Integrating Cato Events with AWS S3

To configure an S3 bucket in AWS to receive Cato event data:

1. Create a new S3 bucket with the appropriate AWS Region.

   
2. Create a new IAM policy for the S3 bucket that allows uploading data to the bucket.

3. In the policy, click the JSON tab, and copy the Cato JSON below.

   Edit the JSON and add the name for the S3 bucket, and then paste it in the tab.

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Sid": "",
               "Effect": "Allow",
               "Action": [
                   "s3:ListBucket",
                   "s3:GetBucketLocation"
               ],
               "Resource": [
                   "arn:aws:s3:::<bucket name>"
               ]
           },
           {
               "Sid": "",
               "Effect": "Allow",
               "Action": [
                   "s3:PutObject"
               ],
               "Resource": [
                   "arn:aws:s3:::<bucket name>/*"
               ]
           }
       ]
   }

   

4. Review the settings for the policy and click Create policy.

   

5. Create a new IAM role with Cato's ARN to allow Cato to upload events for your account to the S3 bucket.

   1. In the Select trusted entity page, add Cato's ARN to the role: arn:aws:iam::428465470022:role/cato-events-integration

      {
          "Version": "2012-10-17",
          "Statement": [
              {
                  "Sid": "Statement1",
                  "Effect": "Allow",
                  "Principal": {
                      "AWS": "arn:aws:iam::428465470022:role/cato-events-integration"
                  },
                  "Condition": {"StringEquals": {"sts:ExternalId": "<CMA Account ID>"}},
                  "Action": "sts:AssumeRole"
              }
          ]
      }

      

      Click Next.

   2. In the Add permissions page, attach the policy that you created earlier to the role.

      

      Click Next.

   3. Enter the Role name and click Create role.

   The AWS S3 bucket is ready to integrate with your Cato account.

   

To add an AWS S3 bucket integration to upload events for your account:

1. From the navigation menu, select Resources > Event Integrations.
2. Select Enable integration with Cato events.
3. Click New. The New Integration panel opens.
4. Configure the settings for the S3 bucket integration:
   1. Enter the Name for the integration.

   2. Enter these Connection Details for the integration based on the settings in AWS:

      • Bucket Name - Exact name of the S3 bucket
      • Folder - Folder path within the S3 bucket, if necessary

      • Region - Region where the S3 bucket is hosted

        Note: Only regions for S3 buckets where the Security Token Service (STS) is active are supported.

      • Role ARN - Copy and paste the ARN for the role for the S3 bucket

        

   3. (Optional) Define the filter settings for events that are uploaded to the S3 bucket.

      When you define multiple filters, there is an AND relationship, and the events that match all filters are uploaded.

5. Click Apply. The AWS S3 bucket is now integrated with your account.

   Note: You can define up to three Event Integrations for your account.