS account, choose This account. You can customize additional setting using Options.

5. Choose Next.

   

6. In Add permissions, for Permissions policies, search for the policy you just created in the search box, and select your policy.

   

7. On the Name, review, and create page do the following:

   1. In Role details enter a Role name and optional Description.

   2. You can choose to ignore Step 1: Select trusted entities and Step 2: Add permisions.

   3. For Step 3: Add tags, for Add tags — optional, add optional tags to keep track of your resources.

8. Choose Create role.

   

Step 4: Create the trust policy

1. Search for the role you just created and choose the role.

   

2. Select the Trust relationships tab.

   

3. Choose Edit trust relationship.

   

4. Erase the default JSON text so that the form is empty.

5. Paste in the policy that allows Amazon Monitron to assume the role.

   {
   	"Version": "2012-10-17",
   	"Statement": [{
   		"Effect": "Allow",
   		"Principal": {
   			"Service": ["monitron.amazonaws.com"]
   		},
   		"Action": "sts:AssumeRole"
   	}]
   }

   

6. Choose Update Trust Policy.

Step 5: Create the support case

1. From your AWS console, choose the question mark icon near the upper right corner of any page, then choose Support Center.

   

2. On the next page, choose Create case.

   

3. On the How can we help? page, do the following:

   1. Choose Account and billing support.

   2. Under Service, choose Account.

   3. Under Category, choose Compliance & Accreditations.

   4. Choose Severity, if that option is available to you based on your support subscription.

   5. Choose Next step: Additional information.

      

4. In Additional information do the following:

   1. Under Subject, enter Amazon Monitron data export request.

   2. In the Description field, enter:

      1. your account ID

      2. the region of the bucket you created

      3. the ARN of the bucket you created (for example: "arn:aws:s3:::bucketname")

      4. the ARN of the role you created (for example: "arn:aws:iam::273771705212:role/role-for-monitron")

      

   3. Choose Next step: Solve now or contact us.

5. In Solve now or contact us do the following:

   1. In Solve now, select Next.

      

   2. In Contact us, choose your Preferred contact language and preferred method of contact.

   3. Choose Submit. A confirmation screen with your case ID and details will be displayed.

      

An AWS customer support specialist will get back to you as soon as possible. If there are any issues with the steps listed, the specialist may ask you for more information. If all the necessary information has been provided, the specialist will let you know as soon as your data has been copied to the Amazon S3 bucket that you created above.